Real-time Malware Protection slows down PC

Wepeel · September 29, 2015

I already posted this in another forum, but was redirected here. Here's the link but I'll paste the same post here anyway. (https://forums.malwarebytes.org/index.php?/topic/172945-anti-malware-slows-down-computer/)

I'm running Windows 7 64bit Home Premium and everything is installed on a Samsung 850 EVO.

For example, when I have Anti-Malware not running, the task manager opens instantly and clicking viewing processes is just as fast. If I turn on Anti-Malware and turn off Malware Protection, the task manager is still fast. However, when I turn on the Malware Protection it slows down and it takes several seconds to open the task manager and even longer to click view processes for all users. I even looked in ProcessExplorer and the mbamservice.exe process spikes up the CPU usage when I use the task manager.

A few seconds delay may not sound like a big deal to you, but it is for me. Especially when I know that Malware Protection is causing it. This is a real bummer for me because I bought a Premium license only for the real time protection, but this slowdown makes my PC practically unusable to me.

Note, I do have torrent clients installed but not running. I didn't get a warning in the other thread so I assume it's okay. Any other software is either legit or free/trial.

I also did a full scan with Kaspersky and Malwarebytes, nothing detected.

FRST.txt

Addition.txt

AdvancedSetup · October 15, 2015

Sorry for the delay. Let's start first by trying a clean removal and reinstall.

Please uninstall your current version of MBAM and reinstall the latest version. MBAM Clean Removal Process 2x

Let me know if that helps or not.

Thanks

Wepeel · October 16, 2015

Reinstalling this time seems to have at least reduced the slowdown, which is weird because I have tried doing a MBAM Clean Removal Process 2x before as I was told in the other thread. I didn't do anything different this time and although it is reduced, there is still a noticeable performance decrease. Any other possible ways to mitigate this?

AdvancedSetup · October 16, 2015

Let's go ahead and do a complete scan and clean then just to make sure the PC does not have unwanted junk on it. Along the way it normally also cleans up some general maintenance items too.

Please read the following and post back the logs when ready and we'll see about getting you working better.

General P2P/Piracy Warning:

If you're using
Peer 2 Peer
software such as
uTorrent, BitTorrent
or similar you must either fully uninstall them or completely disable them from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

If you have
illegal/cracked software, cracks, keygens etc
. on the system, please remove or uninstall them now and read the policy on
Piracy
.

Before we proceed further, please read all of the following instructions carefully.
If there is anything that you do not understand kindly ask before proceeding.
If needed please print out these instructions.

Please do not post logs using CODE, QUOTE, or FONT tags. Just paste them as direct text.
If the log is too large then you can use attachments by clicking on the More Reply Options button.
Please enable your system to show hidden files: How to see hidden files in Windows
Make sure you're subscribed to this topic:
- Click on the Follow This Topic Button (at the top right of this page), make sure that the Receive notification box is checked and that it is set to Instantly
[*]Removing malware can be unpredictable...It is unlikely but things can go very wrong! Please make sure you Backup all files that cannot be replaced if something were to happen. You can copy them to a CD/DVD, external drive or a pen drive [*]Please don't run any other scans, download, install or uninstall any programs unless requested by me while I'm working with you. [*]The removal of malware is not instantaneous, please be patient. Often we are also on a different Time Zone. [*]Perform everything in the correct order. Sometimes one step requires the previous one. [*]If you have any problems while following my instructions, Stop there and tell me the exact nature of the issue. [*]You can check here if you're not sure if your computer is 32-bit or 64-bit [*]Please disable your antivirus while running any requested scanners so that they do not interfere with the scanners. [*]When we are done, I'll give you instructions on how to cleanup all the tools and logs [*]Please stick with me until I give you the "all clear" and Please don't waste my time by leaving before that. [*]Your topic will be closed if you haven't replied within 3 days [*](If I have not responded within 24 hours, please send me a Private Message as a reminder)

STEP 0
RKill is a program that was developed at BleepingComputer.com that attempts to terminate known malware processes
so that your normal security software can then run and clean your computer of infections.
When RKill runs it will kill malware processes and then removes incorrect executable associations and fixes policies
that stop us from using certain tools. When finished it will display a log file that shows the processes that were
terminated while the program was running.

As RKill only terminates a program's running process, and does not delete any files, after running it you should not reboot
your computer as any malware processes that are configured to start automatically will just be started again.
Instead, after running RKill you should immediately scan your computer using the requested scans I've included.

Please download Rkill by Grinler from one of the links below and save it to your desktop.

Link 1

Link 2

On Windows XP double-click on the Rkill desktop icon to run the tool.
On Windows Vista/Windows 7 or 8, right-click on the Rkill desktop icon and select Run As Administrator
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
If the tool does not run from any of the links provided, please let me know.
Do not reboot the computer, you will need to run the application again.

STEP 01
Backup the Registry:
Modifying the Registry can create unforeseen problems, so it always wise to create a backup before doing so.

Please download ERUNT from one of the following links: Link1 | Link2 | Link3
ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.
Double click on erunt-setup.exe to Install ERUNT by following the prompts.
NOTE: Do not choose to allow ERUNT to add an Entry to the Startup folder. Click NO.
Start ERUNT either by double clicking on the desktop icon or choosing to start the program at the end of the setup process.
Choose a location for the backup.
- Note: the default location is C:\Windows\ERDNT which is acceptable.
[*]Make sure that at least the first two check boxes are selected. [*]Click on OK [*]Then click on YES to create the folder. [*]Note: if it is necessary to restore the registry, open the backup folder and start ERDNT.exe

STEP 02
Please run a Threat Scan with MBAM. If you're unable to run or complete the scan as shown below please see the following: MBAM Clean Removal Process 2x
When reinstalling the program please try the latest version.

Right click and choose "Run as administrator" to open Malwarebytes Anti-Malware and from the Dashboard please Check for Updates by clicking the Update Now... link
Open up Malwarebytes > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.
Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button.
Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply.

Wepeel · October 18, 2015

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 2015-10-18

Scan Time: 23:36

Logfile:

Administrator: Yes

Version: 2.2.0.1024

Malware Database: v2015.10.18.04

Rootkit Database: v2015.10.16.01

License: Premium

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: Erik

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 341193

Time Elapsed: 5 min, 22 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Deep Rootkit Scan: Enabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 0

(No malicious items detected)

Registry Values: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Folders: 0

(No malicious items detected)

Files: 0

(No malicious items detected)

Physical Sectors: 0

(No malicious items detected)

(end)

AdvancedSetup · October 20, 2015

Please go ahead and run through the following steps and post back the logs when ready.

STEP 04

Please download Junkware Removal Tool to your desktop.

Shutdown your antivirus to avoid any conflicts.
Right click over JRT.exe and select Run as administrator on Windows Vista or Windows 7, double-click on XP.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next reply message
When completed make sure to re-enable your antivirus

STEP 05

Lets clean out any adware now: (this will require a reboot so save all your work)

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
When it's done you'll see: Pending: Please uncheck elements you don't want removed.
Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
Look over the log especially under Files/Folders for any program you want to save.
If there's a program you may want to save, just uncheck it from AdwCleaner.
If you're not sure, post the log for review. (all items found are adware/spyware/foistware)
If you're ready to clean it all up.....click the Clean button.
After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder.
Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
To restore an item that has been deleted:
Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.

STEP 06

Please open Malwarebytes Anti-Malware and from the Dashboard please Check for Updates by clicking the Update Now... link

Open up Malwarebytes > Settings > Detection and Protection > Enable Scan for rootkits, Under Non Malware Protection set both PUP and PUM to Treat detections as malware.

Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button. Remove any threats found

Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply.

STEP 07

Please go here to run the online antivirus scannner from ESET.

Turn off the real time scanner of any existing antivirus program while performing the online scan
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activex control to install
Click Start
Make sure that the option Remove found threats is unticked
Click on Advanced Settings and ensure these options are ticked:
- Scan for potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth Technology
Click Scan
Wait for the scan to finish
If any threats were found, click the 'List of found threats' , then click Export to text file....
Save it to your desktop, then please copy and paste that log as a reply to this topic.

STEP 08

Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

Double-click to run it. When the tool opens click Yes to disclaimer.
Press the Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

Wepeel · October 20, 2015

STEP 04 LOG

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.6.4 (09.28.2015:1)

OS: Windows 7 Home Premium x64

Ran by Erik on 2015-10-20 at 20:45:53,97

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Tasks

~~~ Registry Values

~~~ Registry Keys

~~~ Files

Successfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_lyrics.wikia.com_0.localstorage

Successfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_st.chatango.com_0.localstorage

Successfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.azlyrics.com_0.localstorage

Successfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.lyricsfreak.com_0.localstorage

Successfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.metrolyrics.com_0.localstorage

~~~ Folders

Successfully deleted: [Folder] C:\Users\Erik\Appdata\Local\crashrpt

~~~ Chrome

[C:\Users\Erik\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Erik\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Erik\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Erik\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:

[]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 2015-10-20 at 20:47:52,20

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

STEP 05 LOG

# AdwCleaner v5.014 - Logfile created 20/10/2015 at 20:59:58

# Updated 18/10/2015 by Xplode

# Database : 2015-10-18.5 [server]

# Operating system : Windows 7 Home Premium Service Pack 1 (x64)

# Username : Erik - ERIK-DATOR

# Running from : C:\Users\Erik\Desktop\AdwCleaner.exe

# Option : Cleaning

# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehoopddfhgaehhmphfcooacjdpmbjlao

***** [ Files ] *****

[-] File Deleted : C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ehoopddfhgaehhmphfcooacjdpmbjlao_0.localstorage

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

[!] Key Not Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

[-] Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

[-] Key Deleted : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}

[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

[-] Key Deleted : HKU\S-1-5-19\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

[!] Key Not Deleted : HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

***** [ Web browsers ] *****

[-] [C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : ehoopddfhgaehhmphfcooacjdpmbjlao

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1892 bytes] ##########

STEP 06 LOG

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 2015-10-20

Scan Time: 21:07

Logfile:

Administrator: Yes

Version: 2.2.0.1024

Malware Database: v2015.10.20.06

Rootkit Database: v2015.10.16.01

License: Premium

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: Erik

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 337841

Time Elapsed: 5 min, 17 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Deep Rootkit Scan: Enabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 0

(No malicious items detected)

Registry Values: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Folders: 0

(No malicious items detected)

Files: 0

(No malicious items detected)

Physical Sectors: 0

(No malicious items detected)

(end)

STEP 07

No threats found

Wepeel · October 20, 2015

Step 08

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-10-2015

Ran by Erik (administrator) on ERIK-DATOR (20-10-2015 22:13:24)

Running from C:\Users\Erik\Desktop\08

Loaded Profiles: Erik (Available Profiles: Erik)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Svenska (Sverige)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe

(M-Audio) C:\Program Files (x86)\M-Audio\Fast Track\AudioDevMon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(Paramount Software UK Ltd) C:\Mina Program\Macrium\Reflect\ReflectService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

() C:\Mina Program\MSI Afterburner\MSIAfterburner.exe

() C:\Program Files\Core Temp\Core Temp.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe

() C:\Mina Program\Rainmeter\Rainmeter.exe

(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\Mina Program\RivaTuner Statistics Server\RTSS.exe

() C:\Mina Program\RivaTuner Statistics Server\EncoderServer.exe

() C:\Mina Program\RivaTuner Statistics Server\RTSSHooksLoader64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Piotr Pawlowski) C:\Mina Program\foobar2000\foobar2000.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation)

HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-10-21] (NEC Electronics Corporation)

HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-04-20] (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2015-07-17]

ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)

Startup: C:\Users\Erik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2015-07-27]

ShortcutTarget: Rainmeter.lnk -> C:\Mina Program\Rainmeter\Rainmeter.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [s-1-5-21-1060546239-1868508752-2705153983-1000] => 199.15.248.179:7808

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{82FBCCF8-3B14-4E0D-90DE-D76E94413B72}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{82FBCCF8-3B14-4E0D-90DE-D76E94413B72}: [DhcpNameServer] 192.168.1.1

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab)

BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation)

BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab)

BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation)

Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab)

Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab)

FireFox:

========

FF ProfilePath: C:\Users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\sauckvp4.default-1438031807148

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)

FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=6.4.0.22 -> C:\Program Files (x86)\BankID\npBispBrowser.dll [2015-03-17] (Finansiell ID-Teknik BID AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1060546239-1868508752-2705153983-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Erik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-09] (Unity Technologies ApS)

FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox

FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2015-09-27] [not signed]

StartMenuInternet: FIREFOX.EXE - C:\Mina Program\Mozilla Firefox\firefox.exe

Chrome:

=======

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)

CHR Plugin: (Shockwave Flash) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\PepperFlash\19.0.0.226\pepflashplayer.dll ()

CHR Profile: C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-01]

CHR Extension: (Google Docs) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-01]

CHR Extension: (Google Drive) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-01]

CHR Extension: (YouTube) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-01]

CHR Extension: (Adblock Plus) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-06-01]

CHR Extension: (Google Search) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-01]

CHR Extension: (Tampermonkey) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-06-01]

CHR Extension: (Kaspersky Protection) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2015-10-19]

CHR Extension: (imgur Extension by Metronomik) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehoopddfhgaehhmphfcooacjdpmbjlao [2015-10-20]

CHR Extension: (Bulk Image Downloader) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\facoldpeadablbngjnohbmgaehknhcaj [2015-06-01]

CHR Extension: (Google Sheets) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-01]

CHR Extension: (EditThisCookie) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2015-06-01]

CHR Extension: (Google Docs Offline) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03]

CHR Extension: (Nextvid Stopper for YouTube™) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhgkhlpecokabjdphcgfakhegiacmoca [2015-06-01]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-01]

CHR Extension: (Gmail) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-01]

CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-09-27] (Kaspersky Lab ZAO)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1060352 2015-06-10] ()

R2 FastTrackAudioDevMon; C:\Program Files (x86)\M-Audio\Fast Track\AudioDevMon.exe [1962768 2013-05-21] (M-Audio)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation)

S4 MBAMScheduler; C:\Mina Program\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)

S2 MBAMService; C:\Mina Program\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation)

R2 ReflectService.exe; C:\Mina Program\Macrium\Reflect\ReflectService.exe [3476432 2015-10-12] (Paramount Software UK Ltd)

S3 SbieSvc; C:\Mina Program\Sandboxie\SbieSvc.exe [175752 2015-06-23] (Sandboxie Holdings, LLC)

S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)

R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)

R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70000 2015-06-27] (Kaspersky Lab ZAO)

R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [68280 2015-06-06] (Kaspersky Lab ZAO)

R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [181640 2015-10-20] (AO Kaspersky Lab)

R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [227000 2015-10-20] (AO Kaspersky Lab)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [940936 2015-10-20] (AO Kaspersky Lab)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [39096 2015-06-11] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [41144 2015-06-06] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-09-27] (AO Kaspersky Lab)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-06-11] (Kaspersky Lab ZAO)

R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [103096 2015-06-16] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)

R3 MAUSBFASTTRACK; C:\Windows\System32\DRIVERS\MAudioFastTrack.sys [460048 2013-05-21] (M-Audio)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)

S3 PSVolAcc; C:\Windows\System32\Drivers\PSVolAcc.sys [12760 2014-07-21] (Paramount Software UK Ltd)

R3 RTCore64; C:\Mina Program\MSI Afterburner\RTCore64.sys [13536 2015-05-27] ()

S3 SbieDrv; C:\Mina Program\Sandboxie\SbieDrv.sys [190088 2015-06-23] (Sandboxie Holdings, LLC)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-12-05] (Duplex Secure Ltd.)

R3 ssdevfactory; C:\Windows\System32\DRIVERS\ssdevfactory.sys [32792 2015-06-01] (SteelSeries ApS)

R3 sshid; C:\Windows\System32\DRIVERS\sshid.sys [42672 2015-09-29] (SteelSeries ApS)

S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [File not signed]

R3 ALSysIO; \??\C:\Users\Erik\AppData\Local\Temp\ALSysIO64.sys [X]

S3 gdrv; \??\C:\Windows\gdrv.sys [X]

U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-20 22:11 - 2015-10-20 22:13 - 00000000 ____D C:\FRST

2015-10-20 21:28 - 2015-10-20 21:28 - 00000000 ____D C:\Users\Erik\Desktop\07

2015-10-20 21:27 - 2015-10-20 22:13 - 00000000 ____D C:\Users\Erik\Desktop\08

2015-10-20 21:02 - 2015-10-20 21:07 - 00000000 ____D C:\Users\Erik\Desktop\05

2015-10-20 20:56 - 2015-10-20 21:03 - 00000000 ____D C:\AdwCleaner

2015-10-20 20:42 - 2015-10-20 20:49 - 00000000 ____D C:\Users\Erik\Desktop\04

2015-10-20 19:43 - 2015-10-20 21:05 - 00001671 _____ C:\Windows\setupact.log

2015-10-20 19:43 - 2015-10-20 19:43 - 00000000 _____ C:\Windows\setuperr.log

2015-10-19 19:48 - 2015-10-20 20:42 - 00000000 ____D C:\Users\Erik\Desktop\Ny mapp

2015-10-19 15:53 - 2015-09-16 06:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-10-19 15:53 - 2015-09-16 06:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-10-19 15:53 - 2015-09-16 06:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-10-19 15:53 - 2015-09-16 05:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-10-19 15:53 - 2015-09-16 05:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-10-19 15:53 - 2015-09-16 05:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-10-19 15:53 - 2015-09-16 05:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2015-10-19 15:52 - 2015-09-18 21:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-10-19 15:52 - 2015-09-18 20:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-10-19 15:52 - 2015-09-16 06:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-10-19 15:52 - 2015-09-16 06:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-10-19 15:52 - 2015-09-16 06:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-10-19 15:52 - 2015-09-16 06:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-10-19 15:52 - 2015-09-16 06:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-10-19 15:52 - 2015-09-16 06:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-10-19 15:52 - 2015-09-16 06:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-10-19 15:52 - 2015-09-16 06:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-10-19 15:52 - 2015-09-16 06:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-10-19 15:52 - 2015-09-16 06:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-10-19 15:52 - 2015-09-16 06:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-10-19 15:52 - 2015-09-16 06:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-10-19 15:52 - 2015-09-16 06:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-10-19 15:52 - 2015-09-16 06:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-10-19 15:52 - 2015-09-16 06:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-10-19 15:52 - 2015-09-16 05:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-10-19 15:52 - 2015-09-16 05:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-10-19 15:52 - 2015-09-16 05:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-10-19 15:52 - 2015-09-16 05:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-10-19 15:52 - 2015-09-16 05:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-10-19 15:52 - 2015-09-16 05:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-10-19 15:52 - 2015-09-16 05:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-10-19 15:52 - 2015-09-16 05:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2015-10-19 15:52 - 2015-09-16 05:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-10-19 15:52 - 2015-09-16 05:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-10-19 15:52 - 2015-09-16 05:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-10-19 15:52 - 2015-09-16 05:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-10-19 15:52 - 2015-09-16 05:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-10-19 15:52 - 2015-09-16 05:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-10-19 15:52 - 2015-09-16 05:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-10-19 15:52 - 2015-09-16 05:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-10-19 15:52 - 2015-09-16 05:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-10-19 15:52 - 2015-09-16 05:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-10-19 15:52 - 2015-09-16 05:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-10-19 15:52 - 2015-09-16 05:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-10-19 15:52 - 2015-09-16 05:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-10-19 15:52 - 2015-09-16 05:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-10-19 15:52 - 2015-09-16 05:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-10-19 15:52 - 2015-09-16 05:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-10-19 15:52 - 2015-09-16 05:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-10-19 15:52 - 2015-09-16 05:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-10-19 15:52 - 2015-09-16 05:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-10-19 15:52 - 2015-09-16 05:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-10-19 15:52 - 2015-09-16 05:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-10-19 15:52 - 2015-09-16 05:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-10-19 15:52 - 2015-09-16 04:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-10-19 15:52 - 2015-09-16 04:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-10-19 15:52 - 2015-09-16 04:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-10-19 15:52 - 2015-09-16 04:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-10-19 15:52 - 2015-09-16 04:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-10-19 15:52 - 2015-09-16 04:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-10-19 15:52 - 2015-09-16 04:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-10-19 15:52 - 2015-09-16 04:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-10-19 15:52 - 2015-09-16 04:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-10-19 15:52 - 2015-09-16 04:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-10-19 15:47 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2015-10-19 15:47 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2015-10-19 15:47 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-10-19 15:47 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-10-19 15:47 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-10-19 15:47 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-10-19 15:47 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-10-19 15:47 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2015-10-19 15:47 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-10-19 15:47 - 2015-09-29 05:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-10-19 15:47 - 2015-09-29 05:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-10-19 15:47 - 2015-09-29 05:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-10-19 15:47 - 2015-09-29 05:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-10-19 15:47 - 2015-09-29 05:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-10-19 15:47 - 2015-09-29 05:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-10-19 15:47 - 2015-09-29 05:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-10-19 15:47 - 2015-09-29 05:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-10-19 15:47 - 2015-09-29 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-10-19 15:47 - 2015-09-29 05:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-10-19 15:47 - 2015-09-29 05:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-10-19 15:47 - 2015-09-29 05:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-10-19 15:47 - 2015-09-29 05:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-10-19 15:47 - 2015-09-29 05:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-10-19 15:47 - 2015-09-29 05:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-10-19 15:47 - 2015-09-29 05:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-10-19 15:47 - 2015-09-29 05:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-10-19 15:47 - 2015-09-29 05:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-10-19 15:47 - 2015-09-29 05:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-10-19 15:47 - 2015-09-29 05:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-10-19 15:47 - 2015-09-29 05:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-10-19 15:47 - 2015-09-29 05:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-10-19 15:47 - 2015-09-29 05:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-10-19 15:47 - 2015-09-29 05:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-10-19 15:47 - 2015-09-29 05:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-10-19 15:47 - 2015-09-29 05:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-10-19 15:47 - 2015-09-29 05:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-10-19 15:47 - 2015-09-29 05:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-10-19 15:47 - 2015-09-29 04:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-10-19 15:47 - 2015-09-29 04:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-10-19 15:47 - 2015-09-29 04:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-10-19 15:47 - 2015-09-29 04:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-10-19 15:47 - 2015-09-29 04:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-10-19 15:47 - 2015-09-29 04:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-10-19 15:47 - 2015-09-29 04:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2015-10-19 15:47 - 2015-09-29 04:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-10-19 15:47 - 2015-09-29 04:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-10-19 15:47 - 2015-09-29 04:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-10-19 15:47 - 2015-09-29 04:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-10-19 15:47 - 2015-09-29 04:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-10-19 15:47 - 2015-09-29 04:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-10-19 15:47 - 2015-09-29 04:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-10-19 15:47 - 2015-09-29 04:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 03:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-10-19 15:47 - 2015-09-29 03:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-10-19 15:47 - 2015-09-29 03:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-10-19 15:47 - 2015-09-29 03:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-10-19 15:47 - 2015-09-29 03:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-10-19 15:47 - 2015-09-29 03:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 03:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 03:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-10-19 15:47 - 2015-09-29 03:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-10-19 15:47 - 2015-09-15 20:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-10-19 15:47 - 2015-09-15 20:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-10-19 15:47 - 2015-09-15 20:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-10-19 15:47 - 2015-09-15 20:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-10-19 15:47 - 2015-09-15 20:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-10-19 15:47 - 2015-09-15 20:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-10-19 15:47 - 2015-09-15 20:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-10-19 15:47 - 2015-09-15 20:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-10-19 15:47 - 2015-09-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-10-19 15:47 - 2015-09-15 19:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-10-19 15:47 - 2015-09-15 19:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-10-19 15:47 - 2015-09-15 19:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-10-19 15:47 - 2015-09-15 19:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-10-19 15:46 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-10-19 15:46 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2015-10-19 15:46 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-10-19 15:46 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2015-10-18 23:28 - 2015-10-18 23:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT

2015-10-16 17:31 - 2015-10-20 21:07 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-10-16 17:30 - 2015-10-16 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-10-16 17:30 - 2015-10-16 17:30 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-10-16 17:30 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-10-16 17:30 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-10-16 17:30 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

2015-10-13 00:25 - 2015-10-13 00:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium

2015-10-12 15:39 - 2015-10-12 15:39 - 00168968 _____ (Windows ® Win 7 DDK provider) C:\Windows\system32\Drivers\psmounterex.sys

2015-10-10 23:51 - 2015-10-10 23:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent

2015-10-09 21:34 - 2015-10-09 21:34 - 00000000 ____D C:\Users\Erik\AppData\Roaming\NVIDIA

2015-10-09 13:53 - 2015-10-09 13:53 - 00000000 ____D C:\ProgramData\NVIDIA

2015-10-09 13:51 - 2015-10-03 07:06 - 42914096 _____ C:\Windows\system32\nvcompiler.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 37882488 _____ C:\Windows\SysWOW64\nvcompiler.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 22306936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 18359928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 17395512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 16541040 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 15716648 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 15002304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 14832968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 13518496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 12769408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 12032200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 11114616 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2015-10-09 13:51 - 2015-10-03 07:06 - 03573832 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 03154104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 02869880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 02489976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 01905456 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435850.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 01567576 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435850.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00877176 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00861816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00689456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00673912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00512720 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00467912 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00422240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00414000 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00388024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00369272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00204648 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2015-10-09 13:51 - 2015-10-03 07:06 - 00177416 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00155976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2015-10-09 13:51 - 2015-10-03 07:06 - 00040280 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2015-10-09 13:47 - 2015-10-03 07:06 - 00112944 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2015-10-09 13:47 - 2015-10-03 07:06 - 00105080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2015-10-09 13:47 - 2015-10-03 04:49 - 06358648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2015-10-09 13:47 - 2015-10-03 04:49 - 02982520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2015-10-09 13:47 - 2015-10-03 04:49 - 02554488 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2015-10-09 13:47 - 2015-10-03 04:49 - 00938800 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2015-10-09 13:47 - 2015-10-03 04:49 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2015-10-09 13:47 - 2015-10-03 04:49 - 00062768 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2015-10-09 13:47 - 2015-10-01 11:33 - 05284082 _____ C:\Windows\system32\nvcoproc.bin

2015-10-09 02:19 - 2015-10-09 02:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2015-10-08 23:37 - 2015-10-08 23:38 - 00000000 ____D C:\Users\Erik\Documents\STAR WARS Battlefront Beta

2015-10-08 17:48 - 2015-10-08 17:49 - 00000000 ____D C:\Users\Erik\AppData\Roaming\Origin

2015-09-30 15:24 - 2015-09-30 15:24 - 00000000 ____D C:\Users\Erik\AppData\Roaming\steelseries-engine-3-client

2015-09-29 16:44 - 2015-09-29 16:44 - 00042672 _____ (SteelSeries ApS) C:\Windows\system32\Drivers\sshid.sys

2015-09-29 16:44 - 2015-09-29 16:44 - 00016928 _____ (Windows ® Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys

2015-09-28 19:48 - 2015-09-28 19:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate

2015-09-27 14:10 - 2015-09-27 14:10 - 00000891 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-09-27 05:00 - 2015-10-20 21:05 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2015-09-27 05:00 - 2015-10-20 10:24 - 00940936 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys

2015-09-27 05:00 - 2015-10-20 10:24 - 00181640 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys

2015-09-27 05:00 - 2015-09-27 05:00 - 00000000 ____D C:\Windows\ELAMBKUP

2015-09-27 05:00 - 2015-09-27 05:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security

2015-09-27 05:00 - 2015-09-27 05:00 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2015-09-27 05:00 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll

2015-09-26 17:46 - 2015-09-26 17:46 - 00000000 ____D C:\Users\Erik\AppData\Local\Apps\2.0

2015-09-23 22:03 - 2015-09-23 22:03 - 00005912 _____ C:\Users\Erik\AppData\Local\recently-used.xbel

2015-09-22 14:06 - 2015-09-22 14:06 - 00015872 ___SH C:\Users\Erik\Thumbs.db

2015-09-22 10:59 - 2015-09-22 10:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spectro

2015-09-22 10:43 - 2008-09-21 22:31 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71.dll

2015-09-22 10:43 - 2008-09-21 22:31 - 00505128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll

2015-09-22 10:43 - 2008-09-21 22:31 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll

2015-09-22 10:43 - 2008-09-15 00:55 - 01008432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCHRT20.OCX

2015-09-22 10:43 - 2000-05-22 16:58 - 00140488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.ocx

2015-09-22 10:43 - 1998-06-18 00:00 - 00089360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB5DB.DLL

2015-09-20 15:29 - 2015-09-20 15:31 - 00001672 _____ C:\Windows\Sandboxie.ini

2015-09-20 15:29 - 2015-09-20 15:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie

2015-09-20 15:04 - 2015-09-20 15:20 - 00000000 ____D C:\Users\Erik\AppData\Roaming\Guitar Pro 6

2015-09-20 15:04 - 2015-09-20 15:04 - 00000000 ____D C:\ProgramData\Guitar Pro 6

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-20 22:13 - 2015-07-31 14:55 - 00000000 ____D C:\Users\Erik\AppData\Roaming\foobar2000

2015-10-20 22:12 - 2014-04-19 20:52 - 00000994 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-10-20 21:13 - 2009-07-14 06:45 - 00023072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-10-20 21:13 - 2009-07-14 06:45 - 00023072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-10-20 21:11 - 2009-07-14 09:43 - 00663802 _____ C:\Windows\system32\perfh01D.dat

2015-10-20 21:11 - 2009-07-14 09:43 - 00142602 _____ C:\Windows\system32\perfc01D.dat

2015-10-20 21:11 - 2009-07-14 07:13 - 01580482 _____ C:\Windows\system32\PerfStringBackup.INI

2015-10-20 21:08 - 2015-09-16 14:47 - 01767455 _____ C:\Windows\WindowsUpdate.log

2015-10-20 21:05 - 2014-04-19 20:52 - 00000990 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-10-20 21:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-10-20 21:04 - 2015-06-09 12:54 - 00003010 _____ C:\Windows\System32\Tasks\MSIAfterburner

2015-10-20 21:01 - 2009-07-14 07:08 - 00032514 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2015-10-20 15:48 - 2014-04-19 21:18 - 00000000 ___RD C:\Users\Erik\AppData\Roaming\uTorrent

2015-10-20 10:24 - 2015-07-04 02:18 - 00227000 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys

2015-10-20 00:26 - 2015-04-01 01:55 - 00000498 _____ C:\Windows\Tasks\Macrium-Backup-{2881A448-4F2B-413D-A175-7D23978D95E0}.job

2015-10-20 00:19 - 2015-06-11 23:10 - 00000504 _____ C:\Windows\Tasks\Macrium-Backup-{27D13B0C-E7AC-4411-A00A-3507CCCCE1C3}.job

2015-10-20 00:07 - 2015-06-17 22:50 - 00000490 _____ C:\Windows\Tasks\Macrium-Backup-{8EAC26F9-0877-41FE-9A53-34DEFEB978D0}.job

2015-10-19 22:59 - 2015-02-18 03:34 - 00000000 ____D C:\Users\Erik\AppData\Roaming\qBittorrent

2015-10-19 22:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2015-10-19 16:17 - 2014-04-20 01:22 - 00000000 ____D C:\Windows\system32\MRT

2015-10-19 16:13 - 2014-04-20 01:22 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-10-19 15:43 - 2014-04-19 20:10 - 00000000 ____D C:\Mina Program

2015-10-19 04:20 - 2015-04-01 01:55 - 00000498 _____ C:\Windows\Tasks\Macrium-Backup-{FE1F0019-49EB-4013-BD06-53F15E553BF9}.job

2015-10-19 03:39 - 2015-06-11 23:10 - 00000504 _____ C:\Windows\Tasks\Macrium-Backup-{1B6175E4-FD2A-41AB-98AE-B2DBF6CAB7E7}.job

2015-10-18 23:41 - 2014-12-16 01:27 - 00000000 __SHD C:\Users\Erik\AppData\LocalLow\EmieBrowserModeList

2015-10-18 23:41 - 2014-06-01 03:39 - 00000000 __SHD C:\Users\Erik\AppData\LocalLow\EmieUserList

2015-10-18 23:41 - 2014-06-01 03:39 - 00000000 __SHD C:\Users\Erik\AppData\LocalLow\EmieSiteList

2015-10-18 15:49 - 2014-08-15 22:47 - 00000000 ____D C:\Users\Erik\AppData\Roaming\Mp3tag

2015-10-17 22:59 - 2014-04-19 20:13 - 00000000 ____D C:\Users\Erik\AppData\Roaming\Audacity

2015-10-14 00:55 - 2015-05-12 21:43 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2015-10-14 00:55 - 2014-05-07 00:54 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-10-12 14:42 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2015-10-12 05:05 - 2015-03-16 01:11 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2015-10-12 05:05 - 2015-03-16 01:11 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2015-10-12 05:04 - 2015-03-16 01:11 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2015-10-12 05:04 - 2015-03-16 01:11 - 01710752 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2015-10-11 16:26 - 2014-05-09 17:10 - 00000000 ____D C:\Users\Erik\AppData\Roaming\vlc

2015-10-11 14:42 - 2015-04-01 01:55 - 00003644 _____ C:\Windows\System32\Tasks\Macrium-Backup-{2881A448-4F2B-413D-A175-7D23978D95E0}

2015-10-11 14:41 - 2015-06-11 23:10 - 00003414 _____ C:\Windows\System32\Tasks\Macrium-Backup-{1B6175E4-FD2A-41AB-98AE-B2DBF6CAB7E7}

2015-10-11 14:41 - 2015-04-01 01:55 - 00003408 _____ C:\Windows\System32\Tasks\Macrium-Backup-{FE1F0019-49EB-4013-BD06-53F15E553BF9}

2015-10-09 13:47 - 2014-04-19 20:42 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2015-10-09 13:47 - 2014-04-19 20:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2015-10-09 13:47 - 2014-04-19 20:40 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2015-10-09 13:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help

2015-10-09 13:34 - 2009-07-14 06:45 - 00268872 _____ C:\Windows\system32\FNTCACHE.DAT

2015-10-08 22:09 - 2014-06-10 03:57 - 00000000 ____D C:\ProgramData\Package Cache

2015-10-08 17:44 - 2014-04-19 20:17 - 00058808 _____ C:\Users\Erik\AppData\Local\GDIPFONTCACHEV1.DAT

2015-10-03 07:06 - 2015-06-23 08:18 - 00033507 _____ C:\Windows\system32\nvinfo.pb

2015-09-30 15:23 - 2015-07-17 16:00 - 00000000 ____D C:\Users\Erik\AppData\Local\SteelSeries Engine 3 Client

2015-09-30 15:06 - 2015-07-27 15:15 - 00007640 _____ C:\Users\Erik\AppData\Local\Resmon.ResmonCfg

2015-09-27 05:04 - 2015-06-08 19:43 - 00041352 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klpd.sys

2015-09-27 05:00 - 2015-09-05 21:40 - 00000000 ____D C:\Users\admin

2015-09-27 04:53 - 2014-04-20 01:41 - 00001912 _____ C:\Windows\epplauncher.mif

2015-09-23 22:03 - 2015-04-19 20:33 - 00000000 ____D C:\Users\Erik\.gimp-2.8

2015-09-23 22:03 - 2015-03-13 00:26 - 00000000 ____D C:\Users\Erik\AppData\Local\gtk-2.0

2015-09-22 15:09 - 2014-12-15 04:27 - 00000000 ____D C:\Users\Erik\AppData\Roaming\CUE Tools

2015-09-22 14:06 - 2014-04-19 20:09 - 00000000 ____D C:\Users\Erik

2015-09-22 10:44 - 2014-04-19 20:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

==================== Files in the root of some directories =======

2014-04-19 20:49 - 2015-07-28 19:47 - 0000626 _____ () C:\Users\Erik\AppData\Roaming\All CPU MeterV3_Settings.ini

2015-06-10 06:26 - 2015-06-11 15:36 - 2128896 _____ () C:\Users\Erik\AppData\Local\file__0.localstorage

2014-05-04 20:43 - 2015-06-02 20:28 - 0048677 _____ () C:\Users\Erik\AppData\Local\HDGraph.log

2015-09-23 22:03 - 2015-09-23 22:03 - 0005912 _____ () C:\Users\Erik\AppData\Local\recently-used.xbel

2015-07-27 15:15 - 2015-09-30 15:06 - 0007640 _____ () C:\Users\Erik\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:

====================

C:\Users\Erik\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-10-11 06:12

==================== End of FRST.txt ============================

Wepeel · October 20, 2015

Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-10-2015

Ran by Erik (2015-10-20 22:13:39)

Running from C:\Users\Erik\Desktop\08

Windows 7 Home Premium Service Pack 1 (X64) (2014-04-19 18:08:58)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administratör (S-1-5-21-1060546239-1868508752-2705153983-500 - Administrator - Disabled)

Erik (S-1-5-21-1060546239-1868508752-2705153983-1000 - Administrator - Enabled) => C:\Users\Erik

Gäst (S-1-5-21-1060546239-1868508752-2705153983-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1060546239-1868508752-2705153983-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B}

AS: Kaspersky Internet Security (Enabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Kaspersky Internet Security (Enabled) {8C27F4BD-7F99-4CD1-5651-D3EB97674300}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - )

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Acoustica Mixcraft 6 (HKLM-x32\...\Acoustica Mixcraft 6) (Version: b217 - Acoustica)

Adobe Reader XI (11.0.13) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated)

Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version: - Creative Assembly)

Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)

Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)

AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.5 - GPL Public release.)

BankID säkerhetsprogram (HKLM-x32\...\{4B2557F9-8C03-4BE7-9984-4DE525076580}) (Version: 6.4.0.22 - Finansiell ID-Teknik BID AB)

Bulk Image Downloader v4.91.0.0 (HKLM-x32\...\Bulk Image Downloader_is1) (Version: - Antibody Software)

Bully: Scholarship Edition (HKLM-x32\...\Steam App 12200) (Version: - Rockstar New England)

CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)

Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)

Elite: Dangerous (HKLM-x32\...\Steam App 359320) (Version: - Frontier Developments)

ERUNT 1.1j (HKLM-x32\...\ERUNT_is1) (Version: - Lars Hederer)

FFmpeg (Windows) for Audacity version 2.2.2 (HKLM-x32\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )

foobar2000 v1.3.8 (HKLM-x32\...\foobar2000) (Version: 1.3.8 - Peter Pawlowski)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden

Grim Fandango Remastered (HKLM-x32\...\Steam App 316790) (Version: - Double Fine Productions)

HandBrake 0.10.2 (HKLM-x32\...\HandBrake) (Version: 0.10.2 - )

Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)

HexChat (HKLM\...\HexChat_is1) (Version: 2.10.2 - HexChat)

HF pAppLoc version 1.1.1 (HKLM-x32\...\{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1) (Version: 1.1.1 - Inquisitor)

Honeyview (HKLM\...\Honeyview) (Version: 5.14 - Bandisoft.com)

ILLUSION ジンコウガクエン2 (HKLM-x32\...\{AF83EF7D-353A-4E0C-9919-C4E4BCB5F742}) (Version: 1.00.0000 - ILLUSION)

ILLUSION ジンコウガクエン2 きゃらめいく (HKLM-x32\...\{A56F495B-7075-4510-AC91-485416140DA2}) (Version: 1.00.0000 - ILLUSION)

Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)

Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden

LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )

Macrium Reflect Home Edition (HKLM\...\MacriumReflect) (Version: 6.1 - Paramount Software (UK) Ltd.)

Macrium Reflect Home Edition (Version: 6.1.865 - Paramount Software (UK) Ltd.) Hidden

Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

M-Audio Fast Track 6.1.12 (x64) (HKLM\...\{102B819F-54FB-4CD3-8B48-B80C210D55BC}) (Version: 6.1.12 - M-Audio)

METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version: - Konami Digital Entertainment)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (svenska) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1053) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)

Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version: - )

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)

Mozilla Firefox 41.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 41.0 (x86 en-US)) (Version: 41.0 - Mozilla)

Mozilla Firefox 41.0.2 (x86 en-US) (HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\...\Mozilla Firefox 41.0.2 (x86 en-US)) (Version: 41.0.2 - Mozilla)

Mp3tag v2.71 (HKLM-x32\...\Mp3tag) (Version: v2.71 - Florian Heidenreich)

MPC-HC 1.7.9 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.9 - MPC-HC Team)

MSI Afterburner 4.1.1 (HKLM-x32\...\Afterburner) (Version: 4.1.1 - MSI Co., LTD)

MusicBee 2.4 (HKLM-x32\...\MusicBee) (Version: 2.4 - Steven Mayall)

MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.3.2 - MusicBrainz)

NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.17.0 - NEC Electronics Corporation)

NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation) Hidden

NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation)

NVIDIA Grafikdrivrutin 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)

NVIDIA HD audiodrivrutin 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)

NVIDIA PhysX systemprogramvara 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)

OpenAL (HKLM-x32\...\OpenAL) (Version: - )

piaip AppLocale (HKLM-x32\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)

Port Forward Network Utilities (HKLM-x32\...\{88B1D36C-7B70-4C48-8D2F-AAB956ECF4C3}) (Version: 2.0.5 - Portforward, LLC)

qBittorrent 3.2.4 (HKLM-x32\...\qBittorrent) (Version: 3.2.4 - The qBittorrent project)

Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.2.1 r2386 - )

Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.17.304.2010 - Realtek)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

RivaTuner Statistics Server 6.3.0 (HKLM-x32\...\RTSS) (Version: 6.3.0 - Unwinder)

Sandboxie 4.20 (64-bit) (HKLM\...\Sandboxie) (Version: 4.20 - Sandboxie Holdings, LLC)

SeaTools for Windows 1.4.0.2 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.2 - Seagate Technology)

SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden

Spectro (HKLM-x32\...\{1F8D186D-8C5C-4589-BC28-1A8964CA74A6}) (Version: 1.0.93 - )

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

SteelSeries Engine 3.5.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.5.2 - SteelSeries ApS)

The Talos Principle (HKLM-x32\...\Steam App 257510) (Version: - Croteam)

TuxGuitar (HKLM-x32\...\{03534DA5-2F88-4B8E-A978-849B979E1B8F}) (Version: 1.2 - Herac)

Unity Web Player (HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)

War Thunder (HKLM-x32\...\Steam App 236390) (Version: - Gaijin Entertainment)

Visual Similarity Duplicate Image Finder Professional 6.1.0.1 (HKLM-x32\...\{72D6BE71-2A6F-4D01-809E-A3174D1738A0}_is1) (Version: 6.1.0.1 - MindGems, Inc.)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1060546239-1868508752-2705153983-1000_Classes\CLSID\{9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF}\InprocServer32 -> C:\Mina Program\Honeyview\HVShell64.dll (Bandisoft.com)

==================== Restore Points =========================

12-10-2015 13:45:35 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501

13-10-2015 00:25:46 Installed Macrium Reflect Home Edition

15-10-2015 18:07:12 DirectX har installerats

19-10-2015 15:53:13 Windows Update

20-10-2015 20:45:55 JRT Pre-Junkware Removal

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2781C932-AAAF-4331-B60C-06EA558974D6} - System32\Tasks\MSIAfterburner => C:\Mina Program\MSI Afterburner\MSIAfterburner.exe [2015-05-27] ()

Task: {6AF83D57-14E3-4846-A1C8-E39F56FC9D63} - System32\Tasks\Macrium-Backup-{1B6175E4-FD2A-41AB-98AE-B2DBF6CAB7E7} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd)

Task: {7103DB46-42D1-41E1-AAF0-213C77D2EB88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {8200AD9A-C194-4BC9-98E4-4ECB561E26EC} - System32\Tasks\Macrium-Backup-{2881A448-4F2B-413D-A175-7D23978D95E0} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd)

Task: {94A5B23D-3F11-433C-A9BF-C6DF618F5CBE} - System32\Tasks\Macrium-Backup-{FE1F0019-49EB-4013-BD06-53F15E553BF9} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd)

Task: {A3AC1714-E072-48A2-B320-C5238241AED6} - System32\Tasks\CCleanerSkipUAC => C:\Mina Program\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)

Task: {A4231DCE-238B-462B-A252-FDD99584BE37} - System32\Tasks\Core Temp Autostart Erik => C:\Program Files\Core Temp\Core Temp.exe [2013-10-08] ()

Task: {E208449A-7B1B-4386-9D5C-1D604443D894} - System32\Tasks\Macrium-Backup-{27D13B0C-E7AC-4411-A00A-3507CCCCE1C3} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd)

Task: {E47443AF-7FFA-4FA6-81AB-4201A8EB0C24} - System32\Tasks\Macrium-Backup-{8EAC26F9-0877-41FE-9A53-34DEFEB978D0} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd)

Task: {EFC4C03E-A0FA-4E19-B441-336E0686C30D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)

Task: {F5FE6A8F-96B9-4FC8-8BE0-B316D6CF213D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Macrium-Backup-{1B6175E4-FD2A-41AB-98AE-B2DBF6CAB7E7}.job => C:\Mina Program\Macrium\Reflect\reflect.exet-e -w D:\Software\Essential\Macrium Reflect\HDD1 Differential.xml

Task: C:\Windows\Tasks\Macrium-Backup-{27D13B0C-E7AC-4411-A00A-3507CCCCE1C3}.job => C:\Mina Program\Macrium\Reflect\reflect.exet-e -w D:\Software\Essential\Macrium Reflect\HDD1 Differential.xml

Task: C:\Windows\Tasks\Macrium-Backup-{2881A448-4F2B-413D-A175-7D23978D95E0}.job => C:\Mina Program\Macrium\Reflect\reflect.exeq-e -w D:\Software\Essential\Macrium Reflect\OS Backup Win7.xml

Task: C:\Windows\Tasks\Macrium-Backup-{8EAC26F9-0877-41FE-9A53-34DEFEB978D0}.job => C:\Mina Program\Macrium\Reflect\reflect.exem-e -w D:\Software\Essential\Macrium Reflect\HDD2 Backup.xml

Task: C:\Windows\Tasks\Macrium-Backup-{FE1F0019-49EB-4013-BD06-53F15E553BF9}.job => C:\Mina Program\Macrium\Reflect\reflect.exeq-e -w D:\Software\Essential\Macrium Reflect\OS Backup Win7.xml

==================== Loaded Modules (Whitelisted) ==============

2015-10-09 13:47 - 2015-10-03 04:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-05-16 18:39 - 2014-11-09 13:37 - 00402432 _____ () C:\Mina Program\RivaTuner Statistics Server\RTSSHooks64.dll

2015-05-27 12:05 - 2015-05-27 12:05 - 00578272 _____ () C:\Mina Program\MSI Afterburner\MSIAfterburner.exe

2014-04-19 20:54 - 2013-10-08 13:23 - 00890016 _____ () C:\Program Files\Core Temp\Core Temp.exe

2015-10-13 20:53 - 2015-10-13 20:53 - 00507144 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\SSEdevice.dll

2015-03-24 15:28 - 2015-03-24 15:28 - 00036544 _____ () C:\Mina Program\Rainmeter\Rainmeter.exe

2015-03-24 15:28 - 2015-03-24 15:28 - 00775872 _____ () C:\Mina Program\Rainmeter\Rainmeter.dll

2015-07-27 18:34 - 2015-09-16 00:47 - 00013312 _____ () C:\Users\Erik\AppData\Roaming\Rainmeter\Plugins\ActiveNet.DLL

2015-03-24 15:27 - 2015-03-24 15:27 - 00011776 _____ () C:\Mina Program\Rainmeter\Plugins\PowerPlugin.DLL

2015-03-24 15:27 - 2015-03-24 15:27 - 00012800 _____ () C:\Mina Program\Rainmeter\Plugins\PerfMon.DLL

2015-03-24 15:27 - 2015-03-24 15:27 - 00014848 _____ () C:\Mina Program\Rainmeter\Plugins\CoreTemp.DLL

2015-03-24 15:27 - 2015-03-24 15:27 - 00010240 _____ () C:\Mina Program\Rainmeter\Plugins\SpeedFanPlugin.DLL

2015-03-24 15:27 - 2015-03-24 15:27 - 00058368 _____ () C:\Mina Program\Rainmeter\Plugins\WebParser.DLL

2015-03-24 15:27 - 2015-03-24 15:27 - 00020992 _____ () C:\Mina Program\Rainmeter\Plugins\SysInfo.DLL

2014-11-09 13:37 - 2014-11-09 13:37 - 00197632 _____ () C:\Mina Program\RivaTuner Statistics Server\RTSS.exe

2014-11-09 13:37 - 2014-11-09 13:37 - 00026112 _____ () C:\Mina Program\RivaTuner Statistics Server\EncoderServer.exe

2014-11-09 13:37 - 2014-11-09 13:37 - 00088576 _____ () C:\Mina Program\RivaTuner Statistics Server\RTSSHooksLoader64.exe

2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll

2015-05-18 13:43 - 2015-05-18 13:43 - 00071680 _____ () C:\Mina Program\MSI Afterburner\RTMUI.dll

2015-05-18 13:43 - 2015-05-18 13:43 - 00057856 _____ () C:\Mina Program\MSI Afterburner\RTFC.dll

2015-05-18 13:43 - 2015-05-18 13:43 - 00218624 _____ () C:\Mina Program\MSI Afterburner\RTCore.dll

2015-05-22 12:56 - 2015-05-22 12:56 - 00357888 _____ () C:\Mina Program\MSI Afterburner\RTUI.dll

2015-05-22 13:36 - 2015-05-22 13:36 - 00649216 _____ () C:\Mina Program\MSI Afterburner\RTHAL.dll

2014-05-16 18:38 - 2014-11-09 13:37 - 00356864 _____ () C:\Mina Program\RivaTuner Statistics Server\RTSSHooks.dll

2015-04-14 01:20 - 2015-10-12 05:05 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2014-11-09 13:37 - 2014-11-09 13:37 - 00056832 _____ () C:\Mina Program\RivaTuner Statistics Server\RTFC.dll

2014-11-09 13:37 - 2014-11-09 13:37 - 00353792 _____ () C:\Mina Program\RivaTuner Statistics Server\RTUI.dll

2014-11-09 13:37 - 2014-11-09 13:37 - 00071680 _____ () C:\Mina Program\RivaTuner Statistics Server\RTMUI.dll

2015-10-15 05:13 - 2015-10-09 02:53 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libglesv2.dll

2015-10-15 05:13 - 2015-10-09 02:53 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Erik\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 8.8.8.8 - 8.8.4.4

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: SandboxieControl => "C:\Mina Program\Sandboxie\SbieCtrl.exe"

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{F0520AB8-A233-4322-8E5B-5E914AD5B925}] => (Allow) C:\Mina Program\Steam\Steam.exe

FirewallRules: [{B84E1109-C9AA-496F-BA6D-E55BE50C3AD1}] => (Allow) C:\Mina Program\Steam\Steam.exe

FirewallRules: [{C6E7C960-19E6-4CBC-9975-A1A79B431188}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe

FirewallRules: [{58F7331D-CD83-4323-9AEA-EA3FE3602D0F}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe

FirewallRules: [{07600017-AF79-45EF-BA11-5D68F68AF425}] => (Allow) C:\Mina Program\Steam\bin\steamwebhelper.exe

FirewallRules: [{F24B7A86-D028-47E7-917B-90E12919F36E}] => (Allow) C:\Mina Program\Steam\bin\steamwebhelper.exe

FirewallRules: [TCP Query User{89AAA050-89E5-47A1-BD95-C1D08B4DD901}C:\mina program\musicbrainz picard\picard.exe] => (Allow) C:\mina program\musicbrainz picard\picard.exe

FirewallRules: [uDP Query User{71352BD8-A96A-4129-BD9E-903B68FB9DD1}C:\mina program\musicbrainz picard\picard.exe] => (Allow) C:\mina program\musicbrainz picard\picard.exe

FirewallRules: [TCP Query User{77F39873-3FDD-4988-A7A3-2BBBD5335EE8}C:\mina program\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\mina program\portforward\port forward network utilities\pfportchecker.exe

FirewallRules: [uDP Query User{DF2A1760-C9C5-47EE-8A81-958C6ACC7B93}C:\mina program\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\mina program\portforward\port forward network utilities\pfportchecker.exe

FirewallRules: [{DDDB127B-816A-4134-8B37-59B1C84FFCCD}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe

FirewallRules: [{7938D7C9-F0A4-4D51-8F3A-D1DB5B6621B1}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe

FirewallRules: [{CA9C7053-7E01-4CC5-AD24-0D967D5055EF}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe

FirewallRules: [{00987BE9-940F-41C1-871A-8241401FD634}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe

FirewallRules: [TCP Query User{AFBC782D-1831-420A-BFA4-B51AE2E041D8}C:\mina program\hexchat\hexchat.exe] => (Allow) C:\mina program\hexchat\hexchat.exe

FirewallRules: [uDP Query User{BA7210BB-3970-49A3-8CF4-0A01B19A8AA2}C:\mina program\hexchat\hexchat.exe] => (Allow) C:\mina program\hexchat\hexchat.exe

FirewallRules: [{A37870BA-016E-4AEE-86F9-E56A3E82D07D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{1CA58279-5FAA-406E-B4BE-DB246873A804}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{64A30C7F-EEBF-4F4A-98F2-555DD1394E8E}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{93E50D70-7C9B-406F-82ED-60E40DD98FF8}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{AFF0CC77-2B2A-4678-BCEA-6BB64F3D421F}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Bully Scholarship Edition\Bully.exe

FirewallRules: [{1F3FC2EE-CDA3-4725-97CC-2991C06E9B0A}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Bully Scholarship Edition\Bully.exe

FirewallRules: [{F937675B-7999-4FBE-9E4C-6222CF18BFB8}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [{CB371523-E92E-4F5A-AD67-B0AF88C4750A}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [{602AA1D5-4F61-472C-8C9C-ECE01D8465D6}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Alien Isolation\AI.exe

FirewallRules: [{D6BCDA39-0AA1-4415-A00B-1336CB810064}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Alien Isolation\AI.exe

FirewallRules: [{68EDA48A-FA8A-4FC9-875C-154623723312}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Grim Fandango Remastered\GrimFandango.exe

FirewallRules: [{999524BE-9B0C-44B2-836D-79FA355C5157}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Grim Fandango Remastered\GrimFandango.exe

FirewallRules: [TCP Query User{855AC5CB-1AE4-4EE9-BD9F-57D7F2D652A9}C:\mina program\steam\steamapps\common\war thunder\launcher.exe] => (Allow) C:\mina program\steam\steamapps\common\war thunder\launcher.exe

FirewallRules: [uDP Query User{FDED08C1-589D-45C2-9854-3EB009D3DF67}C:\mina program\steam\steamapps\common\war thunder\launcher.exe] => (Allow) C:\mina program\steam\steamapps\common\war thunder\launcher.exe

FirewallRules: [TCP Query User{AB5690BE-A7B3-4B49-B575-9E02E0CDC56B}C:\mina program\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\mina program\steam\steamapps\common\war thunder\aces.exe

FirewallRules: [uDP Query User{46100C65-45EA-497B-8B0D-5E0E6D70F200}C:\mina program\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\mina program\steam\steamapps\common\war thunder\aces.exe

FirewallRules: [{A7A6D00F-9A46-405C-A31C-0F16357A8CD4}] => (Allow) C:\Mina Program\Steam\SteamApps\common\insurgency2\insurgency.exe

FirewallRules: [{6C9C8EBD-CB36-4C15-A085-9F8B7E74638D}] => (Allow) C:\Mina Program\Steam\SteamApps\common\insurgency2\insurgency.exe

FirewallRules: [{743E52A4-3A9E-4E37-A07A-B262D0921D37}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{52E297CB-A14D-44C6-8C76-3AECEED8D791}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{884ACA57-11C6-49ED-B002-8082821C52D9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{D4AB015C-8BCA-4350-BAAA-3AF8BFBDFFA0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{C7E2C607-6068-4D44-8D51-7952EDC7CC72}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{41A0E05D-50A5-48B0-88B4-CCE2276C1F5A}] => (Allow) C:\Mina Program\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [{9121D3A4-7608-4528-8633-BEA213607584}] => (Allow) C:\Mina Program\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [{0D2CD1DA-3448-4BA6-9782-CB82108AA970}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Elite Dangerous\EDLaunch.exe

FirewallRules: [{6CFFB212-255A-4646-A83A-B3182A05DC30}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Elite Dangerous\EDLaunch.exe

FirewallRules: [{E3DF8D71-D153-46C5-B6FD-EA0724ED4A8A}] => (Allow) C:\Mina Program\Mozilla Firefox\firefox.exe

FirewallRules: [{2E4FD030-2663-4807-AFA4-6B9FEE1929E5}] => (Allow) C:\Mina Program\Mozilla Firefox\firefox.exe

FirewallRules: [{CA0B5334-0A6C-4E1D-AC59-0258B7910A32}] => (Allow) C:\Mina Program\Steam\SteamApps\common\The Talos Principle\Bin\Talos.exe

FirewallRules: [{A715139E-2381-4B7D-B7BC-E16631DD3153}] => (Allow) C:\Mina Program\Steam\SteamApps\common\The Talos Principle\Bin\Talos.exe

FirewallRules: [{6CD87BD4-A012-4E43-9D0E-F024A4E01238}] => (Allow) C:\Mina Program\Steam\SteamApps\common\The Talos Principle\Bin\Talos_Unrestricted.exe

FirewallRules: [{8CAD71AF-EFEC-402A-AFB2-32421917438B}] => (Allow) C:\Mina Program\Steam\SteamApps\common\The Talos Principle\Bin\Talos_Unrestricted.exe

FirewallRules: [{4BDBEDF2-BBD4-4577-BDBD-5604D99DF3F5}] => (Allow) C:\Mina Program\qBittorrent\qbittorrent.exe

FirewallRules: [{C679A2AA-F135-43F7-BB02-B9AF575794BB}] => (Allow) C:\Mina Program\qBittorrent\qbittorrent.exe

FirewallRules: [{95CB3FC1-E7B4-4C16-8F95-E209B2491045}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (10/20/2015 10:09:31 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Det gick inte att skapa aktiveringskontext för C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1. Det finns ett fel i manifest- eller principfilen C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2 på rad C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.

En komponentversion som begärs av programmet står i konflikt med en annan komponentversion som redan är aktiv.

Följande komponenter orsakar konflikten: