Tack för tipset,

ett litet supersnabbt program som verkar ha gjort det alla andra program misslyckats med :)

Är defender och microsoft brandväggen samma sak?? Även med Avast avstängt har jag samma problem trots att det fungerade för bara några dagar sedan. Den körningen tog 8 timmar men fick bort några virus och nu fungerar det inte?

AdwCleaner v4.201 - Logfile created 15/04/2015 at 09:03:59

Updated 08/04/2015 by Xplode

Database : 2015-04-08.1 [Server]

Operating system : Windows 8.1 Pro  (x64)

Username : Martin - KONTOR

Running from : C:\Users\Martin\Downloads\adwcleaner_4.201.exe

Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

File Found : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.delta-homes.com_0.localstorage

File Found : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.delta-homes.com_0.localstorage-journal

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

Shortcut Infected : C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

Shortcut Infected : C:\Users\Martin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

Shortcut Infected : C:\Users\Martin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\delta-homes.com

Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.delta-homes.com

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect

Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck

Key Found : HKLM\SOFTWARE\SupDp

***** [ Web browsers ] *****

-\ Internet Explorer v11.0.9600.17416

-\ Mozilla Firefox v37.0.1 (x86 sv-SE)

-\ Google Chrome v41.0.2272.118

[C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : eofcbnmajmjmplflapaojjnihcjkigck

[C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Startup_URLs] : hxxp://www.google.com/", "hxxp://www.sweet-page.com/?type=hppp&ts=1396445879&from=cor&uid=OCZ-AGILITY3_OCZ-Q6M6W2VQEA718CNS", "hxxp://search.gboxapp.com/

[C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Default_Search_Provider_Data] : hxxp://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t",

         "usage_count": 0

      }

   },

   "extensions": {

      "settings": {

         "ahfgeienlihckogmohjhadlkjgocpleb": {

            "active_permissions": {

               "api": [ "management", "system.display", "system.storage", "webstorePrivate", "system.cpu", "system.memory", "system.network" ],

               "manifest_permissions": [  ]

            },

            "app_launcher_ordinal": "h",

            "commands": {

            },

            "content_settings": [  ],

            "creation_flags": 1,

            "events": [  ],

            "from_bookmark": false,

            "from_webstore": false,

            "incognito_content_settings": [  ],

            "incognito_preferences": {

            },

            "install_time": "13062940080007814",

            "location": 5,

            "manifest": {

               "app": {

                  "launch": {

                     "web_url": "hxxps://chrome.google.com/webstore"

                  },

                  "urls": [ "hxxps://chrome.google.com/webstore" ]

               },

               "description": "Upptäck fantastiska program, spel, tillägg och teman för Google Chrome.",

               "icons": {

                  "128": "webstore_icon_128.png",

                  "16": "webstore_icon_16.png"

               },

               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB",

               "name": "Web Store",

               "permissions": [ "webstorePrivate", "management", "system.cpu", "system.display", "system.memory", "system.network", "system.storage" ],

               "version": "0.2"

            },

            "page_ordinal": "n",

            "path": "C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\resources\web_store",

            "preferences": {

            },

            "regular_only_preferences": {

            },

            "state": 1,

            "was_installed_by_default": false,

            "was_installed_by_oem": false

         },

         "aohghmighlieiainnegkcijnfilokake": {

            "ack_external": true,

            "active_permissions": {

               "api": [  ],

               "manifest_permissions": [  ]

            },

            "app_launcher_ordinal": "w",

            "commands": {

            },

            "content_settings": [  ],

            "creation_flags": 137,

            "events": [  ],

            "from_bookmark": false,

            "from_webstore": true,

            "granted_permissions": {

               "api": [  ],

               "manifest_permissions": [  ]

            },

            "incognito_content_settings": [  ],

            "incognito_preferences": {

            },

            "initial_keybindings_set": true,

            "install_time": "13068047781429401",

            "lastpingday": "13073122806210687",

            "location": 1,

            "manifest": {

               "api_console_project_id": "619683526622",

               "app": {

                  "launch": {

                     "local_path": "main.html"

                  }

               },

               "container": "GOOGLE_DRIVE",

               "current_locale": "sv",

               "default_locale": "en_US",

               "description": "Skapa och redigera dokument",

               "icons": {

                  "128": "icon_128.png",

                  "16": "icon_16.png"

               },

               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",

               "manifest_version": 2,

               "name": "Google Dokument",

               "offline_enabled": true,

               "update_url": "hxxps://clients2.google.com/service/update2/crx",

               "version": "0.9"

            },

            "page_ordinal": "n",

            "path": "aohghmighlieiainnegkcijnfilokake\0.9_0",

            "preferences": {

            },

            "regular_only_preferences": {

            },

            "state": 1,

            "was_installed_by_default": true,

            "was_installed_by_oem": false

         },

         "apdfllckaahabafndbhieahigkjlhalf": {

            "ack_external": true,

            "active_permissions": {

               "api": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],

               "manifest_permissions": [  ]

            },

            "app_launcher_ordinal": "x",

            "commands": {

            },

            "content_settings": [  ],

            "creation_flags": 137,

            "events": [  ],

            "from_bookmark": false,

            "from_webstore": true,

            "granted_permissions": {

               "api": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],

               "manifest_permissions": [  ]

            },

            "incognito_content_settings": [  ],

            "incognito_preferences": {

            },

            "install_time": "13068047783173279",

            "lastpingday": "13073122806210687",

            "location": 1,

            "manifest": {

               "app": {

                  "launch": {

                     "web_url": "hxxps://drive.google.com/?usp=chrome_app"

                  },

                  "urls": [ "hxxp://docs.google.com/", "hxxp://drive.google.com/", "hxxps://docs.google.com/", "hxxps://drive.google.com/" ]

               },

               "background": {

                  "allow_js_access": false

               },

               "current_locale": "sv",

               "default_locale": "en_US",

               "description": "Google Drive: skapa, dela och spara alla dina grejer på ett ställe.",

               "icons": {

                  "128": "128.png"

               },

               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIl5KlKwL2TSkntkpY3naLLz5jsN0YwjhZyObcTOK6Nda4Ie21KRqZau9lx5SHcLh7pE2/S9OiArb+na2dn7YK5EvH+aRXS1ec3uxVlBhqLdnleVgwgwlg5fH95I52IeHcoeK6pR4hW/Nv39GNlI/Uqk6O6GBCCsAxYrdxww9BiQIDAQAB",

               "manifest_version": 2,

               "name": "Google Drive",

               "offline_enabled": true,

               "options_page": "hxxps://drive.google.com/settings",

               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],

               "update_url": "hxxps://clients2.google.com/service/update2/crx",

               "version": "6.4"

            },

            "page_ordinal": "n",

            "path": "apdfllckaahabafndbhieahigkjlhalf\6.4_0",

            "preferences": {

            },

            "regular_only_preferences": {

            },

            "state": 1,

            "was_installed_by_default": true,

            "was_installed_by_oem": false

         },

         "bepbmhgboaologfdajaanbcjmnhjmhfn": {

            "disable_reasons": 1,

            "state": 0

         },

         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {

            "ack_external": true,

            "active_permissions": {

               "api": [  ],

               "manifest_permissions": [  ]

            },

            "app_launcher_ordinal": "z",

            "commands": {

            },

            "content_settings": [  ],

            "creation_flags": 153,

            "events": [  ],

            "from_bookmark": true,

            "from_webstore": true,

            "granted_permissions": {

               "api": [  ],

               "manifest_permissions": [  ]

            },

            "incognito_content_settings": [  ],

            "incognito_preferences": {

            },

            "install_time": "13068047782291151",

            "lastpingday": "13073122806210687",

            "location": 1,

            "manifest": {

               "app": {

                  "launch": {

                     "container": "tab",

                     "web_url": "hxxp://www.youtube.com/?feature=ytca"

                  },

                  "web_content": {

                     "enabled": true,

                     "origin": "hxxp://www.youtube.com"

                  }

               },

               "current_locale": "sv",

               "default_locale": "en",

               "description": "Världens populäraste videomötesplats online.",

               "icons": {

                  "128": "128.png"

               },

               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",

               "manifest_version": 2,

               "name": "YouTube",

               "update_url": "hxxp://clients2.google.com/service/update2/crx",

               "version": "4.2.7"

            },

            "page_ordinal": "n",

            "path": "blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0",

            "preferences": {

            },

            "regular_only_preferences": {

            },

            "state": 1,

            "was_installed_by_default": true,

            "was_installed_by_oem": false

         },

         "coobgpohoikkiipiblmjeljniedjpjpf": {

            "ack_external": true,

            "active_permissions": {

               "api": [  ],

               "manifest_permissions": [  ]

            },

            "app_launcher_ordinal": "yn",

            "commands": {

            },

            "content_settings": [  ],

            "creation_flags": 153,

            "events": [  ],

            "from_bookmark": true,

            "from_webstore": true,

            "granted_permissions": {

               "api": [  ],

               "manifest_permissions": [  ]

            },

            "incognito_content_settings": [  ],

            "incognito_preferences": {

            },

            "install_time": "13072273562432318",

            "lastpingday": "13073122806210687",

            "location": 1,

            "manifest": {

               "app": {

                  "launch": {

                     "web_url": "hxxp://www.google.com/webhp?source=search_app"

                  },

                  "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]

               },

               "current_locale": "sv",

               "default_locale": "en",

               "description": "The fastest way to search the web.

*************************

AdwCleaner[R0].txt - [13145 bytes] - [15/04/2015 09:03:59]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [13205 bytes] ##########

Eftersom du har Avast installerat är det meningen att Defender ska vara avstängd eftersom man ofta får problem när man har två antivirusprogram igång.

Spara AdwCleaner av Xplode på Skrivbordet: https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Stäng alla program, inklusive webbläsare.

Dubbelklicka på AdwCleaner för att starta programmet.

Klicka på Scan-knappen.

Vänta tills sökningen är klar.

Klicka på knappen Log file.

En rapport kommer upp, kopiera innehållet och klistra in i ditt svar, så går jag igenom den.

Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner\AdwCleaner[R0].txt.

Hej,

När jag klickar på defender står det ”den här appan har inaktiverats och gå till åtgärdscenter”. I åtgärdscenter ser jag ”windows-brandväggen skyddar datorn aktivt”.

Finns det en mejladress jag kan svara på annars?

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-04-2015

Ran by Martin (administrator) on KONTOR on 14-04-2015 14:53:47

Running from C:\Users\Martin\Downloads

Loaded Profiles: Martin (Available profiles: Martin)

Platform: Windows 8.1 Pro (X64) OS Language: Svenska (Sverige)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Farbar) C:\Users\Martin\Downloads\FRST64(2).exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-03-27] (Avast Software s.r.o.)

HKLM-x32...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)

HKLM-x32...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation)

HKU\S-1-5-21-4156780519-1333969105-2551499815-1001...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)

HKU\S-1-5-21-4156780519-1333969105-2551499815-1001...\Run: [Spotify Web Helper] => C:\Users\Martin\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-04-08] (Spotify Ltd)

HKU\S-1-5-21-4156780519-1333969105-2551499815-1001...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)

AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL File Not Found

AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll => "C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll" File Not Found

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKU\S-1-5-21-4156780519-1333969105-2551499815-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.se/

SearchScopes: HKU\S-1-5-21-4156780519-1333969105-2551499815-1001 -> DefaultScope {A94B8172-26BE-4A29-83CE-4F66FF7E120E} URL = http://www.google.com/search?hl=sv&q={searchTerms}

SearchScopes: HKU\S-1-5-21-4156780519-1333969105-2551499815-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-4156780519-1333969105-2551499815-1001 -> {A94B8172-26BE-4A29-83CE-4F66FF7E120E} URL = http://www.google.com/search?hl=sv&q={searchTerms}

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-27] (Avast Software s.r.o.)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-14] (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-27] (Avast Software s.r.o.)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-14] (Oracle Corporation)

DPF: HKLM-x32 {B4CB8358-ABDB-47EE-BC2D-437B5DEBABCB} http://85.228.30.72/AxViewer/AxMediaControl.cab

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:

========

FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\bnfjzx0f.default-1427217376084

FF Homepage: google.se

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-14] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-14] ()

FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=6.2.5.1 -> C:\Program Files (x86)\BankID\npBispBrowser.dll [2014-11-27] (Finansiell ID-Teknik BID AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-14] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-14] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2013-11-15] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2013-11-15] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\allaannonser-sv-SE.xml [2014-11-26]

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\prisjakt-sv-SE.xml [2014-11-26]

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\tyda-sv-SE.xml [2014-11-26]

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-sv-SE.xml [2015-01-19]

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-sv-SE.xml [2014-11-26]

FF HKLM-x32...\Firefox\Extensions: [******@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-16]

Chrome:

=======

CHR HomePage: Default -> hxxp://www.google.se/

CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxp://www.sweet-page.com/?type=hppp&ts=1396445879&from=cor&uid=OCZ-AGILITY3_OCZ-Q6M6W2VQEA718CNS", "hxxp://search.gboxapp.com/", "hxxp://www.mystartsearch.com/?type=hp&ts=1418470715&from=smt&uid=INTELXSSDSC2CW240A3_CVCV435104S5240CGN", "hxxp://www.mystartsearch.com/?type=hppp&ts=1418470733&from=smt&uid=INTELXSSDSC2CW240A3_CVCV435104S5240CGN\t/verysilent /hideuninstall", "hxxp://www.delta-homes.com/?type=hp&ts=1426847551&from=wpm03203&uid=INTELXSSDSC2CW240A3_CVCV435104S5240CGN"

CHR DefaultSearchKeyword: Default -> google.com_

CHR DefaultSuggestURL: Default -> http://suggestqueries.google.com/complete/search?q={searchTerms}

CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-13]

CHR Extension: (Google Drive) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-13]

CHR Extension: (YouTube) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-13]

CHR Extension: (Google Search) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-13]

CHR Extension: (Google Wallet) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-13]

CHR Extension: (Gmail) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-13]

CHR HKLM-x32...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-03-20]

CHR HKLM-x32...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-20]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-27] (Avast Software s.r.o.)

S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-09] (Electronic Arts)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-27] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-27] (Avast Software s.r.o.)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-03-27] (Avast Software s.r.o.)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-27] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-27] (Avast Software s.r.o.)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-03-27] (Avast Software s.r.o.)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-03-27] (Avast Software s.r.o.)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-03-27] ()

R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek                                            )

R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-12-13] (Disc Soft Ltd)

S3 ESETCleanersDriver; C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys [170280 2015-04-14] (ESET)

S3 Tdsshbecr; C:\Windows\system32\DRIVERS\shbecr.sys [50176 2008-09-23] (Todos Data System AB)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

S3 MBAMSwissArmy; ??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

S3 NvStreamKms; ??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X]

S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-14 14:51 - 2015-04-14 14:51 - 02096640 _____ (Farbar) C:\Users\Martin\Downloads\FRST64(2).exe

2015-04-14 11:52 - 2015-04-14 11:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET

2015-04-14 11:01 - 2015-04-14 11:01 - 00002153 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2015-04-14 11:01 - 2015-04-14 11:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2015-04-14 11:00 - 2015-04-14 11:00 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp

2015-04-14 11:00 - 2015-04-14 11:00 - 00000000 ____D () C:\temp

2015-04-14 11:00 - 2015-04-09 02:58 - 31570064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 30397072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 25375048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 24053576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 15818528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 15716232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 14006752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 12852784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 12689592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 11380728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 10423952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys

2015-04-14 11:00 - 2015-04-09 02:58 - 03317344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 02935416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 02896528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 02573456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 01895568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435012.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435012.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 01540240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 01086424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 01047368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 01037640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00970568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00962192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00927440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00849552 _____ () C:\WINDOWS\system32\nvmcumd.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00499344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00453440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvstusb.sys

2015-04-14 11:00 - 2015-04-09 02:58 - 00402576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00390472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00346256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00175880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00154256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00150648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00078480 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2015-04-14 11:00 - 2015-04-09 02:58 - 00066704 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2015-04-14 11:00 - 2015-04-08 22:32 - 00560968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe

2015-04-14 10:58 - 2015-04-14 10:58 - 283201840 _____ (NVIDIA Corporation) C:\Users\Martin\Downloads\350.12-desktop-win8-win7-winvista-64bit-international-whql.exe

2015-04-14 10:39 - 2015-04-14 10:39 - 00170280 _____ (ESET) C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys

2015-04-14 10:12 - 2015-04-14 10:12 - 00000000 ____D () C:\WINDOWS\system32\appmgmt

2015-04-14 10:07 - 2015-04-14 11:06 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-04-14 10:07 - 2015-04-08 23:30 - 06841488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll

2015-04-14 10:07 - 2015-04-08 23:30 - 03478344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll

2015-04-14 10:07 - 2015-04-08 23:30 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll

2015-04-14 10:07 - 2015-04-08 23:30 - 00936264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

2015-04-14 10:07 - 2015-04-08 23:30 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll

2015-04-14 10:07 - 2015-04-08 23:30 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll

2015-04-14 10:07 - 2015-04-08 19:52 - 04336074 _____ () C:\WINDOWS\system32\nvcoproc.bin

2015-04-14 04:32 - 2015-04-14 04:32 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\ESET

2015-04-14 04:32 - 2015-04-14 04:32 - 00000000 ____D () C:\Users\Martin\AppData\Local\ESET

2015-04-14 04:30 - 2015-04-14 04:30 - 01660616 _____ (ESET) C:\Users\Martin\Downloads\eset_smart_security_live_installer_.exe

2015-04-14 02:41 - 2015-04-14 02:41 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2015-04-14 02:41 - 2015-04-14 02:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-04-14 02:41 - 2015-04-14 02:41 - 00000000 ____D () C:\Program Files (x86)\Java

2015-04-14 02:40 - 2015-04-14 02:40 - 00561064 _____ (Oracle Corporation) C:\Users\Martin\Downloads\jxpiinstall(1).exe

2015-04-14 02:33 - 2015-04-14 02:33 - 00341464 _____ () C:\WINDOWS\Minidump\041415-25593-01.dmp

2015-04-13 23:08 - 2015-04-13 23:08 - 00346088 _____ () C:\WINDOWS\Minidump\041315-15453-01.dmp

2015-04-13 22:11 - 2015-04-14 02:34 - 00000000 ____D () C:\Program Files\HitmanPro

2015-04-13 22:11 - 2015-04-13 22:11 - 00001909 _____ () C:\Users\Public\Desktop\HitmanPro.lnk

2015-04-13 21:13 - 2015-04-13 22:17 - 00000000 ____D () C:\ProgramData\HitmanPro

2015-04-13 21:12 - 2015-04-13 21:13 - 11028616 _____ (SurfRight B.V.) C:\Users\Martin\Downloads\HitmanPro_x64.exe

2015-04-13 21:02 - 2015-04-13 21:02 - 02347384 _____ (ESET) C:\Users\Martin\Downloads\esetsmartinstaller_enu.exe

2015-04-13 21:01 - 2015-04-13 21:01 - 02096640 _____ (Farbar) C:\Users\Martin\Downloads\FRST64(1).exe

2015-04-13 15:10 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2015-04-13 15:10 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2015-04-13 15:10 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2015-04-13 15:10 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll

2015-04-13 15:10 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll

2015-04-13 15:10 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll

2015-04-13 15:10 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2015-04-13 15:10 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll

2015-04-13 15:10 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe

2015-04-13 15:10 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2015-04-13 15:10 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll

2015-04-13 15:10 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2015-04-13 15:10 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll

2015-04-13 15:10 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2015-04-13 15:10 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll

2015-04-13 15:10 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe

2015-04-13 15:10 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2015-04-13 15:10 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2015-04-13 11:39 - 2015-04-13 11:39 - 00000146 _____ () C:\Users\Martin\Desktop\Windows Defender - genväg.lnk

2015-04-10 20:16 - 2015-04-10 20:16 - 00000685 _____ () C:\Users\Martin\Desktop\virus.txt

2015-04-10 17:31 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll

2015-04-10 17:31 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2015-04-10 17:31 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2015-04-10 17:31 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2015-04-10 17:31 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2015-04-10 17:31 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2015-04-10 17:31 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2015-04-10 17:31 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll

2015-04-10 17:31 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2015-04-08 21:54 - 2015-04-08 21:54 - 00352584 _____ () C:\WINDOWS\Minidump\040815-18265-01.dmp

2015-04-06 22:01 - 2013-01-31 13:21 - 01510176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvir3dgenco6420162.dll

2015-04-06 21:59 - 2015-04-06 22:00 - 227763184 _____ (NVIDIA Corporation) C:\Users\Martin\Downloads\309.08-desktop-win8-win7-winvista-64bit-international-whql.exe

2015-04-06 13:51 - 2015-04-06 13:51 - 00352072 _____ () C:\WINDOWS\Minidump\040615-15500-01.dmp

2015-04-03 00:09 - 2015-04-03 00:09 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX

2015-04-03 00:09 - 2015-04-03 00:09 - 00000000 ___SD () C:\WINDOWS\system32\GWX

2015-04-01 20:31 - 2015-04-01 20:31 - 00345528 _____ () C:\WINDOWS\Minidump\040115-31250-01.dmp

2015-04-01 16:44 - 2015-04-01 16:44 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-04-01 16:43 - 2015-04-01 16:43 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.1.4.1018.exe

2015-03-31 22:36 - 2015-03-31 22:36 - 36450560 _____ (NVIDIA Corporation) C:\Users\Martin\Downloads\GeForce_Experience_v2.4.1.21.exe

2015-03-31 22:35 - 2015-03-31 22:35 - 00000000 ____D () C:\ProgramData\Sun

2015-03-31 22:34 - 2015-04-14 02:41 - 00000000 ____D () C:\ProgramData\Oracle

2015-03-31 22:34 - 2015-03-31 22:34 - 00561064 _____ (Oracle Corporation) C:\Users\Martin\Downloads\jxpiinstall.exe

2015-03-31 22:28 - 2015-03-31 22:28 - 00347368 _____ () C:\WINDOWS\Minidump\033115-14937-01.dmp

2015-03-31 22:22 - 2015-03-31 22:22 - 00407344 _____ () C:\WINDOWS\Minidump\033115-18890-01.dmp

2015-03-31 00:42 - 2015-03-31 00:42 - 00336104 _____ () C:\WINDOWS\Minidump\033115-16296-01.dmp

2015-03-27 21:09 - 2015-03-27 21:09 - 00000000 _____ () C:\Recovery.txt

2015-03-27 20:56 - 2015-03-27 20:56 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe

2015-03-27 20:56 - 2015-03-27 20:56 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr

2015-03-27 16:58 - 2015-03-27 16:58 - 01542226 _____ () C:\Users\Martin\Desktop\my pc.txt

2015-03-27 16:51 - 2015-03-27 16:51 - 00355344 _____ () C:\WINDOWS\Minidump\032715-21328-01.dmp

2015-03-26 02:38 - 2015-03-26 02:38 - 00376720 _____ () C:\WINDOWS\Minidump\032615-18296-01.dmp

2015-03-25 11:21 - 2015-03-25 02:30 - 00900483 _____ () C:\Users\Martin\Desktop\2100001621_WarGame Final_79b0.dmp

2015-03-25 11:21 - 2015-03-23 01:29 - 00994814 _____ () C:\Users\Martin\Desktop\2100001621_WarGame Final_e9.dmp

2015-03-25 11:16 - 2015-03-25 11:16 - 00072398 _____ () C:\Users\Martin\Desktop\DxDiag.txt

2015-03-24 20:43 - 2015-04-14 10:12 - 00000000 ____D () C:\ProgramData\Skype

2015-03-24 20:43 - 2015-03-24 20:54 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Skype

2015-03-24 20:43 - 2015-03-24 20:43 - 00000000 ____D () C:\Users\Martin\AppData\Local\Skype

2015-03-24 20:32 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2015-03-24 20:32 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2015-03-24 19:20 - 2015-03-24 19:20 - 29393568 _____ (SUPERAntiSpyware) C:\Users\Martin\Downloads\SUPERAntiSpyware.exe

2015-03-24 19:16 - 2015-03-24 19:16 - 00000000 ____D () C:\Users\Martin\Desktop\Gammal Firefox-data

2015-03-24 18:48 - 2015-03-24 18:48 - 00001086 _____ () C:\Users\Public\Desktop\VLC media player.lnk

2015-03-24 03:23 - 2015-03-24 03:23 - 00339464 _____ () C:\WINDOWS\Minidump\032415-19453-01.dmp

2015-03-23 16:03 - 2015-04-04 21:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-03-19 22:58 - 2015-03-19 22:58 - 00390816 _____ () C:\WINDOWS\Minidump\031915-15890-01.dmp

2015-03-18 16:49 - 2015-03-18 16:49 - 00333040 _____ () C:\WINDOWS\Minidump\031815-17984-01.dmp

2015-03-18 04:49 - 2015-03-18 04:49 - 00327184 _____ () C:\WINDOWS\Minidump\031815-14921-01.dmp

2015-03-18 01:33 - 2015-03-18 01:33 - 00352720 _____ () C:\WINDOWS\Minidump\031815-17437-01.dmp

2015-03-17 23:04 - 2015-03-17 23:04 - 00358040 _____ () C:\WINDOWS\Minidump\031715-15109-01.dmp

2015-03-17 21:19 - 2015-03-17 21:19 - 00391216 _____ () C:\WINDOWS\Minidump\031715-20609-01.dmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-14 14:53 - 2014-12-17 13:02 - 00014942 _____ () C:\Users\Martin\Downloads\FRST.txt

2015-04-14 14:53 - 2014-12-17 13:02 - 00000000 ____D () C:\FRST

2015-04-14 14:47 - 2014-12-13 11:52 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4156780519-1333969105-2551499815-1001

2015-04-14 14:43 - 2014-12-16 19:44 - 00005002 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for KONTOR-Martin Kontor

2015-04-14 14:42 - 2014-12-15 19:04 - 00000000 __RDO () C:\Users\Martin\OneDrive

2015-04-14 14:42 - 2014-12-13 12:27 - 00001012 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2015-04-14 14:41 - 2013-08-22 17:36 - 00000000 ____D () C:\WIND

FRST är ett program som listar processer som kör, program och tjänster som startas automatiskt samt filer i sådana mappar som är vanliga att skadliga program använder och som är nya eller ändrade under senaste månaden. FRST är ett mycket vanligt program bland oss som hjälper till att rensa datorer. Resultatet ger oss en grundläggande kunskap om vad som händer och har hänt nyligen i datorn, och från det kan vi dra slutsatser om vad som är nästa lämpliga steg i rensningen av datorn.

Ladda ner Farbar Recovery Scan Tool (FRST) och spara på skrivbordet:

För 64-bitars Windows: http://download.bleepingcomputer.com/farbar/FRST64.exe

För 32-bitars Windows: http://download.bleepingcomputer.com/farbar/FRST.exe

Starta FRST.

Läs villkoren för programmet.

Klicka på Yes för att acceptera.

Klicka på Scan-knappen.

När det är klart kommer det att ha skapats två loggar FRST.txt och Addition.txt på skrivbordet.

Om du använder Skydrive, Dropbox eller annan filuppladdningstjänst, laddar du upp de två loggfilerna FRST.txt och Addition.txt dit och klistrar in länkar till filerna här.

Annars klistrar du in innehållet i loggen FRST.txt i ditt svar här.

Ja tack,

Har lyckats fått bort det i firefox samt chrome men det ligger kvar i explorer