1.. De program som du skulle försöka avinstallera finns en bit under mitten på sidan http://answers.microsoft.com/sv-se/protect/forum/protect_other-protect_scanning/beh%C3%B6ver-man-ha-proxy-aktiverat/13a50aee-816b-42f0-9fd7-bcba4bafcba6?page=1 och det var meningen att du skulle göra det innan du körde AdwCleaner. En del av det går inte längre att avinstallera men gå igenom listan och försök med resten. När det är klart ska datorn startas om.
- Dessutom leder det till konstiga problem om man har flera antivirusprogram installerade. Så vitt jag kan se har du Panda, Stopzilla, ZoneAlarm och Microsoft Security Essentials installerade och du bör alltså avinstallera Stopzilla, ZoneAlarm och Microsoft Security Essentials. Starta sen om datorn.
- Google Chrome (liksom andra webbläsare) fungerar dåligt med enormt många tillägg installerade och en del av dem är annonsprogram. Rensa bort dem som du inte tycker är väldigt viktiga: https://support.google.com/chrome/answer/113907?hl=sv
- Nedanstående kommer bland annat att tömma papperskorgen och ta bort filer som ligger i mappar för tillfälliga filer, förutom att ta bort skadliga och olämpliga program/filer.
Starta programmet Anteckningar.
Kopiera följande rader som är innan STOPP:
CreateRestorePoint:
CloseProcesses:
HKLM-x32...\Run: [mbot_se_103] => [X]
HKU\S-1-5-21-1061621915-3683754874-2428510453-1000...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PCCDisabled ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1061621915-3683754874-2428510453-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:53249;https=127.0.0.1:53249
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=sv-SE&Src=MSE&Tid=00032955&OHP=http%3A%2F%2Fsearch.yac.mx%2F%3Futm%5Fsource%3Db%26utm%5Fmedium%3DiSafe%26from%3DiSafe%26uid%3Dhitachixhts545032b9a300%5F091010pbh306q6d4aujvx&OSP=
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.yac.mx/?utm\_source=b&utm\_medium=iSafe&from=iSafe&uid=hitachixhts545032b9a300\_091010pbh306q6d4aujvx
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=sv-SE&Src=MSE&Tid=00032955&OHP=http%3A%2F%2Fsearch.yac.mx%2F%3Futm%5Fsource%3Db%26utm%5Fmedium%3DiSafe%26from%3DiSafe%26uid%3Dhitachixhts545032b9a300%5F091010pbh306q6d4aujvx&OSP=
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.yac.mx/?utm\_source=b&utm\_medium=iSafe&from=iSafe&uid=hitachixhts545032b9a300\_091010pbh306q6d4aujvx
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=sv-SE&Src=MSE&Tid=00032955&OHP=http%3A%2F%2Fsearch.yac.mx%2F%3Futm%5Fsource%3Db%26utm%5Fmedium%3DiSafe%26from%3DiSafe%26uid%3Dhitachixhts545032b9a300%5F091010pbh306q6d4aujvx&OSP=
HKU\S-1-5-21-1061621915-3683754874-2428510453-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://se.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU.DEFAULT -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = http://search.yac.mx/web/?q={searchTerms}&type=ds&from=yac&uid=hitachixhts545032b9a300\_091010pbh306q6d4aujvx&ts=1411391827
SearchScopes: HKU.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU.DEFAULT -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=360&chn=o0&geo=SE&ver=20&locale=sv\_SE&gct=kwd&qsrc=2869
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: uNissales -> {3dc260db-a08d-427a-bd18-e2c4bf3fe5d8} -> C:\Program Files (x86)\uNissales\D3vwE5lX2qLGAu.x64.dll No File
BHO: Search App by Ask -> {4F524A2D-5350-4500-76A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll" No File
BHO: uunnisAileSS -> {73f3b196-c790-49e8-906c-c37c62529909} -> C:\Program Files (x86)\uunnisAileSS\oQS5a0eEs8mzFu.x64.dll No File
BHO: unisoalaes -> {7f303ec2-557c-41d3-84c1-cce149631de6} -> C:\Program Files (x86)\unisoalaes\KHrXM35Wan61Go.x64.dll No File
BHO: Unisaales -> {ce1db0f7-c2df-45ad-bdf1-a055cd5ddeee} -> C:\Program Files (x86)\Unisaales\UGyEBuvs22gMvt.x64.dll No File
BHO: uNisales -> {d1dcb3c6-6e57-4cc5-b550-d2e5af1fbe4c} -> C:\Program Files (x86)\uNisales\dYynAtegT30fY9.x64.dll No File
BHO: uineisaaLeis -> {ea5a6092-49c1-4418-b1cd-1add3cb3e573} -> C:\Program Files (x86)\uineisaaLeis\On5raTaPKMiWNL.x64.dll No File
BHO-x32: Search App by Ask -> {4F524A2D-5350-4500-76A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll" No File
Toolbar: HKLM - Search App by Ask - {4F524A2D-5350-4500-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll" No File
Toolbar: HKLM-x32 - No Name - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - No File
Toolbar: HKLM-x32 - Search App by Ask - {4F524A2D-5350-4500-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll" No File
Toolbar: HKU.DEFAULT -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKU\S-1-5-21-1061621915-3683754874-2428510453-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKU\S-1-5-21-1061621915-3683754874-2428510453-1000 -> No Name - {1108E0EE-67C5-4AFE-88C5-10A28CF7FDA0} - No File
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455}
FF NetworkProxy: "type", 5
FF Keyword.URL: https://se.search.yahoo.com/search?fr=greentree\_ff1&ei=utf-8&ilc=12&type=523482&p=
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin HKU\S-1-5-21-1061621915-3683754874-2428510453-1000: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF SearchPlugin: C:\Users\hakan\AppData\Roaming\Mozilla\Firefox\Profiles\ewtummbk.default\searchplugins\badoo.xml
FF SearchPlugin: C:\Users\hakan\AppData\Roaming\Mozilla\Firefox\Profiles\ewtummbk.default\searchplugins\yahoo-avast.xml
FF Extension: 1EB88DA74F704E70923F810E4F0C9FDF - C:\Users\hakan\AppData\Roaming\Mozilla\Firefox\Profiles\ewtummbk.default\Extensions{1EB88DA7-4F70-4E70-923F-810E4F0C9FDF} [2014-12-24]
FF Extension: TrustedShopper - C:\Users\hakan\AppData\Roaming\Mozilla\Firefox\Profiles\ewtummbk.default\Extensions\*** E-postadressen är borttagen på grund av sekretess *** [2014-12-07]
FF Extension: SmileysWeLove: Smileys for use with Facebook, GMail, and more - C:\Users\hakan\AppData\Roaming\Mozilla\Firefox\Profiles\ewtummbk.default\Extensions\*** E-postadressen är borttagen på grund av sekretess *** [2015-01-11]
FF HKLM-x32...\Firefox\Extensions: [{fc4350fc-3e37-4f1e-8341-5af31e09f020}] - C:\Program Files (x86)\Mozilla Firefox\extensions{fc4350fc-3e37-4f1e-8341-5af31e09f020}
FF HKU\S-1-5-21-1061621915-3683754874-2428510453-1000...\Firefox\Extensions: [speedtest4354@BestOffers] - C:\Users\hakan\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers
FF Extension: No Name - C:\Users\hakan\AppData\Roaming\Mozilla\Firefox\Profiles\ewtummbk.default\extensions{cc5be304-cd48-4ebc-bd30-67f7edeaefb7} [Not Found]
FF Extension: No Name - C:\Users\hakan\AppData\Roaming\Mozilla\Firefox\Profiles\ewtummbk.default\extensions\*** E-postadressen är borttagen på grund av sekretess *** [Not Found]
FF Extension: PriceFountain - C:\Users\hakan\AppData\Roaming\Mozilla\Firefox\Profiles\ewtummbk.default\extensions\staged{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi [2015-01-15]
FF Extension: No Name - C:\Users\hakan\AppData\Roaming\Mozilla\Firefox\Profiles\ewtummbk.default\extensions\newtaburl_local.xpi [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
CHR RestoreOnStartup: Default -> "hxxp://vosteran.com/?f=7&a=&cd=&cr=&ir=", "hxxp://www.trovi.com/?gd=&ctid=CT3318155&octid=EB_ORIGINAL_CTID&ISID=M08C77855-6C8E-4ABC-A458-7F4BD24F297E&SearchSource=55&CUI=&UM=6&UP=SP040D1825-0F37-4904-A3EE-67AA1ED370EE&SSPV="
CHR DefaultSearchKeyword: Default -> vi-view
CHR DefaultSuggestURL: Default ->
CHR Plugin: (Java Deployment Toolkit 7.0.650.20) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U65) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Extension: (TransOver) - C:\Users\hakan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aggiiclaiamajehmlfpkjmlbadmkledi [2015-01-13]
CHR Extension: (Inbox Linkbar) - C:\Users\hakan\AppData\Local\Google\Chrome\User Data\Default\Extensions\eniilghikaekbihaailfkcnanbnpcpcj [2015-01-13]
CHR Extension: (Enhance Facebook and Twitter) - C:\Users\hakan\AppData\Local\Google\Chrome\User Data\Default\Extensions\foeapmgohcmcofijhpjbabedgmmdeadh [2015-01-13]
CHR Extension: (TelevisionFanatic) - C:\Users\hakan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkdeibicnefmbpdgccefklmkdjhpdfea [2015-01-13]
CHR Extension: (Giant Translator) - C:\Users\hakan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabomenogfoilanojpoolflokcjfegld [2014-12-20]
CHR Extension: (Inbox) - C:\Users\hakan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgpmnbakkbljggbeoededmolekagjjnk [2015-01-13]
CHR Extension: (Google Quick Scroll) - C:\Users\hakan\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2015-01-13]
CHR Extension: (Earth map) - C:\Users\hakan\AppData\Local\Google\Chrome\User Data\Default\Extensions\opmibphegngmljhikklndacjdpkmhocp [2015-01-13]
CHR Extension: (MyFunCards) - C:\Users\hakan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pehdhibmkmcipbeahabjgfhgngojeace [2015-01-13]
CHR HKLM...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKU\S-1-5-21-1061621915-3683754874-2428510453-1000...\Chrome\Extension: [ajkfjfjmakfkpafaifpmomdmldlfpjbf] - C:\Users\hakan\AppData\Local\CRE\ajkfjfjmakfkpafaifpmomdmldlfpjbf.crx [Not Found]
CHR HKU\S-1-5-21-1061621915-3683754874-2428510453-1000...\Chrome\Extension: [ccbgjfdieajmokelnlapbedknchgenne] - C:\Users\hakan\AppData\Local\CRE\ccbgjfdieajmokelnlapbedknchgenne.crx [Not Found]
CHR HKLM-x32...\Chrome\Extension: [ajkfjfjmakfkpafaifpmomdmldlfpjbf] - C:\Users\hakan\AppData\Local\CRE\ajkfjfjmakfkpafaifpmomdmldlfpjbf.crx [Not Found]
CHR HKLM-x32...\Chrome\Extension: [bdgknajgkjjcedlpicpdhgjgfhnililh] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha380\ch\MediaViewerV1alpha380.crx [Not Found]
CHR HKLM-x32...\Chrome\Extension: [ccbgjfdieajmokelnlapbedknchgenne] - C:\Users\hakan\AppData\Local\CRE\ccbgjfdieajmokelnlapbedknchgenne.crx [Not Found]
CHR HKLM-x32...\Chrome\Extension: [fdjkhamgopgokjmllcmpkiijndjeidcl] - C:\Users\hakan\AppData\Local\Temp\twsfiles\trustedshopper.crx [Not Found]
CHR HKLM-x32...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
R2 szserver; C:\Program Files (x86)\STOPzilla!\SZServer.exe [57136 2014-10-20] (iS3, Inc.)
S3 APIScriptSnapshot.exe; C:\Users\hakan\AppData\Local\APIScriptSnapshot\APIScriptSnapshot.exe [X]
S3 ApplicationExportFolder.exe; C:\Users\hakan\AppData\Local\ApplicationExportFolder\ApplicationExportFolder.exe [X]
S3 ClassMethodMinimal.exe; C:\Users\hakan\AppData\Local\ClassMethodMinimal\ClassMethodMinimal.exe [X]
S3 direct3dperftrackSched; C:\Windows\SysWOW64\direct3dperftrackSched\direct3dperftrackSched.exe [X]
S3 Update RockResult; "C:\Program Files (x86)\RockResult\updateRockResult.exe" [X]
S1 ssnfd_1_10_0_3; system32\drivers\ssnfd_1_10_0_3.sys [X]
S1 ssnfd_1_10_0_5; system32\drivers\ssnfd_1_10_0_5.sys [X]
2014-11-26 19:32 - 2014-11-26 19:32 - 1948632 _____ (Object Browser) C:\Users\hakan\AppData\Roaming\AUDZHYV.exe
2014-11-26 19:33 - 2014-11-26 19:33 - 1329624 _____ (Object Browser) C:\Users\hakan\AppData\Roaming\ZBEJF.exe
C:\ProgramData\stpass.exe
C:\Windows\Tasks{8EFD616B-A895-44C9-9725-38D6CB82E41E}.job
CustomCLSID: HKU\S-1-5-21-1061621915-3683754874-2428510453-1000_Classes\CLSID{939A0D04-0E07-48FE-A463-6623B70C3A96}\localserver32 -> "C:\Users\hakan\AppData\Local\Conduit\ValueApps\IE\64\ValueApps.exe" No File
C:\Users\hakan\AppData\Local\Conduit
Task: {0C50F1EF-E12B-44E9-904F-A64286C52F4B} - {EA858B4D-D99D-4E8C-AF28-6387A3B81607} No Task File <==== ATTENTION
Task: {0E445392-ED6B-4A8D-844A-65F19F013E86} - {2F11BA9E-423C-4F35-992C-9A0F7336DDF6} No Task File <==== ATTENTION
Task: {3D657AD0-AD83-40FF-A701-64D5B194FF42} - {5E8DE2C9-9AE7-4E0A-8FCE-0220AAEBDC1E} No Task File <==== ATTENTION
Task: {4B9DF5C5-40EE-4670-A63C-9F005BD165B4} - {01BACD56-A262-4FC9-BFA1-F4AEE3DA65AA} No Task File <==== ATTENTION
Task: {4E465D3F-E09F-4AA7-A3E3-428A3E1885A6} - \Opera scheduled Autoupdate 1421150235 No Task File <==== ATTENTION
Task: {532C02F5-C7D4-4093-8789-4FAD48E07DFB} - {7D9E0B90-1189-408B-93A5-6358095C6132} No Task File <==== ATTENTION
Task: {5D4F70D1-534A-49E9-870C-2F81652DCC57} - {8C5E2894-3557-4CDC-A3DD-24BB0617937E} No Task File <==== ATTENTION
Task: {63B18357-B8BD-4239-9FAC-267C07687F7D} - System32\Tasks{B0BF74B5-5B92-4DF8-A37F-D3BCE01FD2CA} => pcalua.exe -a "C:\Users\hakan\Desktop\SZSetup_AID10121_AV (4).exe" -d C:\Users\hakan\Desktop
Task: {7436BE1A-21F0-423B-A3C9-89DE0CFF6E99} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {7FD2B9E4-E925-4214-941B-7972E2B1090A} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {93EC6273-0814-45CE-BF42-7F0A9D6D871B} - \Google Update No Task File <==== ATTENTION
Task: {9D84DE57-0167-4551-B70A-33A5EA36EC49} - \Java Update Scheduler No Task File <==== ATTENTION
Task: {A4EA203D-99BB-490F-87E9-938C65DDCF4E} - {5B7E3766-5ECD-496D-A35F-1E7AC5395846} No Task File <==== ATTENTION
Task: {B3D86289-ED0E-4F96-8D85-EF71A8EF5ABF} - {BE758EE3-8B82-43C7-831E-D6CE01449CF9} No Task File <==== ATTENTION
Task: {C7CEB968-1041-4165-9A5D-36C6C1C6289B} - {3287D32E-E0F4-4DF9-9274-229CBC36699A} No Task File <==== ATTENTION
Task: {CA42F567-415D-4877-941E-447C0F7D109E} - System32\Tasks\4696 => Wscript.exe C:\Users\hakan\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {D49AA8F9-EA83-4D08-9D8A-9067E4A446EA} - \SidebarExecute No Task File <==== ATTENTION
Task: {FBAABFEE-146E-4FAC-A088-E29C1054E442} - {62D60B83-1223-420C-827B-D8A312F19DA0} No Task File <==== ATTENTION
Task: {FC5308F1-E074-42E3-87A0-4595D84A279B} - {528FA78B-F55B-409F-AFCB-FE1FEC3B0060} No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:000D6A25
AlternateDataStreams: C:\ProgramData\Temp:028B605A
AlternateDataStreams: C:\ProgramData\Temp:0B9176C0
AlternateDataStreams: C:\ProgramData\Temp:1234ADAE
AlternateDataStreams: C:\ProgramData\Temp:16A4620C
AlternateDataStreams: C:\ProgramData\Temp:1D32EC29
AlternateDataStreams: C:\ProgramData\Temp:1ECB9265
AlternateDataStreams: C:\ProgramData\Temp:25249477
AlternateDataStreams: C:\ProgramData\Temp:28D92DA8
AlternateDataStreams: C:\ProgramData\Temp:2B9146DE
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F
AlternateDataStreams: C:\ProgramData\Temp:2CFBE2D1
AlternateDataStreams: C:\ProgramData\Temp:2D3CB929
AlternateDataStreams: C:\ProgramData\Temp:3095C3B0
AlternateDataStreams: C:\ProgramData\Temp:32FFF2D1
AlternateDataStreams: C:\ProgramData\Temp:35629AE6
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:436BE28C
AlternateDataStreams: C:\ProgramData\Temp:43C9D140
AlternateDataStreams: C:\ProgramData\Temp:48862C37
AlternateDataStreams: C:\ProgramData\Temp:49D43906
AlternateDataStreams: C:\ProgramData\Temp:4AA2F6A9
AlternateDataStreams: C:\ProgramData\Temp:4CF61E54
AlternateDataStreams: C:\ProgramData\Temp:4FE884C2
AlternateDataStreams: C:\ProgramData\Temp:52A42F4C
AlternateDataStreams: C:\ProgramData\Temp:5711DB70
AlternateDataStreams: C:\ProgramData\Temp:571CCF8E
AlternateDataStreams: C:\ProgramData\Temp:57B374AB
AlternateDataStreams: C:\ProgramData\Temp:5A2E8BBF
AlternateDataStreams: C:\ProgramData\Temp:5A437AC3
AlternateDataStreams: C:\ProgramData\Temp:5BB7898D
AlternateDataStreams: C:\ProgramData\Temp:5FD47318
AlternateDataStreams: C:\ProgramData\Temp:64170090
AlternateDataStreams: C:\ProgramData\Temp:699BDADB
AlternateDataStreams: C:\ProgramData\Temp:6B50A605
AlternateDataStreams: C:\ProgramData\Temp:6EA64886
AlternateDataStreams: C:\ProgramData\Temp:6FD36C4B
AlternateDataStreams: C:\ProgramData\Temp:783794B9
AlternateDataStreams: C:\ProgramData\Temp:7EABF26C
AlternateDataStreams: C:\ProgramData\Temp:880F0FEF
AlternateDataStreams: C:\ProgramData\Temp:8AED9359
AlternateDataStreams: C:\ProgramData\Temp:8B47C602
AlternateDataStreams: C:\ProgramData\Temp:8F067037
AlternateDataStreams: C:\ProgramData\Temp:91244A8F
AlternateDataStreams: C:\ProgramData\Temp:92D18A5E
AlternateDataStreams: C:\ProgramData\Temp:93B8F954
AlternateDataStreams: C:\ProgramData\Temp:9603033A
AlternateDataStreams: C:\ProgramData\Temp:99AC3203
AlternateDataStreams: C:\ProgramData\Temp:9A203656
AlternateDataStreams: C:\ProgramData\Temp:9D6EAEC3
AlternateDataStreams: C:\ProgramData\Temp:A2907225
AlternateDataStreams: C:\ProgramData\Temp:A82AE908
AlternateDataStreams: C:\ProgramData\Temp:ABFEED8E
AlternateDataStreams: C:\ProgramData\Temp:B285A50E
AlternateDataStreams: C:\ProgramData\Temp:B59E4689
AlternateDataStreams: C:\ProgramData\Temp:B709343D
AlternateDataStreams: C:\ProgramData\Temp:B779C113
AlternateDataStreams: C:\ProgramData\Temp:BD34FFC5
AlternateDataStreams: C:\ProgramData\Temp:C3C72D5F
AlternateDataStreams: C:\ProgramData\Temp:C9B27A06
AlternateDataStreams: C:\ProgramData\Temp:CB0D5DB1
AlternateDataStreams: C:\ProgramData\Temp:CCB49694
AlternateDataStreams: C:\ProgramData\Temp:CD6DF7CC
AlternateDataStreams: C:\ProgramData\Temp:CE5C755D
AlternateDataStreams: C:\ProgramData\Temp:D287FACF
AlternateDataStreams: C:\ProgramData\Temp:D3A96964
AlternateDataStreams: C:\ProgramData\Temp:D46F871E
AlternateDataStreams: C:\ProgramData\Temp:D4BB0AD6
AlternateDataStreams: C:\ProgramData\Temp:D5CCCBAA
AlternateDataStreams: C:\ProgramData\Temp:DD780579
AlternateDataStreams: C:\ProgramData\Temp:DEE46C4E
AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D
AlternateDataStreams: C:\ProgramData\Temp:E380FC9B
AlternateDataStreams: C:\ProgramData\Temp:E5496666
AlternateDataStreams: C:\ProgramData\Temp:E8AEB2BF
AlternateDataStreams: C:\ProgramData\Temp:E913CC27
AlternateDataStreams: C:\ProgramData\Temp:EB68CA55
AlternateDataStreams: C:\ProgramData\Temp:F2721624
AlternateDataStreams: C:\ProgramData\Temp:F9EDCFB0
AlternateDataStreams: C:\ProgramData\Temp:FFD58FFB
Folder: C:\Users\hakan\AppData\Roaming\0F1L1I1PtF1F1C1N
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
EmptyTemp:
STOPP
och klistra in i Anteckningar. Kontrollera att inga filer har delats upp på två rader.
Spara filen på skrivbordet med namnet fixlist.txt.
Stäng av alla program och inaktivera Panda.
Starta FRST som finns på skrivbordet.
Klicka på knappen Fix.
Vänta tills programmet är klart.
Om datorn inte startas om automatiskt så gör det själv.
Programmet skapar en logg Fixlog.txt på skrivbordet.
Klistra in innehållet i den i ditt svar.
- Skanna datorn online på http://www.eset.com/onlinescan/ och använd helst Internet Explorer till det.
För att inte skannern ska ta för lång tid på sig stäng av ditt antivirusprogram under tiden.
Välj alternativet Enable detection of potentially unwanted applications.
Klicka på Advanced Settings.
Ta bort bocken framför Remove found threats.
Bocka för:
Scan Archives
Scan for potentially unsafe applicationsEnable Anti-Stealth Technology
Klicka på Start.
När skanningen är klar klicka på List of found threats, följt av Export to a text file. Spara till en fil på skrivbordet, öppna filen, kopiera resultatet och klistra sedan in det i ditt svar.
- Starta FRST.
Bocka för Addition.txt.
Skanna med FRST och klistra in de två nya loggarna.
om man behöver ha detta aktiverat i min dator?