Sandstone50

läst om lumina, verkar ju jättebra, fattas bara en dator, men den kanske man kan vänta med då... kamera med vidvinkel till och med. Har jag alltid velat ha, tack för tipset

Hej på er. Har börjat inse att jag inte kan be Cecilia om hjälp alltid, så det får bli nåt nytt, Har läst om "6 fjäderlätta" och kommit fram till att HP Spectre X360 verkar bra (men aningen dyr i mitt tycke) är den det prisvärda och "bästa" att köpa idag ??? eller ?? Behöver även tips på ny telefon. Min verkar ha fått fnatt (en Samsung Galay). Ringer näst in till ALDRIG, utan används mer som den minidator den ju är

Tack, ska kolla vad som skett efter mitt ingrepp i morron. Nu till flyget och hämta en kompis.... Tack Cecilia !!

Hur många gånger per dag ska man stå ut med detta meddelande - Att Explorer inte svarar OCH ATT DATORN LÅSER SEJ allt som oftast ... URJOBBIGT ... Har för mej att jag möjligen har frågat förr, så sökte på "interner Explorer svarar inte" här i forumet uppe till höger. Döm om min förvåning när det dök upp en sida med AVG-loggan och i sökfältet stod det : index.php?app=core ...vad betydet det ?? Ska en sökning inom forumet inte stanna inom "allt om windows" ??

OK, ska tipsa om det. Dammsugning :-)

Vad jag kan se så är det väl inte längre nån "spion" i datorn, men hualigen så trött och sidor låser sej och FRYSER. Inte kul att lämna iväg denna dator tillbaka senare idag. Inget mera jag kan göra ??

Tack C !! Tror jag FIXAT DET MESTA Har du tips på snabba upp datorn, så tveka inte... tack än en gång !!

Bordedet räcka med AVG och windows brandvägg ??

Bättre ?? Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015 Ran by Birgitta at 2015-04-11 16:14:10 Run:3 Running from C:\Users\Birgitta\Desktop Loaded Profiles: Birgitta (Available profiles: Birgitta) Boot Mode: Normal ============================================== Content of fixlist: ***************** CreateRestorePoint: CloseProcesses: C:\Program Files (x86)\SearchProtect174081 C:\Windows\System32\mjcm\ BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File Toolbar: HKU\S-1-5-21-2449234904-2715240119-1125603432-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File FF Extension: No Name - C:\Users\Birgitta\AppData\Roaming\Mozilla\Firefox\Profiles\5x8fs8fd.default\extensions\paffxtbr@FilmFanatic.com [Not Found] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] 2015-03-25 14:49 - 2015-03-25 14:49 - 00000000 ____D () C:\Windows\SysWOW64\Drivers\avg 2015-03-25 10:28 - 2015-04-10 19:46 - 00000000 ____D () C:\ProgramData\avg9 C:\Program Files (x86)\AVG C:\Windows\system32\tprb EmptyTemp: ***************** Restore point was successfully created. Processes closed successfully. C:\Program Files (x86)\SearchProtect174081 => Moved successfully. "C:\Windows\System32\mjcm" => File/Directory not found. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. "HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully. HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value deleted successfully. HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found. C:\Users\Birgitta\AppData\Roaming\Mozilla\Firefox\Profiles\5x8fs8fd.default\extensions\paffxtbr@FilmFanatic.com not found. C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} not found. "C:\Windows\SysWOW64\Drivers\avg" => File/Directory not found. C:\ProgramData\avg9 => Moved successfully. C:\Program Files (x86)\AVG => Moved successfully. C:\Windows\system32\tprb => Moved successfully. EmptyTemp: => Removed 18.5 GB temporary data. The system needed a reboot. ==== End of Fixlog 16:30:40 ====

Vilka säkerhetsprogram borde jag ladda ner ?? AWG CCleaner eller ?? Och för att möjligen snabba upp datorn, vad kan jag göra ?

Denna står det ju inte .txt på. Nåt jag missat ? Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015 Ran by Birgitta at 2015-04-11 16:14:10 Run:3 Running from C:\Users\Birgitta\Desktop Loaded Profiles: Birgitta (Available profiles: Birgitta) Boot Mode: Normal ============================================== Content of fixlist: ***************** CreateRestorePoint: CloseProcesses: C:\Program Files (x86)\SearchProtect174081 C:\Windows\System32\mjcm\ BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File Toolbar: HKU\S-1-5-21-2449234904-2715240119-1125603432-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File FF Extension: No Name - C:\Users\Birgitta\AppData\Roaming\Mozilla\Firefox\Profiles\5x8fs8fd.default\extensions\paffxtbr@FilmFanatic.com [Not Found] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] 2015-03-25 14:49 - 2015-03-25 14:49 - 00000000 ____D () C:\Windows\SysWOW64\Drivers\avg 2015-03-25 10:28 - 2015-04-10 19:46 - 00000000 ____D () C:\ProgramData\avg9 C:\Program Files (x86)\AVG C:\Windows\system32\tprb EmptyTemp: ***************** Restore point was successfully created.

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015 Ran by Birgitta at 2015-04-11 14:28:42 Running from C:\Users\Birgitta\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Svenska (HKLM-x32\...\{AC76BA86-7AD7-1053-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Apple-programstöd (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.) Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros) BankID säkerhetsprogram (HKLM-x32\...\{2D6973ED-BBF2-434E-993C-37E05087B8C8}) (Version: 5.1.3.2 - Finansiell ID-Teknik BID AB) Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Bejeweled 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.60 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden Canon MG2100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2100_series) (Version: - ) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.2.1.3726 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{E96CAA2A-0244-4A2A-8403-0C3C9534778B}) (Version: 2.1.1 - Hewlett-Packard) Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.) Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden FATE - The Traitor Soul (x32 Version: 2.2.0.95 - WildTangent) Hidden Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden HP Documentation (HKLM-x32\...\{2BF8B295-A214-42AC-B4EC-2AE15E08B0E7}) (Version: 1.1.0.0 - Hewlett-Packard) HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent) HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company) HP Power Manager (HKLM-x32\...\{E44578C7-4667-4124-8BC2-1161BCA54978}) (Version: 1.4.4 - Hewlett-Packard Company) HP Quick Launch (HKLM-x32\...\{53B17A98-5BF0-40BC-AAFF-850A357975AC}) (Version: 2.7.2 - Hewlett-Packard Company) HP Setup (HKLM-x32\...\{03046EBB-CB7C-4B98-BEFB-690EB955DA22}) (Version: 8.5.4526.3645 - Hewlett-Packard Company) HP Software Framework (HKLM-x32\...\{97174E88-52F9-445A-A28E-704A45332D19}) (Version: 4.0.108.1 - Hewlett-Packard Company) HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company) HP Wireless Assistant (HKLM\...\{13DCC2C7-454D-42F0-A892-E0E9A5DE4E67}) (Version: 4.0.10.0 - Hewlett-Packard Company) Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel® Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2202 - Intel Corporation) Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation) iTunes (HKLM\...\{76FF0F03-B707-4332-B5D1-A56C8303514E}) (Version: 11.0.4.4 - Apple Inc.) Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation) Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden Microsoft .NET Framework 4.5.1 (svenska) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1053) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klicka-och-kör 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - svenska (HKLM-x32\...\{90140011-0066-041D-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft_VC90_CRT_x86 (HKLM-x32\...\{DF2035BE-5820-4965-BD97-7FAF8D4A7879}) (Version: 1.0.0 - Microsoft Corporation) Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.18.00.03 - Huawei Technologies Co.,Ltd) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Mozilla Thunderbird 31.6.0 (x86 sv-SE) (HKLM-x32\...\Mozilla Thunderbird 31.6.0 (x86 sv-SE)) (Version: 31.6.0 - Mozilla) Mystery P.I. - Stolen in San Francisco (x32 Version: 2.2.0.95 - WildTangent) Hidden Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden OpenOffice 4.1.1 (HKLM-x32\...\{224BABA5-F494-479C-807B-4356A72CAA10}) (Version: 4.11.9775 - Apache Software Foundation) PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.0.34 - PDF Complete, Inc) Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.42.304.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6287 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.77 - Realtek Semiconductor Corp.) Recovery Manager (x32 Version: 1.0.22 - Hewlett-Packard) Hidden Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation) Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.) Slingo Supreme (x32 Version: 2.2.0.95 - WildTangent) Hidden Spotify (HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\...\Spotify) (Version: 0.9.7.16.g4b197456 - Spotify AB) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.4.3 - Synaptics Incorporated) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden WildTangent Games App (HP Games) (x32 Version: 4.0.5.2 - WildTangent) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation) WinZip 14.5 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}) (Version: 14.5.9095 - WinZip Computing, S.L. ) Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.95 - WildTangent) Hidden Visual C++ 8.0 Runtime Setup Package (x64) (HKLM-x32\...\{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}) (Version: 9.0.0.623 - AVG Technologies CZ, s.r.o.) Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies) Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.0.3 (HKLM-x32\...\VLC media player) (Version: 2.0.3 - VideoLAN) Xobni (HKLM-x32\...\XobniMain) (Version: 1.9.5.13209 - Xobni Corp.) Xobni Core (x32 Version: 1.0.0 - Xobni, Inc.) Hidden Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 26-03-2015 17:44:00 Removed SpyHunter 04-04-2015 16:43:22 Windows Update 09-04-2015 23:16:13 Removed Java 6 Update 22 (64-bit) 09-04-2015 23:26:53 Removed Java 6 Update 33 10-04-2015 19:32:35 Removed AVG 2015 10-04-2015 19:39:52 Removed AVG 2015 10-04-2015 19:44:02 Removed AVG Free 9.0 10-04-2015 19:46:12 Installed AVG Free 9.0 10-04-2015 19:56:43 Restore Point Created by FRST 11-04-2015 10:43:23 Restore Point Created by FRST 11-04-2015 11:05:01 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0998412D-B191-4D10-886E-DF745A8A4F06} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {16B1868A-48AB-4BA3-82DC-0CC4DF7939B8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {178C9E45-1B4A-4D30-BB7D-AD39B02854FC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-19] (Google Inc.) Task: {1F70C84F-47C7-41F2-B960-CD45928065F0} - System32\Tasks\{0B6DBE6F-1D7A-484F-824B-12F64D648298} => C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe [2012-03-08] (Microsoft Corporation) Task: {2D1A6B53-CC9E-4EEE-B18C-A1523094179F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-19] (Google Inc.) Task: {36C330A7-462D-4B40-B306-B5BCAB19BD9A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation) Task: {70665371-AE78-49F8-9DDF-BB9C6E9AD142} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {842287FD-352C-41B5-BDAB-CB81B466A28C} - System32\Tasks\{51D90722-4DFE-4DE8-BB72-3122E9279B5E} => C:\Users\Birgitta\AppData\Roaming\uTorrent\uTorrent.exe Task: {879EA53A-C2D9-4241-80CE-3A535C04AC29} - System32\Tasks\HPCeeScheduleForBirgitta => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard) Task: {8DBFBCD3-A928-4AF6-8B3D-4944C72C26AC} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation) Task: {A6CC5FC0-1AA1-4039-857C-67F4D17E2D8F} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {AA14B5FA-FCB1-4B22-AF5C-87362E2DE02B} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation) Task: {D467734B-6E96-48B4-96BB-08DB55910E6D} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-02-10] (CyberLink) Task: {D9E88784-94EB-486A-A07C-71E19D208CB0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-19] (Adobe Systems Incorporated) Task: {E230AC6D-BCEC-4FB3-92AD-6BDE5D1FCE77} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company) Task: {E651BDCA-F415-41D9-9F53-16D9E7684BD0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {F3FE3258-1392-4357-86D1-740046DBD059} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HPCeeScheduleForBirgitta.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Loaded Modules (whitelisted) ============== 2013-04-10 13:25 - 2012-09-04 10:27 - 00233864 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe 2010-07-22 00:33 - 2010-07-22 00:33 - 00030264 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll 2010-07-22 00:33 - 2010-07-22 00:33 - 00052280 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll 2010-07-22 00:33 - 2010-07-22 00:33 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-10-18 09:56 - 2014-10-18 09:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\ba8588c3319d63350220ec2ac3eb2c36\IsdiInterop.ni.dll 2012-04-06 02:29 - 2010-09-14 03:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Birgitta\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administratör (S-1-5-21-2449234904-2715240119-1125603432-500 - Administrator - Disabled) Birgitta (S-1-5-21-2449234904-2715240119-1125603432-1000 - Administrator - Enabled) => C:\Users\Birgitta Gäst (S-1-5-21-2449234904-2715240119-1125603432-501 - Limited - Disabled) ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/11/2015 10:52:22 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programmet iexplore.exe, version 11.0.9600.17689, avslutades eftersom det slutade att samverka med Windows. Ytterligare information kan finnas i problemhistoriken på kontrollpanelen för Åtgärdscentret och lösningar. Process-ID: 1484 Starttid: 01d074349875721f Avslutningstid: 10 Programsökväg: C:\Program Files\Internet Explorer\iexplore.exe Rapport-ID: f57a3411-e027-11e4-87f4-9cb70dff8658 Error: (04/11/2015 10:50:14 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/11/2015 10:43:13 AM) (Source: VSS) (EventID: 8194) (User: ) Description: Fel i tjänsten Volume Shadow Copy: Oväntat fel när gränssnittet IVssWriterCallback skulle erhållas. hr = 0x80070005, Åtkomst nekad. . Det orsakas ofta av inkorrekta säkerhetsinställningar i processen för antingen skrivaren eller beställaren. Åtgärd: Samlar in skrivardata Kontext: Skrivarklass-ID: {e8132975-6f93-4464-a53e-1050253ae220} Skrivarnamn: System Writer Skrivarinstans-ID: {afda1450-1600-4e0d-9e41-f9ac71e6c8a2} Error: (04/10/2015 08:06:44 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 10000 Error: (04/10/2015 08:06:44 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 10000 Error: (04/10/2015 08:06:43 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (04/10/2015 07:59:48 PM) (Source: XobniService) (EventID: 0) (User: ) Description: Det går inte att starta tjänsten. Referensen (handle) är felaktig Error: (04/10/2015 07:59:42 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/10/2015 07:56:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Anropet OnIdentity() i systemskrivarobjektet misslyckades för tjänsten Cryptographic Services. Details: AddLegacyDriverFiles: Unable to back up image of binary AVGIDSDriver. System Error: Det går inte att hitta filen. . Error: (04/10/2015 07:56:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Anropet OnIdentity() i systemskrivarobjektet misslyckades för tjänsten Cryptographic Services. Details: AddLegacyDriverFiles: Unable to back up image of binary AVG network filter service. System Error: Det går inte att hitta filen. . System errors: ============= Error: (04/11/2015 10:48:48 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT instans) Description: Modulen för WLAN-utökningsmöjligheter stoppades oväntat. Modulsökväg: C:\Windows\system32\athihvs.dll Error: (04/11/2015 10:48:48 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT instans) Description: Modulen för WLAN-utökningsmöjligheter stoppades oväntat. Modulsökväg: C:\Windows\system32\athihvs.dll Error: (04/11/2015 10:47:42 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT instans) Description: Modulen för WLAN-utökningsmöjligheter stoppades oväntat. Modulsökväg: C:\Windows\system32\athihvs.dll Error: (04/11/2015 10:46:13 AM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Tjänsthanteraren försökte utföra en korrigeringsåtgärd (Starta om tjänsten) efter att tjänsten Windows Modules Installer avslutats oväntat, men denna åtgärd misslyckades med följande fel: %%1056 Error: (04/11/2015 10:44:22 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Tjänsten Intel® Rapid Storage Technology avslutades oväntat. Detta har skett 1 gånger. Error: (04/11/2015 10:44:22 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Tjänsten HP Wireless Assistant Service avslutades oväntat. Detta har skett 1 gånger. Error: (04/11/2015 10:44:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Tjänsten HP Support Assistant Service avslutades oväntat. Den har gjort detta 1 gång(er). Följande åtgärd kommer att utföras om 60000 millisekunder: Starta om tjänsten. Error: (04/11/2015 10:44:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Tjänsten Intel® Management & Security Application User Notification Service avslutades oväntat. Detta har skett 1 gånger. Error: (04/11/2015 10:44:19 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Tjänsten Apple Mobile Device avslutades oväntat. Den har gjort detta 1 gång(er). Följande åtgärd kommer att utföras om 60000 millisekunder: Starta om tjänsten. Error: (04/11/2015 10:44:18 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Tjänsten Print Spooler avslutades oväntat. Den har gjort detta 1 gång(er). Följande åtgärd kommer att utföras om 60000 millisekunder: Starta om tjänsten. Microsoft Office Sessions: ========================= Error: (04/11/2015 10:52:22 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe11.0.9600.17689148401d074349875721f10C:\Program Files\Internet Explorer\iexplore.exef57a3411-e027-11e4-87f4-9cb70dff8658 Error: (04/11/2015 10:50:14 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/11/2015 10:43:13 AM) (Source: VSS) (EventID: 8194) (User: ) Description: 0x80070005, Åtkomst nekad. Åtgärd: Samlar in skrivardata Kontext: Skrivarklass-ID: {e8132975-6f93-4464-a53e-1050253ae220} Skrivarnamn: System Writer Skrivarinstans-ID: {afda1450-1600-4e0d-9e41-f9ac71e6c8a2} Error: (04/10/2015 08:06:44 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 10000 Error: (04/10/2015 08:06:44 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 10000 Error: (04/10/2015 08:06:43 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (04/10/2015 07:59:48 PM) (Source: XobniService) (EventID: 0) (User: ) Description: Det går inte att starta tjänsten. Referensen (handle) är felaktig Error: (04/10/2015 07:59:42 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/10/2015 07:56:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary AVGIDSDriver. System Error: Det går inte att hitta filen. Error: (04/10/2015 07:56:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary AVG network filter service. System Error: Det går inte att hitta filen. ==================== Memory info =========================== Processor: Intel® Core i3 CPU M 380 @ 2.53GHz Percentage of memory in use: 67% Total physical RAM: 1909.86 MB Available physical RAM: 622.63 MB Total Pagefile: 3819.71 MB Available Pagefile: 2139.79 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:279.74 GB) (Free:111.08 GB) NTFS ==>[system with boot components (obtained from reading drive)] Drive d: (RECOVERY) (Fixed) (Total:18.06 GB) (Free:2.21 GB) NTFS ==>[system with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 9368A068) Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=279.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=18.1 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=103 MB) - (Type=0C) ==================== End Of Log ============================

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015 Ran by Birgitta (administrator) on BIRGITTA-HP on 11-04-2015 14:27:29 Running from C:\Users\Birgitta\Desktop Loaded Profiles: Birgitta (Available profiles: Birgitta) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Svenska (Sverige) Internet Explorer Version 11 (Default browser not detected!) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe () C:\ProgramData\MobileBrServ\mbbService.exe (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Windows\System32\igfxtray.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Spotify Ltd) C:\Users\Birgitta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6602856 2011-01-12] (Realtek Semiconductor) HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-21] (Synaptics Incorporated) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [615584 2011-03-02] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-02] (Atheros Commnucations) HKLM\...\Run: [HPWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-07-22] (Hewlett-Packard Company) HKLM-x32\...\Run: [iAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation) HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [656920 2011-02-01] (PDF Complete Inc) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.) HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\...\Run: [spotify Web Helper] => C:\Users\Birgitta\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-18] (Spotify Ltd) HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\...\Run: [spotify] => C:\Users\Birgitta\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-18] (Spotify Ltd) HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.) HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\WLXPGSS.scr [302448 2012-03-08] (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aftonbladet.se/ SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://se.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKLM-x32 -> {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-2449234904-2715240119-1125603432-1000 -> {46C56D5D-72AC-45DB-B30A-A35131C49498} URL = https://www.google.com/search?q={searchTerms} BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-19] (Google Inc.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-09] (Oracle Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-02] (Atheros Commnucations) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-19] (Google Inc.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-09] (Oracle Corporation) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-19] (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-19] (Google Inc.) Toolbar: HKU\S-1-5-21-2449234904-2715240119-1125603432-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKU\S-1-5-21-2449234904-2715240119-1125603432-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-19] (Google Inc.) DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Birgitta\AppData\Roaming\Mozilla\Firefox\Profiles\5x8fs8fd.default FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-04-08] () FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=5.1.3.2 -> C:\Program Files (x86)\BankID\npBispBrowser.dll [2014-02-11] (Finansiell ID-Teknik BID AB) FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-09] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-09] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-19] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-19] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-07-19] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-08] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-03-05] FF Extension: No Name - C:\Users\Birgitta\AppData\Roaming\Mozilla\Firefox\Profiles\5x8fs8fd.default\extensions\paffxtbr@FilmFanatic.com [Not Found] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] Chrome: ======= CHR Profile: C:\Users\Birgitta\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Wallet) - C:\Users\Birgitta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-11] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-02] (Atheros) [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [76448 2011-03-02] (Atheros Commnucations) [File not signed] R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed] R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1817088 2010-12-28] (Realsil Microelectronics Inc.) [File not signed] R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [233864 2012-09-04] () R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1127448 2011-02-01] (PDF Complete Inc) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 XobniService; C:\Program Files (x86)\Xobni\XobniService.exe [62184 2011-02-25] (Xobni Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-11 14:17 - 2015-04-11 14:17 - 00009896 _____ () C:\Users\Birgitta\Desktop\eset 72 fel.txt 2015-04-11 11:01 - 2015-04-11 11:01 - 00000000 ____D () C:\Program Files (x86)\ESET 2015-04-10 09:52 - 2015-04-10 09:52 - 00054493 _____ () C:\Users\Birgitta\Desktop\FRST text.txt 2015-04-10 09:46 - 2015-04-11 14:28 - 00016149 _____ () C:\Users\Birgitta\Desktop\FRST.txt 2015-04-09 23:35 - 2015-04-09 23:35 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\Skype 2015-04-09 23:34 - 2015-04-09 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-04-09 23:32 - 2015-04-09 23:30 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-04-09 23:31 - 2015-04-09 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-04-09 23:30 - 2015-04-09 23:32 - 00000000 ____D () C:\ProgramData\Oracle 2015-04-09 23:29 - 2015-04-09 23:29 - 00000000 ____D () C:\Program Files (x86)\Java 2015-04-09 22:30 - 2015-04-09 22:33 - 00032418 _____ () C:\Users\Birgitta\Desktop\Addition.txt 2015-04-09 22:28 - 2015-04-11 14:27 - 00000000 ____D () C:\FRST 2015-04-09 22:28 - 2015-04-09 22:28 - 02095616 _____ (Farbar) C:\Users\Birgitta\Desktop\FRST64.exe 2015-04-04 16:44 - 2015-04-04 16:45 - 00000000 ___SD () C:\Windows\system32\GWX 2015-04-04 16:44 - 2015-04-04 16:44 - 00000000 ___SD () C:\Windows\SysWOW64\GWX 2015-04-04 16:10 - 2015-04-04 16:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2015-04-02 21:27 - 2015-04-02 21:27 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\{610307AB-80FF-4609-A2C6-9487BDEC5CC1} 2015-03-28 22:45 - 2015-03-28 22:46 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\{1F3C4483-5564-4B21-8680-3D531DCB2D0C} 2015-03-28 22:26 - 2015-04-09 23:03 - 00000000 ____D () C:\AdwCleaner 2015-03-27 20:26 - 2015-03-27 20:26 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\{547AE589-6DBE-46F8-A293-7BEF7C84195F} 2015-03-25 14:49 - 2015-03-25 14:49 - 00000000 ____D () C:\Windows\SysWOW64\Drivers\avg 2015-03-25 10:28 - 2015-04-10 19:46 - 00000000 ____D () C:\ProgramData\avg9 2015-03-25 09:50 - 2015-03-11 06:06 - 00943616 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-03-25 09:50 - 2015-03-11 06:06 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-03-25 09:50 - 2015-03-11 06:06 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-03-25 09:50 - 2015-03-11 06:06 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-03-25 09:50 - 2015-03-11 06:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-03-25 09:50 - 2015-03-11 06:05 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-03-25 09:50 - 2015-03-11 06:05 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-03-25 09:50 - 2015-03-11 06:02 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-03-25 09:45 - 2015-03-25 09:46 - 04816784 _____ (AVG Technologies) C:\Users\Birgitta\Downloads\avg_isc_stb_all_2015_ltst_206.exe 2015-03-19 17:25 - 2015-03-19 17:39 - 00000000 ____D () C:\Users\Birgitta\AppData\Roaming\Google 2015-03-19 17:06 - 2015-04-11 14:18 - 00000994 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-03-19 17:06 - 2015-04-11 10:49 - 00000990 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-03-19 17:06 - 2015-03-19 17:13 - 00003990 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-03-19 17:06 - 2015-03-19 17:13 - 00003738 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-03-19 17:06 - 2015-03-19 17:06 - 00000000 ____D () C:\ProgramData\Google 2015-03-19 17:05 - 2015-04-11 13:49 - 00000868 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-03-19 17:05 - 2015-03-19 17:05 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-03-19 17:05 - 2015-03-19 17:05 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-03-19 17:05 - 2015-03-19 17:05 - 00003806 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-03-18 18:43 - 2015-03-18 18:43 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\{FB94EFCE-233A-4202-9294-C71542B290EA} 2015-03-17 22:36 - 2015-03-17 22:36 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\{7C8D9050-5282-4F25-92BF-97A806E9DE84} 2015-03-17 10:39 - 2015-03-17 10:39 - 00000000 _____ () C:\Windows\SysWOW64\shoFCC6.tmp ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-11 14:23 - 2012-12-08 14:39 - 00003948 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7EBE7FDE-D241-47F1-ACBA-2AB578539639} 2015-04-11 14:15 - 2012-04-06 02:28 - 01809421 _____ () C:\Windows\WindowsUpdate.log 2015-04-11 10:58 - 2009-07-14 06:45 - 00035040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-04-11 10:58 - 2009-07-14 06:45 - 00035040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-04-11 10:56 - 2011-11-17 00:26 - 00666022 _____ () C:\Windows\system32\perfh01D.dat 2015-04-11 10:56 - 2011-11-17 00:26 - 00143632 _____ () C:\Windows\system32\perfc01D.dat 2015-04-11 10:56 - 2009-07-14 07:13 - 01582130 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-11 10:50 - 2012-07-12 18:10 - 00000000 ____D () C:\Users\Birgitta\AppData\Roaming\Spotify 2015-04-11 10:50 - 2012-04-06 03:01 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini 2015-04-11 10:50 - 2011-11-17 01:27 - 00000000 ____D () C:\ProgramData\PDFC 2015-04-11 10:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-11 10:49 - 2009-07-14 06:51 - 00161679 _____ () C:\Windows\setupact.log 2015-04-11 10:31 - 2012-06-25 09:00 - 00000000 ____D () C:\Users\Birgitta\AppData\Roaming\Skype 2015-04-10 19:58 - 2012-06-25 09:55 - 00000000 ____D () C:\Program Files (x86)\AVG 2015-04-10 19:58 - 2012-06-25 09:50 - 00000000 ____D () C:\ProgramData\MFAData 2015-04-10 19:58 - 2010-11-21 05:47 - 00603050 _____ () C:\Windows\PFRO.log 2015-04-09 23:35 - 2012-06-25 09:00 - 00000000 ___RD () C:\Program Files (x86)\Skype 2015-04-09 23:35 - 2011-11-17 01:28 - 00000000 ____D () C:\ProgramData\Skype 2015-04-08 14:07 - 2013-11-12 18:44 - 00000344 _____ () C:\Windows\Tasks\HPCeeScheduleForBirgitta.job 2015-04-07 17:43 - 2013-11-12 18:44 - 00003204 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForBirgitta 2015-04-07 17:42 - 2012-06-29 17:38 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log 2015-04-06 11:14 - 2012-10-18 10:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-03-29 14:56 - 2012-11-10 18:03 - 00000000 ____D () C:\Program Files (x86)\Google 2015-03-28 22:39 - 2012-06-25 07:48 - 00000997 _____ () C:\Users\Birgitta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-03-28 18:45 - 2012-06-25 12:27 - 00014265 _____ () C:\Users\Birgitta\Desktop\lösen.ods 2015-03-27 10:46 - 2014-07-03 19:28 - 00000000 ____D () C:\Windows\SysWOW64\mjcm 2015-03-27 10:46 - 2014-07-03 19:28 - 00000000 ____D () C:\Windows\system32\tprb 2015-03-27 10:46 - 2012-06-25 20:14 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\CRE 2015-03-26 22:11 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-03-26 17:50 - 2012-06-25 07:39 - 00000000 ____D () C:\Users\Birgitta 2015-03-26 17:48 - 2013-11-28 18:53 - 00000000 ____D () C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP 2015-03-26 12:21 - 2014-12-12 10:41 - 00000000 ____D () C:\Windows\system32\appraiser 2015-03-26 12:21 - 2014-05-06 10:35 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-03-25 11:27 - 2011-11-17 01:16 - 00000000 ____D () C:\Program Files (x86)\HP Games 2015-03-25 10:54 - 2012-04-06 02:49 - 00000000 ____D () C:\ProgramData\Temp 2015-03-25 09:48 - 2012-06-30 19:46 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\CrashDumps 2015-03-19 17:25 - 2012-06-25 20:14 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\Google 2015-03-19 17:24 - 2013-04-23 15:51 - 00000000 ____D () C:\Users\Birgitta\AppData\Local\Adobe 2015-03-19 17:06 - 2012-11-10 18:03 - 00000000 ____D () C:\Program Files\Google 2015-03-12 09:46 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2015-03-12 09:45 - 2012-06-25 07:48 - 00000000 ___RD () C:\Users\Birgitta\Virtual Machines 2015-03-12 09:45 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-03-12 09:43 - 2009-07-14 06:45 - 00295208 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-03-12 09:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2015-03-12 09:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism ==================== Files in the root of some directories ======= 2012-09-14 00:23 - 2012-09-14 00:23 - 0022231 _____ () C:\Users\Birgitta\AppData\Roaming\UserTile.png 2013-09-16 10:06 - 2015-02-17 10:08 - 0000198 _____ () C:\Users\Birgitta\AppData\Roaming\WB.CFG 2013-01-02 13:43 - 2013-11-12 13:10 - 0038400 _____ () C:\Users\Birgitta\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini Some content of TEMP: ==================== C:\Users\Birgitta\AppData\Local\Temp\Quarantine.exe C:\Users\Birgitta\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-09 18:25 ==================== End Of Log ============================

C:\AdwCleaner\Quarantine\C\Program Files (x86)\Allin1Convert_8hEI\Installr\1.bin\8hEIPlug.dll.vir a variant of Win32/Toolbar.MyWebSearch.AC potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\Allin1Convert_8hEI\Installr\1.bin\8hEZSETP.dll.vir a variant of Win32/Toolbar.MyWebSearch.AC potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\Allin1Convert_8hEI\Installr\1.bin\NP8hEISb.dll.vir a variant of Win32/Toolbar.MyWebSearch.AI potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\GenericAskToolbar.dll.vir a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\precache.exe.vir a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\SaUpdate.exe.vir a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\UpdateTask.exe.vir a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\Updater\Updater.exe.vir a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application C:\AdwCleaner\Quarantine\C\Program Files (x86)\FileConverter_1.6\hk64tbFil0.dll.vir a variant of Win64/Toolbar.Conduit.B potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\FileConverter_1.6\hk64tbFil2.dll.vir a variant of Win64/Toolbar.Conduit.B potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\FlvPlayer\FLVPlayerApp.exe.vir Win32/InstallCore.A potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\uTorrentControl_v2\hk64tbuTo2.dll.vir a variant of Win64/Toolbar.Conduit.B potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\wiseconvert\hk64tbWis0.dll.vir a variant of Win64/Toolbar.Conduit.B potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\wiseconvert\hk64tbWis2.dll.vir a variant of Win64/Toolbar.Conduit.B potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.8.3.8\~BabylonToolbarApp.dll.vir a variant of Win32/Toolbar.Montiera.A potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.8.3.8\~BabylonToolbarEng.dll.vir a variant of Win32/Toolbar.Babylon.AA potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.8.3.8\~BabylonToolbarTlbr.dll.vir a variant of Win32/Toolbar.Montiera.F potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.8.3.8\~escortShld.dll.vir Win32/Toolbar.Montiera.J potentially unwanted application C:\AdwCleaner\Quarantine\C\Users\Birgitta\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda\10.31.4.510_0\APISupport\APISupport.dll.vir a variant of Win32/Conduit.SearchProtect.P potentially unwanted application C:\AdwCleaner\Quarantine\C\Users\Birgitta\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda\10.31.4.510_0\nativeMessaging\TBMessagingHost.exe.vir a variant of Win32/Toolbar.Conduit.AH potentially unwanted application C:\AdwCleaner\Quarantine\C\Users\Birgitta\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda\10.31.4.510_0\plugins\ChromeApiPlugin.dll.vir a variant of Win32/Conduit.SearchProtect.N potentially unwanted application C:\AdwCleaner\Quarantine\C\Users\Birgitta\AppData\LocalLow\Allin1Convert_8hEI\Installr\Cache\00100750.exe.vir a variant of Win32/Toolbar.MyWebSearch.O potentially unwanted application C:\AdwCleaner\Quarantine\C\Users\Birgitta\AppData\LocalLow\FileConverter_1.6\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll.vir a variant of Win32/PriceGong.A potentially unwanted application C:\AdwCleaner\Quarantine\C\Users\Birgitta\AppData\LocalLow\uTorrentControl_v2\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.8\bin\PriceGongIE.dll.vir a variant of Win32/PriceGong.A potentially unwanted application C:\AdwCleaner\Quarantine\C\Windows\System32\sasnative64.exe.vir Win64/AdvancedSystemProtector.A potentially unwanted application C:\AdwCleaner\Quarantine\C\Windows\SysWOW64\ARFC\wrtc.exe.vir a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\AdwCleaner\Quarantine\C\Windows\SysWOW64\jmdp\lmrn.dll.vir a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\AdwCleaner\Quarantine\C\Windows\SysWOW64\WNLT\InstallationFiles\SvcHelper\wrtc.exe.vir a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Program Files (x86)\SearchProtect174081\Main\bin\SPtool.dll_1386081155406 a variant of Win32/Conduit.SearchProtect.H potentially unwanted application C:\Program Files (x86)\SearchProtect174081\Main\bin\SPtool.dll_1387265724275 a variant of Win32/Conduit.SearchProtect.H potentially unwanted application C:\Program Files (x86)\SearchProtect174081\Main\bin\SPtool.dll_1389951168679 a variant of Win32/Conduit.SearchProtect.H potentially unwanted application C:\Program Files (x86)\SearchProtect174081\Main\bin\SPtool.dll_1389951168684 a variant of Win32/Conduit.SearchProtect.H potentially unwanted application C:\Program Files (x86)\SearchProtect174081\Main\bin\SPtool.dll_1390841496024 Win32/Conduit.SearchProtect.H potentially unwanted application C:\Program Files (x86)\SearchProtect174081\Main\bin\SPtool.dll_1391019891255 a variant of Win32/Conduit.SearchProtect.H potentially unwanted application C:\Program Files (x86)\SearchProtect174081\Main\bin\SPtool.dll_1391019891803 a variant of Win32/Conduit.SearchProtect.H potentially unwanted application C:\Program Files (x86)\SearchProtect174081\Main\bin\SPtool.dll_1391019896408 a variant of Win32/Conduit.SearchProtect.H potentially unwanted application C:\Program Files (x86)\SearchProtect174081\SearchProtect\bin\SPTool64.exe a variant of Win64/Conduit.SearchProtect.A potentially unwanted application C:\Program Files (x86)\SearchProtect174081\SearchProtect\bin\SPVC64.dll a variant of Win64/Conduit.SearchProtect.A potentially unwanted application C:\ProgramData\InstallMate\{E1202DE5-813C-8932-6BD9-C91E3AC30F13}\_Setupx.dll Win32/InstalleRex.T potentially unwanted application C:\Users\All Users\InstallMate\{E1202DE5-813C-8932-6BD9-C91E3AC30F13}\_Setupx.dll Win32/InstalleRex.T potentially unwanted application C:\Users\Birgitta\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000036 Win32/PriceGong.B potentially unwanted application C:\Users\Birgitta\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000047 Win32/PriceGong.B potentially unwanted application C:\Windows\Installer\2dae9.msi a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application C:\Windows\System32\mjcm\5113\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\System32\mjcm\5119\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\System32\mjcm\5123\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\System32\mjcm\5131\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\System32\mjcm\5132\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\SysWOW64\mjcm\5113\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\SysWOW64\mjcm\5119\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\SysWOW64\mjcm\5123\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\SysWOW64\mjcm\5131\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\SysWOW64\mjcm\5132\nsib.dll a variant of Win32/Toolbar.Perion.H potentially unwanted application C:\Windows\Temp\nsa347D.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsaB73F.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nscC3A0.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsdA71B.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsdF569.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsi74B7.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsiAE58.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsj51CC.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsjA5F4.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsl302A.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nslD81B.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nslD81C.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsp25E8.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsrB6A1.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nssFE7B.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsx1303.exe Win32/Conduit.SearchProtect.V potentially unwanted application C:\Windows\Temp\nsbBA95.tmp\SPtool.dll a variant of Win32/Conduit.SearchProtect.H potentially unwanted application C:\Windows\Temp\nsi31A.tmp\SPtool.dll a variant of Win32/Conduit.SearchProtect.H potentially unwanted application C:\Windows\Temp\nss9CE8.tmp\SPtool.dll a variant of Win32/Conduit.SearchProtect.H potentially unwanted application

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015 Ran by Birgitta at 2015-04-11 10:43:04 Run:2 Running from C:\Users\Birgitta\Desktop Loaded Profiles: Birgitta (Available profiles: Birgitta) Boot Mode: Normal ============================================== Content of fixlist: ***************** CreateRestorePoint: CloseProcesses: HKLM-x32\...\Run: [] => [X] AppInit_DLLs: 0 => 0 File Not Found SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2449234904-2715240119-1125603432-1000 -> {58B66770-20E4-F78A-A418-45BE70669BD2} URL = SearchScopes: HKU\S-1-5-21-2449234904-2715240119-1125603432-1000 -> {ACE04446-5E4D-4A3C-9EC9-716853ED98ED} URL = SearchScopes: HKU\S-1-5-21-2449234904-2715240119-1125603432-1000 -> {B4FF267E-EE2F-4B82-A7F9-A1D01E7865B2} URL = FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Extension: No Name - C:\Users\Birgitta\AppData\Roaming\Mozilla\Firefox\Profiles\5x8fs8fd.default\extensions\paffxtbr@FilmFanatic.com [Not Found] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] Task: {4DDD05CF-2060-417F-9037-C05FD737870B} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION Task: {628CF546-BFDA-4E1F-B813-6C88F28DC228} - System32\Tasks\OptimizerProUpdaterTask{FE54AC57-2851-4B04-A097-27E476C52D21} => C:\ProgramData\Premium\OptimizerPro\OptimizerPro.exe <==== ATTENTION Task: {6C9E594F-6D32-440D-966F-0EDFD824956F} - System32\Tasks\{09F1BB3E-A05F-4D3A-8DA2-5C0E5A639663} => pcalua.exe -a "C:\Users\Birgitta\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\44TS207G\VLCMediaPlayerSDM.exe" -d C:\Users\Birgitta\Desktop Task: {7BF5FFFF-5CD8-4F47-8081-D3ED21320878} - \BonanzaDealsLiveUpdateTaskMachineUA No Task File <==== ATTENTION Task: {80C2BE32-FE4F-43ED-95F9-28C3A8DA65B6} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION Task: {9B9F215E-00E6-4BBE-B852-C6FC8A05810A} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe <==== ATTENTION Task: {A9277520-EA9C-4285-9FBF-24416033DDC9} - \BonanzaDealsUpdate No Task File <==== ATTENTION Task: {ADE5C402-9889-42D9-AA0D-00A42953FDC5} - \RegClean Pro_UPDATES No Task File <==== ATTENTION Task: {D927C9FC-CAC3-4E74-9A71-5CD46F21E604} - \BonanzaDealsLiveUpdateTaskMachineCore No Task File <==== ATTENTION Task: {DB01C658-23C4-44D5-A8DF-8BC1E105F332} - \RegClean Pro No Task File <==== ATTENTION Task: {F5C9FB3C-47DD-44D4-9262-406EC1380898} - \MySearchDial No Task File <==== ATTENTION Task: C:\Windows\Tasks\OptimizerProUpdaterTask{FE54AC57-2851-4B04-A097-27E476C52D21}.job => C:\ProgramData\Premium\OptimizerPro\OptimizerPro.exeI/schedule /profilepath C:\ProgramData\Premium\OptimizerPro\profile.ini <==== ATTENTION C:\ProgramData\Premium\OptimizerPro AlternateDataStreams: C:\ProgramData\Temp:373E1720 AlternateDataStreams: C:\ProgramData\Temp:98181191 Folder: C:\Windows\SysWOW64\mjcm Folder: C:\Windows\system32\tprb Reboot: ***************** Restore point was successfully created. Processes closed successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value not found. "0" => Value Data not found. HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found. HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found. HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found. HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{58B66770-20E4-F78A-A418-45BE70669BD2} => Key not found. HKCR\CLSID\{58B66770-20E4-F78A-A418-45BE70669BD2} => Key not found. HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ACE04446-5E4D-4A3C-9EC9-716853ED98ED} => Key not found. HKCR\CLSID\{ACE04446-5E4D-4A3C-9EC9-716853ED98ED} => Key not found. HKU\S-1-5-21-2449234904-2715240119-1125603432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B4FF267E-EE2F-4B82-A7F9-A1D01E7865B2} => Key not found. HKCR\CLSID\{B4FF267E-EE2F-4B82-A7F9-A1D01E7865B2} => Key not found. HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => Key not found. HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => Key not found. C:\Users\Birgitta\AppData\Roaming\Mozilla\Firefox\Profiles\5x8fs8fd.default\extensions\paffxtbr@FilmFanatic.com not found. C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4DDD05CF-2060-417F-9037-C05FD737870B} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegClean Pro_DEFAULT => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{628CF546-BFDA-4E1F-B813-6C88F28DC228} => Key not found. C:\Windows\System32\Tasks\OptimizerProUpdaterTask{FE54AC57-2851-4B04-A097-27E476C52D21} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OptimizerProUpdaterTask{FE54AC57-2851-4B04-A097-27E476C52D21} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C9E594F-6D32-440D-966F-0EDFD824956F} => Key not found. C:\Windows\System32\Tasks\{09F1BB3E-A05F-4D3A-8DA2-5C0E5A639663} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{09F1BB3E-A05F-4D3A-8DA2-5C0E5A639663} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7BF5FFFF-5CD8-4F47-8081-D3ED21320878} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BonanzaDealsLiveUpdateTaskMachineUA => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{80C2BE32-FE4F-43ED-95F9-28C3A8DA65B6} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9B9F215E-00E6-4BBE-B852-C6FC8A05810A} => Key not found. C:\Windows\System32\Tasks\Advanced System Protector_startup not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Advanced System Protector_startup => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A9277520-EA9C-4285-9FBF-24416033DDC9} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BonanzaDealsUpdate => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ADE5C402-9889-42D9-AA0D-00A42953FDC5} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegClean Pro_UPDATES => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D927C9FC-CAC3-4E74-9A71-5CD46F21E604} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BonanzaDealsLiveUpdateTaskMachineCore => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DB01C658-23C4-44D5-A8DF-8BC1E105F332} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegClean Pro => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5C9FB3C-47DD-44D4-9262-406EC1380898} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MySearchDial => Key not found. C:\Windows\Tasks\OptimizerProUpdaterTask{FE54AC57-2851-4B04-A097-27E476C52D21}.job not found. "C:\ProgramData\Premium\OptimizerPro" => File/Directory not found. "C:\ProgramData\Temp" => ":373E1720" ADS not found. "C:\ProgramData\Temp" => ":98181191" ADS not found. ========================= Folder: C:\Windows\SysWOW64\mjcm ======================== 2014-08-27 12:02 - 2014-08-27 12:02 - 0027136 _____ (IncrediMail, Ltd.) C:\Windows\SysWOW64\mjcm\ImHttpComm.dll 2014-08-27 11:24 - 2014-08-27 11:24 - 0421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\msvcp100.dll 2014-08-27 11:24 - 2014-08-27 11:24 - 0773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\msvcr100.dll 2014-07-03 19:28 - 2014-07-03 19:28 - 0000000 ____D () C:\Windows\SysWOW64\mjcm\5113 2014-06-24 16:09 - 2014-06-24 16:09 - 0027136 _____ (IncrediMail, Ltd.) C:\Windows\SysWOW64\mjcm\5113\ImHttpComm.dll 2014-06-24 15:09 - 2014-06-24 15:09 - 0421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5113\msvcp100.dll 2014-06-24 15:09 - 2014-06-24 15:09 - 0773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5113\msvcr100.dll 2014-06-24 16:15 - 2014-06-24 16:15 - 1581872 _____ () C:\Windows\SysWOW64\mjcm\5113\nsib.dll 2014-07-20 18:02 - 2014-07-20 18:02 - 0000000 ____D () C:\Windows\SysWOW64\mjcm\5119 2014-07-17 13:38 - 2014-07-17 13:38 - 0027136 _____ (IncrediMail, Ltd.) C:\Windows\SysWOW64\mjcm\5119\ImHttpComm.dll 2014-07-16 12:10 - 2014-07-16 12:10 - 0421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5119\msvcp100.dll 2014-07-16 12:10 - 2014-07-16 12:10 - 0773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5119\msvcr100.dll 2014-07-17 13:43 - 2014-07-17 13:43 - 1575216 _____ () C:\Windows\SysWOW64\mjcm\5119\nsib.dll 2014-08-13 20:16 - 2014-08-13 20:16 - 0000000 ____D () C:\Windows\SysWOW64\mjcm\5123 2014-07-24 09:07 - 2014-07-24 09:07 - 0027136 _____ (IncrediMail, Ltd.) C:\Windows\SysWOW64\mjcm\5123\ImHttpComm.dll 2014-07-22 15:01 - 2014-07-22 15:01 - 0421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5123\msvcp100.dll 2014-07-22 15:01 - 2014-07-22 15:01 - 0773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5123\msvcr100.dll 2014-07-24 09:12 - 2014-07-24 09:12 - 1628976 _____ () C:\Windows\SysWOW64\mjcm\5123\nsib.dll 2014-08-25 17:44 - 2014-08-25 17:44 - 0000000 ____D () C:\Windows\SysWOW64\mjcm\5131 2014-08-21 11:47 - 2014-08-21 11:47 - 0027136 _____ (IncrediMail, Ltd.) C:\Windows\SysWOW64\mjcm\5131\ImHttpComm.dll 2014-06-17 08:29 - 2014-06-17 08:29 - 0421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5131\msvcp100.dll 2014-06-17 08:29 - 2014-06-17 08:29 - 0773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5131\msvcr100.dll 2014-08-21 11:53 - 2014-08-21 11:53 - 1774896 _____ () C:\Windows\SysWOW64\mjcm\5131\nsib.dll 2014-08-27 22:02 - 2014-08-27 22:02 - 0000000 ____D () C:\Windows\SysWOW64\mjcm\5132 2014-08-27 12:02 - 2014-08-27 12:02 - 0027136 _____ (IncrediMail, Ltd.) C:\Windows\SysWOW64\mjcm\5132\ImHttpComm.dll 2014-08-27 11:24 - 2014-08-27 11:24 - 0421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5132\msvcp100.dll 2014-08-27 11:24 - 2014-08-27 11:24 - 0773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mjcm\5132\msvcr100.dll 2014-08-27 12:08 - 2014-08-27 12:08 - 1775920 _____ () C:\Windows\SysWOW64\mjcm\5132\nsib.dll ====== End of Folder: ====== ========================= Folder: C:\Windows\system32\tprb ======================== 2014-08-27 12:04 - 2014-08-27 12:04 - 0033792 _____ (IncrediMail, Ltd.) C:\Windows\system32\tprb\ImHttpComm.dll 2014-08-27 11:24 - 2014-08-27 11:24 - 0608080 _____ (Microsoft Corporation) C:\Windows\system32\tprb\msvcp100.dll 2014-08-27 11:24 - 2014-08-27 11:24 - 0829264 _____ (Microsoft Corporation) C:\Windows\system32\tprb\msvcr100.dll 2014-07-03 19:28 - 2014-07-03 19:28 - 0000000 ____D () C:\Windows\system32\tprb\5113 2014-06-24 16:11 - 2014-06-24 16:11 - 0033792 _____ (IncrediMail, Ltd.) C:\Windows\system32\tprb\5113\ImHttpComm.dll 2014-06-24 15:09 - 2014-06-24 15:09 - 0608080 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5113\msvcp100.dll 2014-06-24 15:09 - 2014-06-24 15:09 - 0829264 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5113\msvcr100.dll 2014-06-24 16:15 - 2014-06-24 16:15 - 1969456 _____ () C:\Windows\system32\tprb\5113\nsib.dll 2014-07-20 18:02 - 2014-07-20 18:02 - 0000000 ____D () C:\Windows\system32\tprb\5119 2014-07-17 13:40 - 2014-07-17 13:40 - 0033792 _____ (IncrediMail, Ltd.) C:\Windows\system32\tprb\5119\ImHttpComm.dll 2014-07-16 12:10 - 2014-07-16 12:10 - 0608080 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5119\msvcp100.dll 2014-07-16 12:10 - 2014-07-16 12:10 - 0829264 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5119\msvcr100.dll 2014-07-17 13:43 - 2014-07-17 13:43 - 1961776 _____ () C:\Windows\system32\tprb\5119\nsib.dll 2014-08-13 20:16 - 2014-08-13 20:16 - 0000000 ____D () C:\Windows\system32\tprb\5123 2014-07-24 09:09 - 2014-07-24 09:09 - 0034304 _____ (IncrediMail, Ltd.) C:\Windows\system32\tprb\5123\ImHttpComm.dll 2014-07-22 15:01 - 2014-07-22 15:01 - 0608080 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5123\msvcp100.dll 2014-07-22 15:01 - 2014-07-22 15:01 - 0829264 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5123\msvcr100.dll 2014-07-24 09:12 - 2014-07-24 09:12 - 2027824 _____ () C:\Windows\system32\tprb\5123\nsib.dll 2014-08-25 17:44 - 2014-08-25 17:44 - 0000000 ____D () C:\Windows\system32\tprb\5131 2014-08-21 11:50 - 2014-08-21 11:50 - 0033792 _____ (IncrediMail, Ltd.) C:\Windows\system32\tprb\5131\ImHttpComm.dll 2014-06-17 08:29 - 2014-06-17 08:29 - 0608080 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5131\msvcp100.dll 2014-06-17 08:29 - 2014-06-17 08:29 - 0829264 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5131\msvcr100.dll 2014-08-21 11:53 - 2014-08-21 11:53 - 2236720 _____ () C:\Windows\system32\tprb\5131\nsib.dll 2014-08-27 22:02 - 2014-08-27 22:02 - 0000000 ____D () C:\Windows\system32\tprb\5132 2014-08-27 12:04 - 2014-08-27 12:04 - 0033792 _____ (IncrediMail, Ltd.) C:\Windows\system32\tprb\5132\ImHttpComm.dll 2014-08-27 11:24 - 2014-08-27 11:24 - 0608080 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5132\msvcp100.dll 2014-08-27 11:24 - 2014-08-27 11:24 - 0829264 _____ (Microsoft Corporation) C:\Windows\system32\tprb\5132\msvcr100.dll 2014-08-27 12:08 - 2014-08-27 12:08 - 2237232 _____ () C:\Windows\system32\tprb\5132\nsib.dll ====== End of Folder: ====== The system needed a reboot. ==== End of Fixlog 10:44:35 ====

Skickar 2 filer - tror jag blir bättre FRST.txt Addition.txt

ok, uppdateringar är väl bra, men programmen du nämner finns inte registrerade att dom finns i datorn ??

tack, hittade ändå inte, men det löste sej för programmet som skulle instaleras accepterade inte 32 eftersom hon har 64 i datorn fiffigt värre :-)

Hon vet inte om hon har 32 eller 64 bitars Windows, vart hittar jag den informationen ??

Tillbaka på banan Cecilia efter 24 timmars försening, hualigen va mör man blir. Sitter framför Brgittas dator nu och ska med din hjälp försöka få nån ordning på den Kanske slöheten åtgärdas samtidigt :-)

Återkommer 8/4 Cecilia.....

Hej skriver på min kompis Raffes/Birgittas vägnar - som har fått en dator som fullständigt har tappat all verklighetsförankring. "Har försökt med Sky Hunter men den försvinner inte. SOS, skriver Birgitta " Jag messar henne och det går bra, men fixa forumet gör inte hennes dator, snälla hjälp ....

Än en gång super tack Cecilia, man undrar ju vad dom där elakingarna har att vinna på att du och jag ska måst spendera en massa tid för att få dom ur datorn ?? NU ska jag lusläsa din sida och förbättra mej. Jag har aldrig upplevt problem med den androida telefonen, men är det nån app där du kan tipsa om för att rensa bort eller upptäcka elände så att den till ex skulle kunna reagera lite snabbare ?? (eller gärna över huvud taget) Jag sitter med stark signal, men lika förb. så har jag 0 i uppkoppling :-( ... surt :-)

Utmärkt Cecilia, hjärtinnerligt tack för hjälpen. Ska försöka se mej för. Explorer sägs ju inte vara lika säker som Chrome, stämmer det ?? Eller finns annat alternativ ??

Nu Cecilia, borde det se rent och snyggt ut, men det verkar som om inte allt skräp kom bort ?? Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-02-2015 Ran by Ingegerd Norman at 2015-02-15 12:32:45 Run:2 　 The system needed a reboot. ==== End of Fixlog 12:33:22 ====