Stefooo

Nu kommer jag in utan problem i min gamla windows 7a, Funkar prima, scannar just nu min trasiga SDD från den fungerande windows Hddn, Men jag kommer nog formatera den som du sa. Jag läste lite i något av trådarna på detta forum att man kan använda något program för att finna "luckor" i program som inte är up to date, Någon som vet vad det är för program och var jag kan tanka det, eller länka till en tråd som handlar om sånt . Tack för allt än en gång, Nu skall jag fortsätta skriva min hemtenta som skall in imorgon kl 24 ^^ .Skönt att jag kom in i datorn tillslut

Först vill jag tacka för all support här på forumet. Marion: Jag har testat att köra systemåterställning som du beskriver, men det är samma sak där, när den är klar. SÅ krävs det en omstart som fortfarande låser sig på exakt samma ställe. Nu har jag fått lite progress iaf, jag startade datorn imorse och hittade ett alternativ som hette "windows 7 loader" , jag körde den, och nu lyckades jag få igång windows 7 till min andra HDD, Efter cirkus 5 omstarter på detta sätt så kom jag tillslut in på windows. Panda Cloud Cleaner startade direkt och nu scannar jag tatorn för första gången i windows. Min tanke nu är att lägga över viktigaste filerna till denna disk och formatera min SSD, Den känns helt trasig efter gårdagens virus + virusfixning. I slutändan om ni inte har några mer förslag eller tips på hur jag kan gå till väga här ifrån så undrar jag om ni har någon bra virusskydds kombination att köra på så man slipper detta i framtiden. Jävligt stort tack ska ni ha för alla tips iaf, riktiga Hjältar! PS:(Nu har datorn scannat 65%) Återkommer när scannen är klar.

Jag har försökt ladda ner anti malware till Linux utan framgång (ovan på linux). Anat än det har jag bara sparat undan viktig information från den krashade disken till min fungerande dator. jag har testat boota med kaspersky recovery. Hitman Pro: Panda security. (Panda cloud cleaner) testade att tanka Bit Defender till linux, men som sagt så fick jag det inte ens att starta. Det enda som har fungerat någorlunda var Kaspersky, jag kan boota med kaspersky och scanna men den hittar ingenting. Kommer in på linux, kan hantera samtliga filer på alla diskar. Men kan inte ordna problemet, vet ej vad problemet är. Kan tillägga att jag har haft viruset som highlightar text i samtliga webläsare för en tid sedan, som jag tog bort med ett virusprogram, sedan kom det tillbaka, Då tog jag bort det igen (För en månad sedan) sedan dess har detta virus ej kommit tillbaka. Men idag som jag skrev tidigare så öppnade jag webläsaren och chrome låste sig på denna virussida som hävdade sig vara polismyndigheten. Jag framtvingade stängning av webläsaren och startade om datorn, sedan dess så hänger sig datron när den börjar ladda windows, när windowsloggan formar sig så låser sig datorn en halv sekund, sen flashar en blusescreen förbi i 1/10 sekund som man inte har en ringa chans att läsa. Sedan bootar datorn av sig själv igen. Datorn fungerade alltså prima igår. Stod på över natten och nu detta. tömde C:\Users\Stefan\AppData\Local\Temp och C:\Users\Stefan\AppData\Local\Temp. Angående nyligen installerade program så kan jag inte komma på något speciellt. Testade att starta om efter båda Temp mapparna borta, = Hänger sig på samma ställe fortfarande.

Kan tillägga att jag datorn stod på över nyårsafton och när jag skulle knappa på den idag så låste sig min webläsare med polisvarningen. Jag stängde webläsaren mha ctrl + alt+ del och sen startade jag om datorn, sen dess har jag inte kunnat starta windows 7 professional på min SSD. Har lyckats starta datorn och kikat på filer mha Linux usb start-up program. men Virus/malware kvarstår och jag kommer ingen vart längre. Om mer info behövs säg till. Tack på förhand! Stefan

Försökt nu hela dagen med diverse usb fix, inget funkar. Hittade en tråd som länkade mig till detta forum, testar lyckan! Gott nytt år och jävligt tacksam för hjälp Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-01-2014 Ran by SYSTEM on MININT-UK4DSVJ on 01-01-2014 21:49:32 Running from F:\ Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US) Internet Explorer Version 11 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log. ==================== Registry (Whitelisted) ================== HKLM-x32\...\Run: [super-Charger] - C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [506864 2013-03-08] (MSI) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.) HKLM\...\RunOnce: [*Restore] - C:\Windows\system32\rstrui.exe /RUNONCE [296960 2010-11-20] (Microsoft Corporation) HKU\Stefan\...\Run: [skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.) HKU\Stefan\...\Run: [spotify Web Helper] - C:\Users\Stefan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-08] (Spotify Ltd) AppInit_DLLs: [ ] () AppInit_DLLs-x32: [ ] () ==================== Services (Whitelisted) ================= S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.) S2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-23] (AVG Technologies CZ, s.r.o.) S2 Marvell RAID; C:\Program Files (x86)\Marvell\raid\svc\mvraidsvc.exe [235560 2010-02-09] () S2 MRUWebService; C:\Program Files (x86)\Marvell\raid\Apache2\bin\httpd.exe [24635 2008-06-12] (Apache Software Foundation) S2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161264 2013-02-20] (MSI) ==================== Drivers (Whitelisted) ==================== S1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.) S1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.) S0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.) S1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.) S0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.) S0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-09-30] (AVG Technologies CZ, s.r.o.) S0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-09] (AVG Technologies CZ, s.r.o.) S1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.) S1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-10-03] (AVG Technologies) S1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-16] (Disc Soft Ltd) S3 NTIOLib_1_0_0; C:\Program Files (x86)\MSI\DirectOC\NTIOLib_X64.sys [14136 2009-06-11] (MSI) S3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI) S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI) S3 Tdsshbecr; C:\Windows\System32\DRIVERS\shbecr.sys [50176 2008-09-22] (Todos Data System AB) S3 trustms; C:\Windows\System32\drivers\trustms.sys [12416 2010-11-14] () S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-01 21:47 - 2014-01-01 21:47 - 00000000 ____D C:\FRST 2013-12-29 08:35 - 2014-01-01 20:31 - 00000000 ____D C:\Users\Stefan\Desktop\UFC 168 Weidman vs Silva II 28th Dec 2013 HDTV x264 720p-Sir Paul 2013-12-28 05:19 - 2013-12-29 08:34 - 00000000 ____D C:\Users\Stefan\Desktop\skräp 2013-12-27 10:41 - 2013-12-27 10:42 - 54817400 _____ C:\Users\Stefan\Desktop\vlc-2.1.2-win64-debug.7z 2013-12-27 10:40 - 2013-12-27 10:41 - 21160797 _____ C:\Users\Stefan\Desktop\vlc-2.1.2-win32.7z 2013-12-26 10:59 - 2013-12-26 10:59 - 00000000 ____D C:\Program Files (x86)\Chucklefish LTD 2013-12-26 09:55 - 2013-12-26 09:55 - 00069963 _____ C:\Users\Stefan\Desktop\Starbound.Early.Access-SANTA.torrent 2013-12-26 09:31 - 2013-12-26 09:31 - 00002386 _____ C:\Users\Stefan\Documents\MumbleAutomaticCertificateBackup.p12 2013-12-26 09:25 - 2014-01-01 20:31 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Mumble 2013-12-26 09:23 - 2014-01-01 20:31 - 00000000 ____D C:\Program Files (x86)\Mumble 2013-12-26 02:54 - 2013-12-26 02:54 - 00000219 _____ C:\Users\Stefan\Desktop\Left 4 Dead 2.url 2013-12-17 10:01 - 2013-12-17 10:04 - 00000000 ____D C:\ProgramData\HitmanPro 2013-12-17 09:51 - 2014-01-01 21:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-17 09:51 - 2013-12-17 09:51 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Malwarebytes 2013-12-17 09:51 - 2013-12-17 09:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-17 09:50 - 2013-12-17 09:50 - 00000903 _____ C:\Users\Stefan\Desktop\JRT.txt 2013-12-17 09:46 - 2013-12-17 09:46 - 00000000 ____D C:\Windows\ERUNT 2013-12-15 13:16 - 2013-12-15 14:27 - 576581637 _____ C:\Users\Stefan\Desktop\Game.of.Thrones.S01E10.DVDRip.XviD-REWARD.avi 2013-12-14 02:10 - 2013-12-14 02:34 - 1086014084 _____ C:\Users\Stefan\Desktop\playnow-Gangster_Squad_2013_720p_x264-1.mp4 2013-12-12 15:52 - 2013-05-09 21:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\System32\wmp.dll 2013-12-12 15:52 - 2013-05-09 21:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\System32\wmploc.DLL 2013-12-12 15:52 - 2013-05-09 20:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-12 15:52 - 2013-05-09 20:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-12 15:51 - 2013-11-26 03:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-12-12 15:51 - 2013-11-26 02:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-12-12 15:51 - 2013-11-26 02:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll 2013-12-12 15:51 - 2013-11-26 02:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-12 15:51 - 2013-11-26 01:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-12-12 15:51 - 2013-11-26 01:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll 2013-12-12 15:51 - 2013-11-26 01:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-12-12 15:51 - 2013-11-26 01:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-12-12 15:51 - 2013-11-26 01:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-12-12 15:51 - 2013-11-26 01:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-12 15:51 - 2013-11-26 01:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-12-12 15:51 - 2013-11-26 01:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-12-12 15:51 - 2013-11-26 01:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe 2013-12-12 15:51 - 2013-11-26 01:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll 2013-12-12 15:51 - 2013-11-26 00:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-12-12 15:51 - 2013-11-26 00:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-12 15:51 - 2013-11-26 00:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-12 15:51 - 2013-11-26 00:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-12-12 15:51 - 2013-11-26 00:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-12 15:51 - 2013-11-26 00:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-12 15:51 - 2013-11-26 00:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-12 15:51 - 2013-11-26 00:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-12-12 15:51 - 2013-11-25 23:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-12-12 15:51 - 2013-11-25 23:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-12 15:51 - 2013-11-25 23:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-12 15:51 - 2013-11-25 23:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-12-12 15:51 - 2013-11-25 22:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-12-12 15:51 - 2013-11-25 22:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2013-12-12 15:51 - 2013-11-25 22:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-12 15:51 - 2013-11-25 22:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-12 15:51 - 2013-11-25 22:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-12 15:39 - 2013-11-23 10:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-12 15:39 - 2013-11-23 09:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll 2013-12-12 15:39 - 2013-11-11 18:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll 2013-12-12 15:39 - 2013-11-11 18:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-12 15:39 - 2013-10-29 18:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\System32\msieftp.dll 2013-12-12 15:39 - 2013-10-29 18:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-12 15:39 - 2013-10-29 17:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys 2013-12-12 15:39 - 2013-10-18 18:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\imagehlp.dll 2013-12-12 15:39 - 2013-10-18 17:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-12 15:39 - 2013-10-11 18:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\System32\wshom.ocx 2013-12-12 15:39 - 2013-10-11 18:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\System32\scrrun.dll 2013-12-12 15:39 - 2013-10-11 18:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-12 15:39 - 2013-10-11 18:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-12 15:39 - 2013-10-11 17:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\System32\wscript.exe 2013-12-12 15:39 - 2013-10-11 17:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\System32\cscript.exe 2013-12-12 15:39 - 2013-10-11 17:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-12 15:39 - 2013-10-11 17:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-12 15:39 - 2013-10-03 18:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\drmk.sys 2013-12-12 15:39 - 2013-10-03 17:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\portcls.sys 2013-12-09 14:19 - 2013-12-26 06:34 - 00000000 ____D C:\Users\Stefan\AppData\Local\CrashDumps 2013-12-03 18:02 - 2013-10-14 09:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\System32\IEUDINIT.EXE 2013-12-03 18:00 - 2013-12-03 18:02 - 00007469 _____ C:\Windows\IE11_main.log 2013-12-03 18:00 - 2013-12-03 18:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\System32\jsIntl.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00626176 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:00 - 2013-12-03 18:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat 2013-12-03 18:00 - 2013-12-03 18:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00548352 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\System32\html.iec 2013-12-03 18:00 - 2013-12-03 18:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:00 - 2013-12-03 18:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\System32\msls31.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\System32\url.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\System32\elshyph.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\System32\iexpress.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\System32\wextract.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\icardie.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx 2013-12-03 18:00 - 2013-12-03 18:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:00 - 2013-12-03 18:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\mshtmler.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\licmgr10.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe ==================== One Month Modified Files and Folders ======= 2014-01-01 21:47 - 2014-01-01 21:47 - 00000000 ____D C:\FRST 2014-01-01 21:32 - 2013-09-24 06:01 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Personal 2014-01-01 21:32 - 2013-09-20 01:52 - 00000000 ____D C:\ProgramData\MFAData 2014-01-01 21:32 - 2013-09-16 05:36 - 00000000 ____D C:\Program Files (x86)\Heroes of Newerth 2014-01-01 21:32 - 2013-09-16 03:03 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-01-01 21:32 - 2013-09-16 03:02 - 00000000 ____D C:\Program Files\Microsoft Office 2014-01-01 21:32 - 2013-09-16 02:32 - 00000000 ____D C:\Users\Stefan\Desktop\vlc-2.0.8-win64 2014-01-01 21:32 - 2013-09-16 02:32 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\vlc 2014-01-01 21:32 - 2013-09-16 02:09 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\uTorrent 2014-01-01 21:32 - 2013-09-16 02:03 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite 2014-01-01 21:32 - 2013-09-15 06:54 - 00000000 ___HD C:\SuperChargerProfile 2014-01-01 21:32 - 2013-09-15 06:10 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Skype 2014-01-01 21:32 - 2013-09-15 01:52 - 00000000 ____D C:\Program Files (x86)\SpeedFan 2014-01-01 21:32 - 2013-09-14 07:55 - 00000000 ____D C:\Program Files (x86)\Steam 2014-01-01 21:32 - 2013-09-14 07:21 - 00000000 ____D C:\users\Stefan 2014-01-01 21:32 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration 2014-01-01 21:32 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\AppCompat 2014-01-01 21:31 - 2013-12-17 09:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-01 20:31 - 2013-12-29 08:35 - 00000000 ____D C:\Users\Stefan\Desktop\UFC 168 Weidman vs Silva II 28th Dec 2013 HDTV x264 720p-Sir Paul 2014-01-01 20:31 - 2013-12-26 09:25 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Mumble 2014-01-01 20:31 - 2013-12-26 09:23 - 00000000 ____D C:\Program Files (x86)\Mumble 2013-12-31 06:16 - 2013-09-16 02:01 - 00000000 ____D C:\Users\Stefan\AppData\Local\Spotify 2013-12-29 08:34 - 2013-12-28 05:19 - 00000000 ____D C:\Users\Stefan\Desktop\skräp 2013-12-27 10:42 - 2013-12-27 10:41 - 54817400 _____ C:\Users\Stefan\Desktop\vlc-2.1.2-win64-debug.7z 2013-12-27 10:41 - 2013-12-27 10:40 - 21160797 _____ C:\Users\Stefan\Desktop\vlc-2.1.2-win32.7z 2013-12-26 10:59 - 2013-12-26 10:59 - 00000000 ____D C:\Program Files (x86)\Chucklefish LTD 2013-12-26 09:55 - 2013-12-26 09:55 - 00069963 _____ C:\Users\Stefan\Desktop\Starbound.Early.Access-SANTA.torrent 2013-12-26 09:31 - 2013-12-26 09:31 - 00002386 _____ C:\Users\Stefan\Documents\MumbleAutomaticCertificateBackup.p12 2013-12-26 06:34 - 2013-12-09 14:19 - 00000000 ____D C:\Users\Stefan\AppData\Local\CrashDumps 2013-12-26 02:54 - 2013-12-26 02:54 - 00000219 _____ C:\Users\Stefan\Desktop\Left 4 Dead 2.url 2013-12-17 10:04 - 2013-12-17 10:01 - 00000000 ____D C:\ProgramData\HitmanPro 2013-12-17 09:51 - 2013-12-17 09:51 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Malwarebytes 2013-12-17 09:51 - 2013-12-17 09:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-17 09:50 - 2013-12-17 09:50 - 00000903 _____ C:\Users\Stefan\Desktop\JRT.txt 2013-12-17 09:46 - 2013-12-17 09:46 - 00000000 ____D C:\Windows\ERUNT 2013-12-17 09:42 - 2013-11-04 03:33 - 00000000 ____D C:\AdwCleaner 2013-12-15 14:27 - 2013-12-15 13:16 - 576581637 _____ C:\Users\Stefan\Desktop\Game.of.Thrones.S01E10.DVDRip.XviD-REWARD.avi 2013-12-14 07:29 - 2013-09-14 07:10 - 01285439 _____ C:\Windows\WindowsUpdate.log 2013-12-14 07:03 - 2013-09-14 07:47 - 00000994 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-14 06:52 - 2013-09-16 02:01 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Spotify 2013-12-14 05:03 - 2013-09-14 07:47 - 00000990 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-14 02:34 - 2013-12-14 02:10 - 1086014084 _____ C:\Users\Stefan\Desktop\playnow-Gangster_Squad_2013_720p_x264-1.mp4 2013-12-14 02:34 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache 2013-12-14 01:15 - 2009-07-13 20:45 - 00021280 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-14 01:15 - 2009-07-13 20:45 - 00021280 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-14 01:13 - 2009-07-13 21:13 - 00781782 _____ C:\Windows\System32\PerfStringBackup.INI 2013-12-14 01:08 - 2013-09-15 08:28 - 00000008 _____ C:\Windows\mvraidver.dat 2013-12-14 01:08 - 2013-09-15 08:27 - 00024128 _____ C:\Windows\za_mv_raid.ev 2013-12-14 01:08 - 2013-09-15 08:27 - 00000096 _____ C:\Windows\za_mv_seqnum.ev 2013-12-14 01:08 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-14 01:08 - 2009-07-13 20:51 - 00034611 _____ C:\Windows\setupact.log 2013-12-13 00:19 - 2009-07-13 20:45 - 00433976 _____ C:\Windows\System32\FNTCACHE.DAT 2013-12-12 15:52 - 2013-09-16 03:02 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-12 15:26 - 2009-07-13 21:08 - 00032636 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-05 04:58 - 2013-09-14 07:47 - 00003990 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-05 04:58 - 2013-09-14 07:47 - 00003738 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-04 13:57 - 2013-11-05 23:51 - 00000000 ____D C:\Users\Stefan\Documents\Outlook Files 2013-12-04 08:34 - 2013-09-14 07:48 - 00002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-12-03 18:17 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-03 18:02 - 2013-12-03 18:00 - 00007469 _____ C:\Windows\IE11_main.log 2013-12-03 18:00 - 2013-12-03 18:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\System32\jsIntl.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00626176 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-03 18:00 - 2013-12-03 18:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat 2013-12-03 18:00 - 2013-12-03 18:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00548352 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\System32\html.iec 2013-12-03 18:00 - 2013-12-03 18:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-03 18:00 - 2013-12-03 18:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\System32\msls31.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\System32\url.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\System32\elshyph.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\System32\iexpress.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\System32\wextract.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\icardie.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx 2013-12-03 18:00 - 2013-12-03 18:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-03 18:00 - 2013-12-03 18:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\mshtmler.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\licmgr10.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-03 18:00 - 2013-12-03 18:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe 2013-12-03 18:00 - 2013-12-03 18:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe Some content of TEMP: ==================== C:\Users\Stefan\AppData\Local\Temp\80186b17-9005-404a-b8b4-4ed651fbdf5a.exe C:\Users\Stefan\AppData\Local\Temp\bitool.dll C:\Users\Stefan\AppData\Local\Temp\Checkupdate.exe C:\Users\Stefan\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\Stefan\AppData\Local\Temp\gcapi_dll.dll C:\Users\Stefan\AppData\Local\Temp\GetCC.dll C:\Users\Stefan\AppData\Local\Temp\gtapi_signed.dll C:\Users\Stefan\AppData\Local\Temp\oi_{06343ACE-CDBA-42D5-B576-36CF0E229553}.exe C:\Users\Stefan\AppData\Local\Temp\OptimizerPro.exe C:\Users\Stefan\AppData\Local\Temp\ose00000.exe C:\Users\Stefan\AppData\Local\Temp\plus-hd-2-5.exe C:\Users\Stefan\AppData\Local\Temp\Quarantine.exe C:\Users\Stefan\AppData\Local\Temp\SendMsg.dll C:\Users\Stefan\AppData\Local\Temp\sfamcc00001.dll C:\Users\Stefan\AppData\Local\Temp\sfamcc00002.dll C:\Users\Stefan\AppData\Local\Temp\sfextra.dll C:\Users\Stefan\AppData\Local\Temp\SkypeSetup.exe C:\Users\Stefan\AppData\Local\Temp\Snapdo_v2.exe C:\Users\Stefan\AppData\Local\Temp\vbmz.exe ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= Restore point made on: 2013-12-12 15:49:28 Restore point made on: 2013-12-13 15:05:47 Restore point made on: 2013-12-14 07:29:05 Restore point made on: 2013-12-22 23:50:28 Restore point made on: 2013-12-26 09:21:52 ==================== Memory info =========================== Percentage of memory in use: 12% Total physical RAM: 6135.11 MB Available physical RAM: 5370.86 MB Total Pagefile: 6133.31 MB Available Pagefile: 5363.78 MB Total Virtual: 8192 MB Available Virtual: 8191.88 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:232.79 GB) (Free:89.62 GB) NTFS Drive d: () (Fixed) (Total:434.31 GB) (Free:23.36 GB) NTFS ==>[system with boot components (obtained from reading drive)] Drive f: (HITMANPRO) (Removable) (Total:3.75 GB) (Free:3.74 GB) FAT32 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[system with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 9B389082) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=233 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 466 GB) (Disk ID: 20262026) Partition 1: (Active) - (Size=434 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=31 GB) - (Type=05) ======================================================== Disk: 2 (Size: 4 GB) (Disk ID: 9EB2023D) Partition 1: (Active) - (Size=4 GB) - (Type=0B) LastRegBack: 2013-12-29 21:21 ==================== End Of Log ============================