Gå till innehåll

goranl

Medlem
  • Innehållsantal

    212
  • Gick med

  • Besökte senast

  • Dagar vunna

    5

Inlägg postade av goranl

  1. När jag var i Californien på semester en gång i tiden frågade jag dem på dåvarande sjömanskyrkan, nuvarande Svenska Kyrkan i Utlandet SKUT, om tips på vettiga hotell och fick bra förslag på prisvärda hotell. Dom finns i alla fall i NY, San Fransisco och LA så om du skall dit kan du ju testa att mejla dem för tips.

    • Like 2
  2. Det du lägger i OneDrive katalogen lokalt synkas med  OneDrive i molnet, och du har kvar det på båda ställena. Fördelen är, som jag ser det, att om du inte är vid din vanliga dator kan du komma åt filerna via webbgränssnittet från vilken dator/platta som helst bara den är ansluten till internet, eller om du har två datorer kan du ha samma filer på båda datorerna. Jag har lagt min vanliga Dokument- katalog som den som skall synkas till OneDrive, i och med det har jag bara ett ex av filen lokalt och en i molnet.

  3. Har kört W10 på min surfmaskin sedan i våras och har nu tänkt uppgradera spel och videoburken till W10.

     

    Problemet är att W10 känns inte vid Ibis disken, den är en ssd på 240 GB som internt består av 4 ssd raid 0 kopplade som pratar med ett raidkort för att komma förbi SATAs begränsningar.

     

    Jag har en separat drivare till kortet men får inte möjlighet att peka ut denna drivare vid uppgraderingen utan den konstaterar bara att den inte hittar någon disk och sedan avbryter, trodde att W10 skulle ta med sig den befintliga drivare från W7 installationen.

     

    Någon som har en idé på hur jag skall få in den?

  4. Fick denna info från en av mina kontakter i helgen:

     

    Det skulle kunna vara så att det inte har varit något virus utan att Trend har reagerat på LoJack från Computrace. Tydligen är det ett program som ligger i BIOS på en hel del datormodeller som en spårningsfunktion vid stöld. Den lägger nämligen upp en fil som heter rpcnetp.exe i System32 varje gång datorn startar.

     

    Det stämmer med uppförandet och efter att jag lagt ett case hos Trend så har det försvunnit med morgonens mönsteruppdatering.

     

  5. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-10-2015

    Ran by Administratör (administrator) on RK-P-00142 (29-10-2015 17:06:14)

    Running from C:\Users\Administratör\Desktop

    Loaded Profiles: Administratör (Available Profiles: Administratör & Anno.Nym & install)

    Platform: Windows 7 Professional Service Pack 1 (X64) Language: Svenska (Sverige)

    Internet Explorer Version 10 (Default browser: IE)

    Boot Mode: Normal


     

    ==================== Processes (Whitelisted) =================

     

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

     

    (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

    (Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe

    (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

    (Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\Client Server Security Agent\Ntrtscan.exe

    () C:\Windows\System32\rpcnetp.exe

    (Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe

    (Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmListen.exe

    (Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\HostedAgent.exe

    (Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\Client Server Security Agent\CCSF\TmCCSF.exe

    (Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmProxy.exe

    (Intel Corporation) C:\Windows\System32\igfxtray.exe

    (Intel Corporation) C:\Windows\System32\hkcmd.exe

    (Intel Corporation) C:\Windows\System32\igfxpers.exe

    ( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

    (Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\Client Server Security Agent\PccNtMon.exe

    ( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe

    (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

    (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

    () C:\Program Files (x86)\Trend Micro\BM\TMBMSRV.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    (Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\Client Server Security Agent\PccNt.exe

     

     

    ==================== Registry (Whitelisted) ===========================

     

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

     

    HKLM-x32\...\Run: [iMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [111488 2012-10-25] (Intel Corporation)

    HKLM-x32\...\Run: [QlbCtrl.exe] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2010-02-25] ( Hewlett-Packard Development Company, L.P.)

    HKLM-x32\...\Run: [OfficeScanNT Monitor] => C:\Program Files (x86)\Trend Micro\Client Server Security Agent\pccntmon.exe [1889632 2015-10-05] (Trend Micro Inc.)

    Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)

    HKU\S-1-5-18\...\Run: [KSS] => "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" autorun

    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)

    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)

    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)

    Startup: C:\Users\install\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Scanner Wireless Connection Utility.lnk [2015-06-01]

    ShortcutTarget: Scanner Wireless Connection Utility.lnk -> C:\Program Files\Canon Electronics\Scanner Wireless Connection Utility\Connect.exe (Canon Electronics Inc.)

    BootExecute: autocheck autochk * PCloudBroom64.exe \systemroot\system32\BroomData.bit

     

    ==================== Internet (Whitelisted) ====================

     

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

     

    Tcpip\Parameters: [DhcpNameServer] 172.16.30.22 172.16.40.22

    Tcpip\..\Interfaces\{0FC09C32-088B-44BE-B0E9-F863C29ECE86}: [DhcpNameServer] 172.16.30.22 172.16.40.22

    Tcpip\..\Interfaces\{82A3833B-1C9E-474C-AD67-467EF32134BF}: [DhcpNameServer] 172.16.30.22 172.16.40.22

     

    Internet Explorer:

    ==================

    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    HKU\S-1-5-21-1295921429-91151344-429411169-500\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    BHO: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmIEPlg.dll [2014-06-10] (Trend Micro Inc.)

    BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)

    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-23] (Google Inc.)

    BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-10-29] (Microsoft Corporation)

    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)

    BHO-x32: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmIEPlg32.dll [2014-06-10] (Trend Micro Inc.)

    BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)

    BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-27] (Oracle Corporation)

    BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23] (Google Inc.)

    BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-10-29] (Microsoft Corporation)

    BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)

    BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-27] (Oracle Corporation)

    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-23] (Google Inc.)

    Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-23] (Google Inc.)

    Toolbar: HKU\S-1-5-21-1295921429-91151344-429411169-500 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-23] (Google Inc.)

    Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-20] (Microsoft Corporation)

    Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmIEPlg.dll [2014-06-10] (Trend Micro Inc.)

    Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmIEPlg32.dll [2014-06-10] (Trend Micro Inc.)

     

    FireFox:

    ========

    FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

    FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=6.0.1.5 -> C:\Program Files (x86)\BankID\npBispBrowser.dll [No File]

    FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=6.3.0.6 -> C:\Program Files (x86)\BankID\npBispBrowser.dll [No File]

    FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-08-27] (Oracle Corporation)

    FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-08-27] (Oracle Corporation)

    FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]

    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-05-28] (Microsoft Corporation)

    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-11-04] (Microsoft Corporation)

    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-21] (Google Inc.)

    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-21] (Google Inc.)

    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)

    FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\FirefoxExtension

    FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\FirefoxExtension [2015-10-25]

    StartMenuInternet: FIREFOX.EXE - C:\Users\Anno.Nym\AppData\Local\Mozilla Firefox\firefox.exe

     

    Chrome: 

    =======

    CHR Profile: C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default

    CHR Extension: (Google Presentationer) - C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-26]

    CHR Extension: (Google Presentationer) - C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-26]

    CHR Extension: (Google Drive) - C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-26]

    CHR Extension: (YouTube) - C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-26]

    CHR Extension: (Google Search) - C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]

    CHR Extension: (Google Presentationer) - C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-26]

    CHR Extension: (Google Presentationer) - C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-29]

    CHR Extension: (Betalning via Chrome Web Store) - C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-26]

    CHR Extension: (Gmail) - C:\Users\Administratör\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-26]

     

    ==================== Services (Whitelisted) ========================

     

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

     

    R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2780856 2015-10-07] (Microsoft Corporation)

    S3 MerakiVNCService; C:\windows\TEMP\winvnc.exe [2048248 2013-10-01] (UltraVNC)

    R2 ntrtscan; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\ntrtscan.exe [3966672 2015-10-05] (Trend Micro Inc.)

    R2 svcGenericHost; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe [72192 2015-10-16] (Trend Micro Inc.)

    R3 TMBMServer; C:\Program Files (x86)\Trend Micro\BM\TMBMSRV.exe [584704 2015-07-23] () [File not signed]

    R3 TmCCSF; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\CCSF\TmCCSF.exe [662384 2015-10-05] (Trend Micro Inc.)

    R2 tmlisten; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\tmlisten.exe [4115232 2015-10-05] (Trend Micro Inc.)

    R3 TmProxy; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmProxy.exe [929328 2014-01-22] (Trend Micro Inc.)

    R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

     

    ===================== Drivers (Whitelisted) ==========================

     

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

     

    S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

    R1 epp64; C:\EEK\bin\epp64.sys [136456 2015-10-29] (Emsisoft GmbH)

    S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [50320 2015-01-29] (Panda Security, S.L.)

    R3 rismcx64; C:\Windows\System32\DRIVERS\rismcx64.sys [59008 2013-10-24] (RICOH Company, Ltd.)

    R2 sxuptp; C:\Windows\System32\DRIVERS\sxuptp.sys [303952 2012-08-17] (silex technology, Inc.)

    S3 Tdsshbecr; C:\Windows\System32\DRIVERS\shbecr.sys [50176 2008-09-28] (Todos Data System AB)

    R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [119336 2015-07-28] () [File not signed]

    R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [324824 2015-07-28] () [File not signed]

    R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [79720 2015-07-28] () [File not signed]

    R2 TmFilter; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmXPFlt.sys [351032 2014-08-30] (Trend Micro Inc.)

    R2 TmPreFilter; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\TmPreFlt.sys [44856 2014-08-30] (Trend Micro Inc.)

    R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [109080 2013-01-09] (Trend Micro Inc.)

    S3 usbscan; C:\Windows\SysWOW64\DRIVERS\usbscan.sys [35840 2009-07-14] (Microsoft Corporation) [File not signed]

    R2 VSApiNt; C:\Program Files (x86)\Trend Micro\Client Server Security Agent\VSApiNt.sys [2316600 2014-08-30] (Trend Micro Inc.)

     

    ==================== NetSvcs (Whitelisted) ===================

     

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

     

     

    ==================== One Month Created files and folders ========

     

    (If an entry is included in the fixlist, the file/folder will be moved.)

     

    2015-10-29 17:26 - 2015-10-29 17:28 - 00000000 ____D C:\TMRescueDisk

    2015-10-29 17:06 - 2015-10-29 17:06 - 00015374 _____ C:\Users\Administratör\Desktop\FRST.txt

    2015-10-29 17:03 - 2015-10-29 17:03 - 00017920 _____ C:\windows\system32\rpcnetp.exe

    2015-10-29 16:45 - 2015-10-29 17:06 - 00000000 ____D C:\FRST

    2015-10-29 16:44 - 2015-10-29 16:35 - 02197504 _____ (Farbar) C:\Users\Administratör\Desktop\FRST64.exe

    2015-10-29 14:19 - 2015-10-29 14:42 - 00000000 ____D C:\EEK

    2015-10-29 13:56 - 2015-10-29 14:38 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files

    2015-10-29 13:55 - 2015-10-29 13:56 - 00717656 _____ (Kaspersky Lab) C:\Users\Administratör\Downloads\setup.exe

    2015-10-29 12:09 - 2015-10-29 13:33 - 00000000 ____D C:\Users\Administratör\AppData\Local\NPE

    2015-10-29 12:09 - 2015-10-29 12:09 - 10093544 _____ (Symantec Corporation) C:\Users\Administratör\Downloads\NPE.exe

    2015-10-29 12:09 - 2015-10-29 12:09 - 00000000 ____D C:\ProgramData\Norton

    2015-10-29 12:07 - 2015-10-29 12:07 - 02348928 _____ () C:\Users\Administratör\Downloads\Downadup.exe

    2015-10-29 12:07 - 2015-10-29 12:07 - 00000000 ____D C:\Users\Administratör\AppData\Roaming\Macromedia

    2015-10-29 11:54 - 2015-10-29 17:03 - 00017920 _____ C:\windows\SysWOW64\rpcnetp.exe

    2015-10-29 11:06 - 2015-10-29 11:06 - 00003316 _____ C:\windows\SysWOW64\BroomData.bit

    2015-10-29 11:06 - 2013-04-08 16:30 - 00022752 _____ C:\windows\system32\PCloudBroom64.exe

    2015-10-29 10:50 - 2015-07-21 10:57 - 00039672 _____ C:\windows\system32\Drivers\DasPtct.SYS

    2015-10-29 10:50 - 2015-01-29 19:21 - 00050320 _____ (Panda Security, S.L.) C:\windows\system32\Drivers\PSKMAD.sys

    2015-10-29 10:39 - 2015-10-29 10:39 - 00000000 ____D C:\Program Files (x86)\Panda Security

    2015-10-29 10:37 - 2015-10-29 10:37 - 34928184 _____ (Panda Security ) C:\Users\Administratör\Downloads\PandaCloudCleaner.exe

    2015-10-28 08:29 - 2015-10-28 08:29 - 00000000 ____D C:\Users\Administratör\AppData\Roaming\Xerox

    2015-10-27 08:51 - 2015-10-29 15:40 - 00000036 _____ C:\Users\Administratör\AppData\Local\housecall.guid.cache

    2015-10-26 16:20 - 2015-10-26 16:20 - 00000000 ____D C:\ProgramData\Malwarebytes

    2015-10-26 16:18 - 2015-10-26 16:18 - 22908888 _____ (Malwarebytes ) C:\Users\Administratör\Downloads\mbam-setup-2.2.0.1024.exe

    2015-10-26 15:35 - 2015-10-29 11:57 - 00000000 ____D C:\Users\Administratör\AppData\Roaming\Google

    2015-10-26 15:34 - 2015-10-26 15:34 - 00000000 ____D C:\Users\Administratör\AppData\Roaming\Canon Electronics

    2015-10-26 15:33 - 2015-10-26 15:35 - 00000000 ____D C:\Users\Administratör\AppData\Local\Google

    2015-10-26 15:33 - 2015-10-26 15:33 - 00000000 _____ C:\Users\Administratör\AppData\Local\QSwitch.txt

    2015-10-26 15:33 - 2015-10-26 15:33 - 00000000 _____ C:\Users\Administratör\AppData\Local\DSwitch.txt

    2015-10-26 15:33 - 2015-10-26 15:33 - 00000000 _____ C:\Users\Administratör\AppData\Local\AtStart.txt

    2015-10-26 09:20 - 2015-10-26 09:23 - 00000000 ____D C:\ProgramData\F-Secure

    2015-10-25 15:59 - 2015-10-25 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trend Micro Security Agent

    2015-10-14 12:50 - 2015-09-29 04:16 - 05569472 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe

    2015-10-14 12:50 - 2015-09-29 04:13 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll

    2015-10-14 12:50 - 2015-09-29 04:11 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll

    2015-10-14 12:50 - 2015-09-29 04:11 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll

    2015-10-14 12:50 - 2015-09-29 04:11 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll

    2015-10-14 12:50 - 2015-09-29 04:11 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll

    2015-10-14 12:50 - 2015-09-29 04:11 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll

    2015-10-14 12:50 - 2015-09-29 04:11 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll

    2015-10-14 12:50 - 2015-09-29 04:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll

    2015-10-14 12:50 - 2015-09-29 04:11 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll

    2015-10-14 12:50 - 2015-09-29 04:10 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll

    2015-10-14 12:50 - 2015-09-29 04:10 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll

    2015-10-14 12:50 - 2015-09-29 04:10 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll

    2015-10-14 12:50 - 2015-09-29 04:10 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll

    2015-10-14 12:50 - 2015-09-29 04:10 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll

    2015-10-14 12:50 - 2015-09-29 04:10 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe

    2015-10-14 12:50 - 2015-09-29 04:10 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe

    2015-10-14 12:50 - 2015-09-29 04:10 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll

    2015-10-14 12:50 - 2015-09-29 04:10 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll

    2015-10-14 12:50 - 2015-09-29 04:10 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll

    2015-10-14 12:50 - 2015-09-29 04:10 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll

    2015-10-14 12:50 - 2015-09-29 04:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe

    2015-10-14 12:50 - 2015-09-29 04:09 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe

    2015-10-14 12:50 - 2015-09-29 04:05 - 03990976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe

    2015-10-14 12:50 - 2015-09-29 04:05 - 03936192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe

    2015-10-14 12:50 - 2015-09-29 04:05 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll

    2015-10-14 12:50 - 2015-09-29 04:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll

    2015-10-14 12:50 - 2015-09-29 04:02 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:59 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll

    2015-10-14 12:50 - 2015-09-29 03:59 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll

    2015-10-14 12:50 - 2015-09-29 03:59 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll

    2015-10-14 12:50 - 2015-09-29 03:59 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll

    2015-10-14 12:50 - 2015-09-29 03:59 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll

    2015-10-14 12:50 - 2015-09-29 03:59 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll

    2015-10-14 12:50 - 2015-09-29 03:58 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe

    2015-10-14 12:50 - 2015-09-29 03:58 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll

    2015-10-14 12:50 - 2015-09-29 03:58 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe

    2015-10-14 12:50 - 2015-09-29 03:58 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll

    2015-10-14 12:50 - 2015-09-29 03:57 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll

    2015-10-14 12:50 - 2015-09-29 03:57 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll

    2015-10-14 12:50 - 2015-09-29 03:57 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll

    2015-10-14 12:50 - 2015-09-29 03:57 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll

    2015-10-14 12:50 - 2015-09-29 03:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll

    2015-10-14 12:50 - 2015-09-29 03:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 02:50 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys

    2015-10-14 12:50 - 2015-09-29 02:49 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys

    2015-10-14 12:50 - 2015-09-29 02:49 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys

    2015-10-14 12:50 - 2015-09-29 02:43 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe

    2015-10-14 12:50 - 2015-09-29 02:43 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe

    2015-10-14 12:50 - 2015-09-29 02:40 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 02:40 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 02:40 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-29 02:40 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

    2015-10-14 12:50 - 2015-09-25 19:07 - 03168768 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll

    2015-10-14 12:50 - 2015-09-25 19:07 - 02607104 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll

    2015-10-14 12:50 - 2015-09-25 19:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll

    2015-10-14 12:50 - 2015-09-25 19:07 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll

    2015-10-14 12:50 - 2015-09-25 19:07 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll

    2015-10-14 12:50 - 2015-09-25 19:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll

    2015-10-14 12:50 - 2015-09-25 19:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll

    2015-10-14 12:50 - 2015-09-25 19:06 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe

    2015-10-14 12:50 - 2015-09-25 19:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll

    2015-10-14 12:50 - 2015-09-25 19:06 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe

    2015-10-14 12:50 - 2015-09-25 19:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll

    2015-10-14 12:50 - 2015-09-25 18:59 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll

    2015-10-14 12:50 - 2015-09-25 18:59 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll

    2015-10-14 12:50 - 2015-09-25 18:59 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll

    2015-10-14 12:50 - 2015-09-25 18:59 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll

    2015-10-14 12:50 - 2015-09-25 18:58 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe

    2015-10-14 12:50 - 2015-09-15 19:17 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys

    2015-10-14 12:50 - 2015-09-15 19:17 - 00097112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys

    2015-10-14 12:50 - 2015-09-15 19:11 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll

    2015-10-14 12:50 - 2015-09-15 19:11 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll

    2015-10-14 12:50 - 2015-09-15 19:11 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll

    2015-10-14 12:50 - 2015-09-15 19:11 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll

    2015-10-14 12:50 - 2015-09-15 19:11 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll

    2015-10-14 12:50 - 2015-09-15 19:11 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll

    2015-10-14 12:50 - 2015-09-15 19:10 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe

    2015-10-14 12:50 - 2015-09-15 18:36 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll

    2015-10-14 12:50 - 2015-09-15 18:36 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll

    2015-10-14 12:50 - 2015-09-15 18:36 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll

    2015-10-14 12:50 - 2015-09-15 18:35 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll

    2015-10-14 12:50 - 2015-08-06 19:04 - 14176768 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll

    2015-10-14 12:50 - 2015-08-06 19:03 - 01866752 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll

    2015-10-14 12:50 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll

    2015-10-14 12:50 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll

    2015-10-14 12:49 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi

    2015-10-14 12:49 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi

    2015-10-14 12:49 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe

    2015-10-14 12:49 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll

    2015-10-14 12:49 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll

    2015-10-14 12:49 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll

    2015-10-14 12:49 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe

    2015-10-14 12:49 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll

    2015-10-14 12:49 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys

    2015-10-14 12:48 - 2015-09-18 00:48 - 02239488 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

    2015-10-14 12:48 - 2015-09-18 00:48 - 01409024 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

    2015-10-14 12:48 - 2015-09-18 00:48 - 00603648 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

    2015-10-14 12:48 - 2015-09-18 00:48 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

    2015-10-14 12:48 - 2015-09-18 00:47 - 19280896 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

    2015-10-14 12:48 - 2015-09-18 00:47 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

    2015-10-14 12:48 - 2015-09-18 00:47 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

    2015-10-14 12:48 - 2015-09-18 00:47 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 15416320 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 03960832 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 02656768 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 01509376 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

    2015-10-14 12:48 - 2015-09-18 00:46 - 00857600 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 00451584 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 00255488 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

    2015-10-14 12:48 - 2015-09-18 00:46 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

    2015-10-14 12:48 - 2015-09-17 21:44 - 14290944 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

    2015-10-14 12:48 - 2015-09-17 21:44 - 01763328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

    2015-10-14 12:48 - 2015-09-17 21:44 - 01181696 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

    2015-10-14 12:48 - 2015-09-17 21:44 - 00525824 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll

    2015-10-14 12:48 - 2015-09-17 21:44 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

    2015-10-14 12:48 - 2015-09-17 21:44 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll

    2015-10-14 12:48 - 2015-09-17 21:44 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 13775360 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 02866176 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 02056704 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 01441280 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

    2015-10-14 12:48 - 2015-09-17 21:43 - 00715264 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll

    2015-10-14 12:48 - 2015-09-17 21:43 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll

    2015-10-14 12:48 - 2015-09-17 19:58 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb

    2015-10-14 12:48 - 2015-09-17 19:58 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

    2015-10-14 12:48 - 2015-09-17 19:31 - 00441856 _____ (Microsoft Corporation) C:\windows\system32\html.iec

    2015-10-14 12:48 - 2015-09-17 19:27 - 00361984 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec

    2015-10-14 12:48 - 2015-09-17 19:06 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe

    2015-10-14 12:48 - 2015-09-17 19:02 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe

    2015-10-03 17:52 - 2015-10-29 12:08 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

    2015-10-03 17:52 - 2015-10-03 17:52 - 00002053 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk

    2015-10-03 17:52 - 2015-10-03 17:52 - 00000000 ____D C:\Program Files (x86)\Adobe

     

    ==================== One Month Modified files and folders ========

     

    (If an entry is included in the fixlist, the file/folder will be moved.)

     

    2015-10-29 17:06 - 2014-08-27 04:10 - 01584693 _____ C:\windows\WindowsUpdate.log

    2015-10-29 17:04 - 2015-03-04 13:48 - 00000990 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    2015-10-29 17:04 - 2015-03-04 13:21 - 00009107 _____ C:\windows\TMFilter.log

    2015-10-29 17:04 - 2015-03-04 13:20 - 01252038 _____ C:\windows\SysWOW64\TmInstall.log

    2015-10-29 17:03 - 2015-02-20 09:17 - 00320086 _____ C:\windows\system32\TmInstall.log

    2015-10-29 17:03 - 2014-08-27 04:10 - 00000104 _____ C:\windows\system32\config\netlogon.ftl

    2015-10-29 17:03 - 2014-08-27 04:08 - 00017920 _____ C:\windows\SysWOW64\rpcnetp.dll

    2015-10-29 17:03 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT

    2015-10-29 17:03 - 2009-07-14 05:51 - 00043235 _____ C:\windows\setupact.log

    2015-10-29 17:01 - 2010-11-21 12:38 - 00727618 _____ C:\windows\system32\perfh01D.dat

    2015-10-29 17:01 - 2010-11-21 12:38 - 00162400 _____ C:\windows\system32\perfc01D.dat

    2015-10-29 17:01 - 2009-07-14 06:13 - 01751278 _____ C:\windows\system32\PerfStringBackup.INI

    2015-10-29 17:00 - 2015-03-04 13:48 - 00000994 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    2015-10-29 17:00 - 2009-07-14 05:45 - 00035440 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

    2015-10-29 17:00 - 2009-07-14 05:45 - 00035440 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

    2015-10-29 16:56 - 2015-03-04 13:15 - 00000868 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

    2015-10-29 14:38 - 2010-11-21 04:47 - 00057882 _____ C:\windows\PFRO.log

    2015-10-29 12:29 - 2015-02-20 10:36 - 00000000 ____D C:\Users\install

    2015-10-29 12:14 - 2013-11-04 14:57 - 00000000 ____D C:\Program Files\Microsoft Office 15

    2015-10-29 11:06 - 2015-09-09 13:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\upKeeper

    2015-10-29 11:06 - 2015-06-01 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon DR-C125

    2015-10-26 15:43 - 2015-05-28 15:32 - 00000000 ____D C:\Program Files (x86)\Dropbox

    2015-10-26 15:33 - 2009-07-14 05:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

    2015-10-24 11:40 - 2015-03-04 13:48 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk

    2015-10-19 07:56 - 2015-03-04 13:15 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe

    2015-10-19 07:56 - 2015-03-04 13:15 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl

    2015-10-19 07:56 - 2015-03-04 13:15 - 00003806 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater

    2015-10-16 08:17 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache

    2015-10-15 07:11 - 2015-07-20 07:03 - 00003886 _____ C:\windows\System32\Tasks\Adobe Acrobat Update Task

    2015-10-11 17:16 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF

    2015-10-03 17:52 - 2014-08-27 11:45 - 00000000 ____D C:\ProgramData\Adobe

    2015-10-03 17:50 - 2014-08-27 11:42 - 00000000 ____D C:\windows\system32\appmgmt

    2015-10-03 17:44 - 2009-07-14 06:08 - 00032610 _____ C:\windows\Tasks\SCHEDLGU.TXT

     

    ==================== Files in the root of some directories =======

     

    2015-10-26 15:33 - 2015-10-26 15:33 - 0000000 _____ () C:\Users\Administratör\AppData\Local\AtStart.txt

    2015-10-26 15:33 - 2015-10-26 15:33 - 0000000 _____ () C:\Users\Administratör\AppData\Local\DSwitch.txt

    2015-10-27 08:51 - 2015-10-29 15:40 - 0000036 _____ () C:\Users\Administratör\AppData\Local\housecall.guid.cache

    2015-10-26 15:33 - 2015-10-26 15:33 - 0000000 _____ () C:\Users\Administratör\AppData\Local\QSwitch.txt

     

    ==================== Bamital & volsnap =================

     

    (There is no automatic fix for files that do not pass verification.)

     

    C:\windows\system32\winlogon.exe => File is digitally signed

    C:\windows\system32\wininit.exe => File is digitally signed

    C:\windows\SysWOW64\wininit.exe => File is digitally signed

    C:\windows\explorer.exe => File is digitally signed

    C:\windows\SysWOW64\explorer.exe => File is digitally signed

    C:\windows\system32\svchost.exe => File is digitally signed

    C:\windows\SysWOW64\svchost.exe => File is digitally signed

    C:\windows\system32\services.exe => File is digitally signed

    C:\windows\system32\User32.dll => File is digitally signed

    C:\windows\SysWOW64\User32.dll => File is digitally signed

    C:\windows\system32\userinit.exe => File is digitally signed

    C:\windows\SysWOW64\userinit.exe => File is digitally signed

    C:\windows\system32\rpcss.dll => File is digitally signed

    C:\windows\system32\dnsapi.dll => File is digitally signed

    C:\windows\SysWOW64\dnsapi.dll => File is digitally signed

    C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

     

     

    LastRegBack: 2015-10-21 14:31

     

    ==================== End of FRST.txt ============================

    Addition.txt

  6. Har en Windows 7 maskin som smittats med ett hot som mitt Trend Micro antivirus identifierar som Ransomware Process, den kan inte sätta den i karantän men verkar blockera den då inget verkar ha krypterats eller spridits till andra datorer.

    Den smittade filen heter Rpcnetp.exe. Den ligger som tjänst och process. Dödar jag processen kan jag ta bort filen men inte tjänsten men när jag startat om datorn är den tillbaka igen. Jag har kört Trends offline thret utility den identifierar 6 saker och tar bort dem men viruset är kvar som tidigare.

    Någon som har några idéer?

  7. Har köpt en begagnad elevdator från en skola. Den är installerad med W7 Enterprise. Verkar som att det inte ska gå att uppdatera till W10 med den versionen samtidigt som jag läste i nåt nät forum att nån uppdaterat till Windows 10 Pro iallafall. Skulle duga med vanliga Home versionen för min del. Någon som lyckats och hur?

    Vad står det för produktnyckel på datorn, tvivlar på att den levererats från tillverkaren med en entrépriser licens utan troligen en PRO eller Home.

    Har du en sådan nyckel på datorn så kan du försöka få tag på ett media antingen via nätet finns en sida där du kan ladda ner media, kommer inte ihåg vilken då jag inte behövt använda den, eller från IT avdelningen på skolan du köpt datorn från.

    Installera den och uppgradera sedan till Win 10.

×
×
  • Skapa nytt...