Hur bli av med edeals adware/spyware?

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-10-2014

Platform: Windows 8.1 Pro N (X64) OS Language: Svenska (Sverige)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how...

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
() C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Malwarebytes Corporation) F:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) F:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Malwarebytes Corporation) F:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Spotify Ltd) C:\Users\Kristian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(Technology Nexus AB) C:\Program Files (x86)\Personal\bin\Personal.exe
(Mega Limited) C:\Users\Kristian\AppData\Local\MEGAsync\MEGAsync.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\Program\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\PlexDlnaServer.exe
(Valve Corporation) D:\Program\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Program\Steam\bin\steamwebhelper.exe
() C:\Windows\SysWOW64\CommandDebuggerScreenshot\CommandDebuggerScreenshot.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [GamecomSound] => C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe [817440 2014-01-21] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CTxfiHlp] => CTXFIHLP.EXE
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => D:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\Run: [Badoo Desktop] => C:\ProgramData\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\Run: [Polar FlowSync] => [X]
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\Run: [Spotify Web Helper] => C:\Users\Kristian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-02] (Spotify Ltd)
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [5105288 2014-10-15] (Plex, Inc.)
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [468192 2014-09-01] (Sony)
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\Run: [GoogleChromeAutoLaunch_BD711732F495C8A1B0F1908E086E9AA2] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-10] (Google Inc.)
HKU\S-1-5-21-12257417-2597454707-175958047-1001\...\MountPoints2: {fe6639ff-e356-11e3-9bf9-14dae9450ab3} - "E:\Startme.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BankID säkerhetsprogram.lnk
ShortcutTarget: BankID säkerhetsprogram.lnk -> C:\Program Files (x86)\Personal\bin\Personal.exe (Technology Nexus AB)
Startup: C:\Users\Kristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk
ShortcutTarget: MEGAsync.lnk -> C:\Users\Kristian\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
Startup: C:\Users\Kristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Kristian\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Kristian\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Kristian\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [StorageProviderError] -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\System32\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [StorageProviderSyncing] -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\System32\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Kristian\AppData\Local\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Kristian\AppData\Local\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Kristian\AppData\Local\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [StorageProviderError] -> {0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [StorageProviderSyncing] -> {0A30F902-8398-4ee8-86F7-4CFB589F04D1} => C:\Windows\SysWOW64\shell32.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:35711
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Kristian\AppData\Roaming\Mozilla\Firefox\Profiles\dyk7aazt.default-1414325504507
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> D:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @se.nexus/Personal -> C:\Program Files (x86)\Personal\bin\np_prsnl.dll (Technology Nexus AB)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @acestream.net/acestreamplugin,version=2.2.7-next -> C:\Users\Kristian\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Kristian\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\allaannonser-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\prisjakt-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\tyda-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-sv-SE.xml

Chrome:
=======
CHR HomePage: Default -> hxxp://search.conduit.com/?gd=&ctid=CT3314958&octid=EB_ORIGIN...
CHR DefaultSearchKeyword: Default -> google.se_
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Presentationer) - C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-26]
CHR Extension: (Google Drive) - C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-26]
CHR Extension: (YouTube) - C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-26]
CHR Extension: (Google Cast) - C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-10-26]
CHR Extension: (Sök på Google) - C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-26]
CHR Extension: (Google Kalkylark) - C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-26]
CHR Extension: (AdBlock) - C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-10-26]
CHR Extension: (Google Wallet) - C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-26]
CHR Extension: (Gmail) - C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [1259616 2014-09-15] ()
R2 CommandDebuggerScreenshot; C:\Windows\SysWOW64\CommandDebuggerScreenshot\CommandDebuggerScreenshot.exe [60453 2014-10-26] () [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-03-28] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-17] (NVIDIA Corporation)
R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2013-08-31] (Microsoft Corporation)
R2 MBAMScheduler; f:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; f:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2013-08-22] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-17] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [37176 2014-06-05] (The OpenVPN Project)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)
S3 wampmysqld; c:\wamp\bin\mysql\mysql5.6.12\bin\mysqld.exe wampmysqld [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-03-29] (Disc Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-26] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
R3 PlantronicsGC; C:\Windows\system32\drivers\PLTGC.sys [1327104 2013-10-08] (C-Media Electronics Inc)
S3 Tdsshbecr; C:\Windows\system32\DRIVERS\shbecr.sys [50176 2008-09-28] (Todos Data System AB)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)
U3 wampapache; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-26 18:38 - 2014-10-26 18:38 - 00020325 _____ () C:\Users\Kristian\Desktop\FRST.txt
2014-10-26 18:38 - 2014-10-26 18:38 - 00000000 ____D () C:\FRST
2014-10-26 18:37 - 2014-10-26 18:37 - 02113024 _____ (Farbar) C:\Users\Kristian\Desktop\FRST64.exe
2014-10-26 16:18 - 2014-10-26 16:18 - 00000000 ____D () C:\Windows\ERUNT
2014-10-26 16:17 - 2014-10-26 16:17 - 01706144 _____ (Thisisu) C:\Users\Kristian\Downloads\JRT.exe
2014-10-26 16:14 - 2014-10-26 16:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-10-26 16:13 - 2014-10-26 18:18 - 00001014 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-26 16:13 - 2014-10-26 17:15 - 00001010 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-26 16:13 - 2014-10-26 16:13 - 00003986 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-10-26 16:13 - 2014-10-26 16:13 - 00003750 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-10-26 16:13 - 2014-10-26 16:13 - 00000000 ____D () C:\Users\Kristian\AppData\Local\CheckCode
2014-10-26 16:12 - 2014-10-26 16:12 - 00880272 _____ (Google Inc.) C:\Users\Kristian\Downloads\ChromeSetup.exe
2014-10-26 15:09 - 2014-10-26 16:10 - 00000000 ____D () C:\AdwCleaner
2014-10-26 15:09 - 2014-10-26 15:09 - 01962496 _____ () C:\Users\Kristian\Downloads\AdwCleaner.exe
2014-10-26 12:14 - 2014-10-26 17:43 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-26 12:13 - 2014-10-26 12:13 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Kristian\Downloads\mbam-setup-2.0.3.1025.exe
2014-10-26 12:13 - 2014-10-26 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-26 12:13 - 2014-10-26 12:13 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-26 12:13 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-26 12:13 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-26 12:13 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-26 11:31 - 2014-10-26 11:31 - 00000000 ____D () C:\Windows\SysWOW64\CommandDebuggerScreenshot
2014-10-25 20:54 - 2014-10-25 20:54 - 00000000 ____D () C:\Users\Kristian\Documents\Sony
2014-10-25 20:51 - 2014-10-25 20:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-10-25 20:51 - 2014-10-25 20:51 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-10-25 11:08 - 2014-10-25 11:08 - 00000000 ____D () C:\Users\Kristian\AppData\Roaming\MotioninJoy
2014-10-25 11:08 - 2014-10-25 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy
2014-10-25 11:08 - 2012-05-12 11:31 - 00121416 _____ (MotioninJoy) C:\Windows\system32\Drivers\MijXfilt.sys
2014-10-25 11:08 - 2011-12-07 18:42 - 00328712 _____ (Logitech Inc.) C:\Windows\system32\MijFrc.dll
2014-10-25 11:08 - 2011-12-07 18:42 - 00074960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xusb21.sys
2014-10-25 11:07 - 2014-10-25 11:08 - 04117346 _____ () C:\Users\Kristian\Downloads\MotioninJoy_071001_signed.zip
2014-10-25 10:59 - 2014-10-25 11:14 - 00000000 ____D () C:\Users\Kristian\AppData\Local\BetterDS3
2014-10-25 10:59 - 2014-10-25 10:59 - 00759932 _____ () C:\Users\Kristian\Downloads\BetterDS3_1.5.3.zip
2014-10-20 10:34 - 2014-10-20 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server
2014-10-20 10:34 - 2014-10-20 10:34 - 00000000 ____D () C:\Program Files (x86)\Plex
2014-10-13 22:34 - 2014-10-13 23:17 - 00000000 ____D () C:\Users\Kristian\Cisco Packet Tracer 6.1.1sv
2014-10-13 22:34 - 2014-10-13 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer Student
2014-10-13 22:32 - 2014-10-13 22:33 - 77466129 _____ (Cisco Systems, Inc. ) C:\Users\Kristian\Downloads\Cisco Packet Tracer 6.1.1 for Windows (no tutorials) - Student version.exe
2014-10-13 12:02 - 2014-10-13 22:34 - 00000392 _____ () C:\Users\Kristian\.packettracer
2014-10-13 12:02 - 2014-10-13 22:29 - 00000000 ____D () C:\Users\Kristian\Cisco Packet Tracer 6.0.1
2014-10-10 11:59 - 2014-10-10 11:59 - 55932060 _____ (Cisco Systems, Inc. ) C:\Users\Kristian\Downloads\Cisco Packet Tracer 6.0.1 for Windows (no tutorials).exe
2014-10-03 13:33 - 2014-10-03 13:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-10-03 13:33 - 2014-10-03 13:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-26 10:09 - 2014-10-26 17:16 - 00000000 __RDO () C:\Users\Kristian\SkyDrive

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-26 18:16 - 2014-03-28 18:09 - 00000000 ____D () C:\Users\Kristian\AppData\Roaming\Skype
2014-10-26 18:12 - 2014-03-28 17:50 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-12257417-2597454707-175958047-1001
2014-10-26 18:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2014-10-26 17:36 - 2014-03-28 17:45 - 01964686 _____ () C:\Windows\WindowsUpdate.log
2014-10-26 17:21 - 2014-03-28 17:46 - 01740478 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-26 17:21 - 2013-08-23 00:51 - 00732588 _____ () C:\Windows\system32\perfh01D.dat
2014-10-26 17:21 - 2013-08-23 00:51 - 00151960 _____ () C:\Windows\system32\perfc01D.dat
2014-10-26 17:18 - 2014-04-21 11:28 - 00044730 _____ () C:\Windows\system32\lvcoinst.log
2014-10-26 17:15 - 2013-11-18 17:38 - 00000000 ____D () C:\Users\Kristian\Desktop\MITT
2014-10-26 17:14 - 2014-03-28 17:57 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-26 17:14 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-26 16:46 - 2014-03-28 17:38 - 00033204 _____ () C:\Windows\PFRO.log
2014-10-26 16:38 - 2014-03-30 19:33 - 00371200 ___SH () C:\Users\Kristian\Desktop\Thumbs.db
2014-10-26 16:13 - 2014-03-28 18:00 - 00000000 ____D () C:\Users\Kristian\AppData\Local\Google
2014-10-26 16:13 - 2014-03-28 18:00 - 00000000 ____D () C:\Program Files (x86)\Google
2014-10-26 15:51 - 2014-03-28 17:39 - 00000000 __SHD () C:\Recovery
2014-10-26 15:33 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-10-26 15:31 - 2014-03-28 18:12 - 00000000 ____D () C:\Users\Kristian\AppData\Roaming\uTorrent
2014-10-26 15:16 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-10-26 13:56 - 2014-03-28 19:57 - 00000000 ____D () C:\Users\Kristian\AppData\Roaming\vlc
2014-10-25 20:51 - 2014-05-28 17:49 - 00000000 ____D () C:\ProgramData\Sony
2014-10-25 20:51 - 2014-04-02 17:11 - 00628178 _____ () C:\Windows\DPINST.LOG
2014-10-25 20:51 - 2014-03-28 17:53 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-25 10:44 - 2014-09-09 14:50 - 00000000 ____D () C:\Users\Kristian\AppData\Local\MEGAsync
2014-10-25 10:00 - 2014-04-21 11:28 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs
2014-10-21 23:20 - 2014-03-28 18:08 - 00000000 ____D () C:\Users\Kristian\AppData\Roaming\Spotify
2014-10-20 10:34 - 2014-03-28 17:53 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-20 10:32 - 2014-03-28 18:05 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-10-15 21:47 - 2014-09-06 14:45 - 00000132 _____ () C:\Users\Kristian\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-10-13 23:19 - 2014-03-30 22:18 - 00000000 ____D () C:\Users\Kristian\AppData\Roaming\foobar2000
2014-10-13 22:34 - 2014-03-28 17:44 - 00000000 ____D () C:\Users\Kristian
2014-10-13 17:49 - 2014-03-28 18:08 - 00000000 ____D () C:\Users\Kristian\AppData\Local\Spotify
2014-10-11 22:58 - 2014-09-25 13:00 - 00000000 ____D () C:\ProgramData\Origin
2014-10-03 13:33 - 2014-03-28 18:09 - 00000000 ____D () C:\ProgramData\Skype
2014-09-30 11:10 - 2014-07-16 23:03 - 00000000 ____D () C:\Program Files\Sony
2014-09-26 10:09 - 2014-03-28 17:45 - 00000000 __RDO () C:\Users\Kristian\SkyDrive.old

Files to move or delete:
====================
C:\Users\Kristian\xobglu16.dll
C:\Users\Kristian\xobglu32.dll

Some content of TEMP:
====================
C:\Users\Kristian\AppData\Local\Temp\Quarantine.exe
C:\Users\Kristian\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-10-18 02:07

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-10-2014

Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.34944 - BitTorrent Inc.)
Ace Stream Media 2.2.7-next (HKCU\...\AceStream) (Version: 2.2.7-next - Ace Stream Media)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Svenska (HKLM-x32\...\{AC76BA86-7AD7-1053-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Story (HKLM-x32\...\com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0.571 - Adobe Systems Incorporated)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 1.1.4 - philandro Software GmbH)
BankID säkerhetsprogram (HKLM-x32\...\{F42050A1-710C-433A-AC53-B6915C2E3F86}) (Version: 4.20.2 - Technology Nexus)
Cisco Packet Tracer 6.1.1 Student (HKLM-x32\...\Cisco Packet Tracer 6.1.1 Student_is1) (Version: - Cisco Systems, Inc.)
Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 2.00 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.3.0.0 - Electronic Arts)
foobar2000 v1.3.1 (HKLM-x32\...\foobar2000) (Version: 1.3.1 - Peter Pawlowski)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.104 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Handelsbanken kortläsare (HKLM-x32\...\{D4C30AE2-EAFE-4E28-A3BA-7CF7485E23C4}) (Version: 1.00.0000 - Todos Data System AB)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Language Pack 2007 - Swedish/svenska (HKLM-x32\...\OMUI.sv-se) (Version: 12.0.4518.1018 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 32.0.2 (x86 sv-SE) (HKLM-x32\...\Mozilla Firefox 32.0.2 (x86 sv-SE)) (Version: 32.0.2 - Mozilla)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
Mumble 1.2.8 (HKLM-x32\...\{8F6E190D-0BEC-43E0-A691-6EDFC030346A}) (Version: 1.2.8 - Thorvald Natvig)
Need for Speed Most Wanted Black Edition (HKLM-x32\...\Need for Speed Most Wanted Black Edition_R.G. Mechanics_is1) (Version: - R.G. Mechanics, Panky)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.5 - Notepad++ Team)
NVIDIA 3D Vision drivrutin 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA 3D Vision drivrutin för styrenhet 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA GeForce Experience Service (Version: 16.13.42 - NVIDIA Corporation) Hidden
NVIDIA Grafikdrivrutin 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD audiodrivrutin 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.162.1274 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 2.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX systemprogramvara 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 16.13.42 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.25 (Version: 1.2.25 - NVIDIA Corporation) Hidden
NVIDIAs kontrollpanel 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA-uppdatering 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenVPN 2.3.4-I602 (HKLM\...\OpenVPN) (Version: 2.3.4-I602 - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.20.386 - Electronic Arts, Inc.)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Plantronics® GameCom 780/788 Software for Dolby® Headphone (HKLM-x32\...\{EB3C9064-9140-4279-9E51-965119402151}) (Version: 3.20.0001 - Plantronics)
Plex Media Server (HKLM-x32\...\{5ea93dc7-0906-47a6-8033-d26ed443f0a8}) (Version: 0.9.1101 - Plex, Inc.)
Plex Media Server (x32 Version: 0.9.1101 - Plex, Inc.) Hidden
Polar FlowSync version 2.1.5 (HKLM-x32\...\{A1538F5C-7B65-4DB6-9FFB-FFC0DF2E85D8}_is1) (Version: 2.1.5 - Polar Electro Oy)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.1 r2290 - )
Replay Music 6 (HKLM-x32\...\ReplayMusic6.10) (Version: 6.10 - Applian Technologies Inc.)
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software)
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Sony Mobile Update Service (HKLM-x32\...\Update Service) (Version: 2.14.7.201405202226 - Sony Mobile Communications AB)
Sony PC Companion 2.10.228 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.228 - Sony)
SopCast 3.9.2 (HKLM-x32\...\SopCast) (Version: 3.9.2 - www.sopcast.com)
Spotify (HKLM-x32\...\Spotify) (Version: 0.4.9 - )
TAP-Windows 9.21.0 (HKLM\...\TAP-Windows) (Version: 9.21.0 - )
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
WinRAR archiver (HKLM\...\WinRAR archiver) (Version: - )
VLC media player 2.0.7 (HKLM-x32\...\VLC media player) (Version: 2.0.7 - VideoLAN)
XSplit Broadcaster (HKLM-x32\...\{F8A47958-47CC-4B57-AE7D-7DDC0A86BEF5}) (Version: 1.3.1311.1201 - SplitMediaLabs)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2014-04-15 22:37 - 00000851 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0BBA5EB4-A5EF-492C-BC22-B3D85DC8549B} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {0F932D8E-9118-4094-A341-40B96839E930} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {392BC788-C97F-4CD2-A750-A1E1041F73BC} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {3C2866E4-A07D-4927-A56B-B4B7F56E9CCB} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {3E676A85-B1CC-4E94-A930-9C0214EE8115} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {4642FE2E-E83B-4504-8FA7-A2580CFD5512} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.)
Task: {543751FC-D185-4C74-8F6A-9D18AF3724F3} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {59DE7D46-940E-441C-B979-44BAB99D9115} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {5A5F9A27-863B-4043-A782-37E4FE21EA2B} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {5D995BC4-BFA7-493A-9EC1-CD55AD66071A} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {6A59C583-FBB0-4F2B-A452-307A30BEF6BC} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {6A82CF27-7CF0-4C5D-95D0-076861B84611} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {79D1FAC0-7A97-4193-8DF0-4A5765B737DA} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {98F49E92-8A4B-4EFB-BADA-C0C35773148A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {AC61A7FA-D235-4603-9DCF-625BCB5168FF} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {B3805F3E-2FF3-4FF3-98BA-6323C487698C} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {C0C05F7C-DD87-49F9-8EF4-4373E3CA084C} - System32\Tasks\{A82478EC-1E72-4030-89F3-7E7CD8588AE6} => Chrome.exe http://www.skype.com/go/downloading?source=lightinstaller&ver...
Task: {E14AFE67-7292-44ED-83D4-2362B8190702} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {E8A76586-10E2-4180-8156-AC9B910B3722} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {ECEFDD38-F394-425B-8D03-F7816CAB1D45} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {F0B04AB1-AADB-449E-9FF2-A2EB96D8F615} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-03-28 17:57 - 2014-03-04 14:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-15 13:01 - 2014-09-15 13:00 - 01259616 _____ () C:\Program Files (x86)\AnyDesk\AnyDesk.exe
2014-05-01 15:13 - 2014-05-01 15:13 - 00470016 _____ () C:\Users\Kristian\AppData\Local\MEGAsync\ShellExtX64.dll
2014-03-28 17:57 - 2014-01-21 16:41 - 00817440 ____N () C:\Program Files\Plantronics\GameCom 780 & 788\GameCom780.exe
2014-03-28 18:09 - 2007-09-02 13:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe
2014-05-25 15:18 - 2014-05-25 15:18 - 00036536 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2014-05-25 15:18 - 2014-05-25 15:18 - 00747192 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2014-05-25 15:17 - 2014-05-25 15:17 - 00012800 _____ () C:\Program Files\Rainmeter\Plugins\Perfmon.dll
2014-05-25 15:17 - 2014-05-25 15:17 - 00010240 _____ () C:\Program Files\Rainmeter\Plugins\WindowMessagePlugin.dll
2014-05-25 15:17 - 2014-05-25 15:17 - 00056832 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2014-10-26 11:31 - 2014-10-26 11:31 - 00060453 _____ () C:\Windows\SysWOW64\CommandDebuggerScreenshot\CommandDebuggerScreenshot.exe
2014-10-25 20:51 - 2014-06-23 08:07 - 00113376 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
2014-05-01 15:15 - 2014-05-01 15:15 - 00463360 _____ () C:\Users\Kristian\AppData\Local\MEGAsync\ShellExtX32.dll
2014-03-28 17:57 - 2014-01-21 16:41 - 00149792 ____N () C:\Program Files\Plantronics\GameCom 780 & 788\VmixPLGC.dll
2014-03-28 18:09 - 2007-09-02 13:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 00838792 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libxml2.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 00049800 _____ () C:\Program Files (x86)\Plex\Plex Media Server\soci_sqlite3-vc80-3_0.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 00086664 _____ () C:\Program Files (x86)\Plex\Plex Media Server\soci_core-vc80-3_0.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 02092680 _____ () C:\Program Files (x86)\Plex\Plex Media Server\opencv_core249.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 01883784 _____ () C:\Program Files (x86)\Plex\Plex Media Server\opencv_imgproc249.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 00502920 _____ () C:\Program Files (x86)\Plex\Plex Media Server\tag.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 00072840 _____ () C:\Program Files (x86)\Plex\Plex Media Server\zlib.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 00196232 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libidn.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 07816192 _____ () D:\Program Files (x86)\SplitMediaLabs\XSplit\avcodec-54.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 01425920 _____ () D:\Program Files (x86)\SplitMediaLabs\XSplit\avformat-54.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 00188416 _____ () D:\Program Files (x86)\SplitMediaLabs\XSplit\avutil-52.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 00336896 _____ () D:\Program Files (x86)\SplitMediaLabs\XSplit\swscale-2.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 00096256 _____ () D:\Program Files (x86)\SplitMediaLabs\XSplit\swresample-0.dll
2011-08-22 12:57 - 2011-08-22 12:57 - 00002560 _____ () C:\Windows\SYSTEM32\CTXFIRES.DLL
2014-10-15 01:51 - 2014-10-15 01:51 - 00044680 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_socket.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00027784 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ssl.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00018568 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_hashlib.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00034952 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\simplejson\_speedups.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00836232 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\etree.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00062600 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libexslt.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 00166024 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libxslt.dll
2014-10-15 01:51 - 2014-10-15 01:51 - 00192136 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\objectify.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00016520 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\select.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00054920 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\OpenSSL\crypto.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00017032 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\OpenSSL\rand.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00043656 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\OpenSSL\SSL.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00081544 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ctypes.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00111240 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\pyexpat.pyd
2014-10-15 01:51 - 2014-10-15 01:51 - 00689800 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\unicodedata.pyd
2014-10-26 16:14 - 2014-10-10 03:03 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\libglesv2.dll
2014-10-26 16:14 - 2014-10-10 03:03 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\libegl.dll
2014-10-26 16:14 - 2014-10-10 03:04 - 08910664 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\pdf.dll
2014-10-26 16:14 - 2014-10-10 03:03 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\ffmpegsumo.dll
2014-08-29 09:45 - 2014-08-21 19:15 - 01171456 _____ () D:\Program\Steam\libavcodec-56.dll
2014-08-29 09:45 - 2014-08-21 19:15 - 00332800 _____ () D:\Program\Steam\libavresample-2.dll
2014-08-29 09:45 - 2014-08-21 19:15 - 00442368 _____ () D:\Program\Steam\libavutil-54.dll
2013-03-12 17:10 - 2014-10-02 00:16 - 00774656 _____ () D:\Program\Steam\SDL2.dll
2014-05-24 15:17 - 2014-10-21 20:22 - 02226880 _____ () D:\Program\Steam\video.dll
2014-08-29 09:45 - 2014-08-21 19:15 - 00403968 _____ () D:\Program\Steam\libavformat-56.dll
2014-08-29 09:45 - 2014-08-21 19:15 - 00485888 _____ () D:\Program\Steam\libswscale-3.dll
2011-07-15 11:21 - 2014-10-21 20:22 - 00682176 _____ () D:\Program\Steam\bin\chromehtml.DLL
2014-10-26 16:14 - 2014-10-10 03:03 - 00310088 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\libexif.dll
2010-04-27 12:39 - 2014-09-05 00:29 - 34589376 _____ () D:\Program\Steam\bin\libcef.dll
2014-08-14 20:35 - 2014-09-05 00:29 - 00837824 _____ () D:\Program\Steam\bin\ffmpegsumo.dll
2014-10-25 20:51 - 2012-04-30 10:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
2014-10-25 20:51 - 2013-09-13 10:02 - 00208896 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
2013-06-11 08:31 - 2013-06-11 08:31 - 00090112 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CalEngine.dll
2011-01-05 14:01 - 2011-01-05 14:01 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PimNotes.dll
2011-07-07 13:54 - 2011-07-07 13:54 - 00233984 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll
2014-10-25 20:51 - 2010-01-11 15:44 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll
2012-04-04 13:33 - 2012-04-04 13:33 - 00139776 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CAgdLNotes.dll
2013-01-08 16:02 - 2013-01-08 16:02 - 00163840 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\CAgdOutlook.dll
2012-07-26 10:51 - 2012-07-26 10:51 - 00208896 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VistaCalendar.dll
2014-10-25 20:51 - 2013-05-20 11:58 - 00620718 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll
2014-10-26 16:14 - 2014-10-10 03:04 - 14902600 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Kristian\Lokala inställningar:nqUiTlhMKTlSWOLxD5mSPg
AlternateDataStreams: C:\Users\Kristian\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Kristian\SkyDrive.old:ms-properties
AlternateDataStreams: C:\Users\Kristian\AppData\Local:nqUiTlhMKTlSWOLxD5mSPg
AlternateDataStreams: C:\Users\Kristian\AppData\Local\chBFf7XxlL7:CA8TCR2RnorpFqjgvcIVruc2
AlternateDataStreams: C:\Users\Kristian\AppData\Local\Programdata:nqUiTlhMKTlSWOLxD5mSPg
AlternateDataStreams: C:\Users\Kristian\AppData\Local\Temporary Internet Files:EBoGov92gYpPKlYINiZbhnd
AlternateDataStreams: C:\Users\Kristian\AppData\Local\Temporary Internet Files:PGiE3cgzP4xO4fAWflo

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "DivXMediaServer"
HKLM\...\StartupApproved\Run32: => "DivXUpdate"
HKCU\...\StartupApproved\Run: => "Badoo Desktop"
HKCU\...\StartupApproved\Run: => "Sony PC Companion"

========================= Accounts: ==========================

Administratör (S-1-5-21-12257417-2597454707-175958047-500 - Administrator - Disabled)
Gäst (S-1-5-21-12257417-2597454707-175958047-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-12257417-2597454707-175958047-1003 - Limited - Enabled)
Kristian (S-1-5-21-12257417-2597454707-175958047-1001 - Administrator - Enabled) => C:\Users\Kristian

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (10/26/2014 05:15:52 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Error: (10/26/2014 05:14:07 PM) (Source: DCOM) (EventID: 10005) (User: LUCIFER)
Description: 1084ShellHWDetectionInte tillgänglig{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (10/26/2014 05:14:02 PM) (Source: DCOM) (EventID: 10005) (User: LUCIFER)
Description: 1084ShellHWDetectionInte tillgänglig{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (10/26/2014 05:13:59 PM) (Source: DCOM) (EventID: 10005) (User: LUCIFER)
Description: 1084WSearchInte tillgänglig{9E175B68-F52A-11D8-B9A5-505054503030}

Error: (10/26/2014 05:13:59 PM) (Source: DCOM) (EventID: 10005) (User: LUCIFER)
Description: 1084WSearchInte tillgänglig{9E175B68-F52A-11D8-B9A5-505054503030}

Error: (10/26/2014 05:13:57 PM) (Source: DCOM) (EventID: 10005) (User: LUCIFER)
Description: 1084WSearchInte tillgänglig{9E175B68-F52A-11D8-B9A5-505054503030}

Error: (10/26/2014 05:13:56 PM) (Source: DCOM) (EventID: 10005) (User: LUCIFER)
Description: 1084WSearchInte tillgänglig{9E175B68-F52A-11D8-B9A5-505054503030}

Error: (10/26/2014 05:13:56 PM) (Source: DCOM) (EventID: 10005) (User: LUCIFER)
Description: 1084ShellHWDetectionInte tillgänglig{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (10/26/2014 05:13:41 PM) (Source: DCOM) (EventID: 10005) (User: LUCIFER)
Description: 1084ShellHWDetectionInte tillgänglig{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (10/26/2014 05:13:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Tjänsten Computer Browser är beroende av tjänsten Server. Den sistnämnda kunde inte starta på grund av följande fel:
%%1068

Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Processor: AMD Phenom(tm) II X4 965 Processor
Percentage of memory in use: 33%
Total physical RAM: 8190.11 MB
Available physical RAM: 5419.66 MB
Total Pagefile: 9470.11 MB
Available Pagefile: 6212.74 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:34.08 GB) (Free:1.86 GB) NTFS
Drive d: () (Fixed) (Total:431.58 GB) (Free:1.69 GB) NTFS
Drive f: (Lokal disk) (Fixed) (Total:233.76 GB) (Free:8.44 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: BCA0B721)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=34.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=431.6 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 233.8 GB) (Disk ID: 094D7A9E)
Partition 1: (Active) - (Size=233.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Content of fixlist:
*****************
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:35711
CHR HomePage: Default -> hxxp://search.conduit.com/?gd=&ctid=CT3314958&octid=EB_ORIGIN...
AlternateDataStreams: C:\Users\Kristian\Lokala inställningar:nqUiTlhMKTlSWOLxD5mSPg
AlternateDataStreams: C:\Users\Kristian\AppData\Local:nqUiTlhMKTlSWOLxD5mSPg
AlternateDataStreams: C:\Users\Kristian\AppData\Local\chBFf7XxlL7:CA8TCR2RnorpFqjgvcIVruc2
AlternateDataStreams: C:\Users\Kristian\AppData\Local\Programdata:nqUiTlhMKTlSWOLxD5mSPg
AlternateDataStreams: C:\Users\Kristian\AppData\Local\Temporary Internet Files:EBoGov92gYpPKlYINiZbhnd
AlternateDataStreams: C:\Users\Kristian\AppData\Local\Temporary Internet Files:PGiE3cgzP4xO4fAWflo
File: C:\Users\Kristian\xobglu32.dll
Reboot:
*****************

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
Chrome HomePage deleted successfully.
"C:\Users\Kristian\Lokala inställningar" => ":nqUiTlhMKTlSWOLxD5mSPg" ADS not found.
C:\Users\Kristian\AppData\Local => ":nqUiTlhMKTlSWOLxD5mSPg" ADS removed successfully.
C:\Users\Kristian\AppData\Local\chBFf7XxlL7 => ":CA8TCR2RnorpFqjgvcIVruc2" ADS removed successfully.
"C:\Users\Kristian\AppData\Local\Programdata" => ":nqUiTlhMKTlSWOLxD5mSPg" ADS not found.
"C:\Users\Kristian\AppData\Local\Temporary Internet Files" => ":EBoGov92gYpPKlYINiZbhnd" ADS not found.
"C:\Users\Kristian\AppData\Local\Temporary Internet Files" => ":PGiE3cgzP4xO4fAWflo" ADS not found.

========================= File: C:\Users\Kristian\xobglu32.dll ========================

MD5: 213139D0320FE0C880CDCE3E3053C318
Creation and modification date: 2014-03-29 13:25 - 2014-03-29 23:19
Size: 0023552
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product Name:
Description:
File Version:
Product Version:
Copyright:

====== End Of File: ======

The system needed a reboot.

==== End of Fixlog ====

C:\Users\Kristian\AppData\Local\Temp\n1470\s1470.exe a variant of MSIL/Solimba.AC potentially unwanted application
C:\Users\Kristian\AppData\Local\Temp\n999\OptimizerPro.exe multiple threats
C:\Users\Kristian\AppData\Local\Temp\n999\s999.exe a variant of MSIL/Solimba.AC potentially unwanted application
Operating memory a variant of Win32/AdWare.Pirrit.H application

***** [ Services ] *****

***** [ Files / Folders ] *****

File Found : C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found : C:\Users\Kristian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Folder Found : C:\Users\Kristian\AppData\Local\CheckCode

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Key Found : HKLM\SOFTWARE\RST
Key Found : HKLM\SOFTWARE\SI-App
Key Found : HKLM\SOFTWARE\Upt
Key Found : HKLM\SOFTWARE\WinUpd
Key Found : [x64] HKLM\SOFTWARE\RST
Key Found : [x64] HKLM\SOFTWARE\SI-App
Key Found : [x64] HKLM\SOFTWARE\Upt
Key Found : [x64] HKLM\SOFTWARE\WinUpd

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518

-\\ Mozilla Firefox v32.0.2 (x86 sv-SE)

-\\ Google Chrome v38.0.2125.104

*************************

AdwCleaner[R0].txt - [1984 octets] - [26/10/2014 15:09:44]
AdwCleaner[R1].txt - [2208 octets] - [26/10/2014 15:31:53]
AdwCleaner[R2].txt - [1286 octets] - [26/10/2014 15:39:10]
AdwCleaner[R3].txt - [1093 octets] - [26/10/2014 16:00:01]
AdwCleaner[R4].txt - [1912 octets] - [26/10/2014 21:26:35]
AdwCleaner[R5].txt - [1646 octets] - [26/10/2014 22:17:45]
AdwCleaner[R6].txt - [2049 octets] - [27/10/2014 12:39:02]
AdwCleaner[R7].txt - [1841 octets] - [27/10/2014 16:07:11]
AdwCleaner[S0].txt - [2304 octets] - [26/10/2014 15:33:23]
AdwCleaner[S1].txt - [1061 octets] - [26/10/2014 15:47:04]
AdwCleaner[S2].txt - [1150 octets] - [26/10/2014 16:10:02]
AdwCleaner[S3].txt - [1990 octets] - [26/10/2014 21:42:06]
AdwCleaner[S4].txt - [1708 octets] - [26/10/2014 22:19:56]
AdwCleaner[S5].txt - [2125 octets] - [27/10/2014 12:40:24]

########## EOF - C:\AdwCleaner\AdwCleaner[R7].txt - [2261 octets] ##########

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* C:\Users\Kristian\AppData\Local\ArchiveMinimalRuntime\ArchiveMinimalRuntime.exe (PID: 1820) [UP-HEUR]
* C:\Users\Kristian\AppData\Local\MEGAsync\MEGAsync.exe (PID: 4852) [UP-HEUR]
* C:\Users\Kristian\Downloads\adwcleaner_4.002.exe (PID: 4636) [UP-HEUR]

3 proccesses terminated!

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* E1G60 [Missing Service]

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 localhost

Program finished at: 10/27/2014 04:36:34 PM
Execution time: 0 hours(s), 0 minute(s), and 45 seconds(s)