Guide: Hur man blir av med "Polisen har blockerat din dator!"

Jo absolut.
Min poäng var dock att man inte lär sig ett skvatt med snabba lösningar.
Genom att googla det hela, in och pilla lite manuellt och kämpa för det kommer du markant öka både din förståelse samt din kunskapsnivå gällande ditt operativsystem vilket i framtiden kommer hjälpa dig avsevärt när du en dag stöter på ett virus som är så pass nytt att det inte finns nån guide, nån snabb enkel lösning eller program som gör allt jobb åt dig. Den gången snackar vi datorlös i dagar eller veckor (om du inte tröttnat före och omformaterar vill säga) medans med en högre förståelse för hur du själv går in och pillar kanske det resulterar i några timmars strulande.

Ska förtydliga ytterligare, folk är för beroende av program som gör allt åt dom och står därför chanslösa när den skadliga koden ligger steget före hjälpmedlen.

Med det sagt vill jag också förtydliga att Sweclockers inte är PC för Alla. Kunskapsnivån och intresset här är generellt mycket högt och de flesta hjälper gärna till men inte till absurdum och vi (eller åtminstone jag) tänker inte sitta och dalta med dig som om du vore 9 år. De flesta precis som jag förväntar sig att om du inte har baskunskaperna så får du googla och läsa dig till dom medans tips och råd, prova dittan och dattan haglar från medlemmar med alla möjliga olika kunskapsnivåer. Precis som du märkte vill folk hjälpa till oavsett hur pålästa dom själva är om just ditt problem.

Jätteglad att du fått ditt problem löst åtminstone.
Jag kan också säga att jag alltid fått mina problem lösta av dessa medlemmar, oavsett hur ologiska och skumma dom varit med diverse hård eller mjukvara, ofta där guider kombinerade med olika solve-it-all's alltid gått bet.

Lycka till med framtida bekymmer!

Vänliga hälsningar,
Fidde

Min systers dator (VAIO laptop) har den här skiten och problemet är att varken F8 eller F2 fungerar när jag trycker på dem under uppstart så jag kommer inte åt felsäkert läge eller boot options... vad är det frågan om ? Då är ju datorn helt bränd , eller kan man forcera felsäkert läge på något sätt, kan man typ plocka ut någon komponent så att den krashar så att man får upp den skärmen nästa gång man startar?

När windows laddar stänger du av datorn genom att hålla inne power-knappen i ca 3 sek. Då borde datorn köra felsäkert läge vid nästa uppstart.

Visade sig att det fanns någon random knapp typ vid tangentbordet som man var tvungen att starta datorn med för att komma åt bios :S

Följt guiden och fått en logg.
Tacksam om nån kan kolla loggen.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-06-2013 01
Ran by SYSTEM on 25-06-2013 20:31:05
Running from N:\
Windows 7 Home Premium (X64) OS Language: Swedish
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [2779024 2011-03-14] (CANON INC.)
HKLM\...\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1281512 2013-01-27] (Microsoft Corporation)
HKLM\...\Run: [Logitech Download Assistant] C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [Nvtmru] "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [1012000 2013-05-16] (NVIDIA Corporation)
HKLM-x32\...\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [52168 2008-06-29] (Elaborate Bytes AG)
HKLM-x32\...\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2009-11-04] (Sony Corporation)
HKLM-x32\...\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254696 2011-06-09] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-08-27] (Apple Inc.)
HKLM-x32\...\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [38872 2012-07-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [919008 2012-07-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1611160 2011-03-28] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE [452016 2011-01-15] (CANON INC.)
HKLM-x32\...\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [106496 2009-11-20] (NEC Electronics Corporation)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start [69632 2004-04-13] (InstallShield Software Corporation)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [421776 2012-09-09] (Apple Inc.)
HKLM-x32\...\Run: [AirPort Base Station Agent] "C:\Program Files (x86)\AirPort\APAgent.exe" [771360 2009-11-11] (Apple Inc.)
HKU\Mcx1-QUAD\...\Winlogon: [Shell] C:\Windows\eHome\McrMgr.exe [343552 2009-07-14] (Microsoft Corporation) <==== ATTENTION
HKU\Mcx2-QUAD\...\Winlogon: [Shell] C:\Windows\eHome\McrMgr.exe [343552 2009-07-14] (Microsoft Corporation) <==== ATTENTION
HKU\Ronnie\...\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [4280184 2012-03-08] (Microsoft Corporation)
HKU\Ronnie\...\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59280 2012-08-29] (Apple Inc.)
HKU\Ronnie\...\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe [59280 2012-09-05] (Apple Inc.)
HKU\Ronnie\...\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59280 2012-09-10] (Apple Inc.)
HKU\Ronnie\...\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe [x]
HKU\Ronnie\...\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup [196608 2004-04-17] (InstallShield Software Corporation)
HKU\Ronnie\...\Run: [Plex Media Server] "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe" [3997832 2013-06-03] (Plex, Inc.)
HKU\Ronnie\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] C:\Users\Ronnie\AppData\Local\Temp\vvjsumrgnggihirib.exe [67584 2013-06-25] (NVIDIA Corporation)
HKU\Ronnie\...\Winlogon: [Shell] cmd.exe [345088 2010-11-20] (Microsoft Corporation) <==== ATTENTION
HKU\Ronnie\...\Command Processor: "C:\Users\Ronnie\AppData\Local\Temp\vvjsumrgnggihirib.exe" <===== ATTENTION!
Startup: C:\ProgramData\Start Menu\Programs\Startup\PS3 Media Server.lnk
ShortcutTarget: PS3 Media Server.lnk -> C:\Program Files (x86)\PS3 Media Server\PMS.exe (A. Brochard)

==================== Services (Whitelisted) =================

S2 GEST Service; C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe [68136 2009-12-02] ()
S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
S3 PS3 Media Server; C:\Program Files (x86)\PS3 Media Server\win32\service\wrapper.exe [217088 2008-08-17] ()

==================== Drivers (Whitelisted) ====================

S3 gdrv; C:\Windows\gdrv.sys [25640 2013-06-25] (Windows (R) Server 2003 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-06-25] (Windows (R) Server 2003 DDK provider)
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
S2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S1 ASPI32; No ImagePath

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-06-25 20:30 - 2013-06-25 20:30 - 00000000 ____D C:\FRST
2013-06-25 18:56 - 2013-06-25 18:56 - 00117235 ____A C:\Users\Ronnie\AppData\Local\2433f433
2013-06-25 18:56 - 2013-06-25 18:56 - 00117184 ____A C:\ProgramData\2433f433
2013-06-25 18:56 - 2013-06-25 18:56 - 00117179 ____A C:\Users\Ronnie\AppData\Roaming\2433f433
2013-06-25 09:56 - 2013-06-25 09:56 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{14F940E0-AD06-4631-8AD0-7B6ECD648403}
2013-06-23 21:56 - 2013-06-24 21:56 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{2907A54D-B275-44CD-AB1F-5170DB2D12B2}
2013-06-23 21:34 - 2013-06-23 21:34 - 00007605 ____A C:\Users\Ronnie\AppData\Local\Resmon.ResmonCfg
2013-06-23 19:44 - 2013-06-23 21:34 - 00000000 ____D C:\Users\Ronnie\Desktop\Astrid Lindgren
2013-06-23 09:55 - 2013-06-23 09:55 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{9C618BF5-9908-4FC6-8304-D3B5EFABB712}
2013-06-15 11:40 - 2013-06-15 11:40 - 00000000 ____D C:\Users\Ronnie\Desktop\Olivers scanningar
2013-06-14 09:52 - 2013-06-22 21:55 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{BB88DC16-D7B6-4FB5-BA60-327071B91B6A}
2013-06-13 21:52 - 2013-06-13 21:52 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{60E32680-3F7C-4F18-8DF6-9A592A5271DB}
2013-06-13 20:59 - 2013-06-13 20:59 - 04169200 ____A (TeamViewer) C:\Users\Ronnie\Desktop\TeamViewerQS_sv.exe
2013-06-13 20:44 - 2013-04-10 10:09 - 00849992 ____A (Realtek ) C:\Windows\System32\Drivers\Rt64win7.sys
2013-06-13 20:39 - 2013-06-13 20:39 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-06-13 20:36 - 2013-06-13 20:36 - 00000000 ____D C:\Program Files (x86)\Intel
2013-06-13 20:36 - 2013-02-27 14:37 - 00053248 ____A (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2013-06-13 20:35 - 2013-06-13 20:35 - 00000000 ____D C:\Intel
2013-06-13 20:31 - 2013-06-13 20:35 - 05881080 ____A (Intel Corporation) C:\Users\Ronnie\Downloads\infinst_autol.exe
2013-06-13 20:31 - 2013-05-12 22:42 - 27775776 ____A (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 25256224 ____A (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 21096736 ____A (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 17560352 ____A (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 11216160 ____A (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys
2013-06-13 20:31 - 2013-05-12 22:42 - 09233688 ____A (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 07682960 ____A (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 07641832 ____A (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 06324360 ____A (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 02942240 ____A (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 02754336 ____A (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 02363680 ____A (NVIDIA Corporation) C:\Windows\System32\nvcuvenc.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 02002720 ____A (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 01832224 ____A (NVIDIA Corporation) C:\Windows\System32\nvdispco6432018.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 01511712 ____A (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6432018.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 00550176 ____A (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 00518944 ____A (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 00443168 ____A (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-06-13 20:31 - 2013-05-12 22:42 - 00421152 ____A (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{FFDBEF6F-EE56-4C97-9D79-7C40C191E252}
2013-06-13 07:56 - 2013-05-17 02:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-13 07:56 - 2013-05-17 02:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-13 07:56 - 2013-05-17 02:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-13 07:56 - 2013-05-17 02:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-13 07:56 - 2013-05-17 02:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-13 07:56 - 2013-05-17 02:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-13 07:56 - 2013-05-17 02:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-13 07:56 - 2013-05-17 02:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-13 07:56 - 2013-05-17 01:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-13 07:56 - 2013-05-17 01:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-13 07:56 - 2013-05-17 01:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-13 07:56 - 2013-05-17 01:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-13 07:56 - 2013-05-17 01:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-13 07:56 - 2013-05-17 01:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-13 07:56 - 2013-05-17 01:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-13 07:56 - 2013-05-17 01:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-13 07:56 - 2013-05-17 01:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-13 07:56 - 2013-05-14 13:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-13 07:56 - 2013-05-14 09:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 09:51 - 2013-06-12 21:51 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{4FC2EF44-7DE5-42D8-AE98-45AD7645AF7F}
2013-06-12 09:49 - 2013-06-12 09:49 - 00282400 ____A C:\Windows\Minidump\061213-26254-01.dmp
2013-06-12 02:02 - 2013-06-08 15:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 02:02 - 2013-06-08 15:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 02:02 - 2013-06-08 15:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 02:02 - 2013-06-08 15:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 02:02 - 2013-06-08 15:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 02:02 - 2013-06-08 13:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 02:02 - 2013-06-08 12:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 02:02 - 2013-06-08 12:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 02:02 - 2013-06-08 12:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 02:02 - 2013-06-08 12:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 02:02 - 2013-06-08 12:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 02:02 - 2013-06-08 12:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-11 22:00 - 2013-05-13 06:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-11 22:00 - 2013-05-13 06:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-11 22:00 - 2013-05-13 06:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-11 22:00 - 2013-05-13 06:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-11 22:00 - 2013-05-13 05:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-11 22:00 - 2013-05-13 05:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-11 22:00 - 2013-05-13 05:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-11 22:00 - 2013-05-13 04:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-11 22:00 - 2013-05-13 04:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-11 22:00 - 2013-05-13 04:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-11 22:00 - 2013-05-10 06:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-11 22:00 - 2013-05-10 04:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-11 22:00 - 2013-05-08 07:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-11 22:00 - 2013-04-26 06:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-11 22:00 - 2013-04-26 05:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-11 22:00 - 2013-04-17 08:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-11 22:00 - 2013-04-17 07:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-11 21:59 - 2013-04-26 00:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-11 21:59 - 2013-03-31 23:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 21:46 - 2013-06-11 21:46 - 00288736 ____A C:\Windows\Minidump\061113-22776-01.dmp
2013-06-10 16:24 - 2013-06-11 16:25 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{844AFC43-2C95-41E3-9436-8F89079DE4F3}
2013-06-10 15:40 - 2013-06-10 15:40 - 00290584 ____A C:\Windows\Minidump\061013-21153-01.dmp
2013-06-07 20:25 - 2013-06-07 22:52 - 00000000 ____D C:\Users\Ronnie\Desktop\Bulten dockan
2013-06-07 04:23 - 2013-06-10 04:24 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{0FFD2579-0384-4E58-9812-B22EC93AD1DC}
2013-06-06 11:08 - 2013-06-06 11:08 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{59EBA902-1B1C-44F1-8807-F956256705C9}
2013-06-04 21:08 - 2013-06-05 21:09 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{5622C45A-F02E-496D-B3F8-995A0835E5D4}
2013-06-03 18:35 - 2013-06-03 18:35 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{00550D1D-07C2-44E0-87E3-772590BCABD6}
2013-06-01 18:07 - 2013-06-02 18:07 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{2550617F-D1A8-4673-9788-1E15A0FCFA70}
2013-05-28 14:51 - 2013-05-31 14:52 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{85F8A604-9F02-4A63-BB5A-10727D66C8C4}
2013-05-27 18:22 - 2013-05-27 18:22 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{547B21A9-2879-4AD0-8D7D-569B990CC878}
2013-05-27 06:21 - 2013-05-27 06:22 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{06FF22A1-1C1D-4FC3-9D14-695F3DCDD546}
2013-05-26 08:04 - 2013-05-26 08:12 - 00000000 ____D C:\Users\Ronnie\Desktop\Mc träning Höjden

==================== One Month Modified Files and Folders =======

2013-06-25 20:30 - 2013-06-25 20:30 - 00000000 ____D C:\FRST
2013-06-25 19:24 - 2011-08-04 20:55 - 00327680 ____A C:\Windows\System32\Ikeext.etl
2013-06-25 19:24 - 2010-05-24 22:05 - 00000321 ____A C:\service.log
2013-06-25 19:24 - 2010-05-24 19:02 - 01330473 ____A C:\Windows\WindowsUpdate.log
2013-06-25 19:10 - 2009-07-14 05:45 - 00013952 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-25 19:10 - 2009-07-14 05:45 - 00013952 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-25 19:03 - 2010-06-11 21:24 - 00000990 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-25 19:02 - 2012-08-05 00:00 - 00020132 ____A C:\Windows\setupact.log
2013-06-25 19:02 - 2010-05-24 21:55 - 00025640 ____A (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2013-06-25 19:02 - 2009-07-14 06:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-25 18:56 - 2013-06-25 18:56 - 00117235 ____A C:\Users\Ronnie\AppData\Local\2433f433
2013-06-25 18:56 - 2013-06-25 18:56 - 00117184 ____A C:\ProgramData\2433f433
2013-06-25 18:56 - 2013-06-25 18:56 - 00117179 ____A C:\Users\Ronnie\AppData\Roaming\2433f433
2013-06-25 18:45 - 2012-10-20 14:43 - 00000868 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-25 18:15 - 2012-11-07 19:54 - 00000000 ____D C:\Users\Ronnie\Desktop\Shared
2013-06-25 18:15 - 2011-10-24 23:08 - 00000000 ____D C:\Users\Ronnie\Desktop\iCloud Hämtmapp
2013-06-25 17:59 - 2010-06-11 21:24 - 00000994 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-25 17:26 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2013-06-25 09:56 - 2013-06-25 09:56 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{14F940E0-AD06-4631-8AD0-7B6ECD648403}
2013-06-25 05:28 - 2012-01-15 17:59 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-06-25 05:26 - 2011-10-24 23:07 - 00000000 ____D C:\Users\Ronnie\Desktop\iCloud Överförings mapp
2013-06-25 05:26 - 2010-05-24 19:42 - 00000000 ____D C:\Users\Ronnie\Tracing
2013-06-24 23:11 - 2010-05-24 20:34 - 00000000 ____D C:\Users\Ronnie\AppData\Roaming\uTorrent
2013-06-24 22:14 - 2010-06-26 23:41 - 00000000 ____D C:\Users\Ronnie\AppData\Roaming\vlc
2013-06-24 21:56 - 2013-06-23 21:56 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{2907A54D-B275-44CD-AB1F-5170DB2D12B2}
2013-06-23 21:34 - 2013-06-23 21:34 - 00007605 ____A C:\Users\Ronnie\AppData\Local\Resmon.ResmonCfg
2013-06-23 21:34 - 2013-06-23 19:44 - 00000000 ____D C:\Users\Ronnie\Desktop\Astrid Lindgren
2013-06-23 09:55 - 2013-06-23 09:55 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{9C618BF5-9908-4FC6-8304-D3B5EFABB712}
2013-06-22 21:55 - 2013-06-14 09:52 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{BB88DC16-D7B6-4FB5-BA60-327071B91B6A}
2013-06-17 07:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\NDF
2013-06-16 02:14 - 2011-02-17 20:29 - 01559942 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-16 02:14 - 2009-07-14 08:43 - 00664664 ____A C:\Windows\System32\perfh01D.dat
2013-06-16 02:14 - 2009-07-14 08:43 - 00142406 ____A C:\Windows\System32\perfc01D.dat
2013-06-16 02:14 - 2009-07-14 06:13 - 01559942 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-15 11:41 - 2012-09-29 17:59 - 00000000 ____D C:\Users\Ronnie\AppData\Local\Canon Easy-PhotoPrint EX
2013-06-15 11:40 - 2013-06-15 11:40 - 00000000 ____D C:\Users\Ronnie\Desktop\Olivers scanningar
2013-06-15 11:38 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\System32\FxsTmp
2013-06-14 21:35 - 2010-05-24 20:13 - 00000000 ____D C:\ProgramData\Adobe
2013-06-14 21:35 - 2010-05-24 20:07 - 00000000 ____D C:\Users\Ronnie\AppData\Roaming\Adobe
2013-06-13 21:52 - 2013-06-13 21:52 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{60E32680-3F7C-4F18-8DF6-9A592A5271DB}
2013-06-13 20:59 - 2013-06-13 20:59 - 04169200 ____A (TeamViewer) C:\Users\Ronnie\Desktop\TeamViewerQS_sv.exe
2013-06-13 20:39 - 2013-06-13 20:39 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-06-13 20:39 - 2011-01-10 20:20 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-06-13 20:36 - 2013-06-13 20:36 - 00000000 ____D C:\Program Files (x86)\Intel
2013-06-13 20:35 - 2013-06-13 20:35 - 00000000 ____D C:\Intel
2013-06-13 20:35 - 2013-06-13 20:31 - 05881080 ____A (Intel Corporation) C:\Users\Ronnie\Downloads\infinst_autol.exe
2013-06-13 20:33 - 2010-05-24 22:43 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-13 20:14 - 2010-05-25 21:29 - 00000000 ____D C:\Users\Ronnie\AppData\Roaming\TeamViewer
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{FFDBEF6F-EE56-4C97-9D79-7C40C191E252}
2013-06-12 21:51 - 2013-06-12 09:51 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{4FC2EF44-7DE5-42D8-AE98-45AD7645AF7F}
2013-06-12 10:45 - 2012-10-20 14:43 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 10:45 - 2011-06-08 21:47 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 09:49 - 2013-06-12 09:49 - 00282400 ____A C:\Windows\Minidump\061213-26254-01.dmp
2013-06-12 09:49 - 2013-04-20 20:15 - 582317973 ____A C:\Windows\MEMORY.DMP
2013-06-12 09:49 - 2010-05-24 22:18 - 00000000 ____D C:\Windows\Minidump
2013-06-12 02:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-06-12 02:02 - 2010-05-24 22:31 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-11 21:46 - 2013-06-11 21:46 - 00288736 ____A C:\Windows\Minidump\061113-22776-01.dmp
2013-06-11 16:25 - 2013-06-10 16:24 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{844AFC43-2C95-41E3-9436-8F89079DE4F3}
2013-06-10 15:40 - 2013-06-10 15:40 - 00290584 ____A C:\Windows\Minidump\061013-21153-01.dmp
2013-06-10 04:24 - 2013-06-07 04:23 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{0FFD2579-0384-4E58-9812-B22EC93AD1DC}
2013-06-08 15:08 - 2013-06-12 02:02 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 15:07 - 2013-06-12 02:02 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 15:06 - 2013-06-12 02:02 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 15:06 - 2013-06-12 02:02 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 15:06 - 2013-06-12 02:02 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 13:28 - 2013-06-12 02:02 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 12:42 - 2013-06-12 02:02 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 12:40 - 2013-06-12 02:02 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 12:40 - 2013-06-12 02:02 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 12:40 - 2013-06-12 02:02 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 12:40 - 2013-06-12 02:02 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 12:13 - 2013-06-12 02:02 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-07 22:52 - 2013-06-07 20:25 - 00000000 ____D C:\Users\Ronnie\Desktop\Bulten dockan
2013-06-07 20:28 - 2013-02-10 21:21 - 00000000 ____D C:\Users\Ronnie\Desktop\Mc bilder
2013-06-06 11:08 - 2013-06-06 11:08 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{59EBA902-1B1C-44F1-8807-F956256705C9}
2013-06-05 21:09 - 2013-06-04 21:08 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{5622C45A-F02E-496D-B3F8-995A0835E5D4}
2013-06-03 18:35 - 2013-06-03 18:35 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{00550D1D-07C2-44E0-87E3-772590BCABD6}
2013-06-02 18:07 - 2013-06-01 18:07 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{2550617F-D1A8-4673-9788-1E15A0FCFA70}
2013-05-31 14:52 - 2013-05-28 14:51 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{85F8A604-9F02-4A63-BB5A-10727D66C8C4}
2013-05-27 20:07 - 2013-01-08 21:02 - 00000000 ____D C:\Users\Ronnie\Desktop\Camillas mapp
2013-05-27 18:22 - 2013-05-27 18:22 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{547B21A9-2879-4AD0-8D7D-569B990CC878}
2013-05-27 06:22 - 2013-05-27 06:21 - 00000000 ____D C:\Users\Ronnie\AppData\Local\{06FF22A1-1C1D-4FC3-9D14-695F3DCDD546}
2013-05-26 08:12 - 2013-05-26 08:04 - 00000000 ____D C:\Users\Ronnie\Desktop\Mc träning Höjden

==================== Known DLLs (Whitelisted) ================

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================

Restore point made on: 2013-06-15 02:00:37
Restore point made on: 2013-06-16 02:00:42
Restore point made on: 2013-06-19 22:15:09
Restore point made on: 2013-06-24 21:51:58

==================== Memory info ===========================

Percentage of memory in use: 17%
Total physical RAM: 4094.49 MB
Available physical RAM: 3391.37 MB
Total Pagefile: 4092.64 MB
Available Pagefile: 3435.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:274.46 GB) NTFS (Disk=0 Partition=2)
Drive d: (600Gb) (Fixed) (Total:596.17 GB) (Free:169.55 GB) NTFS (Disk=1 Partition=1)
Drive e: (Backup) (Fixed) (Total:465.76 GB) (Free:118.8 GB) NTFS (Disk=2 Partition=1)
Drive f: (Ny volym) (Fixed) (Total:1863.01 GB) (Free:1567.91 GB) NTFS (Disk=3 Partition=1)
Drive n: () (Removable) (Total:29.8 GB) (Free:29.68 GB) FAT32 (Disk=9 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (Reserverad av systemet) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=1) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E4743366)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 596 GB) (Disk ID: E174179A)
Partition 1: (Not Active) - (Size=596 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 6E3A6E02)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: C8C0DCBD)
Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)

========================================================
Disk: 9 (Size: 30 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=30 GB) - (Type=0C)

LastRegBack: 2013-06-23 08:43

==================== End Of Log ============================

Nu kom datorn igång
tackar.
klistrar in Fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-06-2013 01
Ran by SYSTEM at 2013-06-26 09:18:41 Run:1
Running from N:\
Boot Mode: Recovery
==============================================

HKU\Ronnie\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx => Value deleted successfully.
HKU\Ronnie\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
HKU\Ronnie\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully.
C:\Users\Ronnie\AppData\Local\2433f433 => Moved successfully.
C:\ProgramData\2433f433 => Moved successfully.
C:\Users\Ronnie\AppData\Roaming\2433f433 => Moved successfully.

==== End of Fixlog ====

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16611
Run by Ronnie at 21:58:48 on 2013-06-26
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.46.1053.18.4094.1264 [GMT 2:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\WUDFHost.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Java\jre6\bin\javaw.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\AirPort\APAgent.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\splwow64.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
C:\Program Files (x86)\Plex\Plex Media Server\PlexDlnaServer.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\helppane.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
c:\Program Files\Microsoft Security Client\MpCmdRun.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.feber.se/
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Canon Easy-WebPrint EX BHO: {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Canon Easy-WebPrint EX: {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
EB: Canon Easy-WebPrint EX: {21347690-EC41-4F9A-8887-1F4AEE672439} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
uRun: [com.apple.dav.bookmarks.daemon] C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
uRun: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
uRun: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
uRun: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
uRun: [Plex Media Server] "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe"
mRun: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
mRun: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
mRun: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [AirPort Base Station Agent] "C:\Program Files (x86)\AirPort\APAgent.exe"
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\PS3MED~1.LNK - C:\Program Files (x86)\PS3 Media Server\PMS.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xportera till Microsoft Excel - C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/Faceb...
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i5...
DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i5...
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i5...
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{F10895FD-EC0B-46B4-A969-4D1EE2197040} : DHCPNameServer = 192.168.0.1
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
x64-Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [Logitech Download Assistant] C:\Windows\System32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
x64-Run: [Nvtmru] "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2013-1-20 230320]
R2 GEST Service;GEST Service for program management.;C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe [2010-5-24 68136]
R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2010-10-24 130008]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2009-10-24 360224]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-1-27 379360]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2009-11-20 75776]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2009-11-20 177152]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2013-6-13 849992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 DrvAgent64;DrvAgent64;C:\Windows\SysWOW64\drivers\DrvAgent64.SYS [2011-6-8 21712]
S3 PS3 Media Server;PS3 Media Server;C:\Program Files (x86)\PS3 Media Server\win32\service\wrapper.exe [2008-8-17 217088]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-5-10 19456]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-5-10 57856]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]
S3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-5-24 1255736]
.
=============== Created Last 30 ================
.
2013-06-26 19:25:56 -------- d-----w- C:\Users\Ronnie\AppData\Local\{E32CC2BB-8946-4C77-9A71-DD1D66F658F3}
2013-06-26 13:57:30 76232 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C4642811-66BC-45EC-A61B-501B59E6B442}\offreg.dll
2013-06-26 10:10:58 9552976 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C4642811-66BC-45EC-A61B-501B59E6B442}\mpengine.dll
2013-06-26 07:48:22 9552976 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-26 07:30:01 -------- d-----w- C:\Users\Ronnie\AppData\Local\Programs
2013-06-26 07:22:36 -------- d-----w- C:\Users\Ronnie\AppData\Local\{7503F598-DB94-49C4-B85A-F24C6155CB1F}
2013-06-25 19:30:59 -------- d-----w- C:\FRST
2013-06-25 08:56:46 -------- d-----w- C:\Users\Ronnie\AppData\Local\{14F940E0-AD06-4631-8AD0-7B6ECD648403}
2013-06-23 20:56:09 -------- d-----w- C:\Users\Ronnie\AppData\Local\{2907A54D-B275-44CD-AB1F-5170DB2D12B2}
2013-06-23 08:55:41 -------- d-----w- C:\Users\Ronnie\AppData\Local\{9C618BF5-9908-4FC6-8304-D3B5EFABB712}
2013-06-20 21:16:52 964552 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F716D184-0181-467C-A485-566F1E48EEEF}\gapaengine.dll
2013-06-14 08:52:57 -------- d-----w- C:\Users\Ronnie\AppData\Local\{BB88DC16-D7B6-4FB5-BA60-327071B91B6A}
2013-06-13 20:52:33 -------- d-----w- C:\Users\Ronnie\AppData\Local\{60E32680-3F7C-4F18-8DF6-9A592A5271DB}
2013-06-13 19:44:59 849992 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
2013-06-13 19:36:37 53248 ----a-w- C:\Windows\SysWow64\CSVer.dll
2013-06-13 19:35:18 -------- d-----w- C:\Intel
2013-06-13 08:51:53 -------- d-----w- C:\Users\Ronnie\AppData\Local\{FFDBEF6F-EE56-4C97-9D79-7C40C191E252}
2013-06-12 08:51:20 -------- d-----w- C:\Users\Ronnie\AppData\Local\{4FC2EF44-7DE5-42D8-AE98-45AD7645AF7F}
2013-06-11 21:00:53 1910632 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2013-06-11 20:59:52 1887232 ----a-w- C:\Windows\System32\d3d11.dll
2013-06-11 20:59:52 1505280 ----a-w- C:\Windows\SysWow64\d3d11.dll
2013-06-10 15:24:38 -------- d-----w- C:\Users\Ronnie\AppData\Local\{844AFC43-2C95-41E3-9436-8F89079DE4F3}
2013-06-07 03:23:30 -------- d-----w- C:\Users\Ronnie\AppData\Local\{0FFD2579-0384-4E58-9812-B22EC93AD1DC}
2013-06-06 10:08:10 -------- d-----w- C:\Users\Ronnie\AppData\Local\{59EBA902-1B1C-44F1-8807-F956256705C9}
2013-06-04 20:08:58 -------- d-----w- C:\Users\Ronnie\AppData\Local\{5622C45A-F02E-496D-B3F8-995A0835E5D4}
2013-06-03 17:35:20 -------- d-----w- C:\Users\Ronnie\AppData\Local\{00550D1D-07C2-44E0-87E3-772590BCABD6}
2013-06-01 17:07:26 -------- d-----w- C:\Users\Ronnie\AppData\Local\{2550617F-D1A8-4673-9788-1E15A0FCFA70}
2013-05-28 13:51:54 -------- d-----w- C:\Users\Ronnie\AppData\Local\{85F8A604-9F02-4A63-BB5A-10727D66C8C4}
.
==================== Find3M ====================
.
2013-06-26 10:05:14 25640 ----a-w- C:\Windows\gdrv.sys
2013-06-12 09:45:16 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 09:45:16 692104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2013-06-08 12:28:46 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
2013-06-08 11:13:19 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2013-05-17 01:25:57 1767936 ----a-w- C:\Windows\SysWow64\wininet.dll
2013-05-17 01:25:27 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll
2013-05-17 01:25:26 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll
2013-05-17 01:25:26 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
2013-05-17 00:59:03 2241024 ----a-w- C:\Windows\System32\wininet.dll
2013-05-17 00:58:10 3958784 ----a-w- C:\Windows\System32\jscript9.dll
2013-05-17 00:58:08 67072 ----a-w- C:\Windows\System32\iesetup.dll
2013-05-17 00:58:08 136704 ----a-w- C:\Windows\System32\iesysprep.dll
2013-05-14 12:23:25 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe
2013-05-14 08:40:13 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
2013-05-13 05:51:01 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
2013-05-13 05:51:00 1464320 ----a-w- C:\Windows\System32\crypt32.dll
2013-05-13 05:51:00 139776 ----a-w- C:\Windows\System32\cryptnet.dll
2013-05-13 05:50:40 52224 ----a-w- C:\Windows\System32\certenc.dll
2013-05-13 04:45:55 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2013-05-13 04:45:55 1160192 ----a-w- C:\Windows\SysWow64\crypt32.dll
2013-05-13 04:45:55 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
2013-05-13 03:43:55 1192448 ----a-w- C:\Windows\System32\certutil.exe
2013-05-13 03:08:10 903168 ----a-w- C:\Windows\SysWow64\certutil.exe
2013-05-13 03:08:06 43008 ----a-w- C:\Windows\SysWow64\certenc.dll
2013-05-12 20:34:14 6491936 ----a-w- C:\Windows\System32\nvcpl.dll
2013-05-12 20:34:14 3514656 ----a-w- C:\Windows\System32\nvsvc64.dll
2013-05-12 20:34:12 884512 ----a-w- C:\Windows\System32\nvvsvc.exe
2013-05-12 20:34:12 63776 ----a-w- C:\Windows\System32\nvshext.dll
2013-05-12 20:34:12 2555680 ----a-w- C:\Windows\System32\nvsvcr.dll
2013-05-12 20:34:11 237856 ----a-w- C:\Windows\System32\nvmctray.dll
2013-05-10 05:49:27 30720 ----a-w- C:\Windows\System32\cryptdlg.dll
2013-05-10 03:20:54 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll
2013-05-02 15:29:56 278800 ------w- C:\Windows\System32\MpSigStub.exe
2013-04-26 05:51:36 751104 ----a-w- C:\Windows\System32\win32spl.dll
2013-04-26 04:55:21 492544 ----a-w- C:\Windows\SysWow64\win32spl.dll
2013-04-17 07:02:06 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2013-04-17 06:24:46 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2013-04-13 05:49:23 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49:19 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49:19 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49:19 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45:16 474624 ----a-w- C:\Windows\apppatch\AcSpecfc.dll
2013-04-13 04:45:15 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll
2013-04-12 14:45:08 1656680 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2013-04-10 09:09:24 73800 ----a-w- C:\Windows\System32\RtNicProp64.dll
2013-04-10 09:09:24 108104 ----a-w- C:\Windows\System32\RTNUninst64.dll
2013-04-10 06:01:54 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys
2013-04-10 06:01:53 983400 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
2013-04-10 03:30:50 3153920 ----a-w- C:\Windows\System32\win32k.sys
2013-04-04 12:50:32 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys
.
============= FINISH: 21:59:34,52 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 2010-05-24 20:08:20
System Uptime: 2013-06-26 12:04:39 (9 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | EP45-DS3L
Processor: Intel(R) Core(TM)2 Quad CPU Q8200 @ 2.33GHz | Socket 775 | 2333/333mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 466 GiB total, 274,207 GiB free.
D: is Removable
E: is FIXED (NTFS) - 466 GiB total, 118,804 GiB free.
F: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
J: is Removable
K: is CDROM ()
L: is Removable
R: is FIXED (NTFS) - 1863 GiB total, 1567,906 GiB free.
X: is FIXED (NTFS) - 596 GiB total, 176,429 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP764: 2013-06-15 03:00:12 - Windows Update
RP765: 2013-06-16 03:00:10 - Windows Update
RP766: 2013-06-19 23:14:41 - Windows Update
RP767: 2013-06-24 22:51:27 - Windows Update
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
Adobe Flash Player 11 ActiveX
Adobe Photoshop CS
Adobe Reader 9.5.2 - Svenska
AirPort
Apple-programstöd
Apple Mobile Device Support
Apple Software Update
µTorrent
BankID säkerhetsprogram
Bonjour
Canon Easy-PhotoPrint EX
Canon Easy-PhotoPrint Pro
Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data
Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data
Canon Easy-WebPrint EX
Canon IJ Network Scanner Selector EX
Canon IJ Network Tool
Canon Inkjet Printer Driver Add-On Module
Canon MG6200 series användarregistrering
Canon MG6200 series MP Drivers
Canon MG6200 series On-screen Manual
Canon MP Navigator EX 5.0
Canon My Printer
Canon Solution Menu EX
Clone2Go Video Converter Professional 1.8.6
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DriverAgent by eSupport.com
Energy Saver Advance B10.0309.1
ESWIN_USB 0.6j
Google Earth Plug-in
Google Update Helper
GoPro CineForm Studio 1.2.1
iCloud
ImgBurn
iTunes
Java Auto Updater
Java(TM) 6 Update 27
Junk Mail filter update
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile Language Pack - SVE
Microsoft .NET Framework 4 Client Profile SVE Language Pack
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Extended Language Pack - SVE
Microsoft .NET Framework 4 Extended SVE Language Pack
Microsoft Application Error Reporting
Microsoft Camera Codec Pack
Microsoft Expression Blend 2
Microsoft Expression Design 2
Microsoft Expression Encoder 2
Microsoft Expression Media 2 SP2
Microsoft Expression Studio 2
Microsoft Expression Web 2
Microsoft Expression Web 2 MUI (English)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Excel 2007 Help Uppdatering (KB963678)
Microsoft Office Excel MUI (Swedish) 2007
Microsoft Office File Validation Add-In
Microsoft Office FrontPage 2003
Microsoft Office Home and Student 2007
Microsoft Office Live Add-in 1.5
Microsoft Office Office 64-bit Components 2007
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (Swedish) 2007
Microsoft Office Outlook 2010
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2010
Microsoft Office Powerpoint 2007 Help Uppdatering (KB963669)
Microsoft Office PowerPoint MUI (Swedish) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (English) 2010
Microsoft Office Proof (Finnish) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (French) 2010
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proof (Swedish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing (English) 2010
Microsoft Office Proofing (Swedish) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared 64-bit MUI (English) 2007
Microsoft Office Shared 64-bit MUI (English) 2010
Microsoft Office Shared 64-bit MUI (Swedish) 2007
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared MUI (Swedish) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Word 2007 Help Uppdatering (KB963665)
Microsoft Office Word MUI (Swedish) 2007
Microsoft Outlook 2010
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
MobileMe Control Panel
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
NEC Electronics USB 3.0 Host Controller Driver
NVIDIA-uppdatering 4.11.9
NVIDIA GeForce Experience 1.5
NVIDIA Grafikdrivrutin 320.18
NVIDIA Install Application
NVIDIA PhysX
NVIDIA PhysX systemprogramvara 9.12.1031
NVIDIA Update Components
NVIDIAs kontrollpanel 320.18
P1 Faktura 2.04
Plex
Plex Media Server
PMB
PSP Video 9 2.25
PVSonyDll
QuickTime
Realtek Ethernet Controller Driver
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile Language Pack - SVE (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile Language Pack - SVE (KB2518870)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Security Update for Microsoft Filter Pack 2.0 (KB2553501) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
Security Update for Microsoft OneNote 2010 (KB2760600) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Expression Web 2 (KB957827)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office 2007 System (KB2539530)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices (03/07/2012 )
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Movie Maker 2.6
WinRAR archiver
VirtualCloneDrive
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VLC media player 2.0.5
.
==== End Of File ===========================

Ska följa dina instruktioner.
Måste säga tack så jätte mycket
Riktigt snällt att du hjälper till

Har inte gjort någon uppdatering på Gigabyte den 26/6
nått som ska tas bort?

# AdwCleaner v2.303 - Logfile created 06/27/2013 at 07:14:44
# Updated 08/06/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Ronnie - QUAD
# Boot Mode : Normal
# Running from : C:\Users\Ronnie\Desktop\adwcleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

File Found : C:\Users\Ronnie\AppData\Local\Temp\Uninstall.exe
Folder Found : C:\ProgramData\boost_interprocess

***** [Registry] *****

Key Found : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe

***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Registry is clean.

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Ronnie\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [847 octets] - [27/06/2013 07:14:44]

########## EOF - C:\AdwCleaner[R1].txt - [906 octets] ##########

Brukar köra systemåterställning även på polisen. Tar bort det allra mesta av skumma saker som kan hända.
Enkel och säker åtgärd. Tappade uppdateringar är oftast enkla att få tillbaka ändå.

Hur skadar du kompontenterna när du drar ur sladden. Det du riskerar är att förlora data du håller på med eller att den blir korrupt.

Jag har aldrig hört att hårdvaran går sönder... det är ju isåfall om nätagget skulle gå sönder... men då är det nog dags att byta nätagg hur som helst.

https://www.virustotal.com/sv/file/17927b93b2d6ab4271c158f039...

Bitdefender "Ukash" revomal tool
http://www.bitdefender.com/support/how-to-remove-fbi-ransomwa...

Eller

Hitman Pro kickstart är utformad för att ta väck "Ukash trojanen" http://www.surfright.nl/en/kickstart

C:\Users\Ronnie\AppData\Local\Temp\vvjsumrgnggihirib.exe Win32/Moure.A trojan
C:\Users\Ronnie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31\3a82db1f-2907022e a variant of Java/Exploit.Agent.OSD trojan
R:\Program\add-ner8.iso multiple threats
R:\Program\SetupImgBurn_2.5.1.0.exe multiple threats
R:\Program\Faktura program\Visma Enskild Firma 2012.x - [Papi Raton]\visma.enskild.firma.v2012.x-patch.exe a variant of Win32/HackTool.Patcher.T application

Bara och radera de filerna?

Har faktiskt köpt enskild firma till företaget
så "hacktool" ryker med.

SÅ java filerna ligger kvar trots att jag tog bort java i förrgår?

Super support av CeciliaB

Är det någon som vet vilka sidor som sprider den här skiten?

Tack Tack Tack, det fungerar!! ;P Satan va rädd ja blev när jag fick de hade ingen aning om vad jag hade gjort... :I

Ja men det blir ju så tragikomiskt när alla "intresserade sweclockers" kommer in i tråden UTAN att i huvudtaget läsa och uppdatera sin begränsade kunskap alls. med överlägsen attityd och hånar folk som försöker på riktigt förstå och bli av med skadlig kod

Vart 7e inlägg i den här tråden är av den nivån "varför håller ni på o grejjjjar, det är bara ta bort 4939583986.exe i aktivitetshanteraren. VIPPS"

dessutom av skribenter som uppenbarligen fått viruset flera gånger.
All heder åt Cecilia som har sånt tålamod att upprepa allting åt alla självutnämnda experter som inte kan annat än skryta om sin hårdvara men inte ens har systemtänk som en 10 åring.