Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 16:52:36, on 25.1.2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17496) CHROME: 40.0.2214.91 FIREFOX: 35.0 (x86 fi) Boot mode: Normal Running processes: C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe F:\Program Files (x86)\Steam\Steam.exe C:\Users\Perustili\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Users\Perustili\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\mIRC\mirc.exe C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files (x86)\Winamp\winampa.exe C:\Program Files (x86)\Citrix\ICA Client\concentr.exe C:\Program Files (x86)\WAGO Software\CoDeSys ENI Server\ENISysTray.exe C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe C:\Program Files\AVAST Software\Avast\avastui.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe F:\Program Files (x86)\Steam\bin\steamwebhelper.exe C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_287.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_287.exe C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe C:\Program Files (x86)\Origin\Origin.exe C:\Users\Perustili\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Perustili\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Perustili\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Perustili\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Perustili\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Perustili\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Perustili\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Perustili\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe C:\Users\Perustili\Desktop\HijackThis.exe C:\Windows\SysWOW64\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: DIALux 3.1 ULDBrowserHelper Class - {69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2} - C:\Program Files (x86)\DIALux\DLXShellExtension.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Microsoft-tilin kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60 O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [ENISysTray] C:\Program Files (x86)\WAGO Software\CoDeSys ENI Server\ENISysTray.exe O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Perustili\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Steam] "F:\Program Files (x86)\Steam\steam.exe" -silent O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Perustili\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [KiesPDLR.exe] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" O4 - Startup: Dropbox.lnk = Perustili\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Startup: miIRC.lnk = C:\Program Files (x86)\mIRC\mirc.exe O4 - Startup: Samsung SSD Magician.lnk = C:\Program Files (x86)\Samsung SSD Magician\Samsung SSD Magician.exe O8 - Extra context menu item: Läh&etä OneNoteen - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: V&ie Microsoft Exceliin - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 O9 - Extra button: Lähetä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Läh&etä OneNoteen - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: OneNoten linkitetyt &muistiinpanot - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNoten linkitetyt &muistiinpanot - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{46CB123A-D7D5-4167-8CC5-D603BCD1E3F8}: NameServer = 193.229.0.40,193.229.0.42 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @appmgmts.dll,-3250 (AppMgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\cscsvc.dll,-200 (CscService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: DIAL Communication Service (DialComService) - DIAL GmbH - C:\Program Files (x86)\DIAL GmbH\DIAL Communication Framework\DialComService.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: ENI Server - 3S-Smart Software Solutions GmbH - C:\Program Files (x86)\WAGO Software\CoDeSys ENI Server\ENI.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Google Päivitä-palvelu (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Päivitä-palvelu (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\peerdistsvc.dll,-9000 (PeerDistSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe -- End of file - 30582 bytes
Lataa FarBar Recovery Scan Tool. 32-Bit versio Tästä 64-Bit versio Tästä Tallenna ohjelma työpöydällesi ja käynnistä se. Ennen tarkistusta lisää ruksi Addition.txt kohtaan ja paina sitten " Scan " Kun ohjelman tarkistus on valmis, se avaa 2 tekstitiedostoa ( FRST.txt ja Additional.txt ) Lähetä molemmat lokitiedostot seuraavassa viestissäsi.
FRST: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-01-2015 Ran by Perustili (administrator) on PERUSTILI-PC on 31-01-2015 00:33:01 Running from C:\Users\Perustili\Desktop Loaded Profiles: Perustili (Available profiles: Perustili) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: suomi (Suomi) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\System32\PnkBstrA.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (3S-Smart Software Solutions GmbH) C:\Program Files (x86)\WAGO Software\CoDeSys ENI Server\ENI.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Valve Corporation) F:\Program Files (x86)\Steam\Steam.exe (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Perustili\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Dropbox, Inc.) C:\Users\Perustili\AppData\Roaming\Dropbox\bin\Dropbox.exe (mIRC Co. Ltd.) C:\Program Files (x86)\mIRC\mirc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe (3S-Smart Software Solutions GmbH) C:\Program Files (x86)\WAGO Software\CoDeSys ENI Server\ENISysTray.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (BitTorrent, Inc.) C:\Program Files (x86)\uTorrent\uTorrent.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2012-08-15] (Realtek Semiconductor) HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.) HKLM\...\Run: [IntelliType Pro] => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1464944 2012-11-02] (Microsoft Corporation) HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2076272 2012-11-02] (Microsoft Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284480 2012-05-30] (Intel Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-28] (Nullsoft, Inc.) HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [309184 2012-03-28] (Citrix Systems, Inc.) HKLM-x32\...\Run: [ENISysTray] => C:\Program Files (x86)\WAGO Software\CoDeSys ENI Server\ENISysTray.exe [245760 2009-01-20] (3S-Smart Software Solutions GmbH) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-02-14] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-08-08] (AVAST Software) Winlogon\Notify\igfxcui: igfxdev.dll [X] Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Run: [Google Update] => C:\Users\Perustili\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-16] (Google Inc.) HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [1942720 2015-01-27] (Valve Corporation) HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd) HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Run: [Spotify Web Helper] => C:\Users\Perustili\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-24] (Spotify Ltd) HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung) HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Run: [uTorrent] => C:\Program Files (x86)\uTorrent\uTorrent.exe [399224 2014-10-02] (BitTorrent, Inc.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation) Startup: C:\Users\Perustili\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Perustili\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\miIRC.lnk ShortcutTarget: miIRC.lnk -> C:\Program Files (x86)\mIRC\mirc.exe (mIRC Co. Ltd.) Startup: C:\Users\Perustili\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung SSD Magician.lnk ShortcutTarget: Samsung SSD Magician.lnk -> C:\Program Files (x86)\Samsung SSD Magician\Samsung SSD Magician.exe (Samsung Electronics.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2678827067-1194141342-301731634-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 HKU\S-1-5-21-2678827067-1194141342-301731634-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01 HKU\S-1-5-21-2678827067-1194141342-301731634-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fi.msn.com/?ocid=iehp HKU\S-1-5-21-2678827067-1194141342-301731634-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01 SearchScopes: HKLM-x32 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\S-1-5-21-2678827067-1194141342-301731634-1000 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\S-1-5-21-2678827067-1194141342-301731634-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: DIALux 3.1 ULDBrowserHelper Class -> {69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2} -> C:\Program Files (x86)\DIALux\DLXShellExtension.dll (DIAL GmbH, Germany) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Microsoft-tilin kirjautumisapuohjelma -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: dialux - {8352FA4C-39C6-11D3-ADBA-00A0244FB1A2} - C:\Program Files (x86)\DIALux\DLXToolBox.dll (DIAL GmbH, Germany) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.) Tcpip\Parameters: [DhcpNameServer] 193.229.0.40 193.229.0.42 Tcpip\..\Interfaces\{46CB123A-D7D5-4167-8CC5-D603BCD1E3F8}: [NameServer] 193.229.0.40,193.229.0.42 FireFox: ======== FF ProfilePath: C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default FF DefaultSearchUrl: https://www.google.com/search FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: www.google.com FF Keyword.URL: https://www.google.com/search FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll () FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll No File FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll (EA Digital Illusions CE AB) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll () FF Plugin-x32: @esn/esnlaunch,version=1.132.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2678827067-1194141342-301731634-1000: @acestream.net/acestreamplugin,version=2.2.2-next -> C:\Users\Perustili\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies) FF Plugin HKU\S-1-5-21-2678827067-1194141342-301731634-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Perustili\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKU\S-1-5-21-2678827067-1194141342-301731634-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Perustili\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKU\S-1-5-21-2678827067-1194141342-301731634-1000: ubisoft.com/uplaypc -> F:\Ubisoft Game Launcher\npuplaypc.dll () FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\CCMSDK.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\cgpcfg.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\CgpCore.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\confmgr.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctxlogging.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctxmui.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\icafile.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\icalogon.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npicaN.dll () FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\sslsdk_b.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\TcpPServ.dll (Citrix Systems, Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\bookplus-fi.xml FF Extension: Click&Clean - C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default\Extensions\clickclean@hotcleaner.com [2013-12-16] FF Extension: FoxyProxy Standard - C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default\Extensions\foxyproxy@eric.h.jung [2014-12-28] FF Extension: DownloadHelper - C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-05] FF Extension: YouTube Video Downloader (Lite) - C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default\Extensions\cccc5f0d-b9d0-4314-88b5-7e27551f9e84@jetpack.xpi [2014-06-26] FF Extension: Magic Actions for YouTube™ - C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default\Extensions\jid0-UVAeBCfd34Kk5usS8A1CBiobvM8@jetpack.xpi [2014-08-03] FF Extension: Media Hint - C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default\Extensions\mediahint@jetpack.xpi [2012-12-25] FF Extension: Easy YouTube Video Downloader - C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2012-08-16] FF Extension: Adblock Plus - C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-16] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-08-16] FF HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\Perustili\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org Chrome: ======= CHR HomePage: Default -> www.google.com CHR StartupUrls: Default -> "hxxp://www.google.com/", "hxxp://www.radiosuomipop.fi/" CHR Profile: C:\Users\Perustili\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Magic Actions for YouTube™) - C:\Users\Perustili\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-10-31] CHR Extension: (Adblock Plus) - C:\Users\Perustili\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-31] CHR Extension: (FoxyProxy Basic) - C:\Users\Perustili\AppData\Local\Google\Chrome\User Data\Default\Extensions\dookpfaalaaappcdneeahomimbllocnb [2014-06-25] CHR Extension: (Magic Player) - C:\Users\Perustili\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpckgflgdapkpabemgkielbefdildaio [2014-03-30] CHR Extension: (Google Wallet) - C:\Users\Perustili\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22] CHR HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Chrome\Extension: [kpckgflgdapkpabemgkielbefdildaio] - C:\Users\Perustili\AppData\Roaming\ACEStream\extensions\chrome_new\magicplayer.crx [2014-01-28] StartMenuInternet: Google Chrome.OI5MTUVLQCOAJCQSIZGC3RGMUA - C:\Users\Perustili\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-07] (AVAST Software) S3 DialComService; C:\Program Files (x86)\DIAL GmbH\DIAL Communication Framework\DialComService.exe [1863952 2013-03-05] (DIAL GmbH) R2 ENI Server; C:\Program Files (x86)\WAGO Software\CoDeSys ENI Server\ENI.exe [651264 2009-01-20] (3S-Smart Software Solutions GmbH) [File not signed] S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [614624 2014-09-02] (Futuremark) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-01-30] (Electronic Arts) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-17] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-17] () S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [762320 2015-01-17] (Tunngle.net GmbH) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R3 WinHttpAutoProxySvc; winhttp.dll [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-07] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-07] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-07] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-07] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-28] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-28] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-28] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-07] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-09-11] (DT Soft Ltd) R3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0098.sys [28768 2013-10-29] (SoftEther Project at University of Tsukuba, Japan.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] () R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.) R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net) S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation) S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X] S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S3 WLRAWMp50x64; System32\Drivers\WLRAWMp50x64.sys [X] S3 WLRAWSp50x64; System32\Drivers\WLRAWSp50x64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-31 00:33 - 2015-01-31 00:33 - 00030602 _____ () C:\Users\Perustili\Desktop\FRST.txt 2015-01-31 00:32 - 2015-01-31 00:33 - 00000000 ____D () C:\FRST 2015-01-31 00:32 - 2015-01-31 00:32 - 02130432 _____ (Farbar) C:\Users\Perustili\Desktop\FRST64.exe 2015-01-30 17:59 - 2015-01-28 02:42 - 00000000 ____D () C:\Users\Perustili\Desktop\data 2015-01-30 17:58 - 2015-01-30 17:58 - 00002189 _____ () C:\Users\Perustili\Desktop\Dying Light Fixes-12-.zip 2015-01-29 14:10 - 2015-01-29 14:10 - 00007605 _____ () C:\Users\Perustili\AppData\Local\Resmon.ResmonCfg 2015-01-28 10:37 - 2015-01-10 00:27 - 00621200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2015-01-28 10:36 - 2015-01-13 06:15 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 32102544 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 25459856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 24765584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 20465296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 13295552 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 13210248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 10774544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 10714488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 10274448 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-01-28 10:36 - 2015-01-10 10:07 - 03607184 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 03245712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434725.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 01556808 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434725.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00994712 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00969360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00942736 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00929424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00906384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00877488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00496456 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00399688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00390472 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00353040 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00345744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2015-01-28 10:36 - 2015-01-10 10:07 - 00305320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2015-01-27 18:12 - 2015-01-30 18:40 - 00000000 ____D () C:\Users\Perustili\Documents\DyingLight 2015-01-27 18:12 - 2015-01-28 12:27 - 00000000 ____D () C:\ProgramData\Steam 2015-01-27 17:31 - 2015-01-27 17:31 - 00000567 _____ () C:\Users\Public\Desktop\Dying Light.lnk 2015-01-27 16:41 - 2015-01-27 16:41 - 00000000 _____ () C:\Windows\SysWOW64\Access.dat 2015-01-27 16:36 - 2015-01-30 09:33 - 00001055 _____ () C:\Windows\setupact.log 2015-01-27 16:36 - 2015-01-27 16:36 - 00000000 _____ () C:\Windows\setuperr.log 2015-01-27 16:35 - 2015-01-30 22:41 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\Tunngle 2015-01-27 16:35 - 2015-01-30 22:41 - 00000000 ____D () C:\ProgramData\Tunngle 2015-01-27 16:35 - 2015-01-27 16:36 - 00000000 ____D () C:\Program Files (x86)\Tunngle 2015-01-27 16:35 - 2015-01-27 16:35 - 00000991 _____ () C:\Users\Public\Desktop\Tunngle.lnk 2015-01-27 16:35 - 2015-01-27 16:35 - 00000000 ____D () C:\Users\Public\Documents\Tunngle 2015-01-27 16:35 - 2015-01-27 16:35 - 00000000 ____D () C:\Users\Perustili\Documents\Tunngle 2015-01-27 16:35 - 2015-01-27 16:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle 2015-01-27 16:35 - 2009-09-16 07:02 - 00031232 _____ (Tunngle.net) C:\Windows\system32\Drivers\tap0901t.sys 2015-01-26 21:45 - 2015-01-26 21:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-25 16:52 - 2015-01-25 16:52 - 00030584 _____ () C:\Users\Perustili\Desktop\hijackthis.log 2015-01-25 16:49 - 2015-01-25 16:49 - 00388608 _____ (Trend Micro Inc.) C:\Users\Perustili\Desktop\HijackThis.exe 2015-01-25 10:59 - 2015-01-25 10:59 - 00014610 _____ () C:\Users\Perustili\Desktop\Taken.3.subheaven.zip 2015-01-25 10:59 - 2015-01-23 15:43 - 00030716 ____N () C:\Users\Perustili\Desktop\Taken.3.HC.HDRip.XViD.AC3.juggs[ETRG].sub 2015-01-24 12:47 - 2015-01-24 12:47 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Perustili\Desktop\mbam-setup-2.0.4.1028.exe 2015-01-24 12:47 - 2015-01-24 12:47 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-01-24 12:47 - 2015-01-24 12:47 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-01-24 12:47 - 2015-01-24 12:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-01-24 12:47 - 2015-01-24 12:47 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-01-24 12:47 - 2015-01-24 12:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-01-24 12:47 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-01-24 12:47 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-01-24 12:47 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-01-24 12:40 - 2015-01-24 12:40 - 37987520 _____ (Microsoft Corporation) C:\Users\Perustili\Desktop\Windows-KB890830-x64-V5.20.exe 2015-01-23 23:27 - 2015-01-23 23:27 - 00798720 _____ (NodeSoft) C:\Users\Perustili\Desktop\CoverPrinter.exe 2015-01-23 23:16 - 2015-01-23 23:17 - 00660936 _____ (LSoft Technologies Inc.) C:\Users\Perustili\Desktop\ISO BURNER.exe 2015-01-23 23:14 - 2015-01-23 23:27 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\ImgBurn 2015-01-23 23:14 - 2015-01-23 23:15 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\Opera Software 2015-01-23 23:14 - 2015-01-23 23:15 - 00000000 ____D () C:\Users\Perustili\AppData\Local\Opera Software 2015-01-23 23:14 - 2015-01-23 23:15 - 00000000 ____D () C:\Program Files (x86)\Opera 2015-01-23 23:13 - 2015-01-23 23:13 - 00001877 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk 2015-01-23 23:13 - 2015-01-23 23:13 - 00001865 _____ () C:\Users\Public\Desktop\ImgBurn.lnk 2015-01-23 23:13 - 2015-01-23 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn 2015-01-23 23:13 - 2015-01-23 23:13 - 00000000 ____D () C:\Program Files (x86)\ImgBurn 2015-01-22 16:06 - 2014-12-13 12:08 - 01895056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434709.dll 2015-01-22 16:06 - 2014-12-13 12:08 - 01556624 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434709.dll 2015-01-22 16:06 - 2014-10-09 19:02 - 00195728 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2015-01-22 16:06 - 2014-10-09 19:02 - 00030536 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2015-01-22 16:06 - 2014-10-09 09:17 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2015-01-20 11:09 - 2015-01-20 11:09 - 00528760 _____ () C:\Users\Perustili\Desktop\Samsung_SSD_840_EVO_EXT0BB6Q.zip 2015-01-19 20:02 - 2015-01-19 20:33 - 00004050 _____ () C:\Users\Perustili\Documents\TombRaider.log 2015-01-19 19:43 - 2015-01-19 19:43 - 00000222 _____ () C:\Users\Perustili\Desktop\Tomb Raider.url 2015-01-14 03:56 - 2014-12-19 05:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-01-14 03:56 - 2014-12-19 03:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-01-14 03:56 - 2014-12-12 07:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-01-14 03:56 - 2014-12-12 07:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-01-14 03:56 - 2014-12-12 07:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-01-14 03:56 - 2014-12-12 07:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-01-14 03:56 - 2014-12-12 07:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-01-14 03:56 - 2014-12-12 07:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-01-14 03:56 - 2014-12-12 07:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-01-14 03:56 - 2014-12-11 19:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-01-14 03:56 - 2014-12-06 06:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-01-14 03:56 - 2014-12-06 05:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2015-01-14 03:56 - 2014-12-06 05:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-01-07 15:40 - 2015-01-13 12:04 - 00000433 _____ () C:\Users\Perustili\Desktop\opparriiii.txt 2015-01-05 16:53 - 2015-01-25 20:40 - 00001408 _____ () C:\Users\Perustili\AppData\Roaming\BreakingPoint_Options.ini 2015-01-05 16:52 - 2015-01-25 20:40 - 00000294 _____ () C:\Users\Perustili\AppData\Roaming\BreakingPoint_Login.ini 2015-01-05 16:48 - 2015-01-05 16:48 - 00001022 _____ () C:\Users\Perustili\Desktop\Breaking Point.lnk 2015-01-05 16:37 - 2015-01-26 22:08 - 00000000 ____D () C:\Users\Perustili\AppData\Local\Arma 3 2015-01-05 16:37 - 2015-01-05 16:39 - 00000000 ____D () C:\Users\Perustili\Documents\Arma 3 2015-01-05 16:37 - 2015-01-05 16:37 - 00000000 ____D () C:\ProgramData\Bohemia Interactive 2015-01-05 13:17 - 2015-01-05 13:17 - 00000222 _____ () C:\Users\Perustili\Desktop\Arma 3.url 2015-01-05 01:12 - 2015-01-05 01:13 - 172723760 _____ () C:\Users\Perustili\Desktop\Perälän Uudenvuoden Show 31.12.2014.flv ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-31 00:33 - 2012-08-16 20:24 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\uTorrent 2015-01-31 00:28 - 2013-07-02 17:03 - 01667371 _____ () C:\Windows\WindowsUpdate.log 2015-01-31 00:15 - 2013-05-28 18:22 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-31 00:13 - 2012-12-06 12:24 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\Skype 2015-01-31 00:10 - 2012-08-16 17:20 - 00001034 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678827067-1194141342-301731634-1000UA.job 2015-01-30 23:56 - 2013-05-09 08:39 - 00001008 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-01-30 23:54 - 2012-08-18 16:36 - 00000000 ____D () C:\ProgramData\Origin 2015-01-30 23:50 - 2012-08-26 18:00 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\vlc 2015-01-30 22:56 - 2012-09-09 17:44 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\TS3Client 2015-01-30 21:43 - 2012-08-18 16:36 - 00000000 ____D () C:\Program Files (x86)\Origin 2015-01-30 19:56 - 2013-05-09 08:39 - 00001004 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-01-30 17:54 - 2009-07-14 11:01 - 00481560 _____ () C:\Windows\system32\perfh00B.dat 2015-01-30 17:54 - 2009-07-14 11:01 - 00101652 _____ () C:\Windows\system32\perfc00B.dat 2015-01-30 17:54 - 2009-07-14 07:13 - 01355114 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-30 17:13 - 2014-08-17 11:57 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2015-01-30 11:51 - 2012-08-16 17:45 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2015-01-30 11:14 - 2013-04-30 21:19 - 00000000 ____D () C:\Users\Perustili\AppData\Local\Spotify 2015-01-30 11:14 - 2013-04-30 21:18 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\Spotify 2015-01-30 09:38 - 2009-07-14 06:45 - 00020672 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-30 09:38 - 2009-07-14 06:45 - 00020672 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-30 09:33 - 2012-10-04 17:05 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\mIRC 2015-01-30 09:33 - 2012-09-29 11:01 - 00000000 ___RD () C:\Users\Perustili\Dropbox 2015-01-30 09:33 - 2012-09-29 11:00 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\Dropbox 2015-01-30 09:33 - 2012-09-11 13:45 - 00002896 _____ () C:\Windows\System32\Tasks\AutoKMS 2015-01-30 09:33 - 2012-09-11 13:45 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job 2015-01-30 09:32 - 2014-11-12 20:02 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-01-30 09:32 - 2012-08-16 17:45 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2015-01-30 09:32 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-28 10:37 - 2014-09-29 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-01-27 17:30 - 2012-09-11 13:37 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\DAEMON Tools Lite 2015-01-27 16:37 - 2012-08-16 17:20 - 00116408 _____ () C:\Users\Perustili\AppData\Local\GDIPFONTCACHEV1.DAT 2015-01-27 16:36 - 2012-08-16 17:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-01-27 16:36 - 2009-07-14 06:45 - 00424024 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-01-27 10:11 - 2012-08-16 17:21 - 00002382 _____ () C:\Users\Perustili\Desktop\Google Chrome.lnk 2015-01-27 09:48 - 2014-10-23 18:22 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2015-01-27 09:48 - 2014-10-23 18:22 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2015-01-27 09:48 - 2014-10-23 18:22 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2015-01-27 09:48 - 2014-10-23 18:22 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-01-27 09:48 - 2014-10-23 18:22 - 00000000 ____D () C:\Program Files (x86)\Java 2015-01-27 09:48 - 2013-10-06 12:39 - 00000000 ____D () C:\ProgramData\Oracle 2015-01-26 16:29 - 2012-08-18 19:59 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2015-01-25 15:15 - 2013-05-28 18:22 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-01-25 15:15 - 2012-08-18 14:12 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-25 15:15 - 2012-08-18 14:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-24 13:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\schemas 2015-01-24 12:09 - 2012-09-13 21:29 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\dvdcss 2015-01-23 23:15 - 2012-08-15 19:38 - 00001409 _____ () C:\Users\Perustili\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-01-23 23:08 - 2012-08-16 17:33 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2015-01-20 10:45 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-01-19 16:58 - 2014-12-20 22:38 - 00000000 ____D () C:\Users\Perustili\Documents\ManiaPlanet 2015-01-19 16:58 - 2014-12-20 22:38 - 00000000 ____D () C:\ProgramData\ManiaPlanet 2015-01-19 09:10 - 2012-08-16 17:20 - 00000982 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678827067-1194141342-301731634-1000Core.job 2015-01-16 08:41 - 2014-09-29 16:33 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2015-01-16 08:41 - 2014-09-29 16:33 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2015-01-16 08:41 - 2014-09-29 16:33 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2015-01-16 08:41 - 2014-09-29 16:33 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2015-01-15 03:04 - 2013-08-14 18:15 - 00000000 ____D () C:\Windows\system32\MRT 2015-01-10 10:07 - 2014-11-12 20:02 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2015-01-10 10:07 - 2014-11-12 20:02 - 00060744 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2015-01-10 10:07 - 2014-11-12 20:01 - 18566296 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2015-01-10 10:07 - 2014-11-12 20:01 - 17250776 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-01-10 10:07 - 2014-11-12 20:01 - 16009120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2015-01-10 10:07 - 2014-11-12 20:01 - 14115944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2015-01-10 10:07 - 2014-11-12 20:01 - 03298816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-01-10 10:07 - 2014-11-12 20:01 - 02902456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2015-01-10 10:07 - 2014-11-12 20:01 - 00177624 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2015-01-10 10:07 - 2014-11-12 20:01 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-01-10 10:07 - 2014-11-12 20:01 - 00027441 _____ () C:\Windows\system32\nvinfo.pb 2015-01-10 01:30 - 2014-11-12 20:02 - 06860432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-01-10 01:30 - 2014-11-12 20:02 - 03517256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2015-01-10 01:29 - 2014-11-12 20:02 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-01-10 01:29 - 2014-11-12 20:02 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-01-10 01:29 - 2014-11-12 20:02 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-01-10 01:29 - 2014-11-12 20:02 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-01-09 21:47 - 2014-11-12 20:02 - 04173527 _____ () C:\Windows\system32\nvcoproc.bin 2015-01-06 04:36 - 2012-08-15 20:12 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2015-01-05 16:36 - 2013-09-29 22:03 - 00000000 ____D () C:\ProgramData\Package Cache 2015-01-03 12:37 - 2014-11-15 18:06 - 00000000 ____D () C:\Users\Perustili\AppData\Roaming\NVIDIA ==================== Files in the root of some directories ======= 2013-03-20 20:56 - 2013-03-20 23:15 - 0001927 _____ () C:\Users\Perustili\AppData\Roaming\222 2015-01-05 16:52 - 2015-01-25 20:40 - 0000294 _____ () C:\Users\Perustili\AppData\Roaming\BreakingPoint_Login.ini 2015-01-05 16:53 - 2015-01-25 20:40 - 0001408 _____ () C:\Users\Perustili\AppData\Roaming\BreakingPoint_Options.ini 2009-07-14 01:19 - 2009-07-14 03:14 - 0020992 _____ (Microsoft Corporation) C:\Users\Perustili\AppData\Roaming\war2.exe 2014-10-02 20:44 - 2014-10-02 20:44 - 1065984 _____ () C:\Users\Perustili\AppData\Local\file__0.localstorage 2013-03-07 16:45 - 2013-03-07 16:45 - 0003094 _____ () C:\Users\Perustili\AppData\Local\recently-used.xbel 2015-01-29 14:10 - 2015-01-29 14:10 - 0007605 _____ () C:\Users\Perustili\AppData\Local\Resmon.ResmonCfg Files to move or delete: ==================== C:\Users\Perustili\jagex_cl_runescape_LIVE.dat C:\Users\Perustili\jagex_cl_runescape_LIVE1.dat C:\Users\Perustili\jagex_cl_runescape_LIVE2.dat C:\Users\Perustili\random.dat Some content of TEMP: ==================== C:\Users\Perustili\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfrqhg4.dll C:\Users\Perustili\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Perustili\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\Perustili\AppData\Local\Temp\nvStInst.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-24 13:33 ==================== End Of Log ============================
ADDITIONAL: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-01-2015 Ran by Perustili at 2015-01-31 00:33:26 Running from C:\Users\Perustili\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 3DMark (HKLM-x32\...\Steam App 223850) (Version: - Futuremark) Ace Stream Media 2.2.2-next (HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\AceStream) (Version: 2.2.2-next - Ace Stream Media) Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated) Adobe Reader X (10.1.12) - Suomi (HKLM-x32\...\{AC76BA86-7AD7-1035-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated) Advanced Uninstaller PRO - Version 11 (HKLM-x32\...\AU11_is1) (Version: 11 - Innovative Solutions) Arduino (HKLM-x32\...\Arduino) (Version: 1.0.6 - Arduino LLC) Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2018 - Avast Software) Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.23831 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB) BF4 Settings Editor (HKLM\...\{EF4C9459-47DE-4FCD-B9E0-CEB5BA03FC64}) (Version: 1.1 - Realmware) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) BS.Player PRO (HKLM-x32\...\BSPlayerp) (Version: 2.63.1071 - AB Team, d.o.o.) CADS Planner Client (x32 Version: 16.0.8 - Kymdata) Hidden CADS Planner Client 16 (HKLM-x32\...\{260F52BB-9561-46F1-8198-8A2B07E5D18A}) (Version: 16.1.4 - Kymdata) CADS Planner Electric Pro, DB 16 (HKLM-x32\...\{9C14112D-8F34-4B4F-9721-86B30036F9FA}) (Version: 16.1.6 - Kymdata) CADS Planner Electric Pro, Keskuskaaviot 16 (HKLM-x32\...\{06415C7B-D5B7-4E94-90D3-679D2D8E909F}) (Version: 16.1.5 - Kymdata) CADS Planner Electric Pro, Keskuslayout 16 (HKLM-x32\...\{D856668E-4C8B-491A-8A77-B3819199C11C}) (Version: 16.1.5 - Kymdata) CADS Planner Electric Pro, Piirikaaviot 16 (HKLM-x32\...\{F3DFE643-53E9-4BC0-B152-8BCF2CB8F83A}) (Version: 16.1.6 - Kymdata) CADS Planner Electric Pro, Tasopiirustukset 16 (HKLM-x32\...\{5007B729-7D0A-48E8-9E5C-87FA5E9FF480}) (Version: 16.1.6 - Kymdata) CADS Planner House Lite 16 (HKLM-x32\...\{5AA031E8-A191-47ED-A921-F46EDD984F22}) (Version: 16.1.3 - Kymdata) CADS Planner House, Tuotekirjastot 16 (HKLM-x32\...\{5A3E06D2-36E6-40E1-BF7F-329726504556}) (Version: 16.0.0 - Kymdata) CADS Planner Rasta 16 (HKLM-x32\...\{FCA5543F-FF53-4ECC-ADAA-D02E5EE1BF24}) (Version: 16.1.0 - Kymdata) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.3.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon MG3500 series -käyttäjän rekisteröinti (HKLM-x32\...\Canon MG3500 series -käyttäjän rekisteröinti) (Version: - Canon Inc.) Canon MG3500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3500_series) (Version: 1.00 - Canon Inc.) Canon MG3500 series On-screen Manual (HKLM-x32\...\Canon MG3500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.) Canon MP Navigator EX 1.0 (HKLM-x32\...\MP Navigator EX 1.0) (Version: - ) Canon MP210 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series) (Version: - ) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.2.0 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform) Citrix online plug-in - web (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 12.3.0.8 - Citrix Systems, Inc.) CoDeSys for Automation Alliance (HKLM-x32\...\{07976ABB-1EBD-4A65-A7C7-155A0DC17173}) (Version: - 3S-Smart Software Solutions GmbH) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) CPUID CPU-Z 1.61.3 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) CPUID HWMonitor 1.20 (HKLM\...\CPUID HWMonitor_is1) (Version: - ) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0316 - DT Soft Ltd) DIAL Communication Framework (HKLM-x32\...\{562D0D31-FBAF-4505-8B27-4EC92EEA91D6}) (Version: 1.1.3.180 - DIAL GmbH) DIALux 4.11 (HKLM-x32\...\DIALux) (Version: 4.11.0.2 - DIAL GmbH) Dolby Axon - 1.5.0.1 (HKLM-x32\...\{17936630-5344-4F18-9970-616129E2A114}_is1) (Version: 1.5.0.1 - Dolby Laboratories) Door Kickers (HKLM-x32\...\Steam App 248610) (Version: - KillHouse Games) Dropbox (HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.) Dying Light Update v1.2.1 (HKLM-x32\...\RHlpbmdMaWdodA==_is1) (Version: 1 - ) EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.4.0.0 - Electronic Arts) eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden Fagerhult catalogue 01 / 2012 (HKLM-x32\...\{CD3B8A65-DFFE-4BD5-8430-5E376F61136E}) (Version: 3.00.0000 - Fagerhult) Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - ) ffdshow v1.3.4507 [2013-04-26] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4507.0 - ) Full Video Converter 10 (HKLM-x32\...\{A9C97927-926E-42E0-A0E3-474C9677CE55}_is1) (Version: - Full Video Studio) Futuremark SystemInfo (HKLM-x32\...\{E114E635-F06E-43B4-A800-74A22536B1B0}) (Version: 4.30.472.0 - Futuremark) Glamox (HKLM-x32\...\{50652668-93F9-4C37-A0A3-959FE3B3DD5B}) (Version: 2013.2 - Glamox) Google Chrome (HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Google Chrome) (Version: 40.0.2214.93 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) InFlac 1.1.1 (HKLM-x32\...\InFlac) (Version: 1.1.1 - Michael Facquet) Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive) Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation) Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2761 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.2.0.1006 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation) i-Valo Ltd. catalogue 04 / 2010 (HKLM-x32\...\{9C02DCA0-536C-4372-8888-B62C65E5E81E}) (Version: 2.50.2000 - i-Valo Ltd.) Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation) JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) JCAD electra (HKLM-x32\...\{6411E0C8-356D-4200-BD97-152368A106B3}) (Version: 4.0 - Jidea Oy) Logitech SetPoint 6.32 (HKLM\...\sp6) (Version: 6.32.20 - Logitech) Logitechin Unifying-ohjelmisto 2.10 (HKLM\...\Logitech Unifying) (Version: 2.10.37 - Logitech) LOGO!Soft Comfort V7.0 (Demo) (HKLM-x32\...\LOGO!Soft Comfort V7.0 (Demo)) (Version: 7.0.0.0 - Siemens AG) Malwarebytes Anti-Malware versio 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) ManiaPlanet (HKLM-x32\...\ManiaPlanet_is1) (Version: - Nadeo) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Italiano) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1040) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Nederlands) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1043) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (suomi) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1035) (Version: 4.5.50938 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.0.162.0 - Microsoft Corporation) Microsoft Office Access database engine 2007 (English) (HKLM-x32\...\{90120000-00D1-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) mIRC (HKLM-x32\...\mIRC) (Version: 7.25 - mIRC Co. Ltd.) Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 35.0.1 (x86 fi) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 fi)) (Version: 35.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD) MSI Kombustor 2.5.0 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version: - MSI Co., LTD) MyFreeCodec (HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\MyFreeCodec) (Version: - ) NVIDIA 3D Vision -ohjain 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation) NVIDIA 3D Vision -ohjain 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.25 - NVIDIA Corporation) NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation) NVIDIA Grafiikkaohjain 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation) NVIDIA HD-ääniohjain 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation) NVIDIA PhysX-järjestelmäohjelmisto 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.0.2.2064 - Electronic Arts, Inc.) PDF-XChange 3 (HKLM\...\PDF-XChange 3_is1) (Version: - Tracker Software) PowerISO (HKLM-x32\...\PowerISO) (Version: 5.4 - Power Software Ltd) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.43 - Piriform) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden Samsung SSD Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 3.1.1 - Samsung Electronics) Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.34.0 - SAMSUNG Electronics Co., Ltd.) Sentinel System Driver Installer 7.5.1 (HKLM-x32\...\{BF9E346B-5ECE-4A18-9510-55729FD08323}) (Version: 7.5.1 - SafeNet, Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) SopCast 3.5.0 (HKLM-x32\...\SopCast) (Version: 3.5.0 - www.sopcast.com) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Spotify (HKU\S-1-5-21-2678827067-1194141342-301731634-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15.1 - TeamSpeak Systems GmbH) Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics) TreeSize Free V3.1 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.1 - JAM Software) Trials Fusion (HKLM-x32\...\Steam App 245490) (Version: - RedLynx, in collaboration with Ubisoft Shanghai, Ubisoft Kiev) Tunngle (HKLM-x32\...\Tunngle_is1) (Version: Tunngle - Tunngle.net GmbH) Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft) WACO DIALux Catalogue 07 / 2009 (HKLM-x32\...\{86C2A96C-6596-4548-933A-427229821032}) (Version: 1.01.0001 - WACO) Valokuvavalikoima (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Vegas Pro 13.0 (64-bit) (HKLM\...\{3814DB30-091D-11E4-BDE0-F04DA23A5C58}) (Version: 13.0.373 - Sony) Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc) Windows Liven peruspaketti (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation) WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) VSO Media Player 1.2.1.446 (HKLM-x32\...\{59F1E8E6-60EC-4CC1-8C72-E0F38E585215}_is1) (Version: 1.2.1.446 - VSO Software) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Perustili\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Perustili\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Perustili\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2678827067-1194141342-301731634-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Perustili\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= 27-01-2015 09:34:08 Windows Update 27-01-2015 16:35:31 Tunngle 5.1 Setup 27-01-2015 16:35:46 Laitteen ohjainkokonaisuuden asentaminen: TAP-Win32 Provider V9 (Tunngle) Verkkosovittimet 30-01-2015 09:36:50 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1C7C7729-0DE7-4408-ADF8-545976E50A80} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2012-11-02] (Microsoft) Task: {28612EA7-6F2D-431C-9EE9-FE0430BB748B} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2012-09-11] () Task: {3C5C547B-93FC-4C1F-AEB8-1EB2EC7B9316} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2012-11-02] (Microsoft Corporation) Task: {58AA9E71-434C-42B1-82C2-9EFEEFD4D960} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-09] (Google Inc.) Task: {6BABFD60-900C-42C3-8C98-C22547177EA2} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {6EFF26C5-63C0-4939-B9F0-7C5EB5725365} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2678827067-1194141342-301731634-1000UA => C:\Users\Perustili\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-16] (Google Inc.) Task: {83CC6AA5-E843-46BA-803F-18FED8659F40} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25] (Adobe Systems Incorporated) Task: {86276BE6-3BF8-464E-8593-550A716C0121} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd) Task: {8864819E-ECA0-4331-8A6B-55CB0A597945} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {A33ABD22-B0EF-499C-9881-E9522015229E} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {A3B4F980-BEF5-4AB6-B24C-8C3F2A2E7E42} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2678827067-1194141342-301731634-1000Core => C:\Users\Perustili\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-16] (Google Inc.) Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe Task: {B2A362FE-69FE-48EC-91DE-844FC4001891} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2012-11-02] (Microsoft Corporation) Task: {BD810EDE-6F0E-4F0A-BB92-97EC865BC274} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-09] (Google Inc.) Task: {DFE3970B-5D36-484F-BFFE-20B3D053BCD4} - System32\Tasks\{2043597C-8BF4-48BA-BFF4-B1BE9DFB608B} => pcalua.exe -a "C:\Program Files\TeamSpeak 3 Client\plugins\ts3overlay\InstallHook.exe" -d "C:\Program Files\TeamSpeak 3 Client\plugins\ts3overlay\" -c ts3overlay_hook_win32.dll 10000 Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe Task: {E410A4BE-381D-4832-8332-EDA5985A3707} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-05-07] (AVAST Software) Task: {E9184476-6547-446C-A4A1-6F8012530BF9} - System32\Tasks\{EA0E210A-E994-4B67-B3EB-F83E55D5AAA0} => pcalua.exe -a C:\Users\Perustili\Desktop\Bv_v15054.exe -d C:\Users\Perustili\Desktop Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678827067-1194141342-301731634-1000Core.job => C:\Users\Perustili\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2678827067-1194141342-301731634-1000UA.job => C:\Users\Perustili\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe ==================== Loaded Modules (whitelisted) ============= 2014-11-12 20:02 - 2015-01-10 01:29 - 00117392 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2012-08-16 17:45 - 2012-02-21 11:29 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe 2014-03-09 12:53 - 2014-08-17 11:59 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe 2012-08-16 17:38 - 2012-05-21 09:38 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2011-10-07 11:39 - 2011-10-07 11:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll 2014-09-29 16:33 - 2015-01-16 08:42 - 00715080 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll 2014-09-29 16:33 - 2015-01-16 08:42 - 00854344 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll 2015-01-29 21:34 - 2015-01-29 21:34 - 02913280 _____ () C:\Program Files\AVAST Software\Avast\defs\15012901\algo.dll 2015-01-30 17:34 - 2015-01-30 17:34 - 02913280 _____ () C:\Program Files\AVAST Software\Avast\defs\15013000\algo.dll 2014-08-31 09:02 - 2014-12-01 23:31 - 02396672 _____ () F:\Program Files (x86)\Steam\libavcodec-56.dll 2014-08-31 09:02 - 2014-12-01 23:31 - 00442880 _____ () F:\Program Files (x86)\Steam\libavutil-54.dll 2014-08-31 09:02 - 2014-12-01 23:31 - 00479744 _____ () F:\Program Files (x86)\Steam\libavformat-56.dll 2014-08-31 09:02 - 2014-12-01 23:31 - 00332800 _____ () F:\Program Files (x86)\Steam\libavresample-2.dll 2013-03-12 17:10 - 2014-11-11 20:47 - 00774656 _____ () F:\Program Files (x86)\Steam\SDL2.dll 2015-01-13 16:15 - 2014-12-02 02:29 - 05002752 _____ () F:\Program Files (x86)\Steam\v8.dll 2015-01-13 16:15 - 2014-12-02 02:29 - 01612800 _____ () F:\Program Files (x86)\Steam\icui18n.dll 2015-01-13 16:15 - 2014-12-02 02:29 - 01210368 _____ () F:\Program Files (x86)\Steam\icuuc.dll 2014-05-29 08:57 - 2015-01-27 20:59 - 02227904 _____ () F:\Program Files (x86)\Steam\video.dll 2014-08-31 09:02 - 2014-12-01 23:31 - 00485888 _____ () F:\Program Files (x86)\Steam\libswscale-3.dll 2012-08-19 19:06 - 2015-01-27 20:59 - 00696512 _____ () F:\Program Files (x86)\Steam\bin\chromehtml.DLL 2014-10-22 02:22 - 2014-10-22 02:22 - 00750080 _____ () C:\Users\Perustili\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2015-01-30 09:33 - 2015-01-30 09:33 - 00043008 _____ () c:\Users\Perustili\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfrqhg4.dll 2014-10-22 02:22 - 2014-10-22 02:22 - 00047616 _____ () C:\Users\Perustili\AppData\Roaming\Dropbox\bin\libEGL.dll 2014-10-22 02:22 - 2014-10-22 02:22 - 00863744 _____ () C:\Users\Perustili\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll 2014-10-22 02:22 - 2014-10-22 02:22 - 00200704 _____ () C:\Users\Perustili\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll 2014-10-22 02:22 - 2014-10-22 02:22 - 00118784 _____ () C:\Users\Perustili\AppData\Roaming\Dropbox\bin\plugins\accessible\qtaccessiblewidgets.dll 2014-05-07 12:35 - 2014-05-07 12:35 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2012-08-19 19:06 - 2015-01-16 01:42 - 34641288 _____ () F:\Program Files (x86)\Steam\bin\libcef.dll 2014-10-16 02:27 - 2014-10-16 02:27 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\2dace9622c68c6ce58d55a6950eeaa95\IsdiInterop.ni.dll 2012-08-16 17:46 - 2012-05-30 12:55 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2012-08-16 17:45 - 2012-02-21 11:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2015-01-26 21:45 - 2015-01-26 21:45 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2014-08-15 15:25 - 2015-01-16 01:42 - 01709960 _____ () F:\Program Files (x86)\Steam\bin\ffmpegsumo.dll 2015-01-25 15:15 - 2015-01-25 15:15 - 16844976 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== HomeGroupUser$ (S-1-5-21-2678827067-1194141342-301731634-1003 - Limited - Enabled) Järjestelmänvalvoja (S-1-5-21-2678827067-1194141342-301731634-500 - Administrator - Disabled) Perustili (S-1-5-21-2678827067-1194141342-301731634-1000 - Administrator - Enabled) => C:\Users\Perustili Vieras (S-1-5-21-2678827067-1194141342-301731634-501 - Limited - Disabled) ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (01/27/2015 06:28:30 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Viallisen sovelluksen nimi: DyingLightGame.exe, versio: 1.2.0.0, aikaleima: 0x54c668ae Viallisen moduulin nimi: engine_x64_rwdi.dll, versio: 1.0.0.0, aikaleima: 0x54c66712 Poikkeuskoodi: 0xc0000005 Virhepoikkeama: 0x000000000077ae70 Viallisen prosessin tunnus: 0x11ac Viallisen sovelluksen käynnistysaika: 0xDyingLightGame.exe0 Viallisen sovelluksen polku: DyingLightGame.exe1 Viallisen moduulin polku: DyingLightGame.exe2 Raportin tunnus: DyingLightGame.exe3 Error: (01/23/2015 11:08:47 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Viallisen sovelluksen nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Viallisen moduulin nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Poikkeuskoodi: 0xc0000417 Virhepoikkeama: 0x0001728b Viallisen prosessin tunnus: 0x1a6c Viallisen sovelluksen käynnistysaika: 0xIsoBurner.exe0 Viallisen sovelluksen polku: IsoBurner.exe1 Viallisen moduulin polku: IsoBurner.exe2 Raportin tunnus: IsoBurner.exe3 Error: (01/23/2015 11:07:50 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Viallisen sovelluksen nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Viallisen moduulin nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Poikkeuskoodi: 0xc0000417 Virhepoikkeama: 0x0001728b Viallisen prosessin tunnus: 0x1a1c Viallisen sovelluksen käynnistysaika: 0xIsoBurner.exe0 Viallisen sovelluksen polku: IsoBurner.exe1 Viallisen moduulin polku: IsoBurner.exe2 Raportin tunnus: IsoBurner.exe3 Error: (01/23/2015 11:06:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Viallisen sovelluksen nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Viallisen moduulin nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Poikkeuskoodi: 0xc0000417 Virhepoikkeama: 0x0001728b Viallisen prosessin tunnus: 0x2258 Viallisen sovelluksen käynnistysaika: 0xIsoBurner.exe0 Viallisen sovelluksen polku: IsoBurner.exe1 Viallisen moduulin polku: IsoBurner.exe2 Raportin tunnus: IsoBurner.exe3 Error: (01/23/2015 11:06:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Viallisen sovelluksen nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Viallisen moduulin nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Poikkeuskoodi: 0xc0000417 Virhepoikkeama: 0x0001728b Viallisen prosessin tunnus: 0x20b4 Viallisen sovelluksen käynnistysaika: 0xIsoBurner.exe0 Viallisen sovelluksen polku: IsoBurner.exe1 Viallisen moduulin polku: IsoBurner.exe2 Raportin tunnus: IsoBurner.exe3 Error: (01/23/2015 11:06:23 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Viallisen sovelluksen nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Viallisen moduulin nimi: IsoBurner.exe, versio: 3.0.0.0, aikaleima: 0x533456d2 Poikkeuskoodi: 0xc0000417 Virhepoikkeama: 0x0001728b Viallisen prosessin tunnus: 0x16c4 Viallisen sovelluksen käynnistysaika: 0xIsoBurner.exe0 Viallisen sovelluksen polku: IsoBurner.exe1 Viallisen moduulin polku: IsoBurner.exe2 Raportin tunnus: IsoBurner.exe3 Error: (01/23/2015 08:10:05 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Ohjelman bf4.exe versio 1.4.2.23831, lakkasi olemasta yhteydessä Windowsiin, joten se suljettiin. Voit tarkistaa, onko ongelmasta saatavilla lisätietoja, ohjauspaneelin Toimintokeskus-kohdasta. Prosessin tunnus: cd0 Alkamisaika: 01d0373749a0eafd Päättymisaika: 299 Sovelluksen polku: E:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe Raportin tunnus: Error: (01/20/2015 10:59:54 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Viallisen sovelluksen nimi: GTAIV -nomemrestrict -norestrictions.exe, versio: 1.0.7.0, aikaleima: 0x4bd9efbe Viallisen moduulin nimi: GTAIV -nomemrestrict -norestrictions.exe, versio: 1.0.7.0, aikaleima: 0x4bd9efbe Poikkeuskoodi: 0xc0000005 Virhepoikkeama: 0x001a9346 Viallisen prosessin tunnus: 0x21c4 Viallisen sovelluksen käynnistysaika: 0xGTAIV -nomemrestrict -norestrictions.exe0 Viallisen sovelluksen polku: GTAIV -nomemrestrict -norestrictions.exe1 Viallisen moduulin polku: GTAIV -nomemrestrict -norestrictions.exe2 Raportin tunnus: GTAIV -nomemrestrict -norestrictions.exe3 Error: (01/18/2015 01:14:23 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Ohjelman StaticLauncher64.exe versio 1.0.58955.28333, lakkasi olemasta yhteydessä Windowsiin, joten se suljettiin. Voit tarkistaa, onko ongelmasta saatavilla lisätietoja, ohjauspaneelin Toimintokeskus-kohdasta. Prosessin tunnus: 19d8 Alkamisaika: 01d0330ae8b49923 Päättymisaika: 562 Sovelluksen polku: E:\Program Files (x86)\SteamLibrary\steamapps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe Raportin tunnus: Error: (12/23/2014 04:28:59 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD initialization failed [0] System errors: ============= Error: (01/30/2015 05:51:27 PM) (Source: Ntfs) (EventID: 137) (User: ) Description: Aseman \Device\HarddiskVolume4 oletusarvoinen tapahtumien resurssinhallinta kohtasi virheen, joka esti uudelleenyritykset. Tämän vuoksi resurssinhallintaa ei voitu käynnistää. Tiedoissa on virhekoodi. Error: (01/30/2015 05:51:27 PM) (Source: Ntfs) (EventID: 55) (User: ) Description: Levyn tiedostojärjestelmärakenne on vioittunut ja käyttökelvoton. Suorita chkdsk-apuohjelma asemassa \Device\HarddiskVolume4. Error: (01/28/2015 09:32:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Palvelua Steam Client Service ei voi käynnistää. Virhekoodi on %%1053 Error: (01/28/2015 09:32:11 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Aikakatkaisu (30000 millisekuntia) odotettaessa Steam Client Service-palvelun yhteyden muodostusta. Error: (01/26/2015 04:25:10 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Edellinen järjestelmän sammutus (16:24:14, 26.1.2015) oli odottamaton. Error: (01/24/2015 10:15:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Palvelua Steam Client Service ei voi käynnistää. Virhekoodi on %%1053 Error: (01/24/2015 10:15:32 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Aikakatkaisu (30000 millisekuntia) odotettaessa Steam Client Service-palvelun yhteyden muodostusta. Error: (01/20/2015 09:33:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Palvelua Steam Client Service ei voi käynnistää. Virhekoodi on %%1053 Error: (01/20/2015 09:33:01 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Aikakatkaisu (30000 millisekuntia) odotettaessa Steam Client Service-palvelun yhteyden muodostusta. Error: (01/17/2015 00:55:49 PM) (Source: Disk) (EventID: 11) (User: ) Description: Ohjain havaitsi korttivirheen laitteella \Device\Harddisk3\DR3. Microsoft Office Sessions: ========================= Error: (01/27/2015 06:28:30 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: DyingLightGame.exe1.2.0.054c668aeengine_x64_rwdi.dll1.0.0.054c66712c0000005000000000077ae7011ac01d03a4bfda9b8fcE:\Program Files (x86)\Dying Light\DyingLightGame.exeE:\Program Files (x86)\Dying Light\engine_x64_rwdi.dll86cbf0a4-a641-11e4-aa6b-00acaf69a65d Error: (01/23/2015 11:08:47 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: IsoBurner.exe3.0.0.0533456d2IsoBurner.exe3.0.0.0533456d2c00004170001728b1a6c01d03750c6e6d40fC:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exeC:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exe0537ee61-a344-11e4-876f-00acaf69a65d Error: (01/23/2015 11:07:50 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: IsoBurner.exe3.0.0.0533456d2IsoBurner.exe3.0.0.0533456d2c00004170001728b1a1c01d03750a54ac0f2C:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exeC:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exee324adb5-a343-11e4-8e10-00acaf69a65d Error: (01/23/2015 11:06:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: IsoBurner.exe3.0.0.0533456d2IsoBurner.exe3.0.0.0533456d2c00004170001728b225801d037507d0860c9C:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exeC:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exebae47074-a343-11e4-8e10-00acaf69a65d Error: (01/23/2015 11:06:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: IsoBurner.exe3.0.0.0533456d2IsoBurner.exe3.0.0.0533456d2c00004170001728b20b401d037507890aa9aC:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exeC:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exeb67322fd-a343-11e4-8e10-00acaf69a65d Error: (01/23/2015 11:06:23 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: IsoBurner.exe3.0.0.0533456d2IsoBurner.exe3.0.0.0533456d2c00004170001728b16c401d037506a56cba6C:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exeC:\Program Files (x86)\LSoft Technologies\Active@ ISO Burner\IsoBurner.exeaf654eec-a343-11e4-8e10-00acaf69a65d Error: (01/23/2015 08:10:05 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: bf4.exe1.4.2.23831cd001d0373749a0eafd299E:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe Error: (01/20/2015 10:59:54 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: GTAIV -nomemrestrict -norestrictions.exe1.0.7.04bd9efbeGTAIV -nomemrestrict -norestrictions.exe1.0.7.04bd9efbec0000005001a934621c401d0348f720edf2bE:\Program Files (x86)\SteamLibrary\SteamApps\common\Grand Theft Auto IV\GTAIV\GTAIV -nomemrestrict -norestrictions.exeE:\Program Files (x86)\SteamLibrary\SteamApps\common\Grand Theft Auto IV\GTAIV\GTAIV -nomemrestrict -norestrictions.exeb2a202b3-a082-11e4-b55f-00acaf69a65d Error: (01/18/2015 01:14:23 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: StaticLauncher64.exe1.0.58955.2833319d801d0330ae8b49923562E:\Program Files (x86)\SteamLibrary\steamapps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe Error: (12/23/2014 04:28:59 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD initialization failed [0] ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz Percentage of memory in use: 34% Total physical RAM: 8087.01 MB Available physical RAM: 5293.98 MB Total Pagefile: 16172.2 MB Available Pagefile: 12092.75 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:119.14 GB) (Free:14.39 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive e: (240Gb SSD) (Fixed) (Total:232.88 GB) (Free:55.58 GB) NTFS Drive f: (Paikallinen levy) (Fixed) (Total:931.51 GB) (Free:44.57 GB) NTFS Drive g: () (Fixed) (Total:596.16 GB) (Free:7.31 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: E57FF8E1) Partition 1: (Active) - (Size=119.1 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 775B7169) Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A9862969) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) Attempted reading MBR returned 0 bytes. Could not read MBR for disk 3. ==================== End Of Log ============================
Seuraavaksi, avaa muistio ja kopioi / liitä alla oleva teksi: Tallenna tiedosto nimellä: fixlist.txt ( Huomioi että FRST.exe ja fixlist.txt pitävät olla samassa polussa, jotta korjaus voidaan suorittaa. Esim työpöydällä ). Käynnistä nyt uudestaan FRST.exe ja paina " Fix " - painiketta. Kun korjaus on suoritettu, käynnistyy tietokone tämän jälkeen uudelleen. Code: CloseProcesses: Winlogon\Notify\igfxcui: igfxdev.dll [X] Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll No File FF Plugin-x32: @esn/esnlaunch,version=1.132.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) R3 WinHttpAutoProxySvc; winhttp.dll [X] S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X] S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S3 WLRAWMp50x64; System32\Drivers\WLRAWMp50x64.sys [X] S3 WLRAWSp50x64; System32\Drivers\WLRAWSp50x64.sys [X] EmptyTemp: Lataa AdwCleaner tästä. v4.109 Sulje kaikki avoimet ohjelmat ja Internet-selain tarkistuksen ajaksi. Tuplaklikkaa AdwCleaner.exe auki ja valitse " Scan ". Kun tarkistus on valmis, Valitse " Clean ". Tietokone käynnistyy automaattisesti ohjelman valmistuttua. Käynnistyessään, Saat näkyviin lokitiedoston. Lähetä se seuraavassa viestissäsi. ----------- Mene käynnistä > Suorita. ( vaihtoehtoisesti Windows-näppäin + R. ) Kirjoita tekstikenttään seuraava komento: CHKDSK /F Mitä tekee? - Etsii ja korjaa mahdolliset virheet.
# AdwCleaner v4.110 - Logfile created 07/02/2015 at 10:24:01 # Updated 05/02/2015 by Xplode # Database : 2015-02-05.2 [Server] # Operating system : Windows 7 Ultimate Service Pack 1 (x64) # Username : Perustili - PERUSTILI-PC # Running from : C:\Users\Perustili\Desktop\adwcleaner_4.110.exe # Option : Cleaning ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\apn [!] Folder Deleted : C:\Users\Perustili\AppData\Roaming\Mozilla\Firefox\Profiles\84k3ehaz.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi Folder Deleted : C:\Users\Perustili\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpckgflgdapkpabemgkielbefdildaio ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [magicplayer@torrentstream.org] Key Deleted : HKCU\Software\Google\Chrome\Extensions\kpckgflgdapkpabemgkielbefdildaio Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1 Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\Myfree Codec Key Deleted : HKLM\SOFTWARE\Myfree Codec Key Deleted : HKLM\SOFTWARE\Uniblue Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local ***** [ Web browsers ] ***** -\\ Internet Explorer v11.0.9600.17496 -\\ Mozilla Firefox v35.0.1 (x86 fi) -\\ Google Chrome v -\\ Chromium v ************************* AdwCleaner[R0].txt - [2532 bytes] - [07/02/2015 10:21:04] AdwCleaner[S0].txt - [2412 bytes] - [07/02/2015 10:24:01] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2471 bytes] ##########
