Mededeling

Collapse
No announcement yet.

Spontane nieuwe sites met reclameboodschappen

Collapse
X
  •  
  • Filter
  • Tijd
  • Show
Clear All
new posts

  • Spontane nieuwe sites met reclameboodschappen

    Hoi,

    Ik weet niet zeker of het virusinfection is of malware of spyware. Maar als ik een website bekijk, worden er vaak spontane nieuwe schermen geopend met reclame over het onderwerp van de oorspronkelijke site.
    Onderstaand volgt het bestand van MalwareBytes en DDS. Ik probeerde GMER scanner op root kits maar mijn laptop "freezes up" als ik dat programma opstart.

    Malwarebytes Anti-Malware 1.75.0.1300
    www.malwarebytes.org

    Database version: v2013.07.21.04

    Windows 8 x64 NTFS
    Internet Explorer 10.0.9200.16635
    Jan :: JAN [administrator]

    7/21/2013 11:19:06 AM
    mbam-log-2013-07-21 (11-19-06).txt

    Scan type: Quick scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 212383
    Time elapsed: 5 minute(s), 17 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 6
    HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Software.Updater) -> Quarantined and deleted successfully.
    HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Software.Updater) -> Quarantined and deleted successfully.
    HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Software.Updater) -> Quarantined and deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Software.Updater) -> Quarantined and deleted successfully.
    HKCR\Updater.AmiUpd.1 (PUP.Software.Updater) -> Quarantined and deleted successfully.
    HKCR\Updater.AmiUpd (PUP.Software.Updater) -> Quarantined and deleted successfully.

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 2
    C:\Users\Jan\AppData\Local\SwvUpdater\Updater.exe (PUP.Software.Updater) -> Quarantined and deleted successfully.
    C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Quarantined and deleted successfully.

    (end)

    DDS (Ver_2012-11-20.01) - NTFS_AMD64
    Internet Explorer: 10.0.9200.16537 BrowserJavaVersion: 10.25.2
    Run by Jan at 11:44:06 on 2013-07-21
    Microsoft Windows 8 6.2.9200.0.1252.1.1033.18.3978.2247 [GMT -4:00]
    .
    AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
    FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
    .
    ============== Running Processes ===============
    .
    C:\windows\system32\svchost.exe -k DcomLaunch
    C:\windows\system32\svchost.exe -k RPCSS
    C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\windows\system32\svchost.exe -k netsvcs
    C:\windows\system32\svchost.exe -k LocalService
    C:\windows\system32\dwm.exe
    C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\windows\system32\svchost.exe -k NetworkService
    C:\windows\system32\WLANExt.exe
    C:\windows\System32\spoolsv.exe
    C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files (x86)\SUPERAntiSpyware\SASCORE.EXE
    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
    C:\Program Files (x86)\Fast Free Converter\FastFreeConverterUpdt.exe
    C:\Program Files\Intel\iCLS Client\HeciServer.exe
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
    C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
    C:\Program Files (x86)\PC Checkup\SymcPCCULaunchSvc.exe
    C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe
    C:\Windows\system32\TODDSrv.exe
    C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbarsvc.exe
    C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe
    C:\Program Files\Toshiba\Teco\TecoService.exe
    C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\windows\system32\dashost.exe
    C:\windows\System32\svchost.exe -k LocalServicePeerNet
    C:\windows\system32\wbem\wmiprvse.exe
    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\windows\system32\taskhostex.exe
    C:\windows\Explorer.EXE
    C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
    C:\windows\system32\SearchIndexer.exe
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
    C:\Windows\System32\RuntimeBroker.exe
    C:\Windows\System32\igfxtray.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    C:\Program Files\Toshiba\Hotkey\TCrdMain_Win8.exe
    C:\Program Files\Toshiba\Teco\TecoResident.exe
    C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\AppIntegrator64.exe
    C:\Users\Jan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
    C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Users\Jan\AppData\Local\Smartbar\Application\SnapDo.exe
    C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
    C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    C:\Program Files (x86)\Norton Anti-Theft\Engine\1.8.0.32\ccSvcHst.exe
    C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
    C:\Program Files (x86)\Norton Anti-Theft\Engine\1.8.0.32\ccSvcHst.exe
    C:\Program Files\TOSHIBA\HDD Accelerator\THAccelSvc.exe
    C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
    C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
    C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe
    C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
    C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
    C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
    C:\windows\system32\taskhost.exe
    C:\windows\system32\SearchProtocolHost.exe
    C:\windows\system32\SearchFilterHost.exe
    C:\windows\system32\taskeng.exe
    C:\windows\system32\wbem\wmiprvse.exe
    C:\windows\System32\cscript.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=hp&installDate=21/07/2013
    uWindow Title = Internet Explorer provided by TOSHIBA
    uSearch Bar = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=ds&q={searchTerms}&installDate=21/07/2013
    uSearch Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=ds&q={searchTerms}&installDate=21/07/2013
    uDefault_Page_URL = hxxp://toshiba13.msn.com
    mStart Page = hxxp://toshiba13.msn.com
    mWindow Title = Internet Explorer provided by TOSHIBA
    mDefault_Page_URL = hxxp://toshiba13.msn.com
    uSearchAssistant = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=ds&q={searchTerms}&installDate=21/07/2013
    mWinlogon: Userinit = userinit.exe,
    BHO: SelectionLinks: {1C8501DD-5580-48AB-B25C-6D5DBE835A6A} - C:\Program Files (x86)\OApps\SelectionLinks.dll
    BHO: DownloadTerms: {2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3} - C:\Users\Jan\AppData\Local\DownloadTerms\temp.dat
    BHO: Toolbar BHO: {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll
    BHO: LessTabs: {3178A392-8963-471E-B7A2-969CB58D6496} - C:\Program Files (x86)\LessTabs\IE32\LessTabsClientIE.dll
    BHO: Snap.DoEngine: {31ad400d-1b06-4e33-a59a-90c2c140cba0} -
    BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll
    BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ips\ipsbho.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
    BHO: Wajam: {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll
    BHO: Fast Free Converter 4.1: {B422F1BC-9ADB-48A7-8B13-00C176039DC5} - C:\Program Files (x86)\Fast Free Converter\FastFreeConverter\FastFreeConverter.dll
    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\urlredir.dll
    BHO: Search Assistant BHO: {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
    TB: VideoDownloadConverter: {48586425-6BB7-4F51-8DC6-38C88E3EBB58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll
    TB: VideoDownloadConverter: {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll
    TB: Snap.Do: {ae07101b-46d4-4a98-af68-0333ea26e113} -
    uRun: [SkyDrive] "C:\Users\Jan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
    uRun: [SUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
    uRun: [AROReminder] C:\Program Files (x86)\ARO 2013\ARO.exe -rem
    uRun: [Browser Infrastructure Helper] C:\Users\Jan\AppData\Local\Smartbar\Application\SnapDo.exe startup
    mRun: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
    mRun: [ToshibaAppPlace] "C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe"
    mRun: [VideoDownloadConverter Search Scope Monitor] "C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zsrchmn.exe" /m=2 /w /h
    mRun: [VideoDownloadConverter_4z Browser Plugin Loader] C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbrmon.exe
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
    IE: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
    IE: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office 15\root\office15\onbttnie.dll
    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll
    TCP: Interfaces\{93177218-41AE-4160-A125-B4B2CE3C2635} : DHCPNameServer = 192.168.1.1 192.168.1.1
    Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\msosb.dll
    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    SSODL: WebCheck - <orphaned>
    mASetup: {A6EADE66-0000-0000-484E-7E8A45000000} - "C:\windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll",CreateReaderUserSettings
    x64-mStart Page = hxxp://toshiba13.msn.com
    x64-mWindow Title = Internet Explorer provided by TOSHIBA
    x64-mDefault_Page_URL = hxxp://toshiba13.msn.com
    x64-BHO: Snap.DoEngine: {31ad400d-1b06-4e33-a59a-90c2c140cba0} -
    x64-BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll
    x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL
    x64-BHO: Microsoft SkyDrive Pro Browser Helper: {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
    x64-TB: Snap.Do: {ae07101b-46d4-4a98-af68-0333ea26e113} -
    x64-Run: [IgfxTray] C:\windows\System32\igfxtray.exe
    x64-Run: [HotKeysCmds] C:\windows\System32\hkcmd.exe
    x64-Run: [Persistence] C:\windows\System32\igfxpers.exe
    x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
    x64-Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\Hotkey\TCrdMain_Win8.exe
    x64-Run: [TecoResident] C:\Program Files\TOSHIBA\Teco\TecoResident.exe
    x64-Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe
    x64-Run: [TODDMain] C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
    x64-Run: [VideoDownloadConverter Home Page Guard 64 bit] "C:\PROGRA~2\VIDEOD~2\bar\1.bin\AppIntegrator64.exe"
    x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll
    x64-IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll
    x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
    x64-Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - <orphaned>
    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
    x64-Notify: igfxcui - igfxdev.dll
    x64-SSODL: WebCheck - <orphaned>
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\
    FF - prefs.js: browser.search.selectedEngine - Web Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - prefs.js: keyword.URL - hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=ds&installDate={installDate}&q=
    FF - prefs.js: keyword.enabled - false
    FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
    FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
    FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
    FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
    FF - plugin: C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll
    FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
    FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: C:\Program Files\Microsoft Office 15\root\Office15\npspwrap.dll
    FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
    FF - plugin: C:\windows\SysWOW64\npDeployJava1.dll
    FF - plugin: C:\windows\SysWOW64\npmproxy.dll
    FF - ExtSQL: 2013-06-13 04:51; [email protected]; C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\extensions\[email protected]
    FF - ExtSQL: 2013-07-01 16:39; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn
    FF - ExtSQL: 2013-07-01 16:39; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn
    FF - ExtSQL: 2013-07-04 20:26; [email protected]_4z.com; C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\extensions\[email protected] loadConverter_4z.com
    FF - ExtSQL: 2013-07-21 02:11; [email protected]; C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
    FF - ExtSQL: 2013-07-21 02:11; {2C86099C-4DE0-428F-9CF4-D991A5C16CD9}; C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\extensions\{2C86099C-4DE0-428F-9CF4-D991A5C16CD9}
    FF - ExtSQL: !HIDDEN! 2013-07-04 20:28; [email protected]_4z.com; C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin
    .
    ---- FIREFOX POLICIES ----
    user_pref('extensions.autoDisableScopes', 0);user_pref('security.csp.enable', false);user_pref('security.OCSP.enabled', 0);user_pref('extensions.blocklist.enabled', false);
    ============= SERVICES / DRIVERS ===============
    .
    R0 THAccel;THAccel;C:\windows\System32\Drivers\THAccel.sys [2013-1-20 131520]
    R0 tos_sps64;TOSHIBA tos_sps64 Service;C:\windows\System32\Drivers\tos_sps64.sys [2013-1-20 499096]
    R1 ccSet_NARA;NARA Settings Manager;C:\windows\System32\Drivers\NARAx64\0401000.00B\ccSetx64.sys [2012-11-13 168608]
    R2 !SASCORE;SAS Core Service;C:\Program Files (x86)\SUPERAntiSpyware\SASCore.exe [2011-8-11 116608]
    R2 APNMCP;Ask Update Service;C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-6-13 169632]
    R2 FastFreeConverterUpdt;FastFreeConverterUpdt;C:\Program Files (x86)\Fast Free Converter\FastFreeConverterUpdt.exe [2012-11-26 687104]
    R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-4-20 635104]
    R2 Intel(R) ME Service;Intel(R) ME Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-1-20 129856]
    R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2013-1-20 166720]
    R2 NAT;Norton Anti-Theft;C:\Program Files (x86)\Norton Anti-Theft\Engine\1.8.0.32\ccsvchst.exe [2013-7-2 144368]
    R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccsvchst.exe [2013-7-4 144368]
    R2 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2012-7-11 3939008]
    R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;C:\Program Files (x86)\PC Checkup\SymcPCCULaunchSvc.exe [2013-7-3 132056]
    R2 OfficeSvc;Microsoft Office Service;C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-7-5 1900728]
    R2 PCCUJobMgr;Common Client Job Manager Service;C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe [2012-11-13 126392]
    R2 THAccelSvc;TOSHIBA HDD Accelerator Service;C:\Program Files\Toshiba\HDD Accelerator\THAccelSvc.exe [2012-8-10 214488]
    R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;C:\Program Files\Toshiba\Teco\TecoService.exe [2012-8-24 291240]
    R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\windows\System32\Drivers\TVALZFL.sys [2012-7-21 16768]
    R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2013-1-20 365376]
    R2 VideoDownloadConverter_4zService;VideoDownloadConverterService;C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbars vc.exe [2013-7-4 42504]
    R2 WajamUpdater;WajamUpdater;C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [2013-5-2 109064]
    R3 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [2013-7-16 1393240]
    R3 ccSet_NAT;Norton Anti-Theft Settings Manager;C:\windows\System32\Drivers\NATx64\0108000.020\ccsetx64.sys [2013-7-2 169048]
    R3 ccSet_NIS;Norton Internet Security Settings Manager;C:\windows\System32\Drivers\NISx64\1404000.028\ccsetx64.sys [2013-7-4 169048]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-7-4 138912]
    R3 FwLnk;FwLnk Driver;C:\windows\System32\Drivers\FwLnk.sys [2013-1-20 9216]
    R3 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130719.002\IDSviA64.sys [2013-7-20 513184]
    R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;C:\windows\System32\Drivers\L1C63x64.sys [2012-7-13 103936]
    R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;C:\windows\System32\Drivers\RtsUVStor.sys [2013-1-20 315536]
    R3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter;C:\windows\System32\Drivers\rtwlane.sys [2012-6-29 1498256]
    R3 SmbDrvI;SmbDrvI;C:\windows\System32\Drivers\Smb_driver_Intel.sys [2012-8-16 43832]
    R3 SymDS;Symantec Data Store;C:\windows\System32\Drivers\NISx64\1404000.028\symds64.sys [2013-7-4 493656]
    R3 SymEFA;Symantec Extended File Attributes;C:\windows\System32\Drivers\NISx64\1404000.028\symefa64.sys [2013-7-4 1139800]
    R3 SymIRON;Symantec Iron Driver;C:\windows\System32\Drivers\NISx64\1404000.028\ironx64.sys [2013-7-4 224416]
    R3 SymNetS;Symantec Network Security WFP Driver;C:\windows\System32\Drivers\NISx64\1404000.028\symnets.sys [2013-7-4 433752]
    R3 TMachInfo;TMachInfo;C:\Program Files\Toshiba\TOSHIBA Service Station\TMachInfo.exe [2012-7-27 53384]
    R3 TPCHSrv;TPCH Service;C:\Program Files\Toshiba\TPHM\TPCHSrv.exe [2012-7-28 458152]
    S0 SymELAM;Symantec ELAM Driver;C:\windows\System32\Drivers\NISx64\1404000.028\symelam.sys [2013-7-4 23448]
    S1 SASDIFSV;SASDIFSV;C:\Program Files (x86)\SUPERAntiSpyware\sasdifsv.sys [2011-7-22 12880]
    S1 SASKUTIL;SASKUTIL;C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS [2011-7-12 67664]
    S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
    S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;C:\windows\System32\Drivers\rtwlane.sys [2012-6-29 1498256]
    .
    =============== Created Last 30 ================
    .
    2013-07-21 15:33:25 -------- d-----w- C:\Program Files\CCleaner
    2013-07-21 15:14:16 -------- d-----w- C:\Users\Jan\AppData\Roaming\Malwarebytes
    2013-07-21 15:14:05 -------- d-----w- C:\ProgramData\Malwarebytes
    2013-07-21 15:14:03 25928 ----a-w- C:\windows\System32\drivers\mbam.sys
    2013-07-21 15:14:03 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
    2013-07-21 06:15:54 -------- d-----w- C:\Users\Jan\AppData\Local\Smartbar
    2013-07-21 06:11:30 -------- d-----w- C:\Program Files (x86)\Wajam
    2013-07-21 06:11:11 -------- d-----w- C:\Program Files (x86)\LessTabs
    2013-07-21 06:11:08 -------- d-----w- C:\Program Files (x86)\OApps
    2013-07-20 19:19:44 -------- d-----w- C:\ProgramData\AskPartnerNetwork
    2013-07-20 19:19:44 -------- d-----w- C:\Program Files (x86)\AskPartnerNetwork
    2013-07-20 19:19:31 -------- d-----w- C:\Users\Jan\AppData\Roaming\Sammsoft
    2013-07-20 19:19:20 -------- d-----w- C:\ProgramData\APN
    2013-07-20 19:14:10 -------- d-----w- C:\Program Files (x86)\ARO 2013
    2013-07-20 17:54:25 -------- d-----w- C:\Users\Jan\AppData\Roaming\SUPERAntiSpyware.com
    2013-07-20 17:53:35 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
    2013-07-20 17:53:35 -------- d-----w- C:\Program Files (x86)\SUPERAntiSpyware
    2013-07-17 00:38:58 252080 ----a-w- C:\ProgramData\Microsoft\Windows\Sqm\Manifest\Sqm10210.bin
    2013-07-15 23:56:01 -------- d-----w- C:\Program Files (x86)\LAVMediaCodec
    2013-07-15 23:53:17 -------- d-----w- C:\Program Files (x86)\File Type Helper
    2013-07-15 23:53:12 -------- d-----w- C:\Program Files (x86)\Fast Free Converter
    2013-07-15 23:52:48 -------- d-----w- C:\Users\Jan\AppData\Local\DownloadTerms
    2013-07-15 23:52:44 -------- d-----w- C:\Users\Jan\AppData\Local\SwvUpdater
    2013-07-13 13:15:38 -------- d-----w- C:\windows\System32\MRT
    2013-07-12 10:39:12 144384 ----a-w- C:\windows\System32\tssdisai.dll
    2013-07-11 19:49:40 2035200 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll
    2013-07-11 19:49:40 1272320 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
    2013-07-11 19:49:39 1617920 ----a-w- C:\Program Files\Windows Journal\NBDoc.DLL
    2013-07-11 19:49:39 1413632 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\InkObj.dll
    2013-07-11 19:49:39 1318912 ----a-w- C:\Program Files\Windows Journal\JNWDRV.dll
    2013-07-11 19:49:39 1306112 ----a-w- C:\Program Files\Windows Journal\JNTFiltr.dll
    2013-07-11 19:49:38 1029632 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\journal.dll
    2013-07-11 19:49:10 4036096 ----a-w- C:\windows\System32\win32k.sys
    2013-07-11 19:48:14 595968 ----a-w- C:\windows\System32\qedit.dll
    2013-07-11 19:48:13 496640 ----a-w- C:\windows\SysWow64\qedit.dll
    2013-07-11 19:48:12 19187712 ----a-w- C:\Program Files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
    2013-07-11 19:48:11 18523648 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
    2013-07-11 19:46:33 2842112 ----a-w- C:\windows\System32\WMVDECOD.DLL
    2013-07-11 19:46:32 2620928 ----a-w- C:\windows\SysWow64\WMVDECOD.DLL
    2013-07-06 02:25:22 -------- d-----w- C:\Users\Jan\AppData\Local\Adobe
    2013-07-06 02:16:37 867240 ----a-w- C:\windows\SysWow64\npDeployJava1.dll
    2013-07-06 02:16:37 789416 ----a-w- C:\windows\SysWow64\deployJava1.dll
    2013-07-06 02:16:32 96168 ----a-w- C:\windows\SysWow64\WindowsAccessBridge-32.dll
    2013-07-06 00:18:05 -------- d-----r- C:\Users\Jan\SkyDrive
    2013-07-06 00:14:09 556696 ----a-w- C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
    2013-07-06 00:12:10 -------- d-----w- C:\Program Files\Microsoft Office 15
    2013-07-05 06:09:14 -------- d-----w- C:\Users\Jan\AppData\Local\CrashDumps
    2013-07-05 05:59:59 505344 ----a-w- C:\windows\System32\SpaceControl.dll
    2013-07-05 05:58:49 82944 ----a-w- C:\windows\SysWow64\dskquota.dll
    2013-07-05 05:58:49 109568 ----a-w- C:\windows\System32\dskquota.dll
    2013-07-05 05:58:44 929792 ----a-w- C:\windows\SysWow64\mfnetsrc.dll
    2013-07-05 05:58:44 677888 ----a-w- C:\windows\System32\mfnetcore.dll
    2013-07-05 05:58:44 568832 ----a-w- C:\windows\SysWow64\mfnetcore.dll
    2013-07-05 05:58:44 513024 ----a-w- C:\windows\SysWow64\mfmpeg2srcsnk.dll
    2013-07-05 05:58:44 1172992 ----a-w- C:\windows\System32\mfnetsrc.dll
    2013-07-05 05:58:43 673280 ----a-w- C:\windows\System32\mfmpeg2srcsnk.dll
    2013-07-05 05:52:53 11459584 ----a-w- C:\windows\System32\glcndFilter.dll
    2013-07-05 00:28:42 -------- d-----w- C:\Program Files (x86)\Video Download Converter
    2013-07-05 00:26:09 -------- d-----w- C:\Users\Jan\AppData\Local\VideoDownloadConverter_4z
    2013-07-05 00:26:03 -------- d-----w- C:\Program Files (x86)\VideoDownloadConverter_4z
    2013-07-04 20:49:26 78200 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2013-07-04 20:49:26 693112 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe
    2013-07-04 07:59:09 493656 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\symds64.sys
    2013-07-04 07:59:09 433752 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\symnets.sys
    2013-07-04 07:59:09 36952 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\srtspx64.sys
    2013-07-04 07:59:09 23448 ----a-r- C:\windows\System32\drivers\NISx64\1404000.028\symelam.sys
    2013-07-04 07:59:09 1139800 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\symefa64.sys
    2013-07-04 07:59:08 796760 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\srtsp64.sys
    2013-07-04 07:59:08 224416 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\ironx64.sys
    2013-07-04 07:59:08 169048 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\ccsetx64.sys
    2013-07-04 07:58:34 -------- d-----w- C:\windows\System32\drivers\NISx64\1404000.028
    2013-07-03 04:29:51 17888 ----a-w- C:\windows\System32\msvcr100_clr0400.dll
    2013-07-03 04:29:49 17888 ----a-w- C:\windows\SysWow64\msvcr100_clr0400.dll
    2013-07-03 04:23:56 1161728 ----a-w- C:\windows\System32\sppobjs.dll
    2013-07-03 04:20:15 13644288 ----a-w- C:\windows\System32\Windows.UI.Xaml.dll
    2013-07-03 04:20:13 10116096 ----a-w- C:\windows\System32\twinui.dll
    2013-07-03 04:20:07 8857088 ----a-w- C:\windows\SysWow64\twinui.dll
    2013-07-03 04:20:04 10788864 ----a-w- C:\windows\SysWow64\Windows.UI.Xaml.dll
    2013-07-03 04:20:01 1131520 ----a-w- C:\windows\System32\AppXDeploymentServer.dll
    2013-07-03 04:18:25 3552768 ----a-w- C:\windows\System32\tquery.dll
    2013-07-03 04:18:18 2107904 ----a-w- C:\windows\System32\mssrch.dll
    2013-07-03 04:18:14 2767360 ----a-w- C:\windows\SysWow64\tquery.dll
    2013-07-03 04:18:10 1593344 ----a-w- C:\windows\SysWow64\mssrch.dll
    2013-07-03 04:18:07 1829408 ----a-w- C:\windows\System32\ntdll.dll
    2013-07-03 03:59:53 -------- d-----w- C:\Program Files (x86)\PC Checkup
    2013-07-03 03:59:41 169048 ----a-w- C:\windows\System32\drivers\NATx64\0108000.020\ccsetx64.sys
    2013-07-03 03:59:37 -------- d-----w- C:\windows\System32\drivers\NATx64\0108000.020
    2013-07-03 03:59:23 -------- d-----w- C:\Users\Jan\AppData\Local\Programs
    2013-07-02 23:28:43 1455368 ----a-w- C:\windows\System32\drivers\dxgkrnl.sys
    2013-07-02 23:28:40 94208 ----a-w- C:\windows\System32\synceng.dll
    2013-07-02 23:28:40 72192 ----a-w- C:\windows\SysWow64\synceng.dll
    2013-07-02 23:28:17 86016 ----a-w- C:\windows\System32\ncryptsslp.dll
    2013-07-02 23:28:17 71168 ----a-w- C:\windows\SysWow64\ncryptsslp.dll
    2013-07-02 23:26:38 -------- d-----w- C:\Users\Jan\AppData\Roaming\PCCUStubInstaller
    2013-07-02 23:20:51 945152 ----a-w- C:\windows\System32\resetengmig.dll
    2013-07-02 23:18:55 96256 ----a-w- C:\windows\System32\fontsub.dll
    2013-07-02 23:17:33 915968 ----a-w- C:\windows\System32\uxtheme.dll
    2013-07-02 23:03:20 50784 ----a-w- C:\ProgramData\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
    2013-07-02 23:03:14 17536 ----a-w- C:\ProgramData\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
    2013-07-02 00:17:47 -------- d-----w- C:\Users\Jan\AppData\Local\Macromedia
    2013-07-01 22:36:06 -------- d-----w- C:\Program Files (x86)\Common Files\Symantec Shared
    2013-07-01 21:12:17 13 --sh--r- C:\windows\System32\drivers\fbd.sys
    2013-07-01 20:42:55 -------- d-----w- C:\Users\Jan\AppData\Local\TOSHIBA
    2013-07-01 20:42:24 -------- d-----r- C:\Users\Jan\Searches
    2013-07-01 20:42:24 -------- d-----r- C:\Users\Jan\Contacts
    2013-07-01 20:42:12 -------- d-----w- C:\Users\Jan\AppData\Roaming\WinBatch
    2013-07-01 20:40:17 -------- d-----w- C:\Users\Jan\AppData\Local\VirtualStore
    2013-07-01 20:39:23 -------- d-----w- C:\Users\Jan\AppData\Local\Packages
    .
    ==================== Find3M ====================
    .
    2013-07-04 07:59:30 177312 ----a-w- C:\windows\System32\drivers\SYMEVENT64x86.SYS
    2013-06-16 22:41:31 997632 ----a-w- C:\windows\System32\drivers\ndis.sys
    2013-06-11 23:43:37 1767936 ----a-w- C:\windows\SysWow64\wininet.dll
    2013-06-11 23:43:00 2877440 ----a-w- C:\windows\SysWow64\jscript9.dll
    2013-06-11 23:26:20 2241024 ----a-w- C:\windows\System32\wininet.dll
    2013-06-11 23:25:16 3958784 ----a-w- C:\windows\System32\jscript9.dll
    2013-06-01 11:54:16 194816 ----a-w- C:\windows\System32\drivers\sdbus.sys
    2013-06-01 11:54:10 125184 ----a-w- C:\windows\System32\drivers\dumpsd.sys
    2013-06-01 11:34:21 2391280 ----a-w- C:\windows\explorer.exe
    2013-06-01 11:33:13 2233600 ----a-w- C:\windows\System32\drivers\tcpip.sys
    2013-06-01 11:29:35 337152 ----a-w- C:\windows\System32\drivers\USBXHCI.SYS
    2013-06-01 11:29:35 213248 ----a-w- C:\windows\System32\drivers\UCX01000.SYS
    2013-06-01 11:26:33 327936 ----a-w- C:\windows\System32\drivers\volsnap.sys
    2013-06-01 11:26:31 6987008 ----a-w- C:\windows\System32\ntoskrnl.exe
    2013-06-01 10:24:46 2106176 ----a-w- C:\windows\SysWow64\explorer.exe
    2013-06-01 09:25:52 364544 ----a-w- C:\windows\SysWow64\XpsGdiConverter.dll
    2013-06-01 09:25:05 67584 ----a-w- C:\windows\SysWow64\samlib.dll
    2013-06-01 09:24:19 493056 ----a-w- C:\windows\SysWow64\mscms.dll
    2013-06-01 09:24:09 850944 ----a-w- C:\windows\SysWow64\mfasfsrcsnk.dll
    2013-06-01 09:24:09 1453568 ----a-w- C:\windows\SysWow64\mfcore.dll
    2013-06-01 09:23:46 1842176 ----a-w- C:\windows\SysWow64\dwmcore.dll
    2013-06-01 09:23:06 680960 ----a-w- C:\windows\System32\vds.exe
    2013-06-01 09:22:47 80896 ----a-w- C:\windows\System32\MbaeParserTask.exe
    2013-06-01 09:22:33 523264 ----a-w- C:\windows\System32\XpsGdiConverter.dll
    2013-06-01 09:22:33 446976 ----a-w- C:\windows\System32\wwansvc.dll
    2013-06-01 09:22:09 190976 ----a-w- C:\windows\System32\vdsutil.dll
    2013-06-01 09:21:39 729600 ----a-w- C:\windows\System32\samsrv.dll
    2013-06-01 09:21:39 106496 ----a-w- C:\windows\System32\samlib.dll
    2013-06-01 09:20:45 583168 ----a-w- C:\windows\System32\mscms.dll
    2013-06-01 09:20:34 1527808 ----a-w- C:\windows\System32\mfcore.dll
    2013-06-01 09:20:34 1048576 ----a-w- C:\windows\System32\mfasfsrcsnk.dll
    2013-06-01 09:20:04 2219520 ----a-w- C:\windows\System32\dwmcore.dll
    2013-06-01 09:19:58 207872 ----a-w- C:\windows\System32\DeviceSetupManager.dll
    2013-06-01 09:19:42 785408 ----a-w- C:\windows\System32\audiosrv.dll
    2013-06-01 03:08:57 37632 ----a-w- C:\windows\System32\drivers\BthAvrcpTg.sys
    2013-05-24 22:09:20 1403296 ----a-w- C:\windows\System32\winload.efi
    2013-05-24 22:09:20 1271584 ----a-w- C:\windows\System32\winload.exe
    2013-05-24 22:09:20 1217352 ----a-w- C:\windows\System32\winresume.efi
    2013-05-24 22:09:20 1093904 ----a-w- C:\windows\System32\winresume.exe
    2013-05-23 23:01:46 1300992 ----a-w- C:\windows\System32\gdi32.dll
    2013-05-23 22:27:05 1022464 ----a-w- C:\windows\SysWow64\gdi32.dll
    2013-05-15 22:37:03 44032 ----a-w- C:\windows\SysWow64\UXInit.dll
    2013-05-15 22:35:49 53760 ----a-w- C:\windows\System32\UXInit.dll
    2013-05-15 02:25:59 888320 ----a-w- C:\windows\System32\autochk.exe
    2013-05-15 02:25:44 542208 ----a-w- C:\windows\System32\untfs.dll
    2013-05-15 02:24:10 793088 ----a-w- C:\windows\SysWow64\autochk.exe
    2013-05-15 02:24:01 482816 ----a-w- C:\windows\SysWow64\untfs.dll
    2013-05-14 13:14:01 2706432 ----a-w- C:\windows\System32\mshtml.tlb
    2013-05-14 09:23:31 2706432 ----a-w- C:\windows\SysWow64\mshtml.tlb
    2013-05-04 07:58:17 120736 ----a-w- C:\windows\System32\AuthHost.exe
    2013-05-04 07:34:17 446720 ----a-w- C:\windows\System32\drivers\USBHUB3.SYS
    2013-05-04 07:34:15 284416 ----a-w- C:\windows\System32\drivers\spaceport.sys
    2013-05-04 06:59:56 39424 ----a-w- C:\windows\System32\wuapp.exe
    2013-05-04 06:59:51 1483776 ----a-w- C:\windows\System32\VSSVC.exe
    2013-05-04 06:59:36 812544 ----a-w- C:\windows\System32\Magnify.exe
    2013-05-04 06:59:25 98304 ----a-w- C:\windows\System32\wudriver.dll
    2013-05-04 06:59:25 251904 ----a-w- C:\windows\System32\WUSettingsProvider.dll
    2013-05-04 06:59:25 141824 ----a-w- C:\windows\System32\wuwebv.dll
    2013-05-04 06:59:24 1619968 ----a-w- C:\windows\System32\wucltux.dll
    2013-05-04 06:58:54 328192 ----a-w- C:\windows\System32\ubpm.dll
    2013-05-04 06:58:49 173568 ----a-w- C:\windows\System32\storewuauth.dll
    2013-05-04 06:58:49 1332736 ----a-w- C:\windows\System32\sysmain.dll
    2013-05-04 06:58:48 330240 ----a-w- C:\windows\System32\stobject.dll
    2013-05-04 06:58:28 93696 ----a-w- C:\windows\System32\psmsrv.dll
    2013-05-04 06:58:02 470528 ----a-w- C:\windows\System32\netprofmsvc.dll
    2013-05-04 06:58:02 151552 ----a-w- C:\windows\System32\netprofm.dll
    2013-05-04 06:58:01 169984 ----a-w- C:\windows\System32\netplwiz.dll
    2013-05-04 06:57:59 17408 ----a-w- C:\windows\System32\muifontsetup.dll
    2013-05-04 06:57:46 560640 ----a-w- C:\windows\System32\mfmp4srcsnk.dll
    2013-05-04 06:57:15 501760 ----a-w- C:\windows\System32\DevicePairing.dll
    2013-05-04 06:57:05 179712 ----a-w- C:\windows\System32\bisrv.dll
    2013-05-04 06:57:05 122368 ----a-w- C:\windows\System32\biwinrt.dll
    2013-05-04 06:57:04 389120 ----a-w- C:\windows\System32\BCP47Langs.dll
    2013-05-04 06:57:04 2305024 ----a-w- C:\windows\System32\authui.dll
    2013-05-04 06:57:00 708096 ----a-w- C:\windows\System32\AppXDeploymentExtensions.dll
    2013-05-04 06:56:53 419840 ----a-w- C:\windows\System32\intl.cpl
    2013-05-04 04:58:34 34304 ----a-w- C:\windows\SysWow64\wuapp.exe
    2013-05-04 04:58:14 758784 ----a-w- C:\windows\SysWow64\Magnify.exe
    2013-05-04 04:58:02 83968 ----a-w- C:\windows\SysWow64\wudriver.dll
    2013-05-04 04:58:02 125952 ----a-w- C:\windows\SysWow64\wuwebv.dll
    2013-05-04 04:57:39 247296 ----a-w- C:\windows\SysWow64\ubpm.dll
    2013-05-04 04:57:35 303616 ----a-w- C:\windows\SysWow64\stobject.dll
    2013-05-04 04:57:16 18432 ----a-w- C:\windows\SysWow64\npmproxy.dll
    2013-05-04 04:57:04 151040 ----a-w- C:\windows\SysWow64\netplwiz.dll
    2013-05-04 04:57:04 115712 ----a-w- C:\windows\SysWow64\netprofm.dll
    2013-05-04 04:57:02 14336 ----a-w- C:\windows\SysWow64\muifontsetup.dll
    2013-05-04 04:56:48 411136 ----a-w- C:\windows\SysWow64\mfmp4srcsnk.dll
    2013-05-04 04:56:14 449536 ----a-w- C:\windows\SysWow64\DevicePairing.dll
    2013-05-04 04:56:06 92160 ----a-w- C:\windows\SysWow64\biwinrt.dll
    2013-05-04 04:56:05 309760 ----a-w- C:\windows\SysWow64\BCP47Langs.dll
    2013-05-04 04:56:05 2035712 ----a-w- C:\windows\SysWow64\authui.dll
    2013-05-04 04:55:58 389632 ----a-w- C:\windows\SysWow64\intl.cpl
    2013-05-04 04:51:38 14848 ----a-w- C:\windows\System32\rars.rs
    2013-05-04 04:47:02 427520 ----a-w- C:\windows\System32\drivers\rdbss.sys
    2013-05-04 04:10:47 14848 ----a-w- C:\windows\SysWow64\rars.rs
    2013-04-27 05:20:12 733184 ----a-w- C:\windows\System32\win32spl.dll
    2013-04-23 23:13:53 1013248 ----a-w- C:\windows\SysWow64\certutil.exe
    2013-04-23 23:12:44 1569792 ----a-w- C:\windows\SysWow64\crypt32.dll
    2013-04-23 23:12:44 109056 ----a-w- C:\windows\SysWow64\cryptnet.dll
    2013-04-23 22:56:35 1255936 ----a-w- C:\windows\System32\certutil.exe
    .
    ============= FINISH: 11:44:47.61 ===============


    Thanks!
    Jan

  • #2
    Hoi Jan VS en welkom op Nucia Security Forum,

    Voor we beginnen , wil ik even vriendelijk op de volgende richtlijnen wijzen:
    .
    • Log enkel in als beheerder met alle rechten.
    • Post je probleem niet in verscheidene fora. het komt je probleem niet ten goede en het is niet netjes tegenover de helpers.
    • Het opruimen van je systeem kan wat tijd in beslag nemen, wees geduldig.
    • Volg aandachtig de instructies die door mij worden gegeven.
    • Volg enkel het door mij gegeven advies op
    • Blijf bij het topic totdat ik gemeldt heb dat je PC clean is.
    • Als je iets niet weet of verstaat, vraag het dan even aub.
    • Installeer of deinstalleer géén software of hardware terwijl we met je probleem bezig zijn.
    • Ga ondertussen niet wat "anders" proberen, dat maakt het alleen maar moeilijker voor ons
    • Zet je emoticons (Smileys) uit als je logs plaatst aub .
    • De logs niet als bijlage, noch tussen codetags zetten aub.

    .
    Opmerking: Vista of Windows 7 ? >> Alle tools steeds uitvoeren als admin.
    De instructies die worden gegeven, zijn enkel geldig voor jouw PC.

    Stap 1:

    Malware scannen en verwijderen....

    Start MBAM.
    Zodra het programma gestart is, ga je naar het tabblad "Instellingen".
    • Vink hier aan: "Sluit Internet Explorer tijdens verwijdering van malware".
    • Ga naar het tabblad "Updates" en Update MBAM.
    • Ga daarna naar het tabblad "Scanner", kies hier voor "VOLLEDIGE Scan".
    • Druk vervolgens op "Scannen" om de scan te starten.
    • Het scannen kan een tijdje duren, dus wees geduldig.
    • Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.
    • Zorg ervoor dat daar alles aangevinkt is, daarna klik op: "Verwijder geselecteerde".
    • Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten.

    Indien MBAM vraagt om een herstart, doe dit dan ook.
    Wanneer je de restart hebt gedaan, maak je een nieuwe snelle scan met MBAM.
    In dat geval post je dus de twee logs.

    De log wordt automatisch bewaard door MalwareBytes' Anti-Malware en kan je terugvinden door op de "Logs" tab te klikken in het programma.


    Bij problemen!!!

    ___________________________________________________________

    Stap 2:

    Controle op slechte toolbars...

    Opmerking:Vista of Windows 7 ? >> Alle tools steeds uitvoeren als admin.
    Beveiligingssoftware uitschakelen.

    Download AdwCleaner by Xplode naar je Bureaublad.
    • Sluit alle openstaande vensters
    • Start AdwCleaner en klik op Verwijderen

    • KLIK HIER voor een vergroting! 
    • Klik bij AdwCleaner – Information op OK
    • Klik bij AdwCleaner – Restart Required op OK

    Alle icoontjes verdwijnen van het Bureaublad,dit is normaal
    Je PC word opnieuw opgestart en er een opent logfile (C:\ AdwCleaner[xx].txt post de inhoud hier op het Forum.

    Vergeet niet om je "smileys" uit te schakelen.

    Als je Startpagina ook gehijackt was,stel dan de zoekmachine opnieuw in,deze word standaard door AdwCleaner terug gezet naar Google.com

    ___________________________________________________________

    Stap 3:

    Download DDS.com, DDS.scr of DDS.pif van één van deze locaties en plaats het op je bureaublad:


    DDS is een diagnosetool en maakt gebruik van scripts.
    Is het uitvoeren van scripts uitgeschakeld, dan schakel je dit weer in zodat er geen problemen optreden bij gebruik van DDS.


    Dubbelklik op DDS om de tool te starten. (afhankelijk van de download die je gekozen hebt kan dit het bestand DDS.com, DDS.scr of DDS.pif zijn)
    Wanneer het klaar is openen er twee logfiles: DDS.txt en Attach.txt
    Beide logfiles sla je op je bureaublad.

    Post de inhoud van DDS.txt.

    De inhoud Attach.txt moet je niet posten en Attach.txt moet je niet als bijlage toevoegen aan je post, tenzij ik er om vraag.

    ___________________________________________________________

    Stap 4:

    Controle op updates...

    Download Security Check op je bureaublad via hier of hier

    Start Security Check
    Volg de Instructies in het scherm
    Aan het eind verschijnt een log ( checkup.txt )
    Plaats de inhoud ervan in je volgende antwoord.

    In je volgende posting, had ik graag de volgende logs gezien, gemaakt in de opgestelde volgorde:
    .
    • MBAM
    • AdwCleaner
    • DDS
    • checkup.txt

    .
    Deze logs NIET als bijlage of tussen codetags posten aub.
    (Desnoods in meerdere postingen.)

    Emphyrio
    Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
    E Dev * McAfee verwijderen. * Ccleaner * E-Peek

    Comment


    • #3
      Onderstaand volgen de 4 logs:

      MBAM:
      Malwarebytes Anti-Malware 1.75.0.1300
      www.malwarebytes.org

      Database version: v2013.07.21.04

      Windows 8 x64 NTFS
      Internet Explorer 10.0.9200.16635
      Jan :: JAN [administrator]

      7/21/2013 1:33:39 PM
      mbam-log-2013-07-21 (13-33-39).txt

      Scan type: Full scan (C:\|D:\|)
      Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
      Scan options disabled: P2P
      Objects scanned: 349745
      Time elapsed: 44 minute(s), 9 second(s)

      Memory Processes Detected: 0
      (No malicious items detected)

      Memory Modules Detected: 0
      (No malicious items detected)

      Registry Keys Detected: 0
      (No malicious items detected)

      Registry Values Detected: 0
      (No malicious items detected)

      Registry Data Items Detected: 0
      (No malicious items detected)

      Folders Detected: 0
      (No malicious items detected)

      Files Detected: 0
      (No malicious items detected)

      (end)

      ADWCleaner:
      # AdwCleaner v2.306 - Logfile created 07/21/2013 at 14:40:22
      # Updated 19/07/2013 by Xplode
      # Operating system : Windows 8 (64 bits)
      # User : Jan - JAN
      # Boot Mode : Normal
      # Running from : C:\Users\Jan\Downloads\adwcleaner(1).exe
      # Option [Delete]


      ***** [Services] *****

      Stopped & Deleted : APNMCP
      Stopped & Deleted : VideoDownloadConverter_4zService
      Stopped & Deleted : WajamUpdater

      ***** [Files / Folders] *****

      Deleted on reboot : C:\Program Files (x86)\VideoDownloadConverter_4z
      Deleted on reboot : C:\ProgramData\boost_interprocess
      File Deleted : C:\END
      Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
      Folder Deleted : C:\Program Files (x86)\OApps
      Folder Deleted : C:\Program Files (x86)\Wajam
      Folder Deleted : C:\ProgramData\APN
      Folder Deleted : C:\ProgramData\AskPartnerNetwork
      Folder Deleted : C:\Users\Jan\AppData\Local\Smartbar
      Folder Deleted : C:\Users\Jan\AppData\Local\SwvUpdater
      Folder Deleted : C:\Users\Jan\AppData\Local\Temp\APN
      Folder Deleted : C:\Users\Jan\AppData\Local\Temp\Smartbar
      Folder Deleted : C:\Users\Jan\AppData\Local\VideoDownloadConverter_4z
      Folder Deleted : C:\Users\Jan\AppData\LocalLow\iac
      Folder Deleted : C:\Users\Jan\AppData\LocalLow\VideoDownloadConverter_4z
      Folder Deleted : C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
      Folder Deleted : C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\extensions\[email protected] loadConverter_4z.com

      ***** [Registry] *****

      Key Deleted : HKCU\Software\AskPartnerNetwork
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
      Key Deleted : HKCU\Software\SmartBar
      Key Deleted : HKCU\Software\SmartbarBackup
      Key Deleted : HKCU\Software\SmartbarLog
      Key Deleted : HKCU\Software\Wajam
      Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
      Key Deleted : HKLM\Software\AskPartnerNetwork
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
      Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
      Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.BHO
      Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
      Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
      Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
      Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
      Key Deleted : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{886F93AD-3CBB-4424-8442-A7340243540F}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AA289DBC-59B6-40A5-AC7D-C90DF850289C}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CA723163-6FAD-43D4-8B93-0D8C52BD9974}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FB0E8A09-F08C-44CF-9E15-97ADAC016248}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SettingsPlugin
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SettingsPlugin.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncher
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncher.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton.1
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin
      Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin.1
      Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamBHO
      Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
      Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
      Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
      Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
      Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}
      Key Deleted : HKLM\Software\Wajam
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{13119113-0854-469D-807A-171568457991}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2A1260C1-2964-453F-B0BA-FA429472EB5F}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{33119133-0854-469D-807A-171568457991}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{363D5C92-10DC-4287-93E5-1832EECC48EC}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3B41BE90-F731-4137-AFF3-2CA951E7F0D9}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4128C64D-F0DD-4811-9405-D22294E8151F}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66292684-B2C2-4C7C-B3D2-BF446E30744C}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{69407823-3494-4400-8D49-612549E8F4EE}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6BFF4BCB-7A73-45A7-AC4C-389A34E1D1EF}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8FCA5302-6D6D-4645-BF99-D43CF76CE474}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD385519-22E7-4BE2-8A8D-35C66DF4858E}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{ED345812-2722-4DCA-9976-D01832DB44EE}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23119123-0854-469D-807A-171568457991}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
      Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
      Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
      Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]
      Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
      Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter Search Scope Monitor]
      Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter_4z Browser Plugin Loader]
      Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
      Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

      ***** [Internet Browsers] *****

      -\\ Internet Explorer v10.0.9200.16537

      [OK] Registry is clean.

      -\\ Mozilla Firefox v22.0 (en-US)

      File : C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\prefs.js

      C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\user.js ... Deleted !

      Deleted : user_pref("browser.search.selectedEngine", "Web Search");
      Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?p
      Deleted : user_pref("extensions.wajam.affiliate_id", "1401");
      Deleted : user_pref("extensions.wajam.firstrun", "false");
      Deleted : user_pref("extensions.wajam.log_send_info", "false");
      Deleted : user_pref("extensions.wajam.mappingListJsonString", "{\"version\":\"0.21087\",\"supported_sites\":{\
      Deleted : user_pref("extensions.wajam.no_trace", "false");
      Deleted : user_pref("extensions.wajam.server_current_mapping_version", "0.21087");
      Deleted : user_pref("extensions.wajam.supported_sites.google.wajam_google_se_js", "try {window['APP_LABEL_NAME
      Deleted : user_pref("extensions.wajam.trace_log", "1374387102509 - processInstallationUpgrade - version set to
      Deleted : user_pref("extensions.wajam.unique_id", "0EA552538FA19F42DA42D0AA4BDBAE10");
      Deleted : user_pref("extensions.wajam.user_current_mapping_version", "0");
      Deleted : user_pref("extensions.wajam.version", "1.26");

      *************************

      AdwCleaner[S1].txt - [15937 octets] - [21/07/2013 14:40:22]

      ########## EOF - C:\AdwCleaner[S1].txt - [15998 octets] ##########


      DDS:
      DDS (Ver_2012-11-20.01) - NTFS_AMD64
      Internet Explorer: 10.0.9200.16537 BrowserJavaVersion: 10.25.2
      Run by Jan at 14:47:58 on 2013-07-21
      Microsoft Windows 8 6.2.9200.0.1252.1.1033.18.3978.2361 [GMT -4:00]
      .
      AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
      SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
      FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
      .
      ============== Running Processes ===============
      .
      C:\windows\system32\svchost.exe -k DcomLaunch
      C:\windows\system32\svchost.exe -k RPCSS
      C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
      C:\windows\system32\dwm.exe
      C:\windows\system32\svchost.exe -k netsvcs
      C:\windows\system32\svchost.exe -k LocalService
      C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
      C:\windows\system32\svchost.exe -k NetworkService
      C:\windows\system32\WLANExt.exe
      C:\windows\System32\spoolsv.exe
      C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
      C:\Program Files (x86)\SUPERAntiSpyware\SASCORE.EXE
      C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
      C:\Program Files\Intel\iCLS Client\HeciServer.exe
      C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
      C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
      C:\Program Files (x86)\PC Checkup\SymcPCCULaunchSvc.exe
      C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
      C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe
      C:\Windows\system32\TODDSrv.exe
      C:\Program Files\Toshiba\Teco\TecoService.exe
      C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
      C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
      C:\windows\system32\dashost.exe
      C:\windows\System32\svchost.exe -k LocalServicePeerNet
      C:\windows\system32\wbem\wmiprvse.exe
      C:\windows\system32\taskhostex.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\windows\Explorer.EXE
      C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe
      C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
      C:\Windows\System32\RuntimeBroker.exe
      C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
      C:\windows\system32\SearchIndexer.exe
      C:\Windows\System32\igfxtray.exe
      C:\Windows\System32\hkcmd.exe
      C:\Windows\System32\igfxpers.exe
      C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
      C:\Program Files\Toshiba\Hotkey\TCrdMain_Win8.exe
      C:\Program Files\Toshiba\Teco\TecoResident.exe
      C:\Users\Jan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
      C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
      C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
      C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
      C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe
      C:\Program Files (x86)\Mozilla Firefox\firefox.exe
      C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
      C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
      C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
      C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
      C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
      C:\Program Files (x86)\Norton Anti-Theft\Engine\1.8.0.32\ccSvcHst.exe
      C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
      C:\Program Files (x86)\Norton Anti-Theft\Engine\1.8.0.32\ccSvcHst.exe
      C:\Program Files\TOSHIBA\HDD Accelerator\THAccelSvc.exe
      C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
      C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
      C:\Program Files\Windows Media Player\wmpnetwk.exe
      C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
      C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
      C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe
      C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
      \\?\C:\windows\system32\wbem\WMIADAP.EXE
      C:\windows\system32\SearchProtocolHost.exe
      C:\windows\system32\SearchFilterHost.exe
      C:\windows\system32\wbem\wmiprvse.exe
      C:\windows\System32\cscript.exe
      .
      ============== Pseudo HJT Report ===============
      .
      uStart Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=hp&installDate=21/07/2013
      uWindow Title = Internet Explorer provided by TOSHIBA
      uSearch Bar = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=ds&q={searchTerms}&installDate=21/07/2013
      uSearch Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=ds&q={searchTerms}&installDate=21/07/2013
      uDefault_Page_URL = hxxp://toshiba13.msn.com
      mStart Page = hxxp://toshiba13.msn.com
      mWindow Title = Internet Explorer provided by TOSHIBA
      mDefault_Page_URL = hxxp://toshiba13.msn.com
      uSearchAssistant = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=ds&q={searchTerms}&installDate=21/07/2013
      mWinlogon: Userinit = userinit.exe,
      BHO: SelectionLinks: {1C8501DD-5580-48AB-B25C-6D5DBE835A6A} -
      BHO: LessTabs: {3178A392-8963-471E-B7A2-969CB58D6496} - C:\Program Files (x86)\LessTabs\IE32\LessTabsClientIE.dll
      BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll
      BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ips\ipsbho.dll
      BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
      BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\urlredir.dll
      BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
      TB: VideoDownloadConverter: {48586425-6BB7-4F51-8DC6-38C88E3EBB58} -
      TB: VideoDownloadConverter: {48586425-6bb7-4f51-8dc6-38c88e3ebb58} -
      uRun: [SkyDrive] "C:\Users\Jan\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
      uRun: [SUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
      mRun: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
      mRun: [ToshibaAppPlace] "C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe"
      mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
      mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
      IE: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
      IE: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
      IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office 15\root\office15\onbttnie.dll
      IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll
      TCP: Interfaces\{93177218-41AE-4160-A125-B4B2CE3C2635} : DHCPNameServer = 192.168.1.1 192.168.1.1
      Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\msosb.dll
      Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
      SSODL: WebCheck - <orphaned>
      mASetup: {A6EADE66-0000-0000-484E-7E8A45000000} - "C:\windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll",CreateReaderUserSettings
      x64-mStart Page = hxxp://toshiba13.msn.com
      x64-mWindow Title = Internet Explorer provided by TOSHIBA
      x64-mDefault_Page_URL = hxxp://toshiba13.msn.com
      x64-BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll
      x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL
      x64-BHO: Microsoft SkyDrive Pro Browser Helper: {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
      x64-Run: [IgfxTray] C:\windows\System32\igfxtray.exe
      x64-Run: [HotKeysCmds] C:\windows\System32\hkcmd.exe
      x64-Run: [Persistence] C:\windows\System32\igfxpers.exe
      x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
      x64-Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\Hotkey\TCrdMain_Win8.exe
      x64-Run: [TecoResident] C:\Program Files\TOSHIBA\Teco\TecoResident.exe
      x64-Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe
      x64-Run: [TODDMain] C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
      x64-Run: [VideoDownloadConverter Home Page Guard 64 bit] "C:\PROGRA~2\VIDEOD~2\bar\1.bin\AppIntegrator64.exe"
      x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll
      x64-IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll
      x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
      x64-Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - <orphaned>
      x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
      x64-Notify: igfxcui - igfxdev.dll
      x64-SSODL: WebCheck - <orphaned>
      .
      ================= FIREFOX ===================
      .
      FF - ProfilePath - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\
      FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
      FF - prefs.js: keyword.URL - hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=US&userid=f1f46ed1-ee83-443a-85d0-eabbf90ab217&searchtype=ds&installDate={installDate}&q=
      FF - prefs.js: keyword.enabled - false
      FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
      FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
      FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
      FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
      FF - plugin: C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll
      FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
      FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
      FF - plugin: C:\Program Files\Microsoft Office 15\root\Office15\npspwrap.dll
      FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
      FF - plugin: C:\windows\SysWOW64\npDeployJava1.dll
      FF - plugin: C:\windows\SysWOW64\npmproxy.dll
      FF - ExtSQL: 2013-06-13 04:51; [email protected]; C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\extensions\[email protected]
      FF - ExtSQL: 2013-07-01 16:39; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn
      FF - ExtSQL: 2013-07-01 16:39; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFFPlgn
      FF - ExtSQL: 2013-07-04 20:28; [email protected]_4z.com; C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin
      FF - ExtSQL: 2013-07-21 02:11; [email protected]; C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
      FF - ExtSQL: 2013-07-21 02:11; {2C86099C-4DE0-428F-9CF4-D991A5C16CD9}; C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\uibsb4ew.default\extensions\{2C86099C-4DE0-428F-9CF4-D991A5C16CD9}
      .
      ============= SERVICES / DRIVERS ===============
      .
      R0 THAccel;THAccel;C:\windows\System32\Drivers\THAccel.sys [2013-1-20 131520]
      R0 tos_sps64;TOSHIBA tos_sps64 Service;C:\windows\System32\Drivers\tos_sps64.sys [2013-1-20 499096]
      R1 ccSet_NARA;NARA Settings Manager;C:\windows\System32\Drivers\NARAx64\0401000.00B\ccSetx64.sys [2012-11-13 168608]
      R2 !SASCORE;SAS Core Service;C:\Program Files (x86)\SUPERAntiSpyware\SASCore.exe [2011-8-11 116608]
      R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-4-20 635104]
      R2 Intel(R) ME Service;Intel(R) ME Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-1-20 129856]
      R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2013-1-20 166720]
      R2 NAT;Norton Anti-Theft;C:\Program Files (x86)\Norton Anti-Theft\Engine\1.8.0.32\ccsvchst.exe [2013-7-2 144368]
      R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccsvchst.exe [2013-7-4 144368]
      R2 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2012-7-11 3939008]
      R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;C:\Program Files (x86)\PC Checkup\SymcPCCULaunchSvc.exe [2013-7-3 132056]
      R2 OfficeSvc;Microsoft Office Service;C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-7-5 1900728]
      R2 PCCUJobMgr;Common Client Job Manager Service;C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe [2012-11-13 126392]
      R2 THAccelSvc;TOSHIBA HDD Accelerator Service;C:\Program Files\Toshiba\HDD Accelerator\THAccelSvc.exe [2012-8-10 214488]
      R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;C:\Program Files\Toshiba\Teco\TecoService.exe [2012-8-24 291240]
      R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\windows\System32\Drivers\TVALZFL.sys [2012-7-21 16768]
      R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2013-1-20 365376]
      R3 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [2013-7-16 1393240]
      R3 ccSet_NAT;Norton Anti-Theft Settings Manager;C:\windows\System32\Drivers\NATx64\0108000.020\ccsetx64.sys [2013-7-2 169048]
      R3 ccSet_NIS;Norton Internet Security Settings Manager;C:\windows\System32\Drivers\NISx64\1404000.028\ccsetx64.sys [2013-7-4 169048]
      R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-7-4 138912]
      R3 FwLnk;FwLnk Driver;C:\windows\System32\Drivers\FwLnk.sys [2013-1-20 9216]
      R3 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20130719.002\IDSviA64.sys [2013-7-20 513184]
      R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;C:\windows\System32\Drivers\L1C63x64.sys [2012-7-13 103936]
      R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;C:\windows\System32\Drivers\RtsUVStor.sys [2013-1-20 315536]
      R3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter;C:\windows\System32\Drivers\rtwlane.sys [2012-6-29 1498256]
      R3 SmbDrvI;SmbDrvI;C:\windows\System32\Drivers\Smb_driver_Intel.sys [2012-8-16 43832]
      R3 SymDS;Symantec Data Store;C:\windows\System32\Drivers\NISx64\1404000.028\symds64.sys [2013-7-4 493656]
      R3 SymEFA;Symantec Extended File Attributes;C:\windows\System32\Drivers\NISx64\1404000.028\symefa64.sys [2013-7-4 1139800]
      R3 SymIRON;Symantec Iron Driver;C:\windows\System32\Drivers\NISx64\1404000.028\ironx64.sys [2013-7-4 224416]
      R3 SymNetS;Symantec Network Security WFP Driver;C:\windows\System32\Drivers\NISx64\1404000.028\symnets.sys [2013-7-4 433752]
      R3 TMachInfo;TMachInfo;C:\Program Files\Toshiba\TOSHIBA Service Station\TMachInfo.exe [2012-7-27 53384]
      R3 TPCHSrv;TPCH Service;C:\Program Files\Toshiba\TPHM\TPCHSrv.exe [2012-7-28 458152]
      S0 SymELAM;Symantec ELAM Driver;C:\windows\System32\Drivers\NISx64\1404000.028\symelam.sys [2013-7-4 23448]
      S1 SASDIFSV;SASDIFSV;C:\Program Files (x86)\SUPERAntiSpyware\sasdifsv.sys [2011-7-22 12880]
      S1 SASKUTIL;SASKUTIL;C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS [2011-7-12 67664]
      S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
      S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;C:\windows\System32\Drivers\rtwlane.sys [2012-6-29 1498256]
      .
      =============== Created Last 30 ================
      .
      2013-07-21 18:40:31 165 ----a-w- C:\windows\DeleteOnReboot.bat
      2013-07-21 15:33:25 -------- d-----w- C:\Program Files\CCleaner
      2013-07-21 15:14:16 -------- d-----w- C:\Users\Jan\AppData\Roaming\Malwarebytes
      2013-07-21 15:14:05 -------- d-----w- C:\ProgramData\Malwarebytes
      2013-07-21 15:14:03 25928 ----a-w- C:\windows\System32\drivers\mbam.sys
      2013-07-21 15:14:03 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
      2013-07-21 06:11:11 -------- d-----w- C:\Program Files (x86)\LessTabs
      2013-07-20 17:54:25 -------- d-----w- C:\Users\Jan\AppData\Roaming\SUPERAntiSpyware.com
      2013-07-20 17:53:35 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
      2013-07-20 17:53:35 -------- d-----w- C:\Program Files (x86)\SUPERAntiSpyware
      2013-07-17 00:38:58 252080 ----a-w- C:\ProgramData\Microsoft\Windows\Sqm\Manifest\Sqm10210.bin
      2013-07-15 23:56:01 -------- d-----w- C:\Program Files (x86)\LAVMediaCodec
      2013-07-15 23:53:12 -------- d-----w- C:\Program Files (x86)\Fast Free Converter
      2013-07-15 23:52:48 -------- d-----w- C:\Users\Jan\AppData\Local\DownloadTerms
      2013-07-13 13:15:38 -------- d-----w- C:\windows\System32\MRT
      2013-07-12 10:39:12 144384 ----a-w- C:\windows\System32\tssdisai.dll
      2013-07-11 19:49:40 2035200 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll
      2013-07-11 19:49:40 1272320 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
      2013-07-11 19:49:39 1617920 ----a-w- C:\Program Files\Windows Journal\NBDoc.DLL
      2013-07-11 19:49:39 1413632 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\InkObj.dll
      2013-07-11 19:49:39 1318912 ----a-w- C:\Program Files\Windows Journal\JNWDRV.dll
      2013-07-11 19:49:39 1306112 ----a-w- C:\Program Files\Windows Journal\JNTFiltr.dll
      2013-07-11 19:49:38 1029632 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\journal.dll
      2013-07-11 19:49:10 4036096 ----a-w- C:\windows\System32\win32k.sys
      2013-07-11 19:48:14 595968 ----a-w- C:\windows\System32\qedit.dll
      2013-07-11 19:48:13 496640 ----a-w- C:\windows\SysWow64\qedit.dll
      2013-07-11 19:48:12 19187712 ----a-w- C:\Program Files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
      2013-07-11 19:48:11 18523648 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
      2013-07-11 19:46:33 2842112 ----a-w- C:\windows\System32\WMVDECOD.DLL
      2013-07-11 19:46:32 2620928 ----a-w- C:\windows\SysWow64\WMVDECOD.DLL
      2013-07-06 02:25:22 -------- d-----w- C:\Users\Jan\AppData\Local\Adobe
      2013-07-06 02:16:37 867240 ----a-w- C:\windows\SysWow64\npDeployJava1.dll
      2013-07-06 02:16:37 789416 ----a-w- C:\windows\SysWow64\deployJava1.dll
      2013-07-06 02:16:32 96168 ----a-w- C:\windows\SysWow64\WindowsAccessBridge-32.dll
      2013-07-06 00:18:05 -------- d-----r- C:\Users\Jan\SkyDrive
      2013-07-06 00:14:09 556696 ----a-w- C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
      2013-07-06 00:12:10 -------- d-----w- C:\Program Files\Microsoft Office 15
      2013-07-05 06:09:14 -------- d-----w- C:\Users\Jan\AppData\Local\CrashDumps
      2013-07-05 05:59:59 505344 ----a-w- C:\windows\System32\SpaceControl.dll
      2013-07-05 05:58:49 82944 ----a-w- C:\windows\SysWow64\dskquota.dll
      2013-07-05 05:58:49 109568 ----a-w- C:\windows\System32\dskquota.dll
      2013-07-05 05:58:44 929792 ----a-w- C:\windows\SysWow64\mfnetsrc.dll
      2013-07-05 05:58:44 677888 ----a-w- C:\windows\System32\mfnetcore.dll
      2013-07-05 05:58:44 568832 ----a-w- C:\windows\SysWow64\mfnetcore.dll
      2013-07-05 05:58:44 513024 ----a-w- C:\windows\SysWow64\mfmpeg2srcsnk.dll
      2013-07-05 05:58:44 1172992 ----a-w- C:\windows\System32\mfnetsrc.dll
      2013-07-05 05:58:43 673280 ----a-w- C:\windows\System32\mfmpeg2srcsnk.dll
      2013-07-05 05:52:53 11459584 ----a-w- C:\windows\System32\glcndFilter.dll
      2013-07-05 00:28:42 -------- d-----w- C:\Program Files (x86)\Video Download Converter
      2013-07-05 00:26:03 -------- d-----w- C:\Program Files (x86)\VideoDownloadConverter_4z
      2013-07-04 20:49:26 78200 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
      2013-07-04 20:49:26 693112 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe
      2013-07-04 07:59:09 493656 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\symds64.sys
      2013-07-04 07:59:09 433752 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\symnets.sys
      2013-07-04 07:59:09 36952 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\srtspx64.sys
      2013-07-04 07:59:09 23448 ----a-r- C:\windows\System32\drivers\NISx64\1404000.028\symelam.sys
      2013-07-04 07:59:09 1139800 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\symefa64.sys
      2013-07-04 07:59:08 796760 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\srtsp64.sys
      2013-07-04 07:59:08 224416 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\ironx64.sys
      2013-07-04 07:59:08 169048 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\ccsetx64.sys
      2013-07-04 07:58:34 -------- d-----w- C:\windows\System32\drivers\NISx64\1404000.028
      2013-07-03 04:29:51 17888 ----a-w- C:\windows\System32\msvcr100_clr0400.dll
      2013-07-03 04:29:49 17888 ----a-w- C:\windows\SysWow64\msvcr100_clr0400.dll
      2013-07-03 04:23:56 1161728 ----a-w- C:\windows\System32\sppobjs.dll
      2013-07-03 04:20:15 13644288 ----a-w- C:\windows\System32\Windows.UI.Xaml.dll
      2013-07-03 04:20:13 10116096 ----a-w- C:\windows\System32\twinui.dll
      2013-07-03 04:20:07 8857088 ----a-w- C:\windows\SysWow64\twinui.dll
      2013-07-03 04:20:04 10788864 ----a-w- C:\windows\SysWow64\Windows.UI.Xaml.dll
      2013-07-03 04:20:01 1131520 ----a-w- C:\windows\System32\AppXDeploymentServer.dll
      2013-07-03 04:18:25 3552768 ----a-w- C:\windows\System32\tquery.dll
      2013-07-03 04:18:18 2107904 ----a-w- C:\windows\System32\mssrch.dll
      2013-07-03 04:18:14 2767360 ----a-w- C:\windows\SysWow64\tquery.dll
      2013-07-03 04:18:10 1593344 ----a-w- C:\windows\SysWow64\mssrch.dll
      2013-07-03 04:18:07 1829408 ----a-w- C:\windows\System32\ntdll.dll
      2013-07-03 03:59:53 -------- d-----w- C:\Program Files (x86)\PC Checkup
      2013-07-03 03:59:41 169048 ----a-w- C:\windows\System32\drivers\NATx64\0108000.020\ccsetx64.sys
      2013-07-03 03:59:37 -------- d-----w- C:\windows\System32\drivers\NATx64\0108000.020
      2013-07-03 03:59:23 -------- d-----w- C:\Users\Jan\AppData\Local\Programs
      2013-07-02 23:28:43 1455368 ----a-w- C:\windows\System32\drivers\dxgkrnl.sys
      2013-07-02 23:28:40 94208 ----a-w- C:\windows\System32\synceng.dll
      2013-07-02 23:28:40 72192 ----a-w- C:\windows\SysWow64\synceng.dll
      2013-07-02 23:28:17 86016 ----a-w- C:\windows\System32\ncryptsslp.dll
      2013-07-02 23:28:17 71168 ----a-w- C:\windows\SysWow64\ncryptsslp.dll
      2013-07-02 23:26:38 -------- d-----w- C:\Users\Jan\AppData\Roaming\PCCUStubInstaller
      2013-07-02 23:20:51 945152 ----a-w- C:\windows\System32\resetengmig.dll
      2013-07-02 23:18:55 96256 ----a-w- C:\windows\System32\fontsub.dll
      2013-07-02 23:17:33 915968 ----a-w- C:\windows\System32\uxtheme.dll
      2013-07-02 23:03:20 50784 ----a-w- C:\ProgramData\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
      2013-07-02 23:03:14 17536 ----a-w- C:\ProgramData\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
      2013-07-02 00:17:47 -------- d-----w- C:\Users\Jan\AppData\Local\Macromedia
      2013-07-01 22:36:06 -------- d-----w- C:\Program Files (x86)\Common Files\Symantec Shared
      2013-07-01 21:12:17 13 --sh--r- C:\windows\System32\drivers\fbd.sys
      2013-07-01 20:42:55 -------- d-----w- C:\Users\Jan\AppData\Local\TOSHIBA
      2013-07-01 20:42:24 -------- d-----r- C:\Users\Jan\Searches
      2013-07-01 20:42:24 -------- d-----r- C:\Users\Jan\Contacts
      2013-07-01 20:42:12 -------- d-----w- C:\Users\Jan\AppData\Roaming\WinBatch
      2013-07-01 20:40:17 -------- d-----w- C:\Users\Jan\AppData\Local\VirtualStore
      2013-07-01 20:39:23 -------- d-----w- C:\Users\Jan\AppData\Local\Packages
      .
      ==================== Find3M ====================
      .
      2013-07-04 07:59:30 177312 ----a-w- C:\windows\System32\drivers\SYMEVENT64x86.SYS
      2013-06-16 22:41:31 997632 ----a-w- C:\windows\System32\drivers\ndis.sys
      2013-06-11 23:43:37 1767936 ----a-w- C:\windows\SysWow64\wininet.dll
      2013-06-11 23:43:00 2877440 ----a-w- C:\windows\SysWow64\jscript9.dll
      2013-06-11 23:26:20 2241024 ----a-w- C:\windows\System32\wininet.dll
      2013-06-11 23:25:16 3958784 ----a-w- C:\windows\System32\jscript9.dll
      2013-06-01 11:54:16 194816 ----a-w- C:\windows\System32\drivers\sdbus.sys
      2013-06-01 11:54:10 125184 ----a-w- C:\windows\System32\drivers\dumpsd.sys
      2013-06-01 11:34:21 2391280 ----a-w- C:\windows\explorer.exe
      2013-06-01 11:33:13 2233600 ----a-w- C:\windows\System32\drivers\tcpip.sys
      2013-06-01 11:29:35 337152 ----a-w- C:\windows\System32\drivers\USBXHCI.SYS
      2013-06-01 11:29:35 213248 ----a-w- C:\windows\System32\drivers\UCX01000.SYS
      2013-06-01 11:26:33 327936 ----a-w- C:\windows\System32\drivers\volsnap.sys
      2013-06-01 11:26:31 6987008 ----a-w- C:\windows\System32\ntoskrnl.exe
      2013-06-01 10:24:46 2106176 ----a-w- C:\windows\SysWow64\explorer.exe
      2013-06-01 09:25:52 364544 ----a-w- C:\windows\SysWow64\XpsGdiConverter.dll
      2013-06-01 09:25:05 67584 ----a-w- C:\windows\SysWow64\samlib.dll
      2013-06-01 09:24:19 493056 ----a-w- C:\windows\SysWow64\mscms.dll
      2013-06-01 09:24:09 850944 ----a-w- C:\windows\SysWow64\mfasfsrcsnk.dll
      2013-06-01 09:24:09 1453568 ----a-w- C:\windows\SysWow64\mfcore.dll
      2013-06-01 09:23:46 1842176 ----a-w- C:\windows\SysWow64\dwmcore.dll
      2013-06-01 09:23:06 680960 ----a-w- C:\windows\System32\vds.exe
      2013-06-01 09:22:47 80896 ----a-w- C:\windows\System32\MbaeParserTask.exe
      2013-06-01 09:22:33 523264 ----a-w- C:\windows\System32\XpsGdiConverter.dll
      2013-06-01 09:22:33 446976 ----a-w- C:\windows\System32\wwansvc.dll
      2013-06-01 09:22:09 190976 ----a-w- C:\windows\System32\vdsutil.dll
      2013-06-01 09:21:39 729600 ----a-w- C:\windows\System32\samsrv.dll
      2013-06-01 09:21:39 106496 ----a-w- C:\windows\System32\samlib.dll
      2013-06-01 09:20:45 583168 ----a-w- C:\windows\System32\mscms.dll
      2013-06-01 09:20:34 1527808 ----a-w- C:\windows\System32\mfcore.dll
      2013-06-01 09:20:34 1048576 ----a-w- C:\windows\System32\mfasfsrcsnk.dll
      2013-06-01 09:20:04 2219520 ----a-w- C:\windows\System32\dwmcore.dll
      2013-06-01 09:19:58 207872 ----a-w- C:\windows\System32\DeviceSetupManager.dll
      2013-06-01 09:19:42 785408 ----a-w- C:\windows\System32\audiosrv.dll
      2013-06-01 03:08:57 37632 ----a-w- C:\windows\System32\drivers\BthAvrcpTg.sys
      2013-05-24 22:09:20 1403296 ----a-w- C:\windows\System32\winload.efi
      2013-05-24 22:09:20 1271584 ----a-w- C:\windows\System32\winload.exe
      2013-05-24 22:09:20 1217352 ----a-w- C:\windows\System32\winresume.efi
      2013-05-24 22:09:20 1093904 ----a-w- C:\windows\System32\winresume.exe
      2013-05-23 23:01:46 1300992 ----a-w- C:\windows\System32\gdi32.dll
      2013-05-23 22:27:05 1022464 ----a-w- C:\windows\SysWow64\gdi32.dll
      2013-05-15 22:37:03 44032 ----a-w- C:\windows\SysWow64\UXInit.dll
      2013-05-15 22:35:49 53760 ----a-w- C:\windows\System32\UXInit.dll
      2013-05-15 02:25:59 888320 ----a-w- C:\windows\System32\autochk.exe
      2013-05-15 02:25:44 542208 ----a-w- C:\windows\System32\untfs.dll
      2013-05-15 02:24:10 793088 ----a-w- C:\windows\SysWow64\autochk.exe
      2013-05-15 02:24:01 482816 ----a-w- C:\windows\SysWow64\untfs.dll
      2013-05-14 13:14:01 2706432 ----a-w- C:\windows\System32\mshtml.tlb
      2013-05-14 09:23:31 2706432 ----a-w- C:\windows\SysWow64\mshtml.tlb
      2013-05-04 07:58:17 120736 ----a-w- C:\windows\System32\AuthHost.exe
      2013-05-04 07:34:17 446720 ----a-w- C:\windows\System32\drivers\USBHUB3.SYS
      2013-05-04 07:34:15 284416 ----a-w- C:\windows\System32\drivers\spaceport.sys
      2013-05-04 06:59:56 39424 ----a-w- C:\windows\System32\wuapp.exe
      2013-05-04 06:59:51 1483776 ----a-w- C:\windows\System32\VSSVC.exe
      2013-05-04 06:59:36 812544 ----a-w- C:\windows\System32\Magnify.exe
      2013-05-04 06:59:25 98304 ----a-w- C:\windows\System32\wudriver.dll
      2013-05-04 06:59:25 251904 ----a-w- C:\windows\System32\WUSettingsProvider.dll
      2013-05-04 06:59:25 141824 ----a-w- C:\windows\System32\wuwebv.dll
      2013-05-04 06:59:24 1619968 ----a-w- C:\windows\System32\wucltux.dll
      2013-05-04 06:58:54 328192 ----a-w- C:\windows\System32\ubpm.dll
      2013-05-04 06:58:49 173568 ----a-w- C:\windows\System32\storewuauth.dll
      2013-05-04 06:58:49 1332736 ----a-w- C:\windows\System32\sysmain.dll
      2013-05-04 06:58:48 330240 ----a-w- C:\windows\System32\stobject.dll
      2013-05-04 06:58:28 93696 ----a-w- C:\windows\System32\psmsrv.dll
      2013-05-04 06:58:02 470528 ----a-w- C:\windows\System32\netprofmsvc.dll
      2013-05-04 06:58:02 151552 ----a-w- C:\windows\System32\netprofm.dll
      2013-05-04 06:58:01 169984 ----a-w- C:\windows\System32\netplwiz.dll
      2013-05-04 06:57:59 17408 ----a-w- C:\windows\System32\muifontsetup.dll
      2013-05-04 06:57:46 560640 ----a-w- C:\windows\System32\mfmp4srcsnk.dll
      2013-05-04 06:57:15 501760 ----a-w- C:\windows\System32\DevicePairing.dll
      2013-05-04 06:57:05 179712 ----a-w- C:\windows\System32\bisrv.dll
      2013-05-04 06:57:05 122368 ----a-w- C:\windows\System32\biwinrt.dll
      2013-05-04 06:57:04 389120 ----a-w- C:\windows\System32\BCP47Langs.dll
      2013-05-04 06:57:04 2305024 ----a-w- C:\windows\System32\authui.dll
      2013-05-04 06:57:00 708096 ----a-w- C:\windows\System32\AppXDeploymentExtensions.dll
      2013-05-04 06:56:53 419840 ----a-w- C:\windows\System32\intl.cpl
      2013-05-04 04:58:34 34304 ----a-w- C:\windows\SysWow64\wuapp.exe
      2013-05-04 04:58:14 758784 ----a-w- C:\windows\SysWow64\Magnify.exe
      2013-05-04 04:58:02 83968 ----a-w- C:\windows\SysWow64\wudriver.dll
      2013-05-04 04:58:02 125952 ----a-w- C:\windows\SysWow64\wuwebv.dll
      2013-05-04 04:57:39 247296 ----a-w- C:\windows\SysWow64\ubpm.dll
      2013-05-04 04:57:35 303616 ----a-w- C:\windows\SysWow64\stobject.dll
      2013-05-04 04:57:16 18432 ----a-w- C:\windows\SysWow64\npmproxy.dll
      2013-05-04 04:57:04 151040 ----a-w- C:\windows\SysWow64\netplwiz.dll
      2013-05-04 04:57:04 115712 ----a-w- C:\windows\SysWow64\netprofm.dll
      2013-05-04 04:57:02 14336 ----a-w- C:\windows\SysWow64\muifontsetup.dll
      2013-05-04 04:56:48 411136 ----a-w- C:\windows\SysWow64\mfmp4srcsnk.dll
      2013-05-04 04:56:14 449536 ----a-w- C:\windows\SysWow64\DevicePairing.dll
      2013-05-04 04:56:06 92160 ----a-w- C:\windows\SysWow64\biwinrt.dll
      2013-05-04 04:56:05 309760 ----a-w- C:\windows\SysWow64\BCP47Langs.dll
      2013-05-04 04:56:05 2035712 ----a-w- C:\windows\SysWow64\authui.dll
      2013-05-04 04:55:58 389632 ----a-w- C:\windows\SysWow64\intl.cpl
      2013-05-04 04:51:38 14848 ----a-w- C:\windows\System32\rars.rs
      2013-05-04 04:47:02 427520 ----a-w- C:\windows\System32\drivers\rdbss.sys
      2013-05-04 04:10:47 14848 ----a-w- C:\windows\SysWow64\rars.rs
      2013-04-27 05:20:12 733184 ----a-w- C:\windows\System32\win32spl.dll
      2013-04-23 23:13:53 1013248 ----a-w- C:\windows\SysWow64\certutil.exe
      2013-04-23 23:12:44 1569792 ----a-w- C:\windows\SysWow64\crypt32.dll
      2013-04-23 23:12:44 109056 ----a-w- C:\windows\SysWow64\cryptnet.dll
      2013-04-23 22:56:35 1255936 ----a-w- C:\windows\System32\certutil.exe
      .
      ============= FINISH: 14:48:43.37 ===============


      checkup.txt:
      Results of screen317's Security Check version 0.99.70
      x64 (UAC is enabled)
      Internet Explorer 10
      ``````````````Antivirus/Firewall Check:``````````````
      Windows Firewall Enabled!
      Windows Defender
      Norton Internet Security
      WMI entry may not exist for antivirus; attempting automatic update.
      `````````Anti-malware/Other Utilities Check:`````````
      SUPERAntiSpyware
      Malwarebytes Anti-Malware version 1.75.0.1300
      Java 7 Update 25
      Adobe Flash Player 11.8.800.94
      Adobe Reader XI
      Mozilla Firefox (Toolbar.)
      ````````Process Check: objlist.exe by Laurent````````
      Norton ccSvcHst.exe
      Symantec Norton Online Backup NOBuAgent.exe
      `````````````````System Health check`````````````````
      Total Fragmentation on Drive C: %
      ````````````````````End of Log``````````````````````

      Comment


      • #4
        Herstart je pc.


        Download of Update Ccleaner

        Start CCleaner op.
        • Run Ccleaner en klik in de linkse kolom op Opties
        • Selecteer het tabblad Geavanceerd
        • Haal het vinkje weg voor Verwijder alleen bestanden in Windows Temp-systeemmap die ouder zijn dan 24 uur
        • Haal het vinkje weg voor Verwijder alleen bestanden in de Prullenbak die ouder zijn dan 24 uur
        • Selecteer het tabblad Instellingen
        • Haal het vinkje weg bij "Computer automatisch schoonmaken...."
        • Klik in de linkse kolom op Cleaner.
        • Klik dan achtereenvolgens op Analyseer en Schoonmaken.
        • Klik vervolgens in de linkse kolom op Register
        • Klik op Scan naar problemen.
        • Als er fouten gevonden worden klik je op Herstel geselecteerde problemen en OK

        .
        Hoe is het nu?
        Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
        E Dev * McAfee verwijderen. * Ccleaner * E-Peek

        Comment


        • #5
          Hoi,

          Ik heb alle stappen opgevolgd maar helaas zijn de problemen niet opgelost.
          Bijvoorbeeld, toen ik het forum hier wilde opzoeken om mijn reactie te plaatsen, kreeg ik een spontaan nieuw scherm met reclameboodschap over "Support for anti-virus".

          Het valt me ook op dat Firefox bij elke website de melding geeft: Firefox prevented this page from automatically reloading.

          Bovendien verschijnt er regelmatig een melding op mijn scherm met de titel: "Authorization required.". De inhoud van deze melding is als volgt: A username and password are being requested by http://loadingresource.matt.xinstaller.com. The site says: "Password protected area".

          Bedankt alvast!
          Jan

          Comment


          • #6
            Herintializeer je Firefox.

            Volg daarvoor deze handleiding: http://support.mozilla.org/nl/kb/fir...emen-verhelpen

            Meld even hoe het dan is.
            Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
            E Dev * McAfee verwijderen. * Ccleaner * E-Peek

            Comment


            • #7
              Nu is het veel beter! De pop-up schermen zijn verdwenen. Klasse! Bedankt!

              Comment


              • #8
                Mooi zo

                1) Je mag alle losse bestanden en tools die we hebben gebruikt verwijderen.

                2) Om herbesmetting te vermijden, kan je deze tips eens nalezen:

                Het voorkomen van spyware-infecties en browserhijacking en Hoe voorkom ik een nieuwe infectie?

                3) Om je PC een snelle onderhoudbeurt te geven, kan je deze tips eens lezen: Handleiding voor een schone PC

                4) Allerlei tips en hints kan je hier raadplegen.


                Ik zet het topic op opgelost.

                Indien er niet meer gereageerd wordt, zal binnen een 3-tal dagen deze thread automatisch verplaatst worden
                naar de sectie Opgeloste hijackthislogs en is een reactie niet meer mogelijk
                Dit is gedaan om het forum netjes en overzichtelijk te houden.

                Blijkt dat er toch nog problemen zijn, en je wil weer reageren in dit topic, dan stuur je me een privé bericht met verzoek om heropening.



                Hebben we je goed geholpen? Overweeg eens een (vrijblijvende) donatie aan Nucia

                Emphyrio
                Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
                E Dev * McAfee verwijderen. * Ccleaner * E-Peek

                Comment

                Sorry, you are not authorized to view this page
                Working...
                X