My internet is lagging from time to time, very often...

[Happyx]

Here is the log..

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:16:19, on 2011-06-28
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Steam\steam.exe
C:\Program Files\VOIPlay\voiplay.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\system32\wuauclt.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10t_ActiveX.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtblfs.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.kungahuset.se/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=fmtgl&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - (no file)
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe"
O4 - HKLM\..\Run: [PC Booster] C:\Program Files\PC Booster\RunApps.exe
O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBGAFcALQBBADQARwBaAEsALQA2ADkAVQAzAFIALQBQAFgAMgBYAEEALQBUAFAANABKADYALQBMADkASwBIADcA"&"inst=Nw
A2AC0AOAA0ADQAOQAxADIANwAwADcALQBQAEwAK wA5AC0ATgAxAEQAKwAxAC0ARABEAFQAKwAwAA"&"prod=93"&"ver=9.0.894
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [VOIPlay] "C:\Program Files\VOIPlay\voiplay.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"  /MINIMIZED
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
O9 - Extra button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASO3DiskOptimizer - Systweak Inc., (www.systweak.com) - C:\Program Files\Advanced System Optimizer 3\ASO3DefragSrv.exe
O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
O23 - Service: Tjänsten Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 6426 bytes

Do I possibly have a virus, a trojan or such? I've tried to check stuff here and there, but I don't know enough about these stuff... Can some internet system file might be infected?
PS. My registry, drivers, junk, all that stuff are fixed. There has to be some virus involved. I sit infront of the computer from time to time, in hours to find the answers, but I really cannot.
Its too hard for me -.-. Please help me, I'm desperate...

[SuperDave]

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
****************************************************
P2P - I see you have P2P software installed on your machine (uTorrent). We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It is certainly contributing to your current situation.

Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

I would strongly recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.
**************************************************
Open HijackThis and select Do a system scan only

Place a check mark next to the following entries: (if there)

O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - (no file)
O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-
uninstallation-feedback-app?lic=OQBGAFcALQBBADQARwBaAEsALQA2ADkAVQAzAFIALQBQAF
gAMgBYAEEALQBUAFAANABKA
DYALQBMADkASwBIADcA"&"inst=Nw
A2AC0AOAA0ADQAOQAxADIANwAwADcALQBQAEwAK wA5AC0ATgAxAEQAKwAxAC0ARABEAFQAKwAwAA"&"prod=93"&"ver=9.0.894
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)

Important: Close all open windows except for HijackThis and then click Fix checked.

Once completed, exit HijackThis.
*******************************************************
SUPERAntiSpyware

If you already have SUPERAntiSpyware be sure to check for updates before scanning!

Download SuperAntispyware Free Edition (SAS)
* Double-click the icon on your desktop to run the installer.
* When asked to Update the program definitions, click Yes
* If you encounter any problems while downloading the updates, manually download and unzip them from here
* Next click the Preferences button.

•Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
* Click the Scanning Control tab.
* Under Scanner Options make sure only the following are checked:

•Close browsers before scanning
•Scan for tracking cookies
•Terminate memory threats before quarantining
•Please leave the others unchecked

•Click the Close button to leave the control center screen.

* On the main screen click Scan your computer
* On the left check the box for the drive you are scanning.
* On the right choose Perform Complete Scan
* Click Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete a summary box will appear. Click OK
* Make sure everything in the white box has a check next to it, then click Next
* It will quarantine what it found and if it asks if you want to reboot, click Yes

•To retrieve the removal information please do the following:
•After reboot, double-click the SUPERAntiSpyware icon on your desktop.
•Click Preferences. Click the Statistics/Logs tab.

•Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

•It will open in your default text editor (preferably Notepad).
•Save the notepad file to your desktop by clicking (in notepad) File > Save As...

* Save the log somewhere you can easily find it. (normally the desktop)
* Click close and close again to exit the program.
*Copy and Paste the log in your post.
**************************************************
Please download Malwarebytes Anti-Malware from here.
Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Full Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
• Please save the log to a location you will remember.
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
****************************************************
Download DDS from HERE or HERE and save it to your desktop.

Vista users right click on dds and select Run as administrator (you will receive a UAC prompt, please allow it)

* XP users Double click on dds to run it.
* If your antivirus or firewall try to block DDS then please allow it to run.
* When finished DDS will open two (2) logs.

1) DDS.txt
2) Attach.txt

* Save both logs to your desktop.
* Please copy and paste the entire contents of both logs in your next reply.

Note: DDS will instruct you to post the Attach.txt log as an attachment.
Please just post it as you would any other log by copying and pasting it into the reply.

[DamianLohrenz]

Your comment has been removed. Please do not post malware advice, or post here in the malware forum, unless you need help.  First Warning.Superdave.

[Happyx]

Thank you very much! Mbm removed this thing called Hijacker.Application and I don't lag anylonger. Found 63 adware.tracking cookies also, with superantispyware. You saved my life. This is my brothers computer, and he would kill me if he knew..


Here is the post:

DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.7600.16385  BrowserJavaVersion: 1.6.0_15
Run by Daniel Mattias at 17:36:13 on 2011-07-02
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.1.1033.18.2047.993 [GMT 2:00]
.
AV: Kaspersky Internet Security *Enabled/Updated* {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
SP: Kaspersky Internet Security *Enabled/Updated* {95CBD341-38DB-14AC-AF6A-08054B41A339}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security *Enabled* {1691B380-548E-1A7A-BE85-9A42CE15AEFF}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
C:\Windows\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\IObit\Game Booster\gbtray.exe
C:\Program Files\Steam\steam.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\wuauclt.exe
C:\Fraps\fraps.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtblfs.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10t_ActiveX.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.kungahuset.se/
mSearchAssistant = hxxp://start.facemoods.com/?a=fmtgl&s={searchTerms}&f=4
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky internet security 2012\ievkbd.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky internet security 2012\klwtbbho.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} -
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky internet security 2012\avp.exe"
mRun: [Malwarebytes' Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Anti-Banner - c:\program files\kaspersky lab\kaspersky internet security 2012\ie_banner_deny.htm
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky internet security 2012\ievkbd.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky internet security 2012\klwtbbho.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{34FD5C73-98CF-4642-9493-17911CC22143} : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{4E41271E-79F6-4830-A4E3-6099A653F83B} : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{4E41271E-79F6-4830-A4E3-6099A653F83B}\45E4F507279667164756F5633444547363 : DhcpNameServer = 192.168.1.254
TCP: Interfaces\{4E41271E-79F6-4830-A4E3-6099A653F83B}\E49726562776 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{CEDE83BF-D756-40C9-B28C-01FE05C5F8D1} : DhcpNameServer = 195.67.199.18 195.67.199.19
Notify: klogon - c:\windows\system32\klogon.dll
Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\daniel mattias\appdata\roaming\mozilla\firefox\profiles\1l908akh.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.mydtzone.com/startpage|http://search.imesh.com/
FF - prefs.js: keyword.URL - hxxp://search.imesh.com/web?src=ffb&systemid=1&q=
FF - prefs.js: network.proxy.type - 0
FF - component: c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.1.0.37\coffplgn\components\coFFPlgn.dll
FF - component: c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.1.0.37\ipsffplgn\components\IPSFFPl.dll
FF - component: c:\users\daniel mattias\appdata\roaming\mozilla\firefox\profiles\1l908akh.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components\dtTransparency.dll
FF - component: c:\users\daniel mattias\appdata\roaming\mozilla\firefox\profiles\1l908akh.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components\dtTransparency3.5.dll
FF - component: c:\users\daniel mattias\appdata\roaming\mozilla\firefox\profiles\1l908akh.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components\dtTransparency3.6.dll
FF - component: c:\users\daniel mattias\appdata\roaming\mozilla\firefox\profiles\1l908akh.default\extensions\[email protected]\components\DTToolbarFF.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\users\daniel mattias\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\users\daniel mattias\desktop\voiplay\npvoiplay.dll
.
---- FIREFOX POLICIES ----
FF - user.js: network.proxy.type - 0
FF - user.js: network.proxy.http -
user_pref(network.proxy.http_port,);
FF - user.js: network.proxy.no_proxies_on -
.
============= SERVICES / DRIVERS ===============
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-3-24 218688]
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2011-3-10 23856]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]
R2 AVP;Kaspersky Anti-Virus Service;c:\program files\kaspersky lab\kaspersky internet security 2012\avp.exe [2011-4-24 202296]
R3 ArvoFltr;ROCCAT Arvo;c:\windows\system32\drivers\ArvoFltr.sys [2009-5-6 12928]
R3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\drivers\ATSwpWDF.sys [2009-12-4 625224]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-4-14 45736]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984]
R3 SROMwtDrv_USB_Vid_05ca_Pid_1870;Driver for SROM Writer(USB_Vid_05ca_Pid_1870);c:\windows\system32\drivers\SROMwtDrv.sys [2011-1-2 55168]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Tjänsten Google Update (gupdate);c:\program files\google\update\googleupdate.exe /svc --> c:\program files\google\update\GoogleUpdate.exe  [?]
S3 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952]
S3 ASO3DiskOptimizer;ASO3DiskOptimizer;c:\program files\advanced system optimizer 3\ASO3DefragSrv.exe [2011-6-28 239928]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 GTUHSBUS;GT UHS BUS;c:\windows\system32\drivers\gtuhsbus.sys [2009-5-13 66560]
S3 GTUHSNDISIPXP;GT UHS IP NDIS;c:\windows\system32\drivers\gtuhs51.sys [2009-5-13 107520]
S3 GTUHSSER;GT UHS SER;c:\windows\system32\drivers\gtuhsser.sys [2009-5-13 8064]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\drivers\VSTAZL3.SYS [2009-7-14 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-14 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\drivers\VSTCNXT3.SYS [2009-7-14 661504]
S3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;c:\windows\system32\wat\WatAdminSvc.exe [2011-1-2 1343400]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 14336]
S4 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\googleupdate.exe /medsvc --> c:\program files\google\update\GoogleUpdate.exe  [?]
S4 TeamViewer6;TeamViewer 6;c:\program files\teamviewer\version6\TeamViewer_Service.exe [2011-2-28 2253688]
.
=============== Created Last 30 ================
.
2011-07-02 15:28:42   54016   ----a-w-   c:\windows\system32\drivers\jskjf.sys
2011-07-02 13:45:39   --------   d-----w-   c:\users\daniel mattias\appdata\roaming\SUPERAntiSpyware.com
2011-07-02 13:45:39   --------   d-----w-   c:\programdata\SUPERAntiSpyware.com
2011-07-02 13:44:57   --------   d-----w-   c:\program files\SUPERAntiSpyware
2011-07-02 13:36:21   --------   d-----w-   c:\users\daniel mattias\appdata\roaming\Malwarebytes
2011-07-02 13:36:13   38224   ----a-w-   c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-02 13:36:13   --------   d-----w-   c:\programdata\Malwarebytes
2011-07-02 13:36:09   20952   ----a-w-   c:\windows\system32\drivers\mbam.sys
2011-07-02 13:36:09   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2011-06-28 10:41:17   97859   ----a-w-   c:\windows\system32\drivers\klick.dat
2011-06-28 10:41:17   115369   ----a-w-   c:\windows\system32\drivers\klin.dat
2011-06-28 10:41:13   110992   ----a-w-   c:\program files\mozilla *Blocked Russian URL*\components\abhelperxpcom.dll
2011-06-28 10:41:09   147856   ----a-w-   c:\program files\mozilla *Blocked Russian URL*\components\kavlinkfilter.dll
2011-06-28 10:39:38   --------   d-----w-   c:\program files\Kaspersky Lab
2011-06-28 10:39:37   --------   d-----w-   c:\programdata\Kaspersky Lab
2011-06-28 09:19:53   --------   d-----w-   c:\programdata\Spybot - Search & Destroy
2011-06-28 09:19:36   --------   d-----w-   c:\program files\Spybot - Search & Destroy 2
2011-06-28 08:18:33   --------   d-----w-   c:\windows\pss
2011-06-28 08:15:51   --------   d-----w-   c:\programdata\VOIPlay
2011-06-28 08:15:41   --------   d-----w-   c:\program files\VOIPlay
2011-06-28 08:12:56   --------   d-----w-   c:\users\daniel mattias\appdata\roaming\EurekaLog
2011-06-28 07:54:00   388096   ----a-r-   c:\users\daniel mattias\appdata\roaming\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-06-28 07:54:00   --------   d-----w-   c:\program files\Trend Micro
2011-06-28 07:49:52   --------   d-----w-   c:\program files\Unlocker
2011-06-28 02:00:49   7074640   ----a-w-   c:\programdata\microsoft\windows defender\definition updates\{7eb0d1f6-5a57-413e-ab58-52da05fd062e}\mpengine.dll
2011-06-27 23:46:44   --------   d-----w-   C:\Fraps
2011-06-27 23:24:09   2076   ----a-w-   c:\windows\system32\ASOROSet.bin
2011-06-27 23:24:09   16184   ----a-w-   c:\windows\system32\ROBoot.exe
2011-06-27 23:23:46   46592   ----a-w-   c:\windows\system32\drivers\risdptsk.sys
2011-06-27 23:23:28   453152   ----a-w-   c:\windows\system32\nvusmu.exe
2011-06-27 23:23:28   15872   ----a-w-   c:\windows\system32\drivers\nvsmu.sys
2011-06-27 23:23:28   122880   ----a-w-   c:\windows\system32\NVCOSMU.DLL
2011-06-27 23:12:53   --------   d-----w-   c:\programdata\Systweak
2011-06-27 23:12:22   17136   ----a-w-   c:\windows\system32\sasnative32.exe
2011-06-27 23:12:02   --------   d-----w-   c:\program files\Advanced System Optimizer 3
2011-06-27 23:10:04   --------   d-----w-   c:\users\daniel mattias\appdata\roaming\Systweak
2011-06-27 23:01:57   --------   d-----w-   c:\programdata\Alwil Software
2011-06-15 18:24:08   --------   d-----w-   c:\users\daniel mattias\appdata\local\Apple Computer
2011-06-15 18:22:37   26600   ----a-w-   c:\windows\system32\drivers\GEARAspiWDM.sys
2011-06-15 18:22:37   107368   ----a-w-   c:\windows\system32\GEARAspi.dll
2011-06-15 18:21:43   --------   d-----w-   c:\program files\iPod
2011-06-15 18:21:42   --------   d-----w-   c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2011-06-15 18:21:42   --------   d-----w-   c:\program files\iTunes
2011-06-15 18:16:00   --------   d-----w-   c:\users\daniel mattias\appdata\local\Apple
2011-06-15 18:13:08   --------   d-----w-   c:\program files\Bonjour
2011-06-06 10:55:30   183696   ----a-w-   c:\program files\mozilla firefox\plugins\nppdf32.dll
2011-06-06 10:55:30   183696   ----a-w-   c:\program files\internet explorer\plugins\nppdf32.dll
.
==================== Find3M  ====================
.
2011-06-22 17:38:28   404640   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
2011-05-31 22:56:54   12536   ------w-   c:\windows\system32\avgrsstx.dll.install_backup
2011-05-24 17:14:10   222080   ------w-   c:\windows\system32\MpSigStub.exe
2011-05-11 21:10:44   65536   ----a-w-   c:\windows\system32\frapsvid.dll
2011-05-10 06:06:08   4517664   ----a-w-   c:\windows\system32\usbaaplrc.dll
2011-05-10 06:06:08   42496   ----a-w-   c:\windows\system32\drivers\usbaapl.sys
2011-04-24 21:13:10   229776   ----a-w-   c:\windows\system32\klogon.dll
.
============= FINISH: 17:37:14,41 ===============

[SuperDave]

Download OTL to your desktop.

* Open OTL
* Copy and Paste the following text in the codebox into the Custom Scans/Fixes window.

Code: [Select]

:OTL
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
mRun: [Malwarebytes' Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript

:COMMANDS
[resethosts]
[purity]
[emptytemp]
[start explorer]

* Click Run Fix
* OTLI2 may ask to reboot the machine. Please do so if asked.
* Click OK
* A report will open. Copy and Paste that report in your next reply.
**************************************************************

Download ComboFix by sUBs from one of the below links.  Be sure to save it to the Desktop.

link # 1
Link # 2
If you are using Firefox, make sure that your download settings are as follows:

* Tools->Options->Main tab
* Set to "Always ask me where to Save the files".

Close any open web browsers (Firefox, Internet Explorer, etc) before starting ComboFix.

Temporarily disable your anti-virus, and any anti-spyware real-time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

Right-click combofix.exe and select Run as Administrator and follow the prompts.
When finished, ComboFix will produce a log for you.
Post the ComboFix login your next reply.

NOTE: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.

Remember to re-enable your anti-virus and anti-spyware protection when ComboFix is complete.

[Happyx]

Alright!

ComboFix 11-07-02.03 - Daniel Mattias 2011-07-03  20:41:08.1.2 - x86
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.1.1033.18.2047.1316 [GMT 2:00]
Running from: c:\users\Daniel Mattias\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
FW: Kaspersky Internet Security *Disabled* {1691B380-548E-1A7A-BE85-9A42CE15AEFF}
SP: Kaspersky Internet Security *Disabled/Updated* {95CBD341-38DB-14AC-AF6A-08054B41A339}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Daniel Mattias\AppData\Roaming\EurekaLog
c:\windows\system32\SV
c:\windows\system32\SV\AuthFWSnapIn.Resources.dll
c:\windows\system32\SV\AuthFWWizFwk.Resources.dll
c:\windows\system32\SV\Narrator.resources.dll
.
.
(((((((((((((((((((((((((   Files Created from 2011-06-03 to 2011-07-03  )))))))))))))))))))))))))))))))
.
.
2011-07-03 19:10 . 2011-07-03 19:11   --------   d-----w-   c:\users\Daniel Mattias\AppData\Local\temp
2011-07-03 19:10 . 2011-07-03 19:10   --------   d-----w-   c:\users\Default\AppData\Local\temp
2011-07-03 02:35 . 2011-06-07 15:55   7074640   ----a-w-   c:\programdata\Microsoft\Windows Defender\Definition Updates\{46C95D9F-ECF1-49C4-9FA9-B5E0FFED4F98}\mpengine.dll
2011-07-02 13:45 . 2011-07-02 13:45   --------   d-----w-   c:\users\Daniel Mattias\AppData\Roaming\SUPERAntiSpyware.com
2011-07-02 13:45 . 2011-07-02 13:45   --------   d-----w-   c:\programdata\SUPERAntiSpyware.com
2011-07-02 13:44 . 2011-07-02 13:45   --------   d-----w-   c:\program files\SUPERAntiSpyware
2011-07-02 13:36 . 2011-07-02 13:36   --------   d-----w-   c:\users\Daniel Mattias\AppData\Roaming\Malwarebytes
2011-07-02 13:36 . 2011-07-02 13:36   --------   d-----w-   c:\programdata\Malwarebytes
2011-07-02 13:36 . 2010-12-20 16:09   38224   ----a-w-   c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-02 13:36 . 2011-07-02 13:36   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2011-07-02 13:36 . 2010-12-20 16:08   20952   ----a-w-   c:\windows\system32\drivers\mbam.sys
2011-06-28 10:41 . 2011-06-28 11:06   115369   ----a-w-   c:\windows\system32\drivers\klin.dat
2011-06-28 10:41 . 2011-06-28 10:41   97859   ----a-w-   c:\windows\system32\drivers\klick.dat
2011-06-28 10:41 . 2011-04-24 21:13   110992   ----a-w-   c:\program files\Mozilla *Blocked Russian URL*\components\abhelperxpcom.dll
2011-06-28 10:41 . 2011-04-24 21:13   147856   ----a-w-   c:\program files\Mozilla *Blocked Russian URL*\components\kavlinkfilter.dll
2011-06-28 10:39 . 2011-06-28 10:39   --------   d-----w-   c:\program files\Kaspersky Lab
2011-06-28 10:39 . 2011-07-03 18:07   --------   d-----w-   c:\programdata\Kaspersky Lab
2011-06-28 09:19 . 2011-06-28 09:19   --------   d-----w-   c:\programdata\Spybot - Search & Destroy
2011-06-28 09:19 . 2011-06-29 15:05   --------   d-----w-   c:\program files\Spybot - Search & Destroy 2
2011-06-28 08:15 . 2011-06-28 08:15   --------   d-----w-   c:\programdata\VOIPlay
2011-06-28 08:15 . 2011-06-28 08:15   --------   d-----w-   c:\program files\VOIPlay
2011-06-28 07:54 . 2011-06-28 07:54   388096   ----a-r-   c:\users\Daniel Mattias\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-06-28 07:54 . 2011-06-28 07:54   --------   d-----w-   c:\program files\Trend Micro
2011-06-28 07:49 . 2011-06-28 07:51   --------   d-----w-   c:\program files\Unlocker
2011-06-27 23:46 . 2011-07-03 16:41   --------   d-----w-   C:\Fraps
2011-06-27 23:24 . 2011-06-27 23:27   2076   ----a-w-   c:\windows\system32\ASOROSet.bin
2011-06-27 23:24 . 2011-02-10 16:34   16184   ----a-w-   c:\windows\system32\ROBoot.exe
2011-06-27 23:23 . 2009-04-20 10:57   46592   ----a-w-   c:\windows\system32\drivers\risdptsk.sys
2011-06-27 23:23 . 2008-08-25 00:22   15872   ----a-w-   c:\windows\system32\drivers\nvsmu.sys
2011-06-27 23:23 . 2008-08-21 12:17   122880   ----a-w-   c:\windows\system32\NVCOSMU.DLL
2011-06-27 23:23 . 2008-08-21 12:17   453152   ----a-w-   c:\windows\system32\nvusmu.exe
2011-06-27 23:12 . 2011-06-27 23:12   --------   d-----w-   c:\programdata\Systweak
2011-06-27 23:12 . 2010-07-30 16:35   17136   ----a-w-   c:\windows\system32\sasnative32.exe
2011-06-27 23:12 . 2011-06-27 23:14   --------   d-----w-   c:\program files\Advanced System Optimizer 3
2011-06-27 23:10 . 2011-06-27 23:10   --------   d-----w-   c:\users\Daniel Mattias\AppData\Roaming\Systweak
2011-06-27 23:01 . 2011-06-27 23:02   --------   d-----w-   c:\programdata\Alwil Software
2011-06-27 23:01 . 2011-06-27 23:02   --------   d-----w-   c:\program files\Alwil Software
2011-06-27 23:00 . 2011-06-27 23:00   --------   d-----w-   c:\program files\Common Files\Adobe
2011-06-15 18:24 . 2011-06-15 18:24   --------   d-----w-   c:\users\Daniel Mattias\AppData\Local\Apple Computer
2011-06-15 18:24 . 2011-06-15 18:26   --------   d-----w-   c:\users\Daniel Mattias\AppData\Roaming\Apple Computer
2011-06-15 18:22 . 2009-05-18 11:17   26600   ----a-w-   c:\windows\system32\drivers\GEARAspiWDM.sys
2011-06-15 18:22 . 2008-04-17 10:12   107368   ----a-w-   c:\windows\system32\GEARAspi.dll
2011-06-15 18:22 . 2011-06-15 18:22   --------   dc----w-   c:\windows\system32\DRVSTORE
2011-06-15 18:21 . 2011-06-15 18:21   --------   d-----w-   c:\program files\iPod
2011-06-15 18:21 . 2011-06-15 18:22   --------   d-----w-   c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2011-06-15 18:21 . 2011-06-15 18:22   --------   d-----w-   c:\program files\iTunes
2011-06-15 18:16 . 2011-06-15 18:21   --------   d-----w-   c:\programdata\Apple Computer
2011-06-15 18:16 . 2011-06-15 18:17   --------   d-----w-   c:\program files\QuickTime
2011-06-15 18:16 . 2011-06-15 18:16   --------   d-----w-   c:\users\Daniel Mattias\AppData\Local\Apple
2011-06-15 18:15 . 2011-06-15 18:15   --------   d-----w-   c:\program files\Apple Software Update
2011-06-15 18:13 . 2011-06-28 08:10   --------   d-----w-   c:\program files\Bonjour
2011-06-15 18:12 . 2011-06-15 18:21   --------   d-----w-   c:\program files\Common Files\Apple
2011-06-15 18:12 . 2011-06-15 18:15   --------   d-----w-   c:\programdata\Apple
2011-06-06 10:55 . 2011-06-06 10:55   183696   ----a-w-   c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2011-06-06 10:55 . 2011-06-06 10:55   183696   ----a-w-   c:\program files\Internet Explorer\Plugins\nppdf32.dll
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-22 17:38 . 2011-04-10 11:31   404640   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
2011-05-31 22:56 . 2011-05-31 22:56   12536   ------w-   c:\windows\system32\avgrsstx.dll.install_backup
2011-05-24 17:14 . 2011-01-02 02:14   222080   ------w-   c:\windows\system32\MpSigStub.exe
2011-05-11 21:10 . 2011-05-11 21:10   65536   ----a-w-   c:\windows\system32\frapsvid.dll
2011-05-10 06:06 . 2011-05-10 06:06   4517664   ----a-w-   c:\windows\system32\usbaaplrc.dll
2011-05-10 06:06 . 2011-05-10 06:06   42496   ----a-w-   c:\windows\system32\drivers\usbaapl.sys
2011-04-25 01:28 . 2011-04-25 01:28   159080   ----a-w-   c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10138.bin
2011-04-24 21:13 . 2011-04-24 21:13   229776   ----a-w-   c:\windows\system32\klogon.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-06-30 2424192]
"VOIPlay"="c:\program files\VOIPlay\voiplay.exe" [2010-10-05 1374568]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe" [2011-04-24 202296]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2009-07-20 10:28   72208   ----a-w-   c:\program files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute   REG_MULTI_SZ      autocheck autochk *\0sasnative32
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
backup=c:\windows\pss\Logitech SetPoint.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^Daniel Mattias^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Telia Mobilt bredband.lnk]
backup=c:\windows\pss\Telia Mobilt bredband.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^Daniel Mattias^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^UFBCOM.lnk]
backup=c:\windows\pss\UFBCOM.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2011-06-06 10:55   937920   ----a-w-   c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASO3SPCDone]
2011-02-10 16:33   3519800   ----a-w-   c:\program files\Advanced System Optimizer 3\ASO3.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2011-01-20 09:20   1305408   ----a-w-   c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverScanner]
2010-11-13 01:56   338296   ----a-w-   c:\program files\Uniblue\DriverScanner\Launcher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-06-07 15:51   421160   ----a-w-   c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
2009-06-17 16:55   55824   ----a-w-   c:\windows\KHALMNPR.Exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Booster]
2011-01-06 07:49   402248   ----a-w-   c:\program files\PC Booster\RunApps.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 15:38   421888   ----a-w-   c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2011-01-02 12:18   1242448   ----a-w-   c:\program files\Steam\steam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2011-03-20 18:21   39408   ----a-w-   c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2010-05-28 06:31   1721640   ----a-w-   c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VOIPlay]
2010-10-05 09:17   1374568   ----a-w-   c:\program files\VOIPlay\voiplay.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Tjänsten Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe

R3 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R3 GTUHSBUS;GT UHS BUS;c:\windows\system32\DRIVERS\gtuhsbus.sys [2009-05-13 66560]
R3 GTUHSNDISIPXP;GT UHS IP NDIS;c:\windows\system32\DRIVERS\gtuhs51.sys [2009-05-13 107520]
R3 GTUHSSER;GT UHS SER;c:\windows\system32\DRIVERS\gtuhsser.sys [2009-05-13 8064]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;c:\windows\system32\Wat\WatAdminSvc.exe [2011-01-02 1343400]
R4 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe

R4 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-01-27 2253688]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-24 218688]
S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2011-03-04 11352]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2011-03-10 23856]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2010-06-25 35088]
S3 ADASPROT;SYSTWEAKASO;c:\program files\Advanced System Optimizer 3\adasprot32.sys [2010-07-30 6656]
S3 ArvoFltr;ROCCAT Arvo;c:\windows\system32\drivers\ArvoFltr.sys [2009-05-06 12928]
S3 ASO3DiskOptimizer;ASO3DiskOptimizer;c:\program files\Advanced System Optimizer 3\ASO3DefragSrv.exe [2011-02-10 239928]
S3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys [2009-12-04 625224]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-04-14 45736]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-11-02 19984]
S3 SROMwtDrv_USB_Vid_05ca_Pid_1870;Driver for SROM Writer(USB_Vid_05ca_Pid_1870);c:\windows\system32\DRIVERS\SROMwtDrv.sys [2006-11-09 55168]
.
.
Contents of the 'Scheduled Tasks' folder
.
2011-07-01 c:\windows\Tasks\PC Booster.job
- c:\program files\PC Booster\PCBooster.exe [2011-01-07 05:24]
.
2011-07-03 c:\windows\Tasks\Start System Protector.job
- c:\program files\Advanced System Optimizer 3\systemprotector.exe [2011-06-27 16:33]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.kungahuset.se/
IE: Add to Anti-Banner - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Daniel Mattias\AppData\Roaming\Mozilla\Firefox\Profiles\1l908akh.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.mydtzone.com/startpage|http://search.imesh.com/
FF - prefs.js: keyword.URL - hxxp://search.imesh.com/web?src=ffb&systemid=1&q=
FF - prefs.js: network.proxy.type - 0
FF - user.js: network.proxy.type - 0
FF - user.js: network.proxy.http -
user_pref(network.proxy.http_port,);
FF - user.js: network.proxy.no_proxies_on -
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-10 - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
MSConfigStartUp-Google Update - c:\users\Daniel Mattias\AppData\Local\Google\Update\GoogleUpdate.exe
AddRemove-Google Chrome - c:\users\Daniel Mattias\AppData\Local\Google\Chrome\Application\12.0.742.112\Installer\setup.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-07-03  21:28:06
ComboFix-quarantined-files.txt  2011-07-03 19:27
.
Pre-Run: 68 691 079 168 byte ledigt
Post-Run: 68 602 167 296 byte ledigt
.
- - End Of File - - 3D567AD9D8D534B95A1119BC3A00CDF9

[SuperDave]

SysProt Antirootkit

Download
SysProt Antirootkit from the link below (you will find it at the bottom
of the page under attachments, or you can get it from one of the
mirrors).

http://sites.google.com/site/sysprotantirootkit/

Unzip it into a folder on your desktop.

• Double click Sysprot.exe to start the program.
• Click on the Log tab.
• In the Write to log box select the following items.
• Process << Selected
  
• Kernel Modules << Selected
  
• SSDT << Selected
  
• Kernel Hooks << Selected
  
• IRP Hooks << NOT Selected
  
• Ports << NOT Selected
  
• Hidden Files << Selected
  
• At the bottom of the page
• Hidden Objects Only << Selected
  
• Click on the Create Log button on the bottom right.
• After a few seconds a new window should appear.
• Select Scan Root Drive. Click on the Start button.
• When it is complete a new window will appear to indicate that the scan is finished.
• The log will be saved automatically in the same folder Sysprot.exe was extracted to. Open the text file and copy/paste the log here.

[Happyx]

SysProt AntiRootkit v1.0.1.0
by swatkat

**********************************************************
***********************************************************

No Processes found

**********************************************************
**************************************************************
Kernel Modules:
Module Name: \??\C:\Users\Daniel Mattias\Desktop\Ny mapp\SysProt\SysProtDrv.sys
Service Name: SysProtDrv.sys
Module Base: 994FE000
Module End: 99509000
Hidden: No

Module Name: C:\Windows\system32\ntkrnlpa.exe
Service Name: ---
Module Base: 82E05000
Module End: 83215000
Hidden: No

Module Name: C:\Windows\system32\halmacpi.dll
Service Name: ---
Module Base: 83215000
Module End: 8324C000
Hidden: No

Module Name: C:\Windows\system32\kdcom.dll
Service Name: ---
Module Base: 80B9D000
Module End: 80BA5000
Hidden: No

Module Name: C:\Windows\system32\mcupdate_AuthenticAMD.dll
Service Name: ---
Module Base: 84226000
Module End: 84231000
Hidden: No

Module Name: C:\Windows\system32\PSHED.dll
Service Name: ---
Module Base: 84231000
Module End: 84242000
Hidden: No

Module Name: C:\Windows\system32\BOOTVID.dll
Service Name: ---
Module Base: 84242000
Module End: 8424A000
Hidden: No

Module Name: C:\Windows\system32\CLFS.SYS
Service Name: CLFS
Module Base: 8424A000
Module End: 8428C000
Hidden: No

Module Name: C:\Windows\system32\CI.dll
Service Name: ---
Module Base: 8428C000
Module End: 84337000
Hidden: No

Module Name: C:\Windows\system32\drivers\Wdf01000.sys
Service Name: Wdf01000
Module Base: 84337000
Module End: 843A8000
Hidden: No

Module Name: C:\Windows\system32\drivers\WDFLDR.SYS
Service Name: ---
Module Base: 843A8000
Module End: 843B6000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\ACPI.sys
Service Name: ACPI
Module Base: 843B6000
Module End: 843FE000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\WMILIB.SYS
Service Name: ---
Module Base: 84200000
Module End: 84209000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\msisadrv.sys
Service Name: msisadrv
Module Base: 84209000
Module End: 84211000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\pci.sys
Service Name: pci
Module Base: 89020000
Module End: 8904A000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\vdrvroot.sys
Service Name: vdrvroot
Module Base: 8904A000
Module End: 89055000
Hidden: No

Module Name: C:\Windows\System32\drivers\partmgr.sys
Service Name: partmgr
Module Base: 89055000
Module End: 89066000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\compbatt.sys
Service Name: Compbatt
Module Base: 89066000
Module End: 8906E000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\BATTC.SYS
Service Name: ---
Module Base: 8906E000
Module End: 89079000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\volmgr.sys
Service Name: volmgr
Module Base: 89079000
Module End: 89089000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\pciide.sys
Service Name: pciide
Module Base: 890D4000
Module End: 890DB000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\PCIIDEX.SYS
Service Name: ---
Module Base: 890DB000
Module End: 890E9000
Hidden: No

Module Name: C:\Windows\System32\drivers\mountmgr.sys
Service Name: mountmgr
Module Base: 890E9000
Module End: 890FF000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\atapi.sys
Service Name: atapi
Module Base: 890FF000
Module End: 89108000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\ataport.SYS
Service Name: ---
Module Base: 89108000
Module End: 8912B000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\amdxata.sys
Service Name: amdxata
Module Base: 8912B000
Module End: 89134000
Hidden: No

Module Name: C:\Windows\system32\drivers\fltmgr.sys
Service Name: FltMgr
Module Base: 89134000
Module End: 89168000
Hidden: No

Module Name: C:\Windows\system32\drivers\fileinfo.sys
Service Name: FileInfo
Module Base: 89168000
Module End: 89179000
Hidden: No

Module Name: C:\Windows\System32\Drivers\Ntfs.sys
Service Name: ---
Module Base: 89217000
Module End: 89346000
Hidden: No

Module Name: C:\Windows\System32\Drivers\ksecdd.sys
Service Name: KSecDD
Module Base: 89371000
Module End: 89384000
Hidden: No

Module Name: C:\Windows\System32\Drivers\cng.sys
Service Name: CNG
Module Base: 89384000
Module End: 893E1000
Hidden: No

Module Name: C:\Windows\System32\drivers\pcw.sys
Service Name: pcw
Module Base: 893E1000
Module End: 893EF000
Hidden: No

Module Name: C:\Windows\system32\drivers\ndis.sys
Service Name: NDIS
Module Base: 89408000
Module End: 894BF000
Hidden: No

Module Name: C:\Windows\system32\drivers\NETIO.SYS
Service Name: ---
Module Base: 894BF000
Module End: 894FD000
Hidden: No

Module Name: C:\Windows\System32\Drivers\ksecpkg.sys
Service Name: KSecPkg
Module Base: 894FD000
Module End: 89522000
Hidden: No

Module Name: C:\Windows\System32\drivers\tcpip.sys
Service Name: Tcpip
Module Base: 8963F000
Module End: 89788000
Hidden: No

Module Name: C:\Windows\System32\drivers\fwpkclnt.sys
Service Name: ---
Module Base: 89788000
Module End: 897B9000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\wd.sys
Service Name: Wd
Module Base: 897C2000
Module End: 897CA000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\volsnap.sys
Service Name: volsnap
Module Base: 89600000
Module End: 8963F000
Hidden: No

Module Name: C:\Windows\System32\Drivers\spldr.sys
Service Name: ---
Module Base: 897CA000
Module End: 897D2000
Hidden: No

Module Name: C:\Windows\System32\drivers\rdyboost.sys
Service Name: rdyboost
Module Base: 897D2000
Module End: 897FF000
Hidden: No

Module Name: C:\Windows\System32\Drivers\mup.sys
Service Name: Mup
Module Base: 89522000
Module End: 89532000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\kl1.sys
Service Name: KL1
Module Base: 8982E000
Module End: 89D50000
Hidden: No

Module Name: C:\Windows\System32\drivers\hwpolicy.sys
Service Name: hwpolicy
Module Base: 89D50000
Module End: 89D58000
Hidden: No

Module Name: C:\Windows\System32\DRIVERS\fvevol.sys
Service Name: fvevol
Module Base: 89D58000
Module End: 89D8A000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\disk.sys
Service Name: Disk
Module Base: 89D8A000
Module End: 89D9B000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\CLASSPNP.SYS
Service Name: ---
Module Base: 89D9B000
Module End: 89DC0000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\cdrom.sys
Service Name: cdrom
Module Base: 89800000
Module End: 8981F000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\klif.sys
Service Name: KLIF
Module Base: 89532000
Module End: 895C7000
Hidden: No

Module Name: C:\Windows\System32\Drivers\Beep.SYS
Service Name: ---
Module Base: 89826000
Module End: 8982D000
Hidden: No

Module Name: C:\Windows\System32\drivers\vga.sys
Service Name: vga
Module Base: 89DF2000
Module End: 89DFE000
Hidden: No

Module Name: C:\Windows\System32\drivers\VIDEOPRT.SYS
Service Name: ---
Module Base: 895C7000
Module End: 895E8000
Hidden: No

Module Name: C:\Windows\System32\drivers\watchdog.sys
Service Name: ---
Module Base: 895E8000
Module End: 895F5000
Hidden: No

Module Name: C:\Windows\System32\DRIVERS\RDPCDD.sys
Service Name: RDPCDD
Module Base: 895F5000
Module End: 895FD000
Hidden: No

Module Name: C:\Windows\system32\drivers\rdpencdd.sys
Service Name: RDPENCDD
Module Base: 89400000
Module End: 89408000
Hidden: No

Module Name: C:\Windows\system32\drivers\rdprefmp.sys
Service Name: RDPREFMP
Module Base: 893F8000
Module End: 89400000
Hidden: No

Module Name: C:\Windows\System32\Drivers\Msfs.SYS
Service Name: ---
Module Base: 89200000
Module End: 8920B000
Hidden: No

Module Name: C:\Windows\System32\Drivers\Npfs.SYS
Service Name: ---
Module Base: 89179000
Module End: 89187000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\tdx.sys
Service Name: tdx
Module Base: 89187000
Module End: 8919E000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\TDI.SYS
Service Name: ---
Module Base: 8920B000
Module End: 89216000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\kl2.sys
Service Name: kl2
Module Base: 8919E000
Module End: 891A4000
Hidden: No

Module Name: C:\Windows\System32\DRIVERS\netbt.sys
Service Name: NetBT
Module Base: 891A4000
Module End: 891D6000
Hidden: No

Module Name: C:\Windows\system32\drivers\afd.sys
Service Name: AFD
Module Base: 8E013000
Module End: 8E06D000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\wfplwf.sys
Service Name: WfpLwf
Module Base: 8E06D000
Module End: 8E074000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\pacer.sys
Service Name: Psched
Module Base: 8E074000
Module End: 8E093000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\vwififlt.sys
Service Name: vwififlt
Module Base: 8E093000
Module End: 8E0A4000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\klim6.sys
Service Name: KLIM6
Module Base: 8E0A4000
Module End: 8E0AC000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\netbios.sys
Service Name: NetBIOS
Module Base: 8E0AC000
Module End: 8E0BA000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\dtsoftbus01.sys
Service Name: dtsoftbus01
Module Base: 8E0BA000
Module End: 8E0F5000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\wanarp.sys
Service Name: WANARP
Module Base: 8E0F5000
Module End: 8E108000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\termdd.sys
Service Name: TermDD
Module Base: 8E108000
Module End: 8E118000
Hidden: No

Module Name: \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
Service Name: SASKUTIL
Module Base: 8E118000
Module End: 8E13A000
Hidden: No

Module Name: \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
Service Name: SASDIFSV
Module Base: 8E13A000
Module End: 8E140000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\rdbss.sys
Service Name: rdbss
Module Base: 8E140000
Module End: 8E181000
Hidden: No

Module Name: C:\Windows\system32\drivers\nsiproxy.sys
Service Name: nsiproxy
Module Base: 8E181000
Module End: 8E18B000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\mssmbios.sys
Service Name: mssmbios
Module Base: 8E18B000
Module End: 8E195000
Hidden: No

Module Name: C:\Windows\System32\drivers\discache.sys
Service Name: discache
Module Base: 8E195000
Module End: 8E1A1000
Hidden: No

Module Name: C:\Windows\system32\drivers\csc.sys
Service Name: CSC
Module Base: 92A30000
Module End: 92A94000
Hidden: No

Module Name: C:\Windows\System32\Drivers\dfsc.sys
Service Name: DfsC
Module Base: 92A94000
Module End: 92AAC000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\blbdrive.sys
Service Name: blbdrive
Module Base: 92AAC000
Module End: 92ABA000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\tunnel.sys
Service Name: tunnel
Module Base: 92ABA000
Module End: 92ADB000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\amdk8.sys
Service Name: AmdK8
Module Base: 92ADB000
Module End: 92AED000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\CmBatt.sys
Service Name: CmBatt
Module Base: 92AED000
Module End: 92AF1000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\cpqbttn.sys
Service Name: HBtnKey
Module Base: 92AF1000
Module End: 92AF4000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\HIDCLASS.SYS
Service Name: ---
Module Base: 92AF4000
Module End: 92B07000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\HIDPARSE.SYS
Service Name: ---
Module Base: 92B07000
Module End: 92B0E000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\wmiacpi.sys
Service Name: WmiAcpi
Module Base: 92B0E000
Module End: 92B17000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\nvsmu.sys
Service Name: nvsmu
Module Base: 92B17000
Module End: 92B20000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\usbohci.sys
Service Name: usbohci
Module Base: 92B20000
Module End: 92B2A000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\USBPORT.SYS
Service Name: ---
Module Base: 92B2A000
Module End: 92B75000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\usbehci.sys
Service Name: usbehci
Module Base: 92B75000
Module End: 92B84000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\nvm62x32.sys
Service Name: NVENETFD
Module Base: 92B84000
Module End: 92BD9000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\HDAudBus.sys
Service Name: HDAudBus
Module Base: 92BD9000
Module End: 92BF8000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\1394ohci.sys
Service Name: 1394ohci
Module Base: 92A00000
Module End: 92A2C000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\risdptsk.sys
Service Name: risdptsk
Module Base: 8E1A1000
Module End: 8E1B2000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\rixdptsk.sys
Service Name: rismxdp
Module Base: 92601000
Module End: 92653000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
Service Name: GEARAspiWDM
Module Base: 92653000
Module End: 92659000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\nvlddmkm.sys
Service Name: nvlddmkm
Module Base: 9342B000
Module End: 93F25000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\nvBridge.kmd
Service Name: ---
Module Base: 93F25000
Module End: 93F27000
Hidden: No

Module Name: C:\Windows\System32\drivers\dxgkrnl.sys
Service Name: DXGKrnl
Module Base: 93F27000
Module End: 93FDE000
Hidden: No

Module Name: C:\Windows\System32\drivers\dxgmms1.sys
Service Name: ---
Module Base: 92659000
Module End: 92692000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\i8042prt.sys
Service Name: i8042prt
Module Base: 93FDE000
Module End: 93FF6000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\kbdclass.sys
Service Name: kbdclass
Module Base: 93400000
Module End: 9340D000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\SynTP.sys
Service Name: SynTP
Module Base: 92692000
Module End: 926CD000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\USBD.SYS
Service Name: ---
Module Base: 9340D000
Module End: 9340F000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\klmouflt.sys
Service Name: klmouflt
Module Base: 9340F000
Module End: 93418000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\mouclass.sys
Service Name: mouclass
Module Base: 93418000
Module End: 93425000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\CompositeBus.sys
Service Name: CompositeBus
Module Base: 926CD000
Module End: 926DA000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\AgileVpn.sys
Service Name: RasAgileVpn
Module Base: 926DA000
Module End: 926EC000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\rasl2tp.sys
Service Name: Rasl2tp
Module Base: 926EC000
Module End: 92704000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\ndistapi.sys
Service Name: NdisTapi
Module Base: 92704000
Module End: 9270F000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\ndiswan.sys
Service Name: NdisWan
Module Base: 9270F000
Module End: 92731000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\raspppoe.sys
Service Name: RasPppoe
Module Base: 92731000
Module End: 92749000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\raspptp.sys
Service Name: PptpMiniport
Module Base: 92749000
Module End: 92760000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\rassstp.sys
Service Name: RasSstp
Module Base: 92760000
Module End: 92777000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\rdpbus.sys
Service Name: rdpbus
Module Base: 93FF6000
Module End: 94000000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\swenum.sys
Service Name: swenum
Module Base: 93425000
Module End: 93427000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\ks.sys
Service Name: ---
Module Base: 92777000
Module End: 927AB000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\umbus.sys
Service Name: umbus
Module Base: 927AB000
Module End: 927B9000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\kbdhid.sys
Service Name: kbdhid
Module Base: 927B9000
Module End: 927C5000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\usbhub.sys
Service Name: usbhub
Module Base: 8E1B2000
Module End: 8E1F6000
Hidden: No

Module Name: C:\Windows\System32\Drivers\NDProxy.SYS
Service Name: ---
Module Base: 927C5000
Module End: 927D6000
Hidden: No

Module Name: C:\Windows\system32\drivers\CHDRT32.sys
Service Name: CnxtHdAudService
Module Base: 94423000
Module End: 94456000
Hidden: No

Module Name: C:\Windows\system32\drivers\portcls.sys
Service Name: ---
Module Base: 94456000
Module End: 94485000
Hidden: No

Module Name: C:\Windows\system32\drivers\drmk.sys
Service Name: ---
Module Base: 94485000
Module End: 9449E000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\HSXHWAZL.sys
Service Name: HSXHWAZL
Module Base: 9449E000
Module End: 944DC000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\HSX_DPV.sys
Service Name: HSF_DPV
Module Base: 944DC000
Module End: 945DF000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\HSX_CNXT.sys
Service Name: winachsf
Module Base: 9302E000
Module End: 930E3000
Hidden: No

Module Name: C:\Windows\system32\drivers\modem.sys
Service Name: Modem
Module Base: 930E3000
Module End: 930F0000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\usbccgp.sys
Service Name: usbccgp
Module Base: 930F0000
Module End: 93107000
Hidden: No

Module Name: C:\Windows\system32\drivers\ArvoFltr.sys
Service Name: ArvoFltr
Module Base: 93107000
Module End: 9310B000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\hidusb.sys
Service Name: HidUsb
Module Base: 9310B000
Module End: 93116000
Hidden: No

Module Name: C:\Windows\System32\Drivers\crashdmp.sys
Service Name: ---
Module Base: 93116000
Module End: 93123000
Hidden: No

Module Name: \SystemRoot\System32\Drivers\dump_dumpata.sys
Service Name: ---
Module Base: 93123000
Module End: 9312E000
Hidden: Yes

Module Name: \SystemRoot\System32\Drivers\dump_atapi.sys
Service Name: ---
Module Base: 9312E000
Module End: 93137000
Hidden: Yes

Module Name: \SystemRoot\System32\Drivers\dump_dumpfve.sys
Service Name: ---
Module Base: 93137000
Module End: 93148000
Hidden: Yes

Module Name: C:\Windows\System32\drivers\Dxapi.sys
Service Name: ---
Module Base: 93148000
Module End: 93152000
Hidden: No

Module Name: C:\Windows\system32\drivers\btusbflt.sys
Service Name: btusbflt
Module Base: 93152000
Module End: 9315C000
Hidden: No

Module Name: C:\Windows\System32\Drivers\BTHUSB.sys
Service Name: BTHUSB
Module Base: 9315C000
Module End: 9316E000
Hidden: No

Module Name: C:\Windows\System32\Drivers\bthport.sys
Service Name: BTHPORT
Module Base: 9316E000
Module End: 931D2000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\rfcomm.sys
Service Name: RFCOMM
Module Base: 931D2000
Module End: 931F6000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\BthEnum.sys
Service Name: BthEnum
Module Base: 93000000
Module End: 9300D000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\SROMwtDrv.sys
Service Name: SROMwtDrv_USB_Vid_05ca_Pid_1870
Module Base: 9300D000
Module End: 9301B000
Hidden: No

Module Name: C:\Windows\System32\Drivers\LUsbFilt.Sys
Service Name: LUsbFilt
Module Base: 9301B000
Module End: 93021000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\LHidFilt.Sys
Service Name: LHidFilt
Module Base: 93021000
Module End: 93029000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\mouhid.sys
Service Name: mouhid
Module Base: 945DF000
Module End: 945EA000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\LMouFilt.Sys
Service Name: LMouFilt
Module Base: 931F6000
Module End: 931FE000
Hidden: No

Module Name: C:\Windows\System32\Drivers\ATSwpWDF.sys
Service Name: ATSwpWDF
Module Base: 8A825000
Module End: 8A8C2000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\monitor.sys
Service Name: monitor
Module Base: 8A8C2000
Module End: 8A8CD000
Hidden: No

Module Name: C:\Windows\system32\drivers\luafv.sys
Service Name: luafv
Module Base: 8A8CD000
Module End: 8A8E8000
Hidden: No

Module Name: C:\Windows\system32\drivers\WudfPf.sys
Service Name: WudfPf
Module Base: 8A8E8000
Module End: 8A902000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\lltdio.sys
Service Name: lltdio
Module Base: 8A902000
Module End: 8A912000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\nwifi.sys
Service Name: NativeWifiP
Module Base: 8A912000
Module End: 8A958000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\ndisuio.sys
Service Name: Ndisuio
Module Base: 8A958000
Module End: 8A968000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\rspndr.sys
Service Name: rspndr
Module Base: 8A968000
Module End: 8A97B000
Hidden: No

Module Name: C:\Windows\system32\drivers\HTTP.sys
Service Name: HTTP
Module Base: 8A97B000
Module End: 8AA00000
Hidden: No

Module Name: C:\Windows\System32\DRIVERS\srvnet.sys
Service Name: srvnet
Module Base: 8A800000
Module End: 8A821000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\bowser.sys
Service Name: bowser
Module Base: 94400000
Module End: 94419000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\mrxsmb.sys
Service Name: mrxsmb
Module Base: 927D6000
Module End: 927F9000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\mrxsmb10.sys
Service Name: mrxsmb10
Module Base: 99408000
Module End: 99443000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\mrxsmb20.sys
Service Name: mrxsmb20
Module Base: 99443000
Module End: 9945E000
Hidden: No

Module Name: C:\Windows\System32\DRIVERS\srv2.sys
Service Name: srv2
Module Base: 9945E000
Module End: 994AD000
Hidden: No

Module Name: C:\Windows\System32\DRIVERS\srv.sys
Service Name: srv
Module Base: 994AD000
Module End: 994FE000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\mdmxsdk.sys
Service Name: mdmxsdk
Module Base: 99516000
Module End: 9951A000
Hidden: No

Module Name: C:\Windows\system32\drivers\npf.sys
Service Name: NPF
Module Base: 9951A000
Module End: 99521000
Hidden: No

Module Name: C:\Windows\system32\drivers\peauth.sys
Service Name: PEAUTH
Module Base: 99521000
Module End: 995B8000
Hidden: No

Module Name: C:\Windows\System32\Drivers\secdrv.SYS
Service Name: ---
Module Base: 995B8000
Module End: 995C2000
Hidden: No

Module Name: C:\Windows\System32\drivers\tcpipreg.sys
Service Name: tcpipreg
Module Base: 995C2000
Module End: 995CF000
Hidden: No

Module Name: C:\Windows\system32\DRIVERS\xaudio.sys
Service Name: XAudio
Module Base: 995CF000
Module End: 995D7000
Hidden: No

Module Name: \??\C:\Windows\system32\drivers\mbam.sys
Service Name: MBAMProtector
Module Base: 995F8000
Module End: 995FC000
Hidden: No

Module Name: \??\C:\Program Files\Advanced System Optimizer 3\adasprot32.sys
Service Name: ADASPROT
Module Base: 995FC000
Module End: 995FE000
Hidden: No

Module Name: C:\Windows\System32\Drivers\Null.SYS
Service Name: ---
Module Base: 8981F000
Module End: 89826000
Hidden: No

******************************************************************************************
******************************************************************************************
No SSDT Hooks found

******************************************************************************************
******************************************************************************************
No Kernel Hooks found

******************************************************************************************
******************************************************************************************
No IRP Hooks found

******************************************************
******************************************************
Ports:
Local Address: DANIELMATTIAS:49994
Remote Address: 195.122.169.15:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49993
Remote Address: 130.117.190.210:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49992
Remote Address: 130.117.190.210:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49990
Remote Address: KSN-MSK-FE-1.KASPERSKY-LABS.COM:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49989
Remote Address: 195.122.169.15:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49988
Remote Address: 130.117.190.210:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49987
Remote Address: 130.117.190.210:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49986
Remote Address: 130.117.190.210:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49985
Remote Address: 130.117.190.210:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49984
Remote Address: KSN-MSK-FE-1.KASPERSKY-LABS.COM:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49983
Remote Address: 130.117.190.210:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49982
Remote Address: 130.117.190.210:HTTPS
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49978
Remote Address: BER01S02-IN-F137.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49975
Remote Address: BW-IN-F147.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49971
Remote Address: BW-IN-F95.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49970
Remote Address: BW-IN-F95.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49967
Remote Address: BW-IN-F102.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49965
Remote Address: BER01S02-IN-F139.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49963
Remote Address: GY-IN-F100.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49961
Remote Address: BW-IN-F147.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49959
Remote Address: BW-IN-F147.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49956
Remote Address: BW-IN-F147.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49954
Remote Address: BER01S02-IN-F138.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49945
Remote Address: BER01S02-IN-F138.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49942
Remote Address: BW-IN-F118.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49939
Remote Address: BW-IN-F155.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49930
Remote Address: BER01S02-IN-F165.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49915
Remote Address: FRA07S07-IN-F105.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49913
Remote Address: BW-IN-F102.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49911
Remote Address: BER01S02-IN-F147.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49909
Remote Address: BER01S02-IN-F147.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49907
Remote Address: BER01S02-IN-F138.1E100.NET:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49905
Remote Address: 194-213-119-19.APICA.SE:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:49261
Remote Address: STATIC-213-115-179-20.SME.BREDBANDSBOLAGET.SE:20000
Type: TCP
Process: 2728 (PID)
State: ESTABLISHED

Local Address: DANIELMATTIAS:NETBIOS-SSN
Remote Address: 0.0.0.0:0
Type: TCP
Process: 4 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:49886
Remote Address: LOCALHOST:NFSD-STATUS
Type: TCP
Process: 736 (PID)
State: CLOSE_WAIT

Local Address: DANIELMATTIAS:NFSD-STATUS
Remote Address: LOCALHOST:49980
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: DANIELMATTIAS:NFSD-STATUS
Remote Address: LOCALHOST:49886
Type: TCP
Process: 1784 (PID)
State: FIN_WAIT2

Local Address: DANIELMATTIAS:49190
Remote Address: 0.0.0.0:0
Type: TCP
Process: 616 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:49156
Remote Address: 0.0.0.0:0
Type: TCP
Process: 632 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:49155
Remote Address: 0.0.0.0:0
Type: TCP
Process: 1784 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:49154
Remote Address: 0.0.0.0:0
Type: TCP
Process: 1072 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:49153
Remote Address: 0.0.0.0:0
Type: TCP
Process: 928 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:49152
Remote Address: 0.0.0.0:0
Type: TCP
Process: 560 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:10243
Remote Address: 0.0.0.0:0
Type: TCP
Process: 4 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:WSD
Remote Address: 0.0.0.0:0
Type: TCP
Process: 4 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:ICSLAP
Remote Address: 0.0.0.0:0
Type: TCP
Process: 4 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:NFSD-STATUS
Remote Address: 0.0.0.0:0
Type: TCP
Process: 1784 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:RTSP
Remote Address: 0.0.0.0:0
Type: TCP
Process: 2104 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:MICROSOFT-DS
Remote Address: 0.0.0.0:0
Type: TCP
Process: 4 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:EPMAP
Remote Address: 0.0.0.0:0
Type: TCP
Process: 852 (PID)
State: LISTENING

Local Address: DANIELMATTIAS:60291
Remote Address: NA
Type: UDP
Process: 3160 (PID)
State: NA

Local Address: DANIELMATTIAS:SSDP
Remote Address: NA
Type: UDP
Process: 3160 (PID)
State: NA

Local Address: DANIELMATTIAS:138
Remote Address: NA
Type: UDP
Process: 4 (PID)
State: NA

Local Address: DANIELMATTIAS:NETBIOS-NS
Remote Address: NA
Type: UDP
Process: 4 (PID)
State: NA

Local Address: DANIELMATTIAS:61387
Remote Address: NA
Type: UDP
Process: 176 (PID)
State: NA

Local Address: DANIELMATTIAS:60292
Remote Address: NA
Type: UDP
Process: 3160 (PID)
State: NA

Local Address: DANIELMATTIAS:50627
Remote Address: NA
Type: UDP
Process: 2728 (PID)
State: NA

Local Address: DANIELMATTIAS:SSDP
Remote Address: NA
Type: UDP
Process: 3160 (PID)
State: NA

Local Address: DANIELMATTIAS:64678
Remote Address: NA
Type: UDP
Process: 1220 (PID)
State: NA

Local Address: DANIELMATTIAS:64676
Remote Address: NA
Type: UDP
Process: 3160 (PID)
State: NA

Local Address: DANIELMATTIAS:60493
Remote Address: NA
Type: UDP
Process: 2264 (PID)
State: NA

Local Address: DANIELMATTIAS:56315
Remote Address: NA
Type: UDP
Process: 2264 (PID)
State: NA

Local Address: DANIELMATTIAS:LLMNR
Remote Address: NA
Type: UDP
Process: 1344 (PID)
State: NA

Local Address: DANIELMATTIAS:5005
Remote Address: NA
Type: UDP
Process: 2104 (PID)
State: NA

Local Address: DANIELMATTIAS:5004
Remote Address: NA
Type: UDP
Process: 2104 (PID)
State: NA

Local Address: DANIELMATTIAS:WS-DISCOVERY
Remote Address: NA
Type: UDP
Process: 1220 (PID)
State: NA

Local Address: DANIELMATTIAS:WS-DISCOVERY
Remote Address: NA
Type: UDP
Process: 3160 (PID)
State: NA

Local Address: DANIELMATTIAS:WS-DISCOVERY
Remote Address: NA
Type: UDP
Process: 3160 (PID)
State: NA

Local Address: DANIELMATTIAS:WS-DISCOVERY
Remote Address: NA
Type: UDP
Process: 1220 (PID)
State: NA

***************************************************************
****************************************************************
Hidden files/folders:
Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\BnetLog.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\bncache.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\BnetLog.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\D2110314.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\D2110315.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\D2110316.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save\Europe\PallADDE.ma1
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save\Europe\PallADDE.ma2
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save\Europe\PallADDE.map
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save\Europe\vADDEz.ma0
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save\Europe\vADDEz.ma1
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save\Europe\vADDEz.ma2
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save\Europe\vADDEz.ma3
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save\Europe\vADDEz.map
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save\Europe
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II\Save
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Diablo II
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\D1\Diablo II\bncache.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\D1\Diablo II\BnetLog.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\D1\Diablo II\D2110305.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\D1\Diablo II
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\D1
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Diablo II\bncache.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Diablo II\BnetLog.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Diablo II\D2110304.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Diablo II
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\ClientRegistry.blob
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\config\DialogConfig.vdf
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\config
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\logs\connection_log.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\logs\voice_log.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\logs
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\steam.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\SteamApps\guitarsingern\counter-strike\cstrike\config.cfg
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\SteamApps\guitarsingern\counter-strike\cstrike\vpl_config.cfg
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\SteamApps\guitarsingern\counter-strike\cstrike
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\SteamApps\guitarsingern\counter-strike
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\SteamApps\guitarsingern
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\SteamApps
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam\SteamUI_1515.pkg
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Steam
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Warcraft III\bncache.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files\Warcraft III
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Program Files
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\SbiePst.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\dberr.txt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb001DC.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb001DD.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb001DE.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb001DF.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb001E0.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb001E1.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb001E2.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb001E3.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\edb001E4.log
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32\CatRoot2
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows\system32
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C\Windows
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\drive\C
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\Microsoft\Network\Downloader\qmgr0.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\Microsoft\Network\Downloader\qmgr1.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\Microsoft\Network\Downloader
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\Microsoft\Network
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\Microsoft
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\16817162.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\16819017.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\16911795.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17000696.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17046462.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17061679.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17070798.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17073779.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17087962.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17091457.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17119991.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17151570.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17190926.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17227767.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17250087.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17253948.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17304114.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17329135.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17369075.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17400194.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17420491.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache\17420534.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\avatarcache
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\11156922.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\12572106.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\13127084.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\13467774.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\13787033.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\14146607.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\14308795.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\14408075.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\1593679.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache\16578756.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelavatarcache
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelheadercache\13621491.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelheadercache\13695970.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelheadercache\14013695.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay\channelheadercache
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all\VOIPlay
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\all
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Internet Explorer
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Explorer
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\GameExplorer\GamesBoxArt\{2AD92246-CE4E-438E-B121-6509BFF2FF55}.jpg
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\GameExplorer\GamesBoxArt
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\GameExplorer\{2AD92246-CE4E-438E-B121-6509BFF2FF55}
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\GameExplorer
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\History\History.IE5
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\History
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3AT85Q21\header[1].jpg
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3AT85Q21\post_bg[1].gif
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3AT85Q21\smiley_headset[1].gif
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3AT85Q21\smiley_phone[2].gif
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3AT85Q21
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KN8H4HO\post_header[2].gif
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KN8H4HO\SGamesWebService[1].asmx
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KN8H4HO\smiley_confused[2].gif
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KN8H4HO\smiley_sad[1].gif
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KN8H4HO\whatsnew[1].htm
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KN8H4HO
Status: Access denied

Object: C:\$Recycle.Bin\S-1-5-21-3500018005-431941752-1802844461-1000\$R5DMZ9U\Daniel_Mattias\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6A3Y7L34\post_footer[1].gif
Status: Access denied

Object: C:\$Recy

[SuperDave]

I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

•Check
•Click the button.
•Accept any security warnings from your browser.
•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

[Happyx]

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6427
# api_version=3.0.2
# EOSSerial=30c2af062e4b2e44839028834011b10c
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-07-05 11:11:18
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=512 16777215 100 0 608892 608892 0 0
# compatibility_mode=768 16777215 100 0 640759 640759 0 0
# compatibility_mode=1024 16777215 100 0 0 0 0 0
# compatibility_mode=1280 16777215 100 0 0 0 0 0
# compatibility_mode=3073 16777213 80 75 10159 5495208 0 0
# compatibility_mode=5893 16776574 100 94 196004 61487723 0 0
# compatibility_mode=8192 67108863 100 0 207 207 0 0
# scanned=96574
# found=0
# cleaned=0
# scan_time=7747

Nothing found...

Alright, but I have this software called advanced system optimizer that I use once a day. It always founds new threats. It feels like there are something on the computer that download viruses and such...

[SuperDave]

Alright, but I have this software called advanced system optimizer that I use once a day. It always founds new threats

I don't know too much about this program but any program that says "registry cleaning" does not get very high marks from me. Read below.

Registry cleaners are extremely powerful applications and their potential for harming your OS far outweighs any small potential for improving your computer's performance.

There are a number of them available and some are more safe than others. Keep in mind that no two registry cleaners work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad" entry. One cleaner may find entries on your system that will not cause a problem when removed, another may not find the same entries, and still another may want to remove entries required for a program to work. Without research into what the registry entry selected for deletion is, a registry cleaner can end up being an automated method to cause problems with the registry.

For routine use by those not familiar with the registry, the benefits to your computer are negligible while the potential risks are great.

Further reading: XP Fixes Myth #1: Registry Cleaners

If there are no other issues, we can do some cleanup.

To uninstall ComboFix

• Click the Start button. Click Run. For Vista: type in Run in the Start search, and click on Run in the results pane.
  
• In the field, type in ComboFix /uninstall
  

(Note: Make sure there's a space between the word ComboFix and the forward-slash.)

• Then, press Enter, or click OK.
  
• This will uninstall ComboFix, delete its folders and files, hides System files and folders, and resets System Restore.
  

*************************************************
Clean out your temporary internet files and temp files.

Download TFC by OldTimer to your desktop.

Double-click TFC.exe to run it.

Note: If you are running on Vista, right-click on the file and choose Run As Administrator

TFC will close all programs when run, so make sure you have saved all your work before you begin.

* Click the Start button to begin the cleaning process.
* Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
* Please let TFC run uninterrupted until it is finished.

Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
************************************************
To remove all of the tools we used and the files and folders they created do the following:
Double click OTL.exe.

• Click the CleanUp button.
  
• Select Yes when the "Begin cleanup Process?" prompt appears.
  
• If you are prompted to Reboot during the cleanup, select Yes.
  
• The tool will delete itself once it finishes.

Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.
*************************************************
Use the Secunia Software Inspector to check for out of date software.

•Click Start Now

•Check the box next to Enable thorough system inspection.

•Click Start

•Allow the scan to finish and scroll down to see if any updates are needed.
•Update anything listed.
.
----------

Go to Microsoft Windows Update and get all critical updates.

----------

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!

[Happyx]

No more viruses/malwares/spywares are actually showing after the search anylonger. I used a software and so on anyways.
Thank you for everything, really nice guidence, it shows that you've done this a couple of times =). Good job man!

[SuperDave]

You're welcome. I will lock this thread. If you need it re-opened, please send me a pm.