Avatar billede Coneks Nybegynder
07. marts 2014 - 16:22 Der er 18 kommentarer

Hjælp søges

Hej min computer er begyndt at skabe sig, blive langsom, og puppe op med reklamer.. Nogen der kan sige mig hvad der er galt ? Har  kørt HijackThis , i håb om det kan hjælpe med info?.

Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG2014\avgui.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\PROGRA~1\SearchProtect\SearchProtect\bin\cltmng.exe
C:\PROGRA~1\SearchProtect\UI\bin\cltmngui.exe
C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe
C:\Program Files\MyPC Backup\MyPC Backup.exe
C:\Windows\System32\MsSpellCheckingFacility.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Administrator\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP290AF0A3-1029-4C0A-916E-877D1335B839&SSPV=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:13828
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SaveSense - {2e32cfe5-df92-4ae5-b0be-609ed0df74a6} - C:\Program Files\SaveSense\SaveSenseIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [AVG-Secure-Search-Update_0214c] C:\Users\Administrator\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=03d1d6d1bd6047d2b63dd15650536744-b260d78e74d64fc16e360294ae9cfac52be04454 /CMPID=0214c
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: MyPC Backup.lnk = C:\Program Files\MyPC Backup\MyPC Backup.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) - Just Develop It - C:\Program Files\MyPC Backup\BackupStack.exe
O23 - Service: Search Protect by Conduit Service (CltMngSvc) - Conduit - C:\PROGRA~1\SearchProtect\Main\bin\CltMngSvc.exe
O23 - Service: Google Update Tjeneste (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Tjeneste (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: PassShow - Unknown owner - C:\Program Files\PassShow\PassShow155.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe
Avatar billede 220661 Ekspert
07. marts 2014 - 16:29 #1
Prøv at køre denne pakke:
Hent og instalér CCleaner  https://www.piriform.com/ccleaner
http://www.spywarefri.dk/manualer/manual-for-installation-og-brug-af-ccleaner/
Lad programmet foretage en oprydning...
Hent Malwarebytes Anti-Malware herfra:
http://downloads.malwarebytes.org/mbam-download.php

Installer programmet - når det er gjort skal du lade programmet opdatere sig. Herefter åbner et vindue, hvor du skal flytte prikken til "Kør et fuldstændigt systemscan" - klik på Skan Knappen - lad programmet arbejde.
Når programmet har scannet færdigt tryk på "Vis resultater"  - og herefter marker alle punkter og tryk så  på "Fjern det valgte" - nu åbnes log'en og du skal gemme den et sted, hvor du kan finde den igen. Kopier loggen herind.
Mht.: Vista/Win7/Win8 - HøjreMusseTast - "Kør som Administrator..."
Prøv at hente AdwCleaner her:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Start programmet, og når det er startet trykker du på [Scan]
Pc scannes, og ved endt scanning skal du trykke på [Clean].
Og derefter (automatisk) genstart...
Tilbage fra genstart kommer en log, som du gerne må kopiere herind.
Mht.: Vista og Windows 7/8 - Højreklik på filen - Kør som Administra
Avatar billede 220661 Ekspert
07. marts 2014 - 16:36 #2
Når du har gennemført pakken, så send en ny log fra Hijackthis.

Hvad er disse programmer for noget?
C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe

Det her tror jeg måske du har kørende i din browser:
C:\PROGRA~1\SearchProtect\SearchProtect\bin\cltmng.exe
C:\PROGRA~1\SearchProtect\UI\bin\cltmngui.exe
Conduit er du også ramt af. Men lad os se hvad der bliver fjernet af de tre programmer.
Du må godt lige fortælle hvordan computeren kører efter rensningen.
Avatar billede f-arn Guru
07. marts 2014 - 18:56 #3
Nu vil jeg så byde ind her, og jeg vil mene 220661 bør lære at læse en HJT log før han/hun kommenterer den....

HJT logs bruges næsten ikke mere, men hvad blev der af resten af loggen ?
Avatar billede Slettet bruger
07. marts 2014 - 22:25 #4
#3
Der er vel ikke noget galt i at køre programmer som AdwCleaner og
Malwarebyte, eller hvad?
Det er åbenbart kun 220661 som prøver at hjælpe her. Hvis du kan tilbyde noget bedre, skulle du gøre det, og ikke nøjes med at kritisere andres ærlige forsøg.
Avatar billede Coneks Nybegynder
07. marts 2014 - 22:56 #5
Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.07.07

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
Administrator :: A-PC [administrator]

Protection: Enabled

07-03-2014 18:49:13
mbam-log-2014-03-07 (18-49-13).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 558154
Time elapsed: 3 hour(s), 52 minute(s), 33 second(s)

Memory Processes Detected: 5
C:\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe (PUP.Optional.Conduit.A) -> 3568 -> Delete on reboot.
C:\Program Files\SearchProtect\UI\bin\cltmngui.exe (PUP.Optional.Conduit.A) -> 3760 -> Delete on reboot.
C:\Program Files\PassShow\PassShow155.exe (PUP.Optional.PassShow.A) -> 1304 -> Delete on reboot.
C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (PUP.Optional.AdvancedSystemProtector.A) -> 2672 -> Delete on reboot.
C:\Program Files\RegClean Pro\RegCleanPro.exe (PUP.Optional.RegCleanPro.A) -> 3920 -> Delete on reboot.

Memory Modules Detected: 9
C:\Program Files\RegClean Pro\RegCleanPro.dll (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\isxdl.dll (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\xmllite.dll (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\Advanced System Protector\aspsys.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\Microsoft.Win32.TaskScheduler.DLL (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\System.Data.SQLite.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\Xceed.Compression.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\Xceed.FileSystem.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\Xceed.Zip.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.

Registry Keys Detected: 16
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1 (PUP.Optional.RegCleanPro.A) -> No action taken.
HKCU\SOFTWARE\SaveSense (PUP.Optional.SaveSense.A) -> No action taken.
HKCU\Software\Systweak\Advanced System Protector (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
HKCU\Software\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> No action taken.
HKLM\SOFTWARE\SaveSense (PUP.Optional.SaveSense.A) -> No action taken.
HKCR\CLSID\{2e32cfe5-df92-4ae5-b0be-609ed0df74a6} (PUP.Optional.SaveSense) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2E32CFE5-DF92-4AE5-B0BE-609ED0DF74A6} (PUP.Optional.SaveSense) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{2E32CFE5-DF92-4AE5-B0BE-609ED0DF74A6} (PUP.Optional.SaveSense) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2E32CFE5-DF92-4AE5-B0BE-609ED0DF74A6} (PUP.Optional.SaveSense) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveSense (PUP.Optional.SaveSense) -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
HKLM\SYSTEM\CurrentControlSet\Services\PassShow (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\912138fe-a986-4780-ad7a-24960030e414 (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1 (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IEXPLORE.EXE (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.

Registry Values Detected: 1
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings|ProxyServer (PUM.Bad.Proxy) -> Data: http=127.0.0.1:13828 -> Quarantined and deleted successfully.

Registry Data Items Detected: 2
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit.A) -> Bad: (http://search.conduit.com/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP290AF0A3-1029-4C0A-916E-877D1335B839&SSPV=) Good: (http://www.google.com) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.Conduit.A) -> Bad: (C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll) Good: () -> Quarantined and repaired successfully.

Folders Detected: 38
C:\Program Files\SearchProtect (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\Main (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\Main\bin (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\Main\Logs (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\Main\rep (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\SearchProtect (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\SearchProtect\bin (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\SearchProtect\Logs (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\SearchProtect\rep (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\bin (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\bubble (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\libs (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protection (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protectionDS (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\settings (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\uninstall (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\rep (PUP.Optional.SearchProtect.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\2.1.1000.12594 (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\updates (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector\2.1.1000.12594 (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector\Backup (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector\Logs (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1 (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Program Files\SaveSense (PUP.Optional.SaveSense) -> No action taken.
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense (PUP.Optional.SaveSense) -> No action taken.
C:\Program Files\PassShow (PUP.Optional.PassShow.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\clamunpack (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Troubleshooter (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\RegClean Pro (PUP.Optional.RegCleanPro.A) -> Delete on reboot.

Files Detected: 264
C:\Program Files\RegClean Pro\Dutch_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Dutch_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\eng_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\eng_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Japanese_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Japanese_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\korean_rcp_ko.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\korean_uninst_ko.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Norwegian_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Norwegian_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\polish_rcp_pl.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\polish_uninst_pl.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\portugese_rcp_pt.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\portugese_uninst_pt.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Portuguese_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Portuguese_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\RCPUninstall.exe (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\RegCleanPro.dll (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Finnish_uninst_fi.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\French_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\French_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\German_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\German_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\greek_rcp_el.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\greek_uninst_el.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\install_left_image.bmp (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\isxdl.dll (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Italian_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Italian_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\russian_rcp_ru.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\russian_uninst_ru.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Spanish_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\spanish_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\SSDPTstub.exe (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Swedish_rcp.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\swedish_uninst.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\systweakasp.exe (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\TPS.ico (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\traditionalcn_uninst_zh-tw.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\turkish_rcp_tr.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\Turkish_uninst_tr.ini (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\unins000.dat (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\unins000.exe (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\unins000.msg (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Program Files\RegClean Pro\xmllite.dll (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Windows\Tasks\RegClean Pro_DEFAULT.job (PUP.Optional.RegCleanPro.A) -> No action taken.
C:\Windows\System32\roboot.exe (PUP.Optional.PCPerformer.A) -> No action taken.
C:\Program Files\SearchProtect\EULA.txt (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\Main\rep\SystemRepository.dat (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\settings.html (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\style.css (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\bubble\bubble.css (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\bubble\bubble.html (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\bubble\bubble.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\bubble\defaults.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\Apply-default.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\Apply-onclick.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\Apply-Rollover.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\bg-with-logo.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\bg.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\bgNotif.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\bgSettings.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\bgUninstall.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\btnBlue.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\btnClose.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\btnSilver.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\checkbox.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\checkbox_checked.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\checkbox_def.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\close-win-def.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\close-win-over-click.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\gray-bg.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\hez-def.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\hez-selected.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\hez.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\icon-win.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\info-icon.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\menu-rollover.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\menu-selected.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\radio-button-def.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\radio-button-selected.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\radio-button.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\radio-button2.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\Settings-icon.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\text-field.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\v.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\Images\x.png (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\libs\defaults.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\libs\dialogUtils.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\libs\json2.min.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\libs\main.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\libs\SPDialogAPI.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protection\defaults.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protection\protection.css (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protection\protection.html (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protection\protection.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protectionDS\defaults.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protectionDS\protectionDS.css (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protectionDS\protectionDS.html (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\protectionDS\protectionDS.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\settings\defaults.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\settings\settings.css (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\settings\settings.html (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\settings\settings.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\uninstall\defaults.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\uninstall\uninstall.css (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\uninstall\uninstall.html (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Program Files\SearchProtect\UI\dialogs\uninstall\uninstall.js (PUP.Optional.SearchProtect.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\AddonSafelist (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\log.xslt (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\completedatabase.db (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\Cookies.bin (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\DigSign.bin (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\FilePaths.bin (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\FileSignature.bin (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\Folders.bin (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\Md5.bin (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\Registry.bin (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\SetupSign.bin (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\signatures\StrSetupSign.bin (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\updates\1545completedatabase.zip (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\updates\1706mupdate.zip (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\ProgramData\Systweak\Advanced System Protector\updates\1707update.zip (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector\QDetail.db (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector\Settings.db (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector\Update.ini (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector\2.1.1000.12594\ASPLog.txt (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector\Logs\log_07-03-14_10-29-52.xml (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\Advanced System Protector\Logs\SMLog.xml (PUP.Optional.AdvancedSystemProtector.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1\eng_rcp.dat (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1\ExcludeList.rcp (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_03-07-2014.log (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1\rcpupdate.ini (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1\results.rcp (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1\TempHLList.rcp (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rmx (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Users\Administrator\AppData\Roaming\systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rxb (PUP.Optional.RegCleanerPro.A) -> No action taken.
C:\Program Files\SaveSense\icon.ico (PUP.Optional.SaveSense) -> No action taken.
C:\Program Files\SaveSense\SaveSense.crx (PUP.Optional.SaveSense) -> No action taken.
C:\Program Files\SaveSense\SaveSense.xpi (PUP.Optional.SaveSense) -> No action taken.
C:\Program Files\SaveSense\SaveSenseIE.dll (PUP.Optional.SaveSense) -> No action taken.
C:\Program Files\SaveSense\SaveSenseIE64.dll (PUP.Optional.SaveSense) -> No action taken.
C:\Program Files\SaveSense\uninst.exe (PUP.Optional.SaveSense) -> No action taken.
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense\SaveSense Help.url (PUP.Optional.SaveSense) -> No action taken.
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense\SaveSense.url (PUP.Optional.SaveSense) -> No action taken.
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense\Uninstall SaveSense.lnk (PUP.Optional.SaveSense) -> No action taken.
C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe (PUP.Optional.Conduit.A) -> Delete on reboot.
C:\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe (PUP.Optional.Conduit.A) -> Delete on reboot.
C:\Program Files\SearchProtect\UI\bin\cltmngui.exe (PUP.Optional.Conduit.A) -> Delete on reboot.
C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Downloads\Windows 7 Ultimate  32 bit USB ready + loader\Windows 7 Loader v2.1.5\Windows Loader.exe (Hacktool.Agent) -> Quarantined and deleted successfully.
C:\Program Files\SearchProtect\Main\bin\SPTool.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files\SearchProtect\Main\bin\uninstall.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files\SearchProtect\SearchProtect\bin\SPTool64.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files\SearchProtect\SearchProtect\bin\SPVC64.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\nseE100.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\nsj1230.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\nsjE390.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\nsp915B.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\nszF33.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\SPSetup.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\uttBF6C.tmp.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\_PsUP.exe (PUP.Optional.AdLyrics) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\dlmE83.tmp\DAEMONToolsPro540-0377.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\System Volume Information\SystemRestore\FRStaging\Users\Administrator\AppData\Local\Temp\nstC5A2\SpSetup.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Administrator\Downloads\rcpsetupmarm1_marm11079dk_conduit.exe (PUP.Optional.RegCleanPro) -> Quarantined and deleted successfully.
C:\Windows.old\Users\Anders\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\6223be8b-699b8dae (Extension.Mismatch) -> Quarantined and deleted successfully.
C:\Windows.old\Users\Anders\Downloads\winamp561_full_emusic-7plus_all.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Windows.old\Users\Anders\Downloads\Pconverter.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Windows.old\Users\Anders\Downloads\rcpsetup_softonic_englobal.exe (PUP.Optional.RegCleanerPro) -> Quarantined and deleted successfully.
C:\Program Files\PassShow\155.xpi (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Program Files\PassShow\155.crx (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Program Files\PassShow\155.dat (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Program Files\PassShow\a.db (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Program Files\PassShow\b.db (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Program Files\PassShow\PassShow155.bin (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Program Files\PassShow\PassShow155.exe (PUP.Optional.PassShow.A) -> Delete on reboot.
C:\Program Files\PassShow\PassShow155.ini (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Program Files\PassShow\Sqlite3.dll (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Program Files\PassShow\Uninstall.exe (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Windows\Tasks\PassShow Update.job (PUP.Optional.PassShow.A) -> Quarantined and deleted successfully.
C:\Windows\Tasks\RegClean Pro_UPDATES.job (PUP.Optional.RegCleanerPro.J) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\loading_withWhiteBG.avi (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe.config (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\AppResource.dll (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\asp.ico (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\AspManager.exe (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\aspsys.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\ASPUninstall.exe (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\categories.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Chinese_asp_ZH-CN.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Chinese_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Communication.dll (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\danish_asp_DA.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Danish_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\dutch_asp_NL.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Dutch_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\eng_asp_en.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\eng_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\filetypehelper.exe (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Finnish_asp_FI.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Finnish_uninst_fi.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\french_asp_FR.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\French_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\german_asp_DE.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\German_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Norwegian_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\polish_uninst_pl.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\portugese_uninst_pt.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\portuguese_asp_PT-BR.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Portuguese_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\russian_asp_ru.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\russian_uninst_ru.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\scandll.dll (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\spanish_asp_ES.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\spanish_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\SSDPTstub.exe (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\swedish_asp_SV.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\swedish_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\greek_uninst_el.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Interop.IWshRuntimeLibrary.dll (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\italian_asp_IT.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Italian_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\japanese_asp_JA.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Japanese_uninst.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\korean_uninst_ko.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Microsoft.Win32.TaskScheduler.DLL (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\System.Data.SQLite.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\TPS.ico (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\traditionalcn_uninst_zh-tw.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Turkish_uninst_tr.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\unins000.dat (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\unins000.exe (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\unins000.msg (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\unrar.dll (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Xceed.Compression.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\Xceed.Compression.Formats.dll (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Xceed.FileSystem.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\Xceed.Zip.dll (PUP.Optional.AdvancedSystemProtector.A) -> Delete on reboot.
C:\Program Files\Advanced System Protector\norwegian_asp_NO.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\System.Core.dll (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\clamunpack\clamscan.exe (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\clamunpack\libclamav.dll (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\clamunpack\readme.txt (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Troubleshooter\asp-fixer.com (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Troubleshooter\asp-fixer.exe (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Troubleshooter\asp-fixer.pif (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Troubleshooter\asp-fixer.scr (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Troubleshooter\ASP-Troubleshooter.chm (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Troubleshooter\firefox.com (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Troubleshooter\iexplore.exe (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\Advanced System Protector\Troubleshooter\iexplore.lnk (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files\RegClean Pro\TraditionalCn_rcp_zh-tw.ini (PUP.Optional.RegCleanPro.A) -> Quarantined and deleted successfully.
C:\Program Files\RegClean Pro\Finnish_rcp_fi.ini (PUP.Optional.RegCleanPro.A) -> Quarantined and deleted successfully.
C:\Program Files\RegClean Pro\RegCleanPro.exe (PUP.Optional.RegCleanPro.A) -> Delete on reboot.
C:\Program Files\RegClean Pro\Chinese_rcp.ini (PUP.Optional.RegCleanPro.A) -> Quarantined and deleted successfully.
C:\Program Files\RegClean Pro\Chinese_uninst.ini (PUP.Optional.RegCleanPro.A) -> Quarantined and deleted successfully.
C:\Program Files\RegClean Pro\CleanSchedule.exe (PUP.Optional.RegCleanPro.A) -> Quarantined and deleted successfully.
C:\Program Files\RegClean Pro\Danish_rcp.ini (PUP.Optional.RegCleanPro.A) -> Quarantined and deleted successfully.
C:\Program Files\RegClean Pro\Danish_uninst.ini (PUP.Optional.RegCleanPro.A) -> Quarantined and deleted successfully.

(end)

Lagt om længe færdig.. :) Her er loggen. .. der var en masse der røg i karantæne, dem slettede jeg også.
Avatar billede Coneks Nybegynder
07. marts 2014 - 23:05 #6
Her er den sidste logfil du har bedt om.

# AdwCleaner v3.020 - Report created 07/03/2014 at 22:58:39
# Updated 27/02/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
# Username : Administrator - A-PC
# Running from : C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P3L8AVKE\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : BackupStack

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Security Toolbar
Folder Deleted : C:\ProgramData\Systweak
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Folder Deleted : C:\Program Files\MyPC Backup
Folder Deleted : C:\Program Files\SaveSense
Folder Deleted : C:\Program Files\SearchProtect
Folder Deleted : C:\Windows\system32\SearchProtect
Folder Deleted : C:\Users\Administrator\AppData\Local\SearchProtect
Folder Deleted : C:\Users\Administrator\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Folder Deleted : C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
File Deleted : C:\Users\Public\Desktop\Advanced System Protector.lnk
File Deleted : C:\Users\Public\Desktop\RegClean Pro.lnk
File Deleted : C:\Windows\system32\roboot.exe
File Deleted : C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
File Deleted : C:\Users\Administrator\Desktop\MyPC Backup.lnk
File Deleted : C:\Windows\System32\Tasks\Advanced System Protector_startup
File Deleted : C:\Windows\System32\Tasks\RegClean Pro
File Deleted : C:\Windows\Tasks\RegClean Pro_DEFAULT.job
File Deleted : C:\Windows\System32\Tasks\RegClean Pro_DEFAULT

***** [ Shortcuts ] *****


***** [ Registry ] *****

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F0EECE93-7C36-4E82-A472-4B68FF1AF244}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F0EECE93-7C36-4E82-A472-4B68FF1AF244}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{136F4C9B-DF56-4BC5-AEE1-9BA659890FFA}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{136F4C9B-DF56-4BC5-AEE1-9BA659890FFA}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D6055A37-B59F-413C-BF91-47B907BAA551}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D6055A37-B59F-413C-BF91-47B907BAA551}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\systweak
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v33.0.1750.146

[ File : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage
Deleted : search_url
Deleted : suggest_url
Deleted : keyword

*************************

AdwCleaner[R0].txt - [4803 octets] - [07/03/2014 22:57:34]
AdwCleaner[S0].txt - [4362 octets] - [07/03/2014 22:58:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4422 octets] ##########
Avatar billede milter Ekspert
07. marts 2014 - 23:17 #7
@ f-arn, #3.

.... og undskyld til Coneks for sidespringet. Sorry!

Jeg har gennem en del tid bemærket, at HJT ikke er så "populær" længere hos malwareexcorcisterne. Hvorfor? Skyldes det manglende opdatering af materiale, eller ...?
Avatar billede 220661 Ekspert
08. marts 2014 - 08:27 #8
#3 Kan se nu jeg fik nævnt programmer i mit indlæg som jeg ikke fik undersøgt da jeg sendte indlægget ind. Og det beklager jeg overfor spørger.

Og ja det er sikkert min uerfarenhed i forhold til dig som jo er super ekspert i måder at rense en pc på.
Men jeg kan ikke lige se at jeg på noget tidspunkt har vildledt spørger til at gøre noget der kan skade hans pc?

Ser man de logge der kommer frem efterfølgende er computeren jo temmelig ramt af snavs, som jeg håber for spørger har lettet den for kvaler.
Avatar billede 220661 Ekspert
08. marts 2014 - 08:30 #9
Coneks hvordan kører din pc nu?

Kan se at Malwarebytes og AdwCleaner har fjernet rigtig meget fra din pc. Jeg studser dog over du i følge loggen ikke har slettet det hele som Malwarebytes har fundet. Der er en del "No action taken" der betyder du ikke har slettet.
Jeg vil derfor anbefale du kører en hurtigscan med programmet og får slettet det sidste.
Avatar billede 220661 Ekspert
08. marts 2014 - 08:41 #10
#9 Ah kan se de skulle være slettet længere nede i loggen :-)
Men en scanning som kontrol skader jo ikke. Brug blot en hurtigscan for at tjekke op på det.
Avatar billede Slettet bruger
08. marts 2014 - 13:34 #11
#9 "No action taken" måske fordi der er PUP. Det er ikke nødvendigvis farligt.
http://searchsecurity.techtarget.com/definition/PUP

@Coneks det er vist de længste logfiler på Eksperten.dk ;-)
Bruger du AVG antivirus free ?
Avatar billede Coneks Nybegynder
08. marts 2014 - 14:39 #12
Hej :-)  Ja jeg bruger  AVG anti virus free.. men det  hjælper da ikke kan jeg forstå på det hele...  :-)

Pcen køre meget bedre nu. :-)
Avatar billede Slettet bruger
08. marts 2014 - 15:24 #13
#12 Hvis du kun har et antivirus vil din computer bliver inficeret før eller siden. Programmerne på ens computer skal også være opdateret.

Min løsning er et Internet Security sikkerhedsprogram + et opdateringsprogram som Secunia PSI mere har jeg ikke gjort for at sikker mig, og min computer.
http://secunia.com/vulnerability_scanning/personal/
Avatar billede f-arn Guru
08. marts 2014 - 16:32 #14
@220661

Du burde reagere når det ikke er en komplet HJT log.

@milter

HJT viser sjældent de områder der i dag inficeres, men dets største problem er nok - at det behandler system32 som system32 - og ikke som sysnative.

Da dette er en 32 bit PC, er system32 ikke et problem her.
Avatar billede 220661 Ekspert
08. marts 2014 - 17:43 #15
#14 Ja det så jeg først da jeg kom tilbage fra byen. Indlæg #2 blev skrevet i en hast på vej ud af døren, så jeg fik ikke lige fanget der manglede en del af loggen.

#12 Det er da fint der er sket en forbedring. Er du helt fri for reklamer når du surfer?
Hvis ikke, så tjek lige om der skulle være noget i tilføj/fjern programmer, som du ikke lige kan se du kender og bruger, så du fjerner dette.

#13 Ja det er mindst lige så vigtigt at de programmer der kobler sig på styresystemet og browseren er opdateret, så her er Secunia PSI er god hjælp til dette.
Avatar billede Coneks Nybegynder
09. marts 2014 - 10:33 #16
Har downloaded og hente psi, samt kørt et Quick scanning den fandt to ting mere.. Og jeg er fri for reklamer nu. :-) mange tak for hjælpen, mon ikke vi kan sige den.er lukket?
Avatar billede 220661 Ekspert
09. marts 2014 - 10:38 #17
Jo hvis du mener den fungerer efter hensigten, så er det fint med mig.
Hvis du vil uddele point til hjælperne, beder du om svar fra dem du vil give point til, og accepterer disse svar.
10. marts 2014 - 05:35 #18
Denne gang blev du 'reddet' af MalwareBytes / AWCleaner !!!
Men pas nu på disse "Lokkemad" programmer ude i verden !!!

---

* Oprydning med CCleaner
* Opret et FRISK SYSTEMGENDANNELSESPUNKT
* CCleaner - værktøjer - Systemgendannelse - Slet de gamle punkter
* Defragmentering
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester