Combofix? How safe is this program?

Viegaard

Honorable
Apr 2, 2016
122
0
10,690
Hello.

I was recommended to scan my computer with Combofix.

But Combofix wants me to turn off my antivirus entirely - Is this a scam? Or an actual legit program?
 
Solution


Oh it was normal before.

I was changing from Bullguard to ESET Smart Security, cause I do music production and Bullguard ran to many background services where ESET only runs 2.

I was adviced to: Uninstall Bullguard, reboot, run CCleaner. Install ESET.

And then run Malwarebytes and Combofix just to make sure I didnt get stuff on my computer while i was without antivirus.

Viegaard

Honorable
Apr 2, 2016
122
0
10,690


Some people say DONT use it if you are a newbie. Can it harm my computer or? I mean can I fuck up the process?
 

tman1

Distinguished
Jan 18, 2009
891
0
19,360
I have no idea why they say that. There is nothing for you to select, all you do is run the EXE file and hit ok at the prompts. It does it's scans, reboots if needed, displays results when finished. Nothing for you to screw up. It has never done anything negative to any system I've run it on.
 

Viegaard

Honorable
Apr 2, 2016
122
0
10,690


ComboFix 16-05-18.01 - Mandrew 28-05-2016 4:44.1.8 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.45.1030.18.16324.13929 [GMT 2:00]
Kører fra: c:\users\Mandrew\Desktop\ComboFix.exe
AV: ESET Smart Security 9.0.381.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET Personal firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 9.0.381.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Andet, der er slettet )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\data
c:\programdata\ntuser.pol
c:\users\Mandrew\AppData\Local\TempFullTiltDkSetup.exe
c:\windows\msdownld.tmp
.
.
((((((((((((((((((((((((((((( Filer skabt fra 2016-04-28 til 2016-05-28 )))))))))))))))))))))))))))))))))))
.
.
2016-05-28 02:46 . 2016-05-28 02:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-05-27 18:20 . 2016-05-19 09:46 11898512 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D3892AF7-EDD3-4DE8-9FE3-A8F1EE71B92D}\mpengine.dll
2016-05-27 18:20 . 2016-04-21 13:05 453288 ------w- c:\windows\system32\MpSigStub.exe
2016-05-27 18:14 . 2016-04-09 07:02 631176 ----a-w- c:\windows\system32\winresume.efi
2016-05-26 20:34 . 2016-05-26 20:34 -------- d-----w- c:\users\Mandrew\AppData\Local\ESET
2016-05-26 20:33 . 2016-05-26 20:33 -------- d-----w- c:\program files\ESET
2016-05-21 18:12 . 2016-05-21 18:12 -------- d-----w- c:\users\Mandrew\AppData\Local\PokerStars
2016-05-19 23:34 . 2016-05-19 23:34 -------- d-----w- c:\programdata\Apple Computer
2016-05-19 23:33 . 2016-05-19 23:33 -------- d-----w- c:\users\Mandrew\AppData\Local\Apple
2016-05-19 23:33 . 2016-05-20 22:56 -------- d-----w- c:\program files (x86)\Common Files\Apple
2016-05-19 21:48 . 2016-05-19 21:48 -------- d-----w- c:\users\Mandrew\AppData\Local\Adobe
2016-05-16 07:56 . 2016-05-09 23:26 112184 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2016-05-16 07:56 . 2016-05-16 07:56 -------- d-----w- c:\program files (x86)\VulkanRT
2016-05-15 12:32 . 2016-05-15 12:32 -------- d-----w- c:\program files (x86)\TIDAL
2016-05-12 21:55 . 2016-05-12 21:55 51400 ----a-w- c:\windows\system32\drivers\sshid.sys
2016-05-12 21:55 . 2016-05-12 21:55 25656 ----a-w- c:\windows\system32\drivers\hidkmdf.sys
2016-05-12 21:55 . 2016-05-12 21:55 1804680 ----a-w- c:\windows\system32\WdfCoInstaller01011.dll
2016-05-12 08:48 . 2016-05-12 08:48 84800 ----a-w- c:\windows\system32\drivers\epfwwfp.sys
2016-05-12 08:48 . 2016-05-12 08:48 53384 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys
2016-05-12 08:48 . 2016-05-12 08:48 264552 ----a-w- c:\windows\system32\drivers\eamonm.sys
2016-05-12 08:48 . 2016-05-12 08:48 198096 ----a-w- c:\windows\system32\drivers\epfw.sys
2016-05-12 08:48 . 2016-05-12 08:48 186784 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2016-05-12 08:48 . 2016-05-12 08:48 142976 ----a-w- c:\windows\system32\drivers\ekbdflt.sys
2016-05-04 02:23 . 2016-05-04 02:23 129824 ----a-w- c:\windows\SysWow64\vulkan-1-1-0-11-1.dll
2016-05-04 02:22 . 2016-05-04 02:22 40224 ----a-w- c:\windows\SysWow64\vulkaninfo-1-1-0-11-1.exe
2016-05-04 02:22 . 2016-05-04 02:22 130848 ----a-w- c:\windows\system32\vulkan-1-1-0-11-1.dll
2016-05-04 02:22 . 2016-05-04 02:22 45344 ----a-w- c:\windows\system32\vulkaninfo-1-1-0-11-1.exe
2016-05-03 18:49 . 2016-05-03 18:49 -------- d-----w- C:\EVE
2016-05-03 11:49 . 2016-04-27 14:35 1924152 ----a-w- c:\windows\system32\nvdispco6436510.dll
2016-05-03 11:49 . 2016-04-27 14:35 1571776 ----a-w- c:\windows\system32\nvdispgenco6436510.dll
2016-04-29 18:33 . 2016-04-29 18:33 -------- d-----w- c:\program files\Intel Corporation
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-05-27 18:15 . 2014-10-15 17:35 139319312 ----a-w- c:\windows\system32\MRT.exe
2016-05-19 21:49 . 2015-11-02 05:54 797376 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2016-05-19 21:49 . 2015-11-02 05:54 142528 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2016-05-10 04:07 . 2015-12-02 15:02 3714144 ----a-w- c:\windows\system32\nvapi64.dll
2016-05-10 04:07 . 2015-07-06 01:17 3286664 ----a-w- c:\windows\SysWow64\nvapi.dll
2016-05-10 04:07 . 2015-07-06 01:17 19006432 ----a-w- c:\windows\system32\nvwgf2umx.dll
2016-05-10 04:07 . 2015-07-06 01:17 14129544 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2016-05-09 23:40 . 2015-07-06 01:18 2993088 ----a-w- c:\windows\system32\nvsvc64.dll
2016-05-09 23:40 . 2015-07-06 01:18 6369728 ----a-w- c:\windows\system32\nvcpl.dll
2016-05-09 23:40 . 2015-12-30 19:07 81856 ----a-w- c:\windows\system32\nv3dappshextr.dll
2016-05-09 23:40 . 2015-12-30 19:07 532536 ----a-w- c:\windows\system32\nv3dappshext.dll
2016-05-09 23:40 . 2015-07-06 01:18 71224 ----a-w- c:\windows\system32\nvshext.dll
2016-05-09 23:40 . 2015-07-06 01:18 392128 ----a-w- c:\windows\system32\nvmctray.dll
2016-05-09 23:40 . 2015-07-06 01:18 2563128 ----a-w- c:\windows\system32\nvsvcr.dll
2016-05-09 23:40 . 2015-07-06 01:18 1201600 ----a-w- c:\windows\system32\nvvsvc.exe
2016-05-06 14:02 . 2015-07-06 01:18 6423191 ----a-w- c:\windows\system32\nvcoproc.bin
2016-05-04 02:23 . 2016-03-28 19:12 129824 ----a-w- c:\windows\SysWow64\vulkan-1.dll
2016-05-04 02:22 . 2016-03-28 19:12 40224 ----a-w- c:\windows\SysWow64\vulkaninfo.exe
2016-05-04 02:22 . 2016-03-28 19:12 130848 ----a-w- c:\windows\system32\vulkan-1.dll
2016-05-04 02:22 . 2016-03-28 19:12 45344 ----a-w- c:\windows\system32\vulkaninfo.exe
2016-04-14 21:01 . 2016-04-14 21:01 18944 ----a-r- c:\users\Mandrew\AppData\Roaming\Microsoft\Installer\{715BC53A-86DD-4A39-A4E9-84DB6E6B7529}\IconTmpl.CBBC6E0A_AA3B_43FF_A165_51C433A87313.exe
2016-04-09 06:54 . 2016-05-27 18:14 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2016-04-04 18:14 . 2016-04-27 01:35 38120 ----a-w- c:\windows\system32\CompatTelRunner.exe
2016-04-04 18:02 . 2016-04-27 01:35 1169408 ----a-w- c:\windows\system32\aeinv.dll
2016-04-02 13:08 . 2016-04-27 01:35 1386496 ----a-w- c:\windows\system32\appraiser.dll
2016-03-31 11:31 . 2016-03-31 11:31 30264 ----a-w- c:\windows\system32\drivers\dtproscsibus.sys
2016-03-23 14:02 . 2016-04-27 01:35 215040 ----a-w- c:\windows\system32\aepic.dll
2016-03-22 04:12 . 2016-03-28 19:11 1924152 ----a-w- c:\windows\system32\nvdispco6436472.dll
2016-03-22 04:12 . 2016-03-28 19:11 1573432 ----a-w- c:\windows\system32\nvdispgenco6436472.dll
2016-03-17 22:56 . 2016-04-16 19:19 2084864 ----a-w- c:\windows\system32\ole32.dll
2016-03-17 22:28 . 2016-04-16 19:19 1414144 ----a-w- c:\windows\SysWow64\ole32.dll
2016-03-17 18:04 . 2016-04-27 01:35 698368 ----a-w- c:\windows\system32\generaltel.dll
2016-03-17 18:04 . 2016-04-27 01:35 499200 ----a-w- c:\windows\system32\devinv.dll
2016-03-17 18:04 . 2016-04-27 01:35 279040 ----a-w- c:\windows\system32\invagent.dll
2016-03-17 18:04 . 2016-04-27 01:35 76800 ----a-w- c:\windows\system32\acmigration.dll
2016-03-16 21:30 . 2016-03-16 21:30 128792 ----a-w- c:\windows\SysWow64\vulkan-1-1-0-5-1.dll
2016-03-16 21:29 . 2016-03-16 21:29 41752 ----a-w- c:\windows\SysWow64\vulkaninfo-1-1-0-5-1.exe
2016-03-16 21:29 . 2016-03-16 21:29 127768 ----a-w- c:\windows\system32\vulkan-1-1-0-5-1.dll
2016-03-16 21:28 . 2016-03-16 21:28 45848 ----a-w- c:\windows\system32\vulkaninfo-1-1-0-5-1.exe
2016-03-16 18:50 . 2016-04-27 01:35 156672 ----a-w- c:\windows\system32\mtxoci.dll
2016-03-16 18:28 . 2016-04-27 01:35 111616 ----a-w- c:\windows\SysWow64\mtxoci.dll
2016-03-16 18:28 . 2016-04-27 01:35 176128 ----a-w- c:\windows\SysWow64\msorcl32.dll
2016-03-16 00:16 . 2016-04-16 19:19 760320 ----a-w- c:\windows\system32\samsrv.dll
2016-03-16 00:16 . 2016-04-16 19:19 106496 ----a-w- c:\windows\system32\samlib.dll
2016-03-15 23:53 . 2016-04-16 19:19 60416 ----a-w- c:\windows\SysWow64\samlib.dll
2016-03-09 19:00 . 2016-04-27 01:35 444416 ----a-w- c:\windows\system32\winhttp.dll
2016-03-09 19:00 . 2016-04-27 01:35 396800 ----a-w- c:\windows\system32\webio.dll
2016-03-09 18:54 . 2016-04-27 01:35 275456 ----a-w- c:\windows\system32\InkEd.dll
2016-03-09 18:43 . 2016-03-09 18:43 40576 ----a-w- c:\windows\system32\drivers\ssdevfactory.sys
2016-03-09 18:40 . 2016-04-27 01:35 351744 ----a-w- c:\windows\SysWow64\winhttp.dll
2016-03-09 18:40 . 2016-04-27 01:35 316416 ----a-w- c:\windows\SysWow64\webio.dll
2016-03-09 18:34 . 2016-04-27 01:35 216064 ----a-w- c:\windows\SysWow64\InkEd.dll
2016-03-08 10:07 . 2016-03-10 16:41 1924152 ----a-w- c:\windows\system32\nvdispco6436451.dll
2016-03-08 10:07 . 2016-03-10 16:41 1571776 ----a-w- c:\windows\system32\nvdispgenco6436451.dll
2016-03-06 18:53 . 2016-04-16 19:19 2048 ----a-w- c:\windows\system32\msxml3r.dll
2016-03-06 18:53 . 2016-04-16 19:19 1885696 ----a-w- c:\windows\system32\msxml3.dll
2016-03-06 18:38 . 2016-04-16 19:19 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll
2016-03-06 18:38 . 2016-04-16 19:19 1240576 ----a-w- c:\windows\SysWow64\msxml3.dll
2016-03-03 21:30 . 2016-03-03 21:30 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2016-03-03 21:30 . 2016-03-03 21:30 335184 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
.
.
((((((((((((((((((((((((((((((((((( Start steder i reg.basen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Bemærk* tomme linier & lovlige standard linier vises ikke
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BRDriver64_1_3_3_E02B25FC;BRDriver64_1_3_3_E02B25FC;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [x]
R3 cpuz136;cpuz136;c:\windows\TEMP\cpuz136\cpuz136_x64.sys;c:\windows\TEMP\cpuz136\cpuz136_x64.sys [x]
R3 dtproscsibus;DAEMON Tools Pro Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtproscsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtproscsibus.sys [x]
R3 e1dexpress;Intel® PRO/1000 PCI Express Network Connection Driver D;c:\windows\system32\DRIVERS\e1d62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1d62x64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 ffusb2audio;Focusrite USB 2.0 Audio Driver;c:\windows\system32\DRIVERS\ffusb2audio.sys;c:\windows\SYSNATIVE\DRIVERS\ffusb2audio.sys [x]
R3 firefaceu64;RME Fireface USB Audio Device;c:\windows\system32\drivers\fireface_usb_64.sys;c:\windows\SYSNATIVE\drivers\fireface_usb_64.sys [x]
R3 GPUZ;GPUZ;c:\windows\TEMP\GPUZ.sys;c:\windows\TEMP\GPUZ.sys [x]
R3 iLokDrvr;Usb Driver;c:\windows\system32\DRIVERS\iLokDrvr.sys;c:\windows\SYSNATIVE\DRIVERS\iLokDrvr.sys [x]
R3 iusb3hub;Intel® USB 3.0 hub driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
R3 iusb3xhc;Intel® USB 3.0 udvidet værtscontroller driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
R3 mmxavs;Maschine Mikro MIDI;c:\windows\system32\Drivers\mmxavs.sys;c:\windows\SYSNATIVE\Drivers\mmxavs.sys [x]
R3 mmxusb_svc;Maschine Mikro;c:\windows\system32\Drivers\mmxusb.sys;c:\windows\SYSNATIVE\Drivers\mmxusb.sys [x]
R3 NIWinCDEmu;ISO Mounter driver;c:\windows\system32\DRIVERS\NIWinCDEmu.sys;c:\windows\SYSNATIVE\DRIVERS\NIWinCDEmu.sys [x]
R3 RDID1133;A-Series Keyboard;c:\windows\system32\Drivers\rdwm1133.sys;c:\windows\SYSNATIVE\Drivers\rdwm1133.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 rspLLL;rspLLL;c:\windows\system32\DRIVERS\rspLLL64.sys;c:\windows\SYSNATIVE\DRIVERS\rspLLL64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Tjenesten Windows Aktivering;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 xhunter1;xhunter1;c:\windows\xhunter1.sys;c:\windows\xhunter1.sys [x]
R4 ekbdflt;ekbdflt;c:\windows\system32\DRIVERS\ekbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\ekbdflt.sys [x]
R4 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [x]
R4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
R4 postgresql-x64-9.5;postgresql-x64-9.5 - PostgreSQL Server 9.5;c:\program files\PostgreSQL\9.5\bin\pg_ctl.exe;c:\program files\PostgreSQL\9.5\bin\pg_ctl.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;ESET Personal Firewall;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 DigiNet;Avid ICON, C|24 Ethernet Support;c:\windows\system32\DRIVERS\diginet.sys;c:\windows\SYSNATIVE\DRIVERS\diginet.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe;c:\program files\ESET\ESET Smart Security\ekrn.exe [x]
S2 PaceLicenseDServices;PACE License Services;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 hidkmdf;Filter Driver Service for HID-KMDF Interface layer;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 ssdevfactory;SteelSeries Device Factory Service;c:\windows\system32\DRIVERS\ssdevfactory.sys;c:\windows\SYSNATIVE\DRIVERS\ssdevfactory.sys [x]
S3 sshid;SteelSeries HID Service;c:\windows\system32\DRIVERS\sshid.sys;c:\windows\SYSNATIVE\DRIVERS\sshid.sys [x]
S3 synusb64;eLicenser;c:\windows\system32\DRIVERS\synusb64.sys;c:\windows\SYSNATIVE\DRIVERS\synusb64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-05-13 10:37 1186968 ----a-w- c:\program files (x86)\Google\Chrome\Application\50.0.2661.102\Installer\chrmstp.exe
.
Indhold af mappen 'Planlagte Opgaver'
.
2016-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-15 12:22]
.
2016-05-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-15 12:22]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2015-06-12 8484056]
.
------- Yderligere scanning -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: {{15105F6B-80FF-40d3-B239-AEC9E0E93ACD} - c:\program files (x86)\PokerStars.DK\PokerStarsUpdate.exe
Trusted Zone: hola.org
Trusted Zone: eset.com\help
TCP: DhcpNameServer = 193.162.153.164 194.239.134.83
FF - ProfilePath - c:\users\Mandrew\AppData\Roaming\Mozilla\Firefox\Profiles\9pfwbfx1.default-1435764784620\
FF - prefs.js: browser.startup.homepage - hxxps://www.twitch.tv/
.
- - - - TOMME GENVEJE FJERNET - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
SafeBoot-BsScanner
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-{0E086923-AAA3-4F98-A6E2-48B64CE27553} - c:\programdata\{F21A5765-AACF-4530-991E-CE1346273F96}\Reaktor Factory Selection Setup PC.exe
AddRemove-{0E43C9FB-F6E2-49CF-86AF-0D82B1E63C86} - c:\programdata\{EFE2C9A8-55AA-4756-98F3-60C97CFD6EA2}\Abbey Road Modern Drummer Setup PC.exe
AddRemove-{16c059dc-2cce-4138-9426-14e371590f08} - c:\programdata\{F1BD1DB3-F88E-4A13-A4B4-090CFEE6A6A3}\Maschine 2 Factory Library Setup PC.exe
AddRemove-{2256CECF-B7D1-4DCA-B0FE-454D0972A4F0} - c:\programdata\{9CAC9FA2-D36F-42F6-9B1A-270AF7637849}\Abbey Road 60s Drummer Setup PC.exe
AddRemove-{369B4BDE-0BBC-415c-858B-EED47C55057F} - c:\programdata\{81B3FE58-8826-44EC-8271-083D201CEA19}\Maschine Studio Driver Setup PC.exe
AddRemove-{43E7798A-248E-4A3D-9969-FEA63543A462} - c:\programdata\{AE4E9D9F-140B-4444-9F54-7EF88D1966D3}\Kontakt 4 Setup PC.exe
AddRemove-{47AFED4E-1B50-497E-92BF-3D9314D68EED} - c:\programdata\{F4FF7251-2B0F-48B9-A31D-1930EB197336}\Komplete Elements Setup PC.exe
AddRemove-{6438691E-D44E-4A18-B6C4-D1EB26281D6A} - c:\programdata\{57B10C8A-9A38-45B2-B696-92DA7712A65C}\Mikro Prism Setup PC.exe
AddRemove-{6CD323B8-B0DA-4150-8528-C3B48679E919} - c:\programdata\{73631698-31A0-419C-B151-F478AEBC136A}\Komplete Kontrol Driver Setup PC.exe
AddRemove-{6D2B175C-770D-4488-851D-674394AE7DF9} - c:\programdata\{96999208-4FAC-4ECB-9986-8EA4B3DA7F39}\Komplete Kontrol Setup PC.exe
AddRemove-{7D09B9A7-E87E-4c98-98FE-21EF10873045} - c:\programdata\{6495CC1D-C10B-40C5-A92B-241A2B2C8D20}\Maschine Mikro MK2 Driver Setup PC.exe
AddRemove-{86164718-6457-42DE-8DB6-EA05F7045F2C}_is1 - c:\programdata\Valhalla DSP
AddRemove-{91b6d04b-3203-41d9-921f-06500ccc1447} - c:\programdata\{ED9A6E64-1353-4C73-9031-F7204F61E9DD}\Abbey Road Vintage Drummer Setup PC.exe
AddRemove-{B0FC9E28-1CE6-4A40-BEF1-C6E6EDFCA070} - c:\programdata\{00E0164B-B182-4800-96DA-F8D39B3A7189}\Kontakt Factory Selection Setup PC.exe
AddRemove-{B8C8F1E5-763A-4841-ACD2-5CE0A1152949} - c:\programdata\{436E4650-5255-4A92-A630-4634707B27C8}\Maschine 2 Setup PC.exe
AddRemove-{C7FAFC98-5ECC-40FC-B440-A5D5FE3A6A6E} - c:\programdata\{2E9BA6FD-AB3C-4DE8-A99D-2E396702775D}\Guitar Rig 4 Setup PC.exe
AddRemove-{cb8b5623-806d-4412-828a-9a47fe4411ae} - c:\programdata\{38911B1E-924F-40DC-A20B-99F18CA9A611}\Abbey Road 50s Drummer Setup PC.exe
AddRemove-{D28571EC-82E4-414D-B09D-BBA1B5B3FE55} - c:\programdata\{16E6DCE6-1916-4566-A3CF-31880CAA7C63}\Maschine Factory Content Setup.exe
AddRemove-{D597935A-5F0E-44F8-A028-A0EF9C647D95} - c:\programdata\{1824D869-D647-4A7A-9CEB-F5131CE3A3AE}\Rammfire Setup PC.exe
AddRemove-{D94FCA8D-A8B6-4F03-B0AE-416BFB7AF06A} - c:\programdata\{08BCEE1B-8DEC-401F-989A-111EE3AF2366}\Reaktor Elements Selection Setup PC.exe
AddRemove-{E1437A85-6169-4D49-80C9-81401D1ADCB6} - c:\programdata\{0D8000AB-F24E-4A3B-BB1F-ED17C47F601C}\Abbey Road 80s Drummer Setup PC.exe
AddRemove-{E206701F-713C-4799-B01C-AF24C17C826E} - c:\programdata\{ECCA2E41-2653-4A28-BB8F-62B24E1A584D}\Kontakt Elements Selection R2 Setup PC.exe
AddRemove-{E236DA46-2EDD-4097-8CF4-444B4FC9E226} - c:\programdata\{F7BFF4EE-E380-444D-BF91-DE4716D46130}\Abbey Road 60s Drums Vintage Setup PC.exe
AddRemove-{FC6AFD44-EDF9-4A03-AB9E-16A5391FE24F} - c:\programdata\{56C5D4F0-9E6D-421F-AA70-A7EF727C1C69}\Maschine Setup PC.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PaceLicenseDServices]
"ImagePath"="\"c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe\" -u https://activation.paceap.com/InitiateActivation"
.
--------------------- LÅSTE REGISTRERINGS NØGLER ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Gennemført tid: 2016-05-28 04:47:41
ComboFix-quarantined-files.txt 2016-05-28 02:47
.
Pre-Kørsel: 59.314.642.944 byte ledig
Post-Kørsel: 59.265.740.800 byte ledig
.
- - End Of File - - 5D53D447A6F2E163D562E370DFEED830
A36C5E4F47E84449FF07ED3517B43A31


-------------


So apart from some cookies or fixed reg databases - Was there anything harmful on my computer? I dont know how to interprid the log.
 

Viegaard

Honorable
Apr 2, 2016
122
0
10,690


Oh it was normal before.

I was changing from Bullguard to ESET Smart Security, cause I do music production and Bullguard ran to many background services where ESET only runs 2.

I was adviced to: Uninstall Bullguard, reboot, run CCleaner. Install ESET.

And then run Malwarebytes and Combofix just to make sure I didnt get stuff on my computer while i was without antivirus.
 
Solution