Sære, specifikke symptomer

Hej - min pc har flg. symptomer:

  1. Scannede filer gemmes kun i kort tid - så forsvinder de igen
  2. Dagen efter kan de samme filer dukke op, hvor jeg forsøgte at lægge dem (på skrivebordet)
  3. Når jeg forsøger at køre en scanning i Windows sikkerhedscenter, går processen i stå - den bliver forhindret i at scanne færdig.

Tak for hjælp
Mvh
Torstne

Hej, og velkommmen til :smiley:

Er der tale om de samme filer du nævner i punkt 1 :question:

Vil du godt hente Malwarebytes til Windows

Installer den og la’ den køre et Threat Scan.

Kopier loggen herind og fortæl om det hjalp :question:

Kære Spywarefri.

Mange tak - her er loggen. Umiddelbart ser det desværre ikke ud til at dette var tilstrækkeligt: Det er stadig som om, jeg ikke har fuld kontrol over skrivebordet. F. eks. mislykkes det at flytte en pdf-fil til papirkurven…???

Mvh
Torsten

-Logoplysninger-
Scanningsdato: 20.04.2021
Scanningstidspunkt: 10.47
Logfil: 02b77c26-a1b5-11eb-84c0-d43d7ef1727a.json

-Softwareoplysninger-
Version: 4.3.0.98
Komponentversion: 1.0.1251
Opdatér pakkeversion: 1.0.39611
Licens: Prøveversion

-Systemoplysninger-
OS: Windows 10 (Build 19041.928)
CPU: x64
Filsystem: NTFS
Bruger: BirkholmO\Torsten

-Scanningsoversigt-
Scanningstype: Trusselsscanning
Scanning started af: Manuel
Resultat: Fuldført
Scannede objekter: 324147
Registrerede trusler: 39
Trusler i karantæne: 39
Forløbet tid: 8 min, 14 sek.

-Scanningsindstillinger-
Hukommelse: Aktiveret
Start: Aktiveret
Filsystem: Aktiveret
Arkiver: Aktiveret
Rootkits: Deaktiveret
Heuristik: Aktiveret
PUP: Registrér
PUM: Registrér

-Scanningsoplysninger-
Proces: 0
(Ingen skadelige elementer registreret)

Modul: 0
(Ingen skadelige elementer registreret)

Registreringsnøgle: 0
(Ingen skadelige elementer registreret)

Registreringsværdi: 2
PUP.Optional.MindSpark, HKU\S-1-5-21-2742626407-493885843-2448045593-1001\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|mallpejgeafdahhflmliiahjdpgbegpk, I karantæne, 768, 322621, , , , , ,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2742626407-493885843-2448045593-1001\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|deildingfnmdbbgbnbhnjodhkhgoggdm, I karantæne, 1876, 443121, , , , , ,

Registreringsdata: 0
(Ingen skadelige elementer registreret)

Datastrøm: 0
(Ingen skadelige elementer registreret)

Mappe: 6
PUP.Optional.MindSpark, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk, I karantæne, 768, 322621, , , , , ,
PUP.Optional.MindSpark, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, I karantæne, 768, 322621, , , , , ,
PUP.Optional.MindSpark, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MALLPEJGEAFDAHHFLMLIIAHJDPGBEGPK, I karantæne, 768, 322621, 1.0.39611, , ame, , ,
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Local Extension Settings\deildingfnmdbbgbnbhnjodhkhgoggdm, I karantæne, 1876, 443121, , , , , ,
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, I karantæne, 1876, 443121, , , , , ,
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\DEILDINGFNMDBBGBNBHNJODHKHGOGGDM, I karantæne, 1876, 443121, 1.0.39611, , ame, , ,

Fil: 31
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\http_onlinemapfinder.dl.tb.ask.com_0.localstorage, I karantæne, 1876, 443123, 1.0.39611, , ame, , 9D73523F290421395D65C7B2D8E3ACBB, 34B8302BA22FAC1B69C66B87F9416295BFDB4C0B0AF0C726A0E135F10688234B
PUP.Optional.MindSpark, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Erstattet, 768, 322621, , , , , 3FFAC232C9E37C6DC5E062372EF9FB43, E07EDC3701DB2ABEEE2AF2CC5358203979130F3105351E150D9A53896D3E5DC7
PUP.Optional.MindSpark, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Erstattet, 768, 322621, , , , , 7B100D4D442BDD226EFF4BF451E76AF9, FA60D28671D1927531B18A425C47D1C5C9446E2370ED0DF0E7CDD1876D5D8DF5
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\000003.log, I karantæne, 768, 322621, , , , , E2AE38F898A8AD0944EAD940C4ED2122, A688AE8C5D262B32F69FF197AC62C53CE8F2265255ACA45E6413BA0B89A1FA0E
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\CURRENT, I karantæne, 768, 322621, , , , , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\LOCK, I karantæne, 768, 322621, , , , , ,
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\LOG, I karantæne, 768, 322621, , , , , 851BD12F65AE90AED882C93FFDB345D0, 1D14CDA6EAA788D6B3E1A228F4CFF7FDC06BAF0F31382D4BCE05352047E99498
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\LOG.old, I karantæne, 768, 322621, , , , , 2F33315883E9E566816F89EF73152001, 7299B9C2EFC84D0D0F7347C51783EBE7E1AEA059E800ED8A33CF236AAEBAF819
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\MANIFEST-000001, I karantæne, 768, 322621, , , , , 5AF87DFD673BA2115E2FCF5CFDB727AB, F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, I karantæne, 768, 322621, , , , , 1CDE6898F5B98E8B78BDBE0FBEA26E3F, 7DCBE9CF0224DD9520503AD62867010DB997370C9B4436B8446DF23AD492B344
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\002835.log, I karantæne, 768, 322621, , , , , F430D7DCE174EA799D7AA9090E2F0B9A, 6AAFED8ED69E1D45FAD3C08953EAD8217CBC0788986F2607652CA324C3AD8F7E
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\002837.ldb, I karantæne, 768, 322621, , , , , 857812D49D4B99B738CC24A67266C935, 7BB08E0CF432CC70D7433EF4B386A150DE70DEF00A968C79545CBE9FFDB808DB
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, I karantæne, 768, 322621, , , , , 4E24BB4F9B6BD0FED10F6C612A3BEDE6, E9D8CB4839BE99D5682FC9E63F7B70D309061A01F460B2977A2E297AAE7B6368
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, I karantæne, 768, 322621, , , , , ,
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, I karantæne, 768, 322621, , , , , 5CC27C744F400F548E8E045148F6F61F, 1CFDFBC8AD3A59EA95D6ECBE758D6634116B5C79D78B97A08D764BD324B58FFE
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, I karantæne, 768, 322621, , , , , 80FBE9396A2396952F72CFDC57AC53E6, 7F5EEBF5C3D2D778A6520DB0AE28488718D975CCAB25B0D49F60799676E3673A
PUP.Optional.MindSpark, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000537, I karantæne, 768, 322621, , , , , 33778ED47C9AB8A293648404D7E6A6CB, 1B0EAE2D11C1B7CFE262327E339F4DBF1D5C22249718FD845D0F3EE61A9D07F4
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\http_onlinemapfinder.dl.tb.ask.com_0.localstorage-journal, I karantæne, 1876, 443123, 1.0.39611, , ame, , ,
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\http_onlinemapfinder.dl.myway.com_0.localstorage, I karantæne, 1876, 443124, 1.0.39611, , ame, , 9D73523F290421395D65C7B2D8E3ACBB, 34B8302BA22FAC1B69C66B87F9416295BFDB4C0B0AF0C726A0E135F10688234B
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\http_onlinemapfinder.dl.myway.com_0.localstorage-journal, I karantæne, 1876, 443124, 1.0.39611, , ame, , ,
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MALLPEJGEAFDAHHFLMLIIAHJDPGBEGPK\13.973.19.52673_0\MANIFEST.JSON, I karantæne, 1876, 867816, 1.0.39611, , ame, , 1D396FD34C0DD484DE31AF4E5CB82A0B, 17E846B4A26994C2184110D0D107BD02444CB2500BE75E02FCA6DB34D58D1C1A
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Erstattet, 1876, 443121, , , , , 3FFAC232C9E37C6DC5E062372EF9FB43, E07EDC3701DB2ABEEE2AF2CC5358203979130F3105351E150D9A53896D3E5DC7
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Erstattet, 1876, 443121, , , , , 7B100D4D442BDD226EFF4BF451E76AF9, FA60D28671D1927531B18A425C47D1C5C9446E2370ED0DF0E7CDD1876D5D8DF5
PUP.Optional.MindSpark.Generic, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deildingfnmdbbgbnbhnjodhkhgoggdm\000003.log, I karantæne, 1876, 443121, , , , , 4734C3AA508C40958CF0D27D7B952AC1, 4363F5C2A6C609EF6B7A44B5A32D4E135A72DC713C753E94CD59441535DA82D8
PUP.Optional.MindSpark.Generic, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deildingfnmdbbgbnbhnjodhkhgoggdm\CURRENT, I karantæne, 1876, 443121, , , , , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
PUP.Optional.MindSpark.Generic, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deildingfnmdbbgbnbhnjodhkhgoggdm\LOCK, I karantæne, 1876, 443121, , , , , ,
PUP.Optional.MindSpark.Generic, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deildingfnmdbbgbnbhnjodhkhgoggdm\LOG, I karantæne, 1876, 443121, , , , , 6287C55242C39A541E0BC1326029784C, 4FF1241DD7B33B88924345DADFF8BB622C3EEC8D8D58EE8F3DF34431F7A84801
PUP.Optional.MindSpark.Generic, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deildingfnmdbbgbnbhnjodhkhgoggdm\LOG.old, I karantæne, 1876, 443121, , , , , B3E87913A35DA068A691213A14759E41, 44B759C0EBE54412E6083A3DD398BB1B60CA5626ABDB29D28F28A79D1CF4578B
PUP.Optional.MindSpark.Generic, C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deildingfnmdbbgbnbhnjodhkhgoggdm\MANIFEST-000001, I karantæne, 1876, 443121, , , , , 5AF87DFD673BA2115E2FCF5CFDB727AB, F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\DEILDINGFNMDBBGBNBHNJODHKHGOGGDM\13.931.18.10483_0\MANIFEST.JSON, I karantæne, 1876, 443121, 1.0.39611, , ame, , 07751BACE245B35CE201BD9976E9FB88, E1969BBD6490A6E84BFD1C3387BE4F14703377DF7C43D2B3012F5F6185D66A68
PUP.Optional.MindSpark.Generic, C:\USERS\TORSTEN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\DEILDINGFNMDBBGBNBHNJODHKHGOGGDM\13.931.18.10483_0\CONFIG\CONFIG.JSON, I karantæne, 1876, 456842, 1.0.39611, , ame, , 556AB7CADE658D1C2CB1893BC2B2E294, 4EC68C3A2017E9D0B91D32C44321F3B9EAD3DF3957458C66760AB458CF6D835A

Fysisk sektor: 0
(Ingen skadelige elementer registreret)

WMI: 0
(Ingen skadelige elementer registreret)

Det minder mere om en korrupt Windows installation end en infektion, men la’ os se hva’ et par logs fortæller :thinking:


Til 32 bit Windows, hent Farbar Recovery Scan Tool og gem den på Skrivebordet.

Til 64 bit Windows, hent Farbar Recovery Scan Tool x64 og gem den på Skrivebordet.

Deaktiver dit sikkerhedprogram, mens du kører den :exclamation:

Start Farbar Recovery Scan Tool/Farbar Recovery Scan Tool x64 og klik på Scan.

Første gang der scannes, laver den automatisk Addition.txt.

Når scanningen er færdig, har du 2 log filer på Skrivebordet - FRST.txt og Addition.txt som du bedes kopiere herind.

Send dem i separate indlæg, da det gør det mere overskueligt :exclamation:

Mange tak. Her er den første log:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-04-2021
Ran by Torsten (administrator) on BIRKHOLMO (Acer Aspire XC-605) (21-04-2021 12:43:28)
Running from C:\Users\Torsten\Desktop
Loaded Profiles: Torsten
Platform: Windows 10 Home Version 2004 19041.928 (X64) Language: Dansk (Danmark)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Acer Incorporated → Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Acer Incorporated → Acer Incorporated) C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Acer Incorporated → Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated → Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(CyberLink → CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(HP Inc. → ) C:\Windows\SysWOW64\spdsvc.exe
(Intel® pGFX → ) C:\Windows\System32\igfxTray.exe
(Intel® pGFX → Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel® pGFX → Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel® pGFX → Intel Corporation) C:\Windows\System32\igfxHK.exe
(Malwarebytes Inc → Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc → Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(McAfee, LLC → McAfee, Inc.) C:\Program Files\mcafee\WebAdvisor\servicehost.exe
(Microsoft Corporation → Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation → Microsoft Corporation) C:\Users\Torsten\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12101.1001.14.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows → Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows → Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows → Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows → Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Nero AG → Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Samsung Electronics CO., LTD. → ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Samsung Electronics CO., LTD. → ) C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(SEIKO EPSON CORPORATION → Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE
(SEIKO EPSON CORPORATION → Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(SEIKO EPSON CORPORATION → Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(SEIKO EPSON CORPORATION → Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION → Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(SEIKO EPSON CORPORATION → SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe
(SEIKO EPSON CORPORATION → Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION → Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATIVVE.EXE <2>
(Spotify AB → Spotify Ltd) C:\Users\Torsten\AppData\Roaming\Spotify\SpotifyWebHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13425224 2013-03-05] (Realtek Semiconductor Corp → Realtek Semiconductor)
HKLM…\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. → )
HKLM…\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [442936 2020-10-22] (SEIKO EPSON CORPORATION → Seiko Epson Corporation)
HKLM-x32…\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1319208 2019-05-31] (SEIKO EPSON CORPORATION → Seiko Epson Corporation)
HKU\S-1-5-21-2742626407-493885843-2448045593-1001…\Run: [STUISpeedLauncher] => C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe [411136 2015-02-09] () [File not signed]
HKU\S-1-5-21-2742626407-493885843-2448045593-1001…\Run: [Spotify Web Helper] => C:\Users\Torsten\AppData\Roaming\Spotify\SpotifyWebHelper.exe [780688 2018-01-11] (Spotify AB → Spotify Ltd)
HKU\S-1-5-21-2742626407-493885843-2448045593-1001…\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIVVE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION → Seiko Epson Corporation)
HKU\S-1-5-21-2742626407-493885843-2448045593-1001…\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIVVE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION → Seiko Epson Corporation)
HKU\S-1-5-21-2742626407-493885843-2448045593-1001…\Run: [EPSDNMON] => C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-27] (SEIKO EPSON CORPORATION → Seiko Epson Corporation)
HKU\S-1-5-21-2742626407-493885843-2448045593-1001…\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session – microsoft-edge:hxxps://www.msn.com/spar (the data entry has 596 more characters).
HKLM…\Windows x64\Print Processors\Canon MG4200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDB9.DLL [30208 2012-03-26] (Microsoft Windows Hardware Compatibility Publisher → CANON INC.)
HKLM…\Windows x64\Print Processors\us005PC: C:\Windows\System32\spool\prtprocs\x64\us005pc.dll [43520 2017-06-14] (Microsoft Windows Hardware Compatibility Publisher → Windows ® Codename Longhorn DDK provider)
HKLM…\Print\Monitors\Canon BJ Language Monitor MG4200 series: C:\WINDOWS\system32\CNMLMB9.DLL [389120 2012-03-26] (Microsoft Windows Hardware Compatibility Publisher → CANON INC.)
HKLM…\Print\Monitors\EPSON ET-2720 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBVVE.DLL [184832 2017-07-14] (Microsoft Windows Hardware Compatibility Publisher → Seiko Epson Corporation)
HKLM…\Print\Monitors\EPSON XP-422 423 425 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBNDE.DLL [179712 2013-12-05] (Microsoft Windows Hardware Compatibility Publisher → SEIKO EPSON CORPORATION)
HKLM…\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [File not signed]
HKLM…\Print\Monitors\us005 Langmon: C:\WINDOWS\system32\us005lm.dll [22528 2017-06-14] (Microsoft Windows Hardware Compatibility Publisher → )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] → C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.128\Installer\chrmstp.exe [2021-04-15] (Google LLC → Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {02271167-8EBC-4D95-8879-BE95F73E3930} - System32\Tasks\EPSON ET-2720 Series Update {1E24370F-70B9-4707-95DD-96417154CBD9} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSVVE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION → Seiko Epson Corporation)
Task: {094E8055-4A40-427E-A851-FC999F2E0507} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent → No File <==== ATTENTION
Task: {09B8E717-D9CA-4695-B00B-50A667E08F2C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess → No File <==== ATTENTION
Task: {0DC0DAD2-F84F-429D-B085-411AE7CDE2D5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {0E1840A5-CA11-4CC9-8351-C5756A8B1941} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1120152 2021-04-17] (Microsoft Corporation → Microsoft Corporation)
Task: {131F50E4-9DBE-4AF2-ACBA-D2C8A1AE9849} - System32\Tasks\Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [527944 2013-07-15] (Acer Incorporated → Acer Incorporated)
Task: {142B1B0A-7E5F-4E3E-A88E-457140920F2B} - \Microsoft\Windows\UNP\RunCampaignManager → No File <==== ATTENTION
Task: {1C58E91C-AD3F-4E38-B5B7-06769BCE5F4D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d → No File <==== ATTENTION
Task: {27F8F863-FBF8-445D-ABE0-F5E8020190DB} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime → No File <==== ATTENTION
Task: {287EB61E-849D-44F1-BF41-56B2A8081F95} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {2A5CE21E-65A9-495E-881A-957FF9484455} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {2D6D8759-3EE4-4AA2-833B-F4EE65CA1450} - \McAfee\McAfee Idle Detection Task → No File <==== ATTENTION
Task: {31C4FDD2-B167-4390-AB07-48F1A7070FA0} - System32\Tasks\EPSON XP-422 423 425 Series Update {AC38194B-D714-4BC0-8807-41C9EF764080} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNDE.EXE [690536 2013-11-21] (SEIKO EPSON CORPORATION → SEIKO EPSON CORPORATION)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {39D37867-83F3-4816-A397-74DC2E428EA7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d → No File <==== ATTENTION
Task: {4539952F-7686-4BBD-AB91-536ACF3D8B04} - \WPD\SqmUpload_S-1-5-21-2742626407-493885843-2448045593-1001 → No File <==== ATTENTION
Task: {467FF1D2-E5C0-4BC2-ADB8-7749CEB22915} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d → No File <==== ATTENTION
Task: {5C89D61A-5E9B-4AE2-B551-28B8997E0495} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-11-24] (Google Inc → Google Inc.)
Task: {5EBE3FD8-8434-44C6-97BB-08BA4C66749B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114056 2021-04-17] (Microsoft Corporation → Microsoft Corporation)
Task: {602B49F5-D25C-412B-A132-9AD35F9B28E3} - System32\Tasks\G2MUpdateTask-S-1-5-21-2742626407-493885843-2448045593-1001 => C:\Users\Torsten\AppData\Local\GoToMeeting\19598\g2mupdate.exe [31320 2021-04-08] (LogMeIn, Inc. → LogMeIn, Inc.)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {7172C244-5161-4A16-9574-31313FF0DC45} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [41264 2017-03-15] (Acer Incorporated → )
Task: {74C491E2-474D-4829-97FA-92757E0FA1B9} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [4153648 2017-03-15] (Acer Incorporated → )
Task: {76E15C58-6448-4306-9142-817B23FA1C98} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114056 2021-04-17] (Microsoft Corporation → Microsoft Corporation)
Task: {7782E65C-1C0A-4598-AE09-F65115234E62} - System32\Tasks\EPM Preload => C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe [1333472 2016-01-28] (Samsung Electronics CO., LTD. → )
Task: {7B857988-3067-4E13-8891-998F430972F7} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {8212D166-3A20-4C57-98C3-531E4CB80812} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [995856 2012-09-20] (CyberLink → CyberLink)
Task: {823567B4-9318-42B7-9C07-8C2AC437C059} - \WPD\SqmUpload_S-1-5-21-2742626407-493885843-2448045593-1004 → No File <==== ATTENTION
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {8BECDCCF-9833-429B-A1C8-A497D3DF1DE8} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d → No File <==== ATTENTION
Task: {8E1F0BE1-1BC9-4606-81CC-50B960E6CC19} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT → No File <==== ATTENTION
Task: {8F45F737-DF33-4BB5-B936-FF3342170853} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1791712 2021-02-23] (Avast Software s.r.o. → Avast Software)
Task: {9475BD5A-D5CC-4B71-9D48-49924F4BAB4A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig → No File <==== ATTENTION
Task: {9768ABD2-EB67-498E-A669-15A536AF817A} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {9D115471-E7A0-48B6-8B65-7ED35D3DE720} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23248792 2021-04-07] (Microsoft Corporation → Microsoft Corporation)
Task: {9D345824-96CE-47EC-AA8E-04C7204F7B14} - System32\Tasks\EPSON ET-2720 Series Update {E406C01C-9E47-4B80-96C4-000812FD536A} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSVVE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION → Seiko Epson Corporation)
Task: {A932DFE7-8F74-4406-8DC8-55A99602B2E8} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [5306440 2013-03-15] (Acer Incorporated → Acer Incorporated)
Task: {B14135BC-4909-4DB2-9BD9-F5235C8C6761} - System32\Tasks\EPSON XP-422 423 425 Series Update {D6E81813-3969-4A0E-8B7C-38D721814092} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNDE.EXE [690536 2013-11-21] (SEIKO EPSON CORPORATION → SEIKO EPSON CORPORATION)
Task: {BC3DBCBC-3CA1-44B2-A193-A65D09B96156} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-11-24] (Google Inc → Google Inc.)
Task: {C0C44742-5536-4E4A-AD5B-E8F0CE0775C2} - System32\Tasks\EPSON XP-422 423 425 Series Update {9D8C4796-877F-47EF-AD6C-FAC5DF02BC36} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNDE.EXE [690536 2013-11-21] (SEIKO EPSON CORPORATION → SEIKO EPSON CORPORATION)
Task: {C2F9EFCB-3A01-478D-A707-A219FCCE5320} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent → No File <==== ATTENTION
Task: {C415FE0E-DDCB-44E0-A459-B9164B72424B} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {C60BC9F5-F6A1-4592-91A8-DA0844E838D9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime → No File <==== ATTENTION
Task: {CA4AD5FE-960C-456F-B52E-04DF18470B45} - System32\Tasks\G2MUploadTask-S-1-5-21-2742626407-493885843-2448045593-1001 => C:\Users\Torsten\AppData\Local\GoToMeeting\19598\g2mupload.exe [31320 2021-04-08] (LogMeIn, Inc. → LogMeIn, Inc.)
Task: {CCD6AC06-4808-49BD-A9EE-9B76355210BC} - System32\Tasks\EPSON XP-422 423 425 Series Update {DE80A6AD-3257-4DA1-BB86-E55432969744} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNDE.EXE [690536 2013-11-21] (SEIKO EPSON CORPORATION → SEIKO EPSON CORPORATION)
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {DD066C61-138E-49A6-A936-24BC09D2AC36} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23248792 2021-04-07] (Microsoft Corporation → Microsoft Corporation)
Task: {EF2FDE29-BEA1-4054-9A09-CC345C7FD882} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B → No File <==== ATTENTION
Task: {F7CC9024-EA69-4982-B949-7EF17E377F4E} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d → No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\EPSON ET-2720 Series Update {1E24370F-70B9-4707-95DD-96417154CBD9}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSVVE.EXE:/EXE:{1E24370F-70B9-4707-95DD-96417154CBD9} /F:UpdateWORKGROUP\BIRKHOLMO$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON ET-2720 Series Update {E406C01C-9E47-4B80-96C4-000812FD536A}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSVVE.EXE:/EXE:{E406C01C-9E47-4B80-96C4-000812FD536A} /F:UpdateWORKGROUP\BIRKHOLMO$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-422 423 425 Series Update {9D8C4796-877F-47EF-AD6C-FAC5DF02BC36}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNDE.EXE:/EXE:{9D8C4796-877F-47EF-AD6C-FAC5DF02BC36} /F:UpdateWORKGROUP\BIRKHOLMO$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-422 423 425 Series Update {AC38194B-D714-4BC0-8807-41C9EF764080}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNDE.EXE:/EXE:{AC38194B-D714-4BC0-8807-41C9EF764080} /F:UpdateWORKGROUP\BIRKHOLMO$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-422 423 425 Series Update {D6E81813-3969-4A0E-8B7C-38D721814092}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNDE.EXE:/EXE:{D6E81813-3969-4A0E-8B7C-38D721814092} /F:UpdateWORKGROUP\BIRKHOLMO$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-422 423 425 Series Update {DE80A6AD-3257-4DA1-BB86-E55432969744}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNDE.EXE:/EXE:{DE80A6AD-3257-4DA1-BB86-E55432969744} /F:UpdateWORKGROUP\BIRKHOLMO$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2742626407-493885843-2448045593-1001.job => C:\Users\Torsten\AppData\Local\GoToMeeting\19598\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2742626407-493885843-2448045593-1001.job => C:\Users\Torsten\AppData\Local\GoToMeeting\19598\g2mupload.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip…\Interfaces{690a0196-f92e-46ef-9975-f7f0f289d4d0}: [DhcpNameServer] 192.168.1.1

Edge:

Edge Extension: (No Name) → AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) → BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) → LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) → PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge Profile: C:\Users\Torsten\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-21]

FireFox:

FF DefaultProfile: 6yqzku9s.default
FF ProfilePath: C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\6yqzku9s.default [2019-01-02]
FF Extension: (Avast SafePrice | Sammenligning, tilbud, kuponer) - C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\6yqzku9s.default\Extensions\sp@avast.com.xpi [2019-06-14]
FF Extension: (Avast Online Security) - C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\6yqzku9s.default\Extensions\wrc@avast.com.xpi [2019-06-14]
FF SearchPlugin: C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\6yqzku9s.default\searchplugins\McSiteAdvisor.xml [2016-07-04]
FF HKLM…\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-08-06]
FF HKLM-x32…\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF HKLM-x32…\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2021-03-31] [Legacy] [not signed]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 → C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc → Google, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 → C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-16] (Microsoft Corporation → Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 → C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] (WildTangent Inc → )

Chrome:

CHR Profile: C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default [2021-04-21]
CHR DownloadDir: C:\Users\Torsten\Desktop
CHR Notifications: Default → hxxps://community.windows.com; hxxps://meet.google.com; hxxps://www.facebook.com
CHR HomePage: Default → hxxp://vaioportal.sony.eu/
CHR StartupUrls: Default → “hxxp://www.google.dk/ig”,“hxxp://search.softonic.com/MOY00007/tb_v1?SearchSource=48&cc=&mi=5ce46d15000000000000f0bf97919068&toi=16073”
CHR Extension: (Slides) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Docs) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drev) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-27]
CHR Extension: (YouTube) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-24]
CHR Extension: (Google-søgning) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-24]
CHR Extension: (Sheets) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2021-04-08]
CHR Extension: (Google Docs Offline) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-04-15]
CHR Extension: (Google Kalender) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2021-01-12]
CHR Extension: (PDF Viewer & Converter by FromDocToPDF (BETA)) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk [2021-04-20]
CHR Extension: (Betalinger i Chrome Webshop) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\Torsten\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-16]
CHR HKLM…\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32…\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32…\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-19] (Acer Incorporated → Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8788392 2021-04-07] (Microsoft Corporation → Microsoft Corporation)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated → Acer Incorporated)
R2 EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [685496 2019-05-08] (SEIKO EPSON CORPORATION → SEIKO EPSON CORPORATION)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2019-09-24] (SEIKO EPSON CORPORATION → Seiko Epson Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-04-20] (Malwarebytes Inc → Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [899264 2019-08-06] (McAfee, LLC → McAfee, Inc.)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION → Seiko Epson Corporation)
R2 Samsung Printer Dianostics Service; C:\WINDOWS\SysWOW64\spdsvc.exe [508488 2018-04-25] (HP Inc. → )
R2 SamsungUPDUtilSvc; C:\WINDOWS\SysWOW64\SecUPDUtilSvc.exe [143664 2017-05-23] (Samsung Electronics CO., LTD. → )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\NisSrv.exe [2624104 2021-04-13] (Microsoft Windows Publisher → Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MsMpEng.exe [128376 2021-04-13] (Microsoft Windows Publisher → Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 → Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [199128 2021-04-20] (Malwarebytes Inc → Malwarebytes)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220752 2021-04-20] (Malwarebytes Inc → Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-04-20] (Microsoft Windows Early Launch Anti-malware Publisher → Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198248 2021-04-20] (Malwarebytes Inc → Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2021-04-20] (Malwarebytes Inc → Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-04-20] (Malwarebytes Inc → Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [157944 2021-04-20] (Malwarebytes Inc → Malwarebytes)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [86144 2019-04-23] (Microsoft Windows Early Launch Anti-malware Publisher → McAfee, LLC)
R2 RtkIOAC60; C:\WINDOWS\system32\DRIVERS\RtkIOAC60.sys [38504 2012-04-16] (Realtek Semiconductor Corp → Windows ® Codename Longhorn DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49560 2021-04-13] (Microsoft Windows Early Launch Anti-malware Publisher → Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [421088 2021-04-13] (Microsoft Windows → Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72928 2021-04-13] (Microsoft Windows → Microsoft Corporation)
S3 MpKsl83121e40; ??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates{166638FE-B4C8-40C2-B031-13802512F0EE}\MpKslDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-04-21 12:43 - 2021-04-21 12:52 - 000029399 _____ C:\Users\Torsten\Desktop\FRST.txt
2021-04-21 11:13 - 2021-04-21 12:52 - 000000000 ____D C:\FRST
2021-04-21 11:12 - 2021-04-21 11:12 - 002298368 _____ (Farbar) C:\Users\Torsten\Desktop\FRST64.exe
2021-04-20 13:19 - 2021-04-20 13:20 - 000103526 _____ C:\Users\Torsten\Desktop\Birkorgel-anskonsulent-april21-2.pdf
2021-04-20 12:02 - 2021-04-20 12:02 - 000198248 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2021-04-20 12:02 - 2021-04-20 12:02 - 000157944 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2021-04-20 12:02 - 2021-04-20 12:02 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2021-04-20 11:56 - 2021-04-20 11:56 - 000092136 _____ C:\Users\Torsten\Documents\test.pdf
2021-04-20 10:45 - 2021-04-20 10:45 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-04-20 10:45 - 2021-04-20 10:45 - 000220752 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2021-04-20 10:45 - 2021-04-20 10:45 - 000002037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-04-20 10:45 - 2021-04-20 10:45 - 000002025 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2021-04-20 10:45 - 2021-04-20 10:45 - 000000000 ____D C:\Users\Torsten\AppData\Local\mbam
2021-04-20 10:45 - 2021-04-20 10:44 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-04-20 10:45 - 2021-04-20 10:44 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-04-20 10:44 - 2021-04-20 10:44 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-04-20 10:43 - 2021-04-20 10:43 - 000000000 ____D C:\Program Files\Malwarebytes
2021-04-20 10:42 - 2021-04-20 10:42 - 002078632 _____ (Malwarebytes) C:\Users\Torsten\Desktop\MBSetup.exe
2021-04-19 10:30 - 2021-04-19 10:30 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-04-19 10:29 - 2021-04-19 10:29 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-04-19 10:29 - 2021-04-19 10:29 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-04-19 10:24 - 2021-04-19 10:25 - 056114992 _____ C:\Users\Torsten\Desktop\TotalAV_Setup.exe
2021-04-15 14:14 - 2021-04-15 14:14 - 000103502 _____ C:\Users\Torsten\Desktop\Birkorgel-anskonsulentbesøg-april21.pdf
2021-04-13 11:00 - 2021-04-13 11:14 - 882667825 _____ C:\Users\Torsten\Desktop\iCloud Photos.zip
2021-04-13 10:58 - 2021-04-13 10:58 - 000000000 ____D C:\Users\Torsten\Desktop\Ny mappe
2021-04-13 10:49 - 2021-04-13 10:49 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2021-04-13 09:13 - 2021-04-13 11:14 - 024537779 _____ C:\Users\Torsten\Desktop\IMG_0564.MP4
2021-04-13 09:11 - 2021-04-13 11:14 - 111195576 _____ C:\Users\Torsten\Desktop\IMG_0565.MP4
2021-04-13 09:06 - 2021-04-13 11:15 - 320612729 _____ C:\Users\Torsten\Desktop\IMG_0566.MP4
2021-04-13 09:00 - 2021-04-13 11:15 - 426186268 _____ C:\Users\Torsten\Desktop\IMG_0567.MP4
2021-03-31 11:20 - 2021-03-31 11:20 - 000002127 _____ C:\Users\Public\Desktop\Epson Photo+ Tool.lnk
2021-03-31 11:20 - 2021-03-31 11:20 - 000002119 _____ C:\Users\Public\Desktop\Epson Photo+.lnk
2021-03-31 11:19 - 2021-03-31 11:19 - 000002244 _____ C:\Users\Public\Desktop\Epson Easy Photo Print.lnk
2021-03-31 11:19 - 2021-03-31 11:19 - 000000000 ____D C:\ProgramData\UDL
2021-03-31 11:19 - 2021-03-31 11:19 - 000000000 ____D C:\ProgramData\Sony Corporation
2021-03-31 11:19 - 2021-03-31 11:19 - 000000000 ____D C:\Program Files\EPSON
2021-03-31 10:45 - 2021-03-31 10:45 - 000002213 _____ C:\Users\Public\Desktop\Epson Printer Connection Checker.lnk
2021-03-31 10:45 - 2021-03-31 10:45 - 000001461 _____ C:\Users\Public\Desktop\EPSON-manualer.lnk
2021-03-30 20:53 - 2021-04-20 12:00 - 104595456 _____ C:\WINDOWS\system32\config\SOFTWARE
2021-03-30 11:16 - 2021-03-30 11:16 - 000206697 _____ C:\Users\Torsten\Documents\hil dig frelser-laub.pdf
2021-03-24 12:15 - 2021-03-24 12:15 - 000000000 ____D C:\ProgramData\NCH Software
2021-03-23 12:39 - 2021-03-23 12:44 - 351720630 _____ C:\Users\Torsten\Desktop\DVD til plejehjem.mp4

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-04-21 12:49 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-04-21 12:41 - 2020-08-14 13:24 - 000004156 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{5C1D0A19-ADA4-4252-AEB9-25FF7BCB38F3}
2021-04-21 11:56 - 2020-08-14 13:01 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-04-21 11:05 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-04-21 11:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-04-21 11:04 - 2017-09-22 13:39 - 000000180 _____ C:\WINDOWS\system32{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2021-04-21 11:04 - 2015-12-16 13:37 - 000000000 ___RD C:\Users\Torsten\OneDrive
2021-04-21 11:04 - 2015-12-16 13:34 - 000000000 __SHD C:\Users\Torsten\IntelGraphicsProfiles
2021-04-21 10:43 - 2020-06-22 10:31 - 000002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-04-21 10:39 - 2020-08-14 13:24 - 000003452 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-04-21 10:39 - 2020-08-14 13:24 - 000003328 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-04-20 13:20 - 2021-02-26 13:29 - 000005790 _____ C:\Users\Torsten\Desktop\ansøgningkonsulentbesøg.odt
2021-04-20 12:18 - 2020-08-14 13:01 - 000008192 ___SH C:\DumpStack.log.tmp
2021-04-20 12:06 - 2020-08-14 13:13 - 001284150 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-04-20 12:06 - 2019-12-07 16:56 - 000429942 _____ C:\WINDOWS\system32\perfh006.dat
2021-04-20 12:06 - 2019-12-07 16:56 - 000071394 _____ C:\WINDOWS\system32\perfc006.dat
2021-04-20 12:06 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-04-20 12:02 - 2020-08-14 13:24 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-04-20 12:00 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-04-20 11:29 - 2020-08-14 13:04 - 000000000 ____D C:\Users\Torsten
2021-04-20 11:07 - 2016-03-09 10:38 - 000000000 ____D C:\Users\Torsten\Desktop\Motetter, 3-st m.m
2021-04-20 11:07 - 2016-02-08 11:10 - 000000000 ____D C:\Users\Torsten\Desktop\Dokumentmapper feb16-mar20
2021-04-20 11:07 - 2016-02-05 14:03 - 000000000 ____D C:\Users\Torsten\Desktop\Motetter
2021-04-20 10:45 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-04-19 12:54 - 2020-08-14 13:01 - 000437136 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-04-19 12:42 - 2021-01-15 14:06 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2021-04-19 10:55 - 2015-11-26 14:42 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-04-19 10:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-04-19 10:35 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-04-19 10:28 - 2020-08-14 13:05 - 002877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-04-17 14:46 - 2014-11-19 14:58 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-04-17 13:43 - 2015-11-26 14:42 - 131963968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-04-16 11:00 - 2020-01-28 14:53 - 000001242 _____ C:\Users\Torsten\Desktop\Epson Scan 2.lnk
2021-04-15 09:24 - 2015-11-24 16:19 - 000002317 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-04-13 11:22 - 2020-04-30 10:01 - 000000666 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2742626407-493885843-2448045593-1001.job
2021-04-13 11:22 - 2020-04-30 10:01 - 000000570 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2742626407-493885843-2448045593-1001.job
2021-04-13 10:16 - 2020-08-14 13:24 - 000003370 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2742626407-493885843-2448045593-1001
2021-04-13 10:16 - 2020-08-14 13:04 - 000002386 _____ C:\Users\Torsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-04-13 10:14 - 2018-05-15 15:19 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-04-13 10:11 - 2020-08-14 13:24 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-04-13 10:11 - 2020-08-14 13:24 - 000003390 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-04-08 15:32 - 2020-08-14 13:24 - 000003826 _____ C:\WINDOWS\system32\Tasks\G2MUploadTask-S-1-5-21-2742626407-493885843-2448045593-1001
2021-04-08 15:32 - 2020-08-14 13:24 - 000003730 _____ C:\WINDOWS\system32\Tasks\G2MUpdateTask-S-1-5-21-2742626407-493885843-2448045593-1001
2021-04-08 15:32 - 2020-04-30 10:01 - 000000000 ____D C:\Users\Torsten\AppData\Local\GoToMeeting
2021-04-08 09:56 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-03-31 11:20 - 2015-12-11 10:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2021-03-31 11:20 - 2015-12-11 10:49 - 000000000 ____D C:\Program Files (x86)\EPSON Software
2021-03-31 11:19 - 2019-12-07 16:58 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2021-03-31 11:19 - 2015-12-11 10:46 - 000000000 ____D C:\ProgramData\Epson
2021-03-31 11:19 - 2013-12-09 21:31 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2021-03-26 12:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-26 12:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-03-26 12:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-03-26 12:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-03-26 12:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-03-26 12:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-03-25 10:56 - 2017-12-22 14:14 - 000000000 ____D C:\Users\Torsten\AppData\Local\Packages
2021-03-24 12:15 - 2020-03-09 13:49 - 000000000 ____D C:\Users\Torsten\AppData\Local\PlaceholderTileLogoFolder
2021-03-24 12:15 - 2018-08-02 12:21 - 000000000 ____D C:\ProgramData\Packages

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

Hej :slight_smile:

Der er noget der skal rettes, men den første log er ikke komplet og #2 mangler helt :question:

Dette emne blev automatisk lukket 7 dage efter det seneste svar. Nye svar er ikke længere tilladt.