OTL logfile created on: 09.01.2012 19:48:12 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Rune Thorvaldsen\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000414 | Country: Norge | Language: NOR | Date Format: dd.MM.yyyy
 
2,49 Gb Total Physical Memory | 1,38 Gb Available Physical Memory | 55,39% Memory free
4,98 Gb Paging File | 3,63 Gb Available in Paging File | 72,88% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 28,38 Gb Free Space | 19,04% Space Free | Partition Type: NTFS
Drive D: | 5,63 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: JOBBPC | User Name: Rune Thorvaldsen | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 360 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Users\Rune Thorvaldsen\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\java.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\tv_w32.exe (TeamViewer GmbH)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\PS3 Media Server\win32\service\wrapper.exe (Tanuki Software, Ltd.)
PRC - c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe (Microsoft Corporation)
PRC - c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics Incorporated)
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Windows\System32\AEADISRV.EXE (Andrea Electronics Corporation)
PRC - C:\Windows\WindowsMobile\wmdcBase.exe (Microsoft Corporation)
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - C:\Program Files\WinRAR\rarext.dll ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32.dll ()
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files\FileZilla FTP Client\fzshellext.dll ()
MOD - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf ()
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (TeamViewer7) -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (Microsoft SharePoint Workspace Audit Service) -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (PS3 Media Server) -- C:\Program Files\PS3 Media Server\win32\service\wrapper.exe (Tanuki Software, Ltd.)
SRV - (NisSrv) -- c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe (Microsoft Corporation)
SRV - (MsMpSvc) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (AEADIFilters) -- C:\Windows\System32\AEADISRV.EXE (Andrea Electronics Corporation)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (MpKsl9139fb9d) -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6E0CC6F0-78BA-4905-9A19-72C0D4D6C2B8}\MpKsl9139fb9d.sys (Microsoft Corporation)
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (dc3d) MS Hardware Device Detection Driver (USB) -- C:\Windows\System32\drivers\dc3d.sys (Microsoft Corporation)
DRV - (NisDrv) -- C:\Windows\System32\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV - (MpNWMon) -- C:\Windows\System32\drivers\MpNWMon.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (vmbus) -- C:\Windows\system32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (tsusbhub) -- C:\Windows\System32\drivers\tsusbhub.sys (Microsoft Corporation)
DRV - (Synth3dVsc) -- C:\Windows\System32\drivers\Synth3dVsc.sys (Microsoft Corporation)
DRV - (dmvsc) -- C:\Windows\system32\drivers\dmvsc.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\system32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\system32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbGD) -- C:\Windows\system32\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV - (terminpt) -- C:\Windows\system32\drivers\terminpt.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\system32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\system32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (Ser2pl) -- C:\Windows\System32\drivers\ser2pl.sys (Prolific Technology Inc.)
DRV - (FTDIBUS) -- C:\Windows\System32\drivers\ftdibus.sys (FTDI Ltd.)
DRV - (FTSER2K) -- C:\Windows\System32\drivers\ftser2k.sys (FTDI Ltd.)
DRV - (Serial) -- C:\Windows\system32\drivers\serial.sys (Brother Industries Ltd.)
DRV - (netw5v32) Intel(R) -- C:\Windows\System32\drivers\netw5v32.sys (Intel Corporation)
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://no.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = nb-NO
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 01 A2 88 C3 4F CE CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..network.proxy.type: 0
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.04 20:32:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2011.12.27 16:32:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rune Thorvaldsen\AppData\Roaming\mozilla\Extensions
[2012.01.07 22:02:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rune Thorvaldsen\AppData\Roaming\mozilla\Firefox\Profiles\f6hoxlx6.default\extensions
[2012.01.06 22:42:40 | 000,000,000 | ---D | M] (British English Dictionary) -- C:\Users\Rune Thorvaldsen\AppData\Roaming\mozilla\Firefox\Profiles\f6hoxlx6.default\extensions\en-GB@dictionaries.addons.mozilla.org
[2011.12.30 12:48:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2011.12.30 12:48:38 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
() (No name found) -- C:\USERS\RUNE THORVALDSEN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\F6HOXLX6.DEFAULT\EXTENSIONS\ADMIN@YOUTUBEPLAYER.COM.XPI
[2011.12.21 09:01:59 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.12.21 06:30:21 | 000,001,525 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2011.12.21 05:53:25 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.12.21 06:30:21 | 000,001,218 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bok-NO.xml
[2011.12.21 06:30:21 | 000,000,968 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\qxl-NO.xml
[2011.12.21 06:30:21 | 000,001,203 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\telefonkatalogen-NO.xml
[2011.12.21 06:30:21 | 000,001,176 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-NO.xml
[2011.12.21 06:30:21 | 000,001,192 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-NO.xml
 
O1 HOSTS File: ([2012.01.08 18:23:00 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdcBase.exe (Microsoft Corporation)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Se&nd til OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105 File not found
O9 - Extra Button: Send til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd til OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Koblede OneNote-notater - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Koblede OneNote-notater - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 130.67.15.198 193.213.112.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4633E508-138E-4608-A083-602DE8BA39A0}: DhcpNameServer = 130.67.15.198 193.213.112.4
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2007.04.03 21:17:16 | 000,001,980 | R--- | M] () - D:\AutoRun.ard -- [ CDFS ]
O32 - AutoRun File - [2005.08.10 19:50:26 | 002,012,160 | R--- | M] (Longtion) - D:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2007.04.03 21:17:16 | 000,000,659 | R--- | M] () - D:\AutoRun.ext -- [ CDFS ]
O32 - AutoRun File - [2004.01.01 20:32:30 | 000,004,150 | R--- | M] () - D:\AutoRun.ico -- [ CDFS ]
O32 - AutoRun File - [2007.04.03 21:17:16 | 000,000,047 | R--- | M] () - D:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2007.04.03 21:17:16 | 000,000,133 | R--- | M] () - D:\autorun.pro -- [ CDFS ]
O32 - AutoRun File - [2007.04.03 21:17:16 | 000,001,996 | R--- | M] () - D:\AutoRun.rdt -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 360 Days ==========[/color]
 
[2012.01.09 19:34:45 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Rune Thorvaldsen\Desktop\OTL.exe
[2012.01.08 22:41:59 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\System32\bootdelete.exe
[2012.01.08 22:35:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hitman Pro 3.5
[2012.01.08 22:35:08 | 000,000,000 | ---D | C] -- C:\Program Files\Hitman Pro 3.5
[2012.01.08 22:35:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Hitman Pro
[2012.01.08 18:42:46 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2012.01.08 18:42:43 | 000,000,000 | ---D | C] -- C:\Program Files\hjt
[2012.01.08 18:41:49 | 000,000,000 | ---D | C] -- C:\HJT
[2012.01.08 18:40:25 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2012.01.08 18:23:39 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012.01.08 18:20:35 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012.01.08 18:10:13 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012.01.08 18:10:13 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012.01.08 18:10:13 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012.01.08 18:10:01 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2012.01.08 18:09:59 | 000,000,000 | ---D | C] -- C:\ComboFix
[2012.01.08 18:07:11 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2012.01.08 18:04:12 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012.01.08 17:53:16 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Malwarebytes
[2012.01.08 17:52:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.01.08 17:52:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.01.08 17:52:50 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.01.08 17:52:49 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.01.08 14:36:11 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
[2012.01.08 14:36:10 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.01.08 11:33:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2012.01.08 11:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012.01.08 11:32:49 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2012.01.07 21:05:08 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\MPlayer
[2012.01.07 21:03:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PS3 Media Server
[2012.01.07 21:03:37 | 000,000,000 | ---D | C] -- C:\ProgramData\PMS
[2012.01.07 21:03:20 | 000,000,000 | ---D | C] -- C:\Program Files\PS3 Media Server
[2012.01.07 18:00:44 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\FileZilla
[2012.01.07 18:00:40 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
[2012.01.07 18:00:38 | 000,000,000 | ---D | C] -- C:\Program Files\FileZilla FTP Client
[2012.01.05 23:13:47 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\PrimoPDF
[2012.01.05 23:13:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrimoPDF
[2012.01.05 23:13:20 | 000,000,000 | ---D | C] -- C:\Program Files\Nitro PDF
[2012.01.05 14:20:23 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Apple Computer
[2012.01.04 20:32:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012.01.04 20:32:16 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2012.01.04 20:32:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2012.01.04 20:31:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2012.01.04 20:30:56 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Apple
[2012.01.04 20:30:54 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2012.01.04 20:30:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2012.01.03 23:47:46 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\Aurora3D
[2012.01.03 23:45:32 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Configure
[2012.01.03 23:45:28 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Maker3D
[2012.01.03 23:43:32 | 000,000,000 | ---D | C] -- C:\Program Files\Aurora3D
[2012.01.02 13:37:23 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Desktop\Locations
[2012.01.02 13:30:25 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\WinRAR
[2012.01.02 13:30:25 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012.01.02 13:30:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012.01.02 13:30:06 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2012.01.01 19:08:39 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RfcClient
[2012.01.01 19:08:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RfcClient
[2012.01.01 19:08:38 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\RfcClient
[2012.01.01 19:08:37 | 000,000,000 | ---D | C] -- C:\RfcClient
[2012.01.01 16:19:08 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\rFactor
[2012.01.01 16:19:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\rFactor
[2012.01.01 16:18:39 | 000,000,000 | ---D | C] -- C:\Program Files\rFactor
[2012.01.01 14:07:29 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\Publisher
[2012.01.01 14:02:39 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\PDF
[2012.01.01 14:00:31 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\Excel
[2012.01.01 13:59:01 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\Word
[2011.12.30 12:48:55 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2011.12.30 12:48:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2011.12.30 12:48:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011.12.30 12:48:15 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2011.12.29 18:40:46 | 000,000,000 | ---D | C] -- C:\Program Files\WP Driver
[2011.12.29 18:40:46 | 000,000,000 | ---D | C] -- C:\Windows\System32\WP
[2011.12.29 18:40:18 | 000,000,000 | ---D | C] -- C:\Program Files\WP
[2011.12.29 18:37:24 | 000,081,920 | ---- | C] (Prolific Technology Inc.) -- C:\Windows\System32\drivers\ser2pl.sys
[2011.12.29 18:37:24 | 000,035,892 | ---- | C] (Prolific Technology Inc.) -- C:\Windows\System32\SER9PL.sys
[2011.12.29 14:44:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011.12.29 14:40:53 | 000,000,000 | ---D | C] -- C:\Windows\System32\Adobe
[2011.12.29 14:39:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2011.12.29 14:39:32 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2011.12.29 14:39:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2011.12.29 14:39:23 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Adobe
[2011.12.29 11:05:48 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\SOKO
[2011.12.29 11:05:40 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AutoGear
[2011.12.29 11:04:58 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Apps
[2011.12.29 11:04:57 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Deployment
[2011.12.27 16:31:52 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Mozilla
[2011.12.27 16:31:52 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Mozilla
[2011.12.27 16:15:20 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2011.12.26 22:06:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2011.12.26 22:06:33 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2011.12.26 21:14:20 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2011.12.26 21:13:16 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\uTorrent
[2011.12.26 21:13:16 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\uTorrent
[2011.12.26 20:45:36 | 000,000,000 | ---D | C] -- C:\Windows\WindowsMobile
[2011.12.24 15:10:59 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BS.Player
[2011.12.24 15:09:52 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\BSplayer Pro
[2011.12.24 15:09:52 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\BSplayer
[2011.12.24 15:09:40 | 000,000,000 | ---D | C] -- C:\Program Files\Webteh
[2011.12.23 18:36:29 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\MigWiz
[2011.12.23 17:38:21 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Macromedia
[2011.12.23 17:38:21 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Adobe
[2011.12.23 17:38:13 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2011.12.23 06:17:09 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2011.12.23 06:16:54 | 000,000,000 | ---D | C] -- C:\Boot
[2011.12.22 23:51:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
[2011.12.22 23:51:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011.12.22 23:49:50 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
[2011.12.22 23:49:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2011.12.22 23:49:17 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2011.12.22 23:49:17 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2011.12.22 23:47:45 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8
[2011.12.22 23:46:18 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2011.12.22 23:44:58 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Microsoft Help
[2011.12.22 23:44:10 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2011.12.22 23:43:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2011.12.22 23:42:44 | 000,000,000 | R--D | C] -- C:\MSOCache
[2011.12.22 23:34:37 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\Rens
[2011.12.22 23:28:37 | 000,000,000 | ---D | C] -- C:\Windows\System32\URTTEMP
[2011.12.22 23:27:00 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BELIMO
[2011.12.22 23:26:58 | 000,000,000 | ---D | C] -- C:\Program Files\BELIMO
[2011.12.22 23:20:34 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Regin
[2011.12.22 23:20:33 | 000,967,776 | ---- | C] (FarPoint Technologies, Inc.) -- C:\Windows\System32\SPR32X30.ocx
[2011.12.22 23:20:33 | 000,856,664 | ---- | C] (Xceed Software Inc        (450) 442-2626        support@xceedsoft.com        www.xceedsoft.com) -- C:\Windows\System32\SmartUI2.ocx
[2011.12.22 23:20:33 | 000,034,816 | ---- | C] (BeCubed Software, Inc.) -- C:\Windows\System32\Mhrun32.dll
[2011.12.22 23:20:32 | 000,655,360 | ---- | C] (Wilhelm Kurz) -- C:\Windows\System32\DynaPlot3.ocx
[2011.12.22 23:20:32 | 000,062,976 | ---- | C] (BeCubed Software, Inc.) -- C:\Windows\System32\mhcmd32.ocx
[2011.12.22 23:20:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corrigo E Tool
[2011.12.22 23:20:13 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2011.12.22 23:20:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Regin
[2011.12.22 23:20:13 | 000,000,000 | ---D | C] -- C:\Program Files\EXO
[2011.12.22 23:20:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2011.12.22 23:11:51 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\TeamViewer
[2011.12.22 22:58:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011.12.22 22:58:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2011.12.22 22:54:04 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer
[2011.12.22 22:33:04 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2011.12.22 22:16:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2011.12.22 22:15:02 | 000,000,000 | ---D | C] -- C:\8f02be957aefcb7382d105cd3fcf958e
[2011.12.22 22:08:17 | 000,000,000 | ---D | C] -- C:\Windows\nb-NO
[2011.12.22 22:08:15 | 000,000,000 | ---D | C] -- C:\Windows\System32\XPSViewer
[2011.12.22 22:08:15 | 000,000,000 | ---D | C] -- C:\Windows\System32\no
[2011.12.22 22:08:01 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\nb-NO
[2011.12.22 22:07:49 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat
[2011.12.22 22:01:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse
[2011.12.22 22:01:10 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliPoint
[2011.12.22 22:00:39 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2011.12.22 22:00:37 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011.12.22 21:57:51 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2011.12.22 21:54:53 | 000,000,000 | ---D | C] -- C:\Program Files\Analog Devices
[2011.12.22 21:50:40 | 000,003,584 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\nb-NO\pscr.sys.mui
[2011.12.22 21:50:38 | 000,032,768 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\nb-NO\yk62x86.sys.mui
[2011.12.22 21:50:25 | 000,010,240 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\nb-NO\BrSerId.sys.mui
[2011.12.22 21:50:25 | 000,010,240 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\nb-NO\BrSerIb.sys.mui
[2011.12.22 21:50:25 | 000,009,728 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\nb-NO\ltmdmnt.sys.mui
[2011.12.22 21:50:25 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\nb-NO\BrParwdm.sys.mui
[2011.12.22 21:48:36 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT
[2011.12.22 21:48:27 | 000,000,000 | ---D | C] -- C:\Program Files\Protector Suite
[2011.12.22 21:28:18 | 000,000,000 | ---D | C] -- C:\Windows\System32\x64
[2011.12.22 21:26:18 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.12.22 21:26:18 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Searches
[2011.12.22 21:26:18 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.12.22 21:26:18 | 000,000,000 | -H-D | C] -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2011.12.22 21:26:07 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Identities
[2011.12.22 21:26:05 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Contacts
[2011.12.22 21:25:59 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\VirtualStore
[2011.12.22 21:25:57 | 000,000,000 | --SD | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Videos
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Saved Games
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Pictures
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Music
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Links
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Favorites
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Downloads
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Documents
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Desktop
[2011.12.22 21:25:57 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Temporary Internet Files
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\Templates
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\Start Menu
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\SendTo
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\Recent
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\PrintHood
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\NetHood
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\Documents\My Videos
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\Documents\My Pictures
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\Documents\My Music
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\My Documents
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\Local Settings
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\History
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\Cookies
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\Application Data
[2011.12.22 21:25:57 | 000,000,000 | -HSD | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Application Data
[2011.12.22 21:25:57 | 000,000,000 | -H-D | C] -- C:\Users\Rune Thorvaldsen\AppData
[2011.12.22 21:25:57 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Temp
[2011.12.22 21:25:57 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Local\Microsoft
[2011.12.22 21:25:57 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Media Center Programs
[2011.12.22 21:25:41 | 000,000,000 | ---D | C] -- C:\Recovery
[2011.12.22 21:20:57 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.12.22 21:18:47 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2011.12.22 21:17:49 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2011.12.22 18:42:41 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Nedlasting
[2011.12.22 18:33:45 | 000,000,000 | ---D | C] -- C:\Rens
[2011.12.16 10:53:37 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\Ytrebygda Nærkirke
[2011.11.23 11:32:10 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\Knarvik
[2011.09.27 11:38:21 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\Inneklima
[2011.09.08 08:46:10 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Documents\Tegninger
[2011.09.04 21:57:40 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Desktop\100CANON
[2011.08.26 20:23:06 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Desktop\Dykkebilder
[2011.08.17 11:39:13 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Desktop\CoPilot
[2011.07.26 19:39:02 | 000,000,000 | ---D | C] -- C:\Users\Rune Thorvaldsen\Desktop\Diverse til sjekk
[2011.06.29 11:10:38 | 002,823,932 | ---- | C] (T-App Ltd.) -- C:\Users\Rune Thorvaldsen\Documents\PickMeApp0_5_11_7.exe
[2011.06.15 09:50:03 | 000,000,000 | ---D | C] -- C:\2011
[2011.05.27 10:13:35 | 000,000,000 | R--D | C] -- C:\Users\Rune Thorvaldsen\Desktop\Klimamålinger
[2011.03.18 13:46:16 | 000,069,000 | ---- | C] (FTDI Ltd.) -- C:\Windows\System32\ftcserco.dll
 
[color=#E56717]========== Files - Modified Within 360 Days ==========[/color]
 
[2012.01.09 19:34:53 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Rune Thorvaldsen\Desktop\OTL.exe
[2012.01.09 19:27:06 | 000,026,768 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.01.09 19:27:06 | 000,026,768 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.09 19:25:51 | 000,629,780 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.01.09 19:25:51 | 000,469,778 | ---- | M] () -- C:\Windows\System32\perfh014.dat
[2012.01.09 19:25:51 | 000,112,258 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.01.09 19:25:51 | 000,083,534 | ---- | M] () -- C:\Windows\System32\perfc014.dat
[2012.01.09 19:22:10 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
[2012.01.09 19:20:55 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.01.09 19:20:50 | 2005,737,472 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.09 15:13:47 | 000,033,143 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\2015808_01rev.vtc
[2012.01.08 23:26:38 | 000,023,624 | ---- | M] () -- C:\Windows\System32\drivers\hitmanpro35.sys
[2012.01.08 22:45:18 | 000,000,264 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\hitman-log.xml
[2012.01.08 22:41:59 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\System32\bootdelete.exe
[2012.01.08 22:35:35 | 000,001,950 | ---- | M] () -- C:\Users\Public\Desktop\Hitman Pro 3.5.lnk
[2012.01.08 18:42:46 | 000,003,019 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\HiJackThis.lnk
[2012.01.08 18:23:00 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012.01.08 18:22:13 | 000,448,032 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.01.08 17:52:59 | 000,001,095 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes Anti-Malware.lnk
[2012.01.08 17:43:16 | 000,113,263 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Viruslogg.pdf
[2012.01.08 14:36:11 | 000,000,969 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\CCleaner.lnk
[2012.01.08 11:46:01 | 000,440,010 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts.20120108-114722.backup
[2012.01.08 11:33:43 | 000,001,244 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2012.01.07 21:03:41 | 000,000,964 | ---- | M] () -- C:\Users\Public\Desktop\PS3 Media Server.lnk
[2012.01.05 23:13:25 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\PrimoPDF - Drop Files Here to Convert!.lnk
[2012.01.05 23:13:23 | 000,000,314 | ---- | M] () -- C:\Windows\primopdf.ini
[2012.01.05 14:41:56 | 000,032,243 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Arna VGS.vtc
[2012.01.04 20:32:38 | 000,001,815 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012.01.02 13:34:38 | 331,960,051 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Trackpack1 PCC.rar
[2012.01.01 16:25:23 | 000,001,398 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Locations - Snarvei.lnk
[2012.01.01 16:20:50 | 000,001,815 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\rFactor.lnk
[2011.12.31 20:07:00 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.12.29 14:44:37 | 000,001,989 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.12.27 16:15:24 | 000,001,100 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.12.26 20:48:49 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2011.12.24 15:10:59 | 000,001,108 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk
[2011.12.24 15:10:59 | 000,001,084 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\BS.Player FREE.lnk
[2011.12.23 06:16:57 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2011.12.22 23:38:06 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2011.12.22 23:38:06 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2011.12.22 23:32:06 | 000,003,097 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\BELIMO PC-Tool V3.6.lnk
[2011.12.22 23:27:39 | 000,003,111 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\BELIMO PC-Tool V2.1 (R47).lnk
[2011.12.22 23:27:00 | 000,003,059 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\BELIMO PC-Tool V2.1.lnk
[2011.12.22 23:20:42 | 000,001,718 | ---- | M] () -- C:\Windows\System32\Autoexec.nt
[2011.12.22 22:54:19 | 000,001,124 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 7.lnk
[2011.12.22 22:33:45 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2011.12.22 22:12:31 | 000,001,411 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011.12.22 22:06:52 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2011.12.22 22:01:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_point32_01009.Wdf
[2011.12.22 21:57:57 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011.12.22 21:53:53 | 000,298,300 | ---- | M] () -- C:\Windows\System32\perfi014.dat
[2011.12.22 21:53:53 | 000,036,156 | ---- | M] () -- C:\Windows\System32\perfd014.dat
[2011.12.22 21:48:33 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_tcwbf_01_09_00.Wdf
[2011.12.22 21:48:33 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_WinUSB_01009.Wdf
[2011.12.22 21:46:32 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_dc3d_01009.Wdf
[2011.12.22 21:34:35 | 000,354,553 | RHS- | M] () -- C:\KGUDV
[2011.12.22 21:26:40 | 000,000,000 | -H-- | M] () -- C:\Users\Rune Thorvaldsen\Documents\Default.rdp
[2011.12.22 21:22:22 | 000,116,385 | ---- | M] () -- C:\Windows\System32\license.rtf
[2011.12.17 17:32:04 | 000,032,899 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Ytrebygda Nærkirke - Revidert.vtc
[2011.12.16 08:43:17 | 000,032,113 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Ytrebygda Nærkirke.vtc
[2011.12.15 11:23:47 | 000,032,988 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Knarvik VGS - 3601Revidert.vtc
[2011.12.15 10:08:33 | 000,032,198 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Knarvik VGS - 3601.vtc
[2011.12.10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.12.06 12:22:14 | 000,002,258 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Hamstad Desk Rune Thorvaldsen.rdp
[2011.11.10 08:24:04 | 029,559,634 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Gold508.zip
[2011.10.16 21:27:40 | 000,063,676 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\green cargo.jpg
[2011.10.12 16:41:31 | 052,586,710 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Empty Room.wav
[2011.10.12 16:37:57 | 066,418,176 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Green Cargo.wav
[2011.09.13 17:24:56 | 000,010,234 | ---- | M] () -- C:\Users\Rune Thorvaldsen\Desktop\Luftberegning.xltx
[2011.06.29 11:10:44 | 002,823,932 | ---- | M] (T-App Ltd.) -- C:\Users\Rune Thorvaldsen\Documents\PickMeApp0_5_11_7.exe
[2011.06.26 07:45:56 | 000,256,000 | ---- | M] () -- C:\Windows\PEV.exe
[2011.03.18 13:46:16 | 000,069,000 | ---- | M] (FTDI Ltd.) -- C:\Windows\System32\ftcserco.dll
[2011.02.28 23:37:32 | 000,180,624 | ---- | M] () -- C:\Windows\System32\Primomonnt.dll
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012.01.08 22:45:18 | 000,000,264 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\hitman-log.xml
[2012.01.08 22:36:06 | 000,023,624 | ---- | C] () -- C:\Windows\System32\drivers\hitmanpro35.sys
[2012.01.08 22:35:11 | 000,001,950 | ---- | C] () -- C:\Users\Public\Desktop\Hitman Pro 3.5.lnk
[2012.01.08 18:42:46 | 000,003,019 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\HiJackThis.lnk
[2012.01.08 18:21:47 | 000,448,032 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.01.08 18:10:13 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012.01.08 18:10:13 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012.01.08 18:10:13 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012.01.08 18:10:13 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012.01.08 18:10:13 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012.01.08 17:52:59 | 000,001,095 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes Anti-Malware.lnk
[2012.01.08 17:43:14 | 000,113,263 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Viruslogg.pdf
[2012.01.08 14:36:11 | 000,000,969 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\CCleaner.lnk
[2012.01.08 11:33:43 | 000,001,244 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2012.01.07 21:03:41 | 000,000,964 | ---- | C] () -- C:\Users\Public\Desktop\PS3 Media Server.lnk
[2012.01.05 23:13:25 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\PrimoPDF - Drop Files Here to Convert!.lnk
[2012.01.05 23:13:24 | 000,180,624 | ---- | C] () -- C:\Windows\System32\Primomonnt.dll
[2012.01.05 22:58:55 | 000,033,143 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\2015808_01rev.vtc
[2012.01.05 14:29:59 | 000,032,243 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Arna VGS.vtc
[2012.01.04 20:32:38 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012.01.04 20:30:56 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2012.01.02 13:31:01 | 331,960,051 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Trackpack1 PCC.rar
[2012.01.01 16:25:23 | 000,001,398 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Locations - Snarvei.lnk
[2012.01.01 16:20:49 | 000,001,815 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\rFactor.lnk
[2011.12.31 20:07:00 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.12.29 18:37:24 | 000,026,719 | ---- | C] () -- C:\Windows\System32\SERSPL.VXD
[2011.12.29 14:44:37 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011.12.29 14:44:37 | 000,001,989 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.12.27 16:15:24 | 000,001,112 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011.12.27 16:15:24 | 000,001,100 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.12.26 20:48:49 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2011.12.26 20:47:15 | 000,002,419 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
[2011.12.24 15:10:59 | 000,001,108 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk
[2011.12.24 15:10:59 | 000,001,084 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\BS.Player FREE.lnk
[2011.12.23 06:16:57 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2011.12.23 06:16:54 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2011.12.23 00:01:00 | 000,000,266 | ---- | C] () -- C:\Windows\tasks\AutoKMS.job
[2011.12.22 23:38:06 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2011.12.22 23:38:06 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2011.12.22 23:32:06 | 000,003,097 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\BELIMO PC-Tool V3.6.lnk
[2011.12.22 23:27:39 | 000,003,111 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\BELIMO PC-Tool V2.1 (R47).lnk
[2011.12.22 23:27:00 | 000,003,059 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\BELIMO PC-Tool V2.1.lnk
[2011.12.22 22:54:19 | 000,001,136 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 7.lnk
[2011.12.22 22:54:19 | 000,001,124 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 7.lnk
[2011.12.22 22:33:45 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
[2011.12.22 22:33:10 | 000,001,897 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2011.12.22 22:11:26 | 000,469,778 | ---- | C] () -- C:\Windows\System32\perfh014.dat
[2011.12.22 22:11:26 | 000,298,300 | ---- | C] () -- C:\Windows\System32\perfi014.dat
[2011.12.22 22:11:26 | 000,083,534 | ---- | C] () -- C:\Windows\System32\perfc014.dat
[2011.12.22 22:11:26 | 000,036,156 | ---- | C] () -- C:\Windows\System32\perfd014.dat
[2011.12.22 22:06:52 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2011.12.22 22:01:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_point32_01009.Wdf
[2011.12.22 21:57:57 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011.12.22 21:48:33 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_tcwbf_01_09_00.Wdf
[2011.12.22 21:48:33 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_WinUSB_01009.Wdf
[2011.12.22 21:46:32 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_dc3d_01009.Wdf
[2011.12.22 21:34:34 | 000,354,553 | RHS- | C] () -- C:\KGUDV
[2011.12.22 21:27:00 | 000,001,411 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011.12.22 21:26:40 | 000,000,000 | -H-- | C] () -- C:\Users\Rune Thorvaldsen\Documents\Default.rdp
[2011.12.22 21:26:19 | 000,001,417 | ---- | C] () -- C:\Users\Rune Thorvaldsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011.12.22 21:25:57 | 000,000,290 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2011.12.22 21:25:57 | 000,000,272 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2011.12.22 21:22:09 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011.12.22 21:21:53 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011.12.22 21:17:49 | 2005,737,472 | -HS- | C] () -- C:\hiberfil.sys
[2011.12.17 17:32:04 | 000,032,899 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Ytrebygda Nærkirke - Revidert.vtc
[2011.12.16 08:31:06 | 000,032,113 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Ytrebygda Nærkirke.vtc
[2011.12.15 10:23:30 | 000,032,988 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Knarvik VGS - 3601Revidert.vtc
[2011.12.15 10:08:33 | 000,032,198 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Knarvik VGS - 3601.vtc
[2011.11.10 08:24:02 | 029,559,634 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Gold508.zip
[2011.11.01 20:33:08 | 000,002,258 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Hamstad Desk Rune Thorvaldsen.rdp
[2011.10.16 22:11:12 | 000,063,676 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\green cargo.jpg
[2011.10.12 16:41:43 | 052,586,710 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Empty Room.wav
[2011.10.12 16:39:44 | 066,418,176 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Green Cargo.wav
[2011.09.13 17:24:55 | 000,010,234 | ---- | C] () -- C:\Users\Rune Thorvaldsen\Desktop\Luftberegning.xltx
[2011.02.10 05:03:48 | 000,000,314 | ---- | C] () -- C:\Windows\primopdf.ini
[2010.11.20 22:29:34 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2010.11.20 22:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:05:48 | 000,629,780 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 03:05:48 | 000,112,258 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011.12.26 21:17:38 | 000,000,000 | ---D | M] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\BSplayer
[2011.12.24 15:09:52 | 000,000,000 | ---D | M] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\BSplayer Pro
[2012.01.08 13:23:05 | 000,000,000 | ---D | M] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\FileZilla
[2012.01.08 17:43:17 | 000,000,000 | ---D | M] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\PrimoPDF
[2012.01.01 19:10:39 | 000,000,000 | ---D | M] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\RfcClient
[2011.12.23 19:51:49 | 000,000,000 | ---D | M] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\TeamViewer
[2012.01.08 17:54:35 | 000,000,000 | ---D | M] -- C:\Users\Rune Thorvaldsen\AppData\Roaming\uTorrent
[2012.01.09 19:22:10 | 000,000,266 | ---- | M] () -- C:\Windows\Tasks\AutoKMS.job
[2009.07.14 05:53:46 | 000,011,056 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >