OTL logfile created on: 19.04.2013 17:56:54 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\\Skrivebord
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000414 | Country: Norge | Language: NOR | Date Format: dd.MM.yyyy
 
1022,37 Mb Total Physical Memory | 480,29 Mb Available Physical Memory | 46,98% Memory free
3,34 Gb Paging File | 2,82 Gb Available in Paging File | 84,29% Paging File free
Paging file location(s): C:\pagefile.sys 2500 5000 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programfiler
Drive C: | 80,62 Gb Total Space | 33,45 Gb Free Space | 41,49% Space Free | Partition Type: NTFS
Drive D: | 26,52 Gb Total Space | 2,37 Gb Free Space | 8,93% Space Free | Partition Type: NTFS
Drive E: | 702,81 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Drive F: | 1,83 Gb Total Space | 1,81 Gb Free Space | 98,90% Space Free | Partition Type: FAT
 
Computer Name: D6069K2J | User Name:  | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013.04.19 15:53:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\\Skrivebord\OTL.exe
PRC - [2013.04.04 05:32:53 | 000,181,664 | ---- | M] (Oracle Corporation) -- C:\Programfiler\Java\jre7\bin\jqs.exe
PRC - [2013.03.12 07:32:50 | 000,253,816 | ---- | M] (Oracle Corporation) -- C:\Programfiler\Fellesfiler\Java\Java Update\jusched.exe
PRC - [2013.02.19 18:06:43 | 000,968,880 | ---- | M] () -- C:\Programfiler\Fellesfiler\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
PRC - [2013.01.27 11:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) -- c:\Programfiler\Microsoft Security Client\MsMpEng.exe
PRC - [2012.12.21 16:27:46 | 000,057,008 | ---- | M] (Apple Inc.) -- C:\Programfiler\Fellesfiler\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2012.10.17 04:05:54 | 001,837,672 | ---- | M] (Hewlett-Packard Co.) -- C:\Programfiler\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe
PRC - [2012.04.24 20:58:18 | 001,407,248 | ---- | M] (Intel(R) Corporation) -- C:\Programfiler\Intel\WiFi\bin\ZCfgSvc.exe
PRC - [2012.04.24 20:58:08 | 000,919,824 | ---- | M] (Intel(R) Corporation) -- C:\Programfiler\Intel\WiFi\bin\S24EvMon.exe
PRC - [2012.04.24 19:55:46 | 000,870,672 | ---- | M] (Intel(R) Corporation) -- C:\Programfiler\Intel\WiFi\bin\EvtEng.exe
PRC - [2012.04.24 19:35:58 | 001,210,640 | ---- | M] (Intel(R) Corporation) -- C:\Programfiler\Fellesfiler\Intel\WirelessCommon\iFrmewrk.exe
PRC - [2012.04.24 19:32:50 | 000,481,552 | ---- | M] (Intel(R) Corporation) -- C:\Programfiler\Fellesfiler\Intel\WirelessCommon\RegSrvc.exe
PRC - [2011.06.15 17:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Programfiler\Microsoft\BingBar\SeaPort.EXE
PRC - [2010.05.04 13:07:22 | 000,503,080 | ---- | M] (Nero AG) -- C:\Programfiler\Nero\Update\NASvc.exe
PRC - [2010.03.18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Programfiler\Fellesfiler\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2008.04.14 18:22:49 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.03.25 00:30:44 | 000,282,624 | ---- | M] (SigmaTel, Inc.) -- C:\WINDOWS\stsystra.exe
PRC - [2006.02.03 05:11:22 | 000,495,616 | ---- | M] ( ) -- C:\WINDOWS\system32\lxcrcoms.exe
PRC - [2006.01.02 18:41:22 | 000,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Programfiler\ATI Technologies\ATI.ACE\CLI.exe
PRC - [2005.06.10 11:44:02 | 000,081,920 | ---- | M] (InstallShield Software Corporation) -- C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe
PRC - [2003.06.20 00:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) -- C:\Programfiler\Fellesfiler\Microsoft Shared\VS7DEBUG\MDM.EXE
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013.02.19 18:06:43 | 000,968,880 | ---- | M] () -- C:\Programfiler\Fellesfiler\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
MOD - [2013.01.10 04:14:18 | 003,391,488 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_51a105a7\mscorlib.dll
MOD - [2013.01.10 04:14:09 | 000,843,776 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_8db076bc\system.drawing.dll
MOD - [2013.01.10 04:13:39 | 002,088,960 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_17628a62\system.xml.dll
MOD - [2013.01.10 04:13:30 | 003,035,136 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_1592e626\system.windows.forms.dll
MOD - [2013.01.10 04:12:44 | 001,966,080 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_2ba464c7\system.dll
MOD - [2013.01.10 04:12:05 | 001,232,896 | ---- | M] () -- c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll
MOD - [2013.01.10 04:12:01 | 001,269,760 | ---- | M] () -- c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll
MOD - [2013.01.10 04:11:59 | 000,471,040 | ---- | M] () -- c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll
MOD - [2013.01.10 04:11:47 | 002,064,384 | ---- | M] () -- c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll
MOD - [2012.10.11 21:56:46 | 000,087,952 | ---- | M] () -- C:\Programfiler\Fellesfiler\Apple\Apple Application Support\zlib1.dll
MOD - [2012.10.11 21:56:22 | 001,242,512 | ---- | M] () -- C:\Programfiler\Fellesfiler\Apple\Apple Application Support\libxml2.dll
MOD - [2006.01.12 16:20:04 | 000,114,688 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lxcrpp5c.dll
MOD - [2004.09.28 19:33:50 | 001,339,392 | ---- | M] () -- c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll
MOD - [2004.09.28 19:33:50 | 000,372,736 | ---- | M] () -- c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll
MOD - [2004.09.28 19:33:50 | 000,323,584 | ---- | M] () -- c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll
MOD - [2004.09.28 19:32:54 | 000,221,184 | ---- | M] () -- c:\windows\assembly\gac\mscorlib.resources\1.0.5000.0_no_b77a5c561934e089\mscorlib.resources.dll
MOD - [2004.09.28 19:32:54 | 000,167,936 | ---- | M] () -- c:\windows\assembly\gac\system.windows.forms.resources\1.0.5000.0_no_b77a5c561934e089\system.windows.forms.resources.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013.04.16 23:10:12 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.04.10 08:56:49 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programfiler\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.04.04 05:32:53 | 000,181,664 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Programfiler\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013.02.28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programfiler\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.02.19 18:06:43 | 000,968,880 | ---- | M] () [Auto | Running] -- C:\Programfiler\Fellesfiler\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe -- (vToolbarUpdater14.2.0)
SRV - [2013.01.27 11:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Programfiler\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012.12.21 16:27:46 | 000,057,008 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Programfiler\Fellesfiler\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2012.04.24 20:58:08 | 000,919,824 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programfiler\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor)
SRV - [2012.04.24 19:55:46 | 000,870,672 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programfiler\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV - [2012.04.24 19:32:50 | 000,481,552 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programfiler\Fellesfiler\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV - [2011.07.07 19:31:08 | 000,195,336 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Programfiler\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.06.15 17:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programfiler\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
SRV - [2010.05.04 13:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto | Running] -- C:\Programfiler\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2010.03.18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Programfiler\Fellesfiler\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2006.11.06 15:21:10 | 000,210,432 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2006.02.03 05:11:22 | 000,495,616 | ---- | M] ( ) [On_Demand | Running] -- C:\WINDOWS\system32\lxcrcoms.exe -- (lxcr_device)
SRV - [2005.04.04 01:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programfiler\Fellesfiler\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2003.07.28 21:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programfiler\Fellesfiler\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2003.06.20 00:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programfiler\Fellesfiler\Microsoft Shared\VS7DEBUG\MDM.EXE -- (MDM)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SBREdrv.sys -- (SBRE)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\ComboFix\mbr.sys -- (mbr)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\cpuz134_x32.sys -- (cpuz134)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\cpuz132_x32.sys -- (cpuz132)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Running] -- C:\DOCUME~1\BJRN-R~1\LOKALE~1\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOCUME~1\BJRN-R~1\LOKALE~1\Temp\aswMBR.sys -- (aswMBR)
DRV - [2013.04.19 16:27:47 | 000,029,904 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\Documents and Settings\All Users\Programdata\Microsoft\Microsoft Antimalware\Definition Updates\{0BCE4ED2-8078-4C97-A2F4-74E0E54BE97B}\MpKsl97dba8c8.sys -- (MpKsl97dba8c8)
DRV - [2013.02.19 18:06:44 | 000,033,112 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2011.06.02 10:08:34 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Programfiler\SystemRequirementsLab\cpudrv.sys -- (cpudrv)
DRV - [2010.10.07 04:11:38 | 006,609,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETwLx32.sys -- (NETwLx32)
DRV - [2010.05.19 22:15:04 | 000,013,952 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2009.08.10 13:07:32 | 000,089,600 | ---- | M] (Gemalto) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GemCCID.sys -- (GemCCID)
DRV - [2008.11.21 22:42:55 | 000,186,592 | ---- | M] (Jungo) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\windrvr6.sys -- (WinDriver6)
DRV - [2008.09.29 22:20:12 | 000,015,172 | ---- | M] (Prassi Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\PzWDM.sys -- (PzWDM)
DRV - [2007.05.03 14:37:08 | 000,022,152 | ---- | M] (Maxtor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mxopswd.sys -- (MXOPSWD)
DRV - [2006.11.23 18:20:06 | 000,018,432 | ---- | M] (SIA Syncrosoft) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\synasUSB.sys -- (SynasUSB)
DRV - [2006.08.25 08:23:08 | 000,044,544 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2006.05.24 19:07:18 | 000,328,237 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2006.05.24 19:05:26 | 000,023,271 | ---- | M] (Broadcom Corporation.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL)
DRV - [2006.05.24 19:04:04 | 000,851,434 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2006.05.24 19:01:34 | 000,030,427 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2006.05.24 19:01:22 | 000,030,285 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2006.05.24 19:00:50 | 000,066,488 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2006.05.24 18:58:18 | 000,148,900 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2006.05.24 18:57:00 | 000,045,683 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwhid.sys -- (btwhid)
DRV - [2006.05.23 15:06:36 | 001,578,496 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006.04.27 00:13:04 | 001,429,632 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51)
DRV - [2006.04.07 17:06:38 | 000,038,496 | ---- | M] (OLYMPUS IMAGING CORP.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VNUSB.sys -- (VNUSB)
DRV - [2006.03.25 00:34:30 | 001,156,648 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2005.10.14 16:40:18 | 000,307,968 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005.10.14 16:40:18 | 000,051,328 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2005.10.14 16:40:18 | 000,028,544 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2005.07.22 04:02:12 | 001,035,008 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2005.07.22 04:01:08 | 000,201,600 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2005.07.22 04:01:00 | 000,717,952 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004.09.20 13:44:48 | 000,005,652 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bvrp_pci.sys -- (bvrp_pci)
DRV - [2004.02.13 17:46:00 | 000,017,153 | ---- | M] (Dell Inc) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\omci.sys -- (omci)
DRV - [2001.08.17 21:11:06 | 000,066,591 | ---- | M] (3Com Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\el90xbc5.sys -- (EL90XBC)
DRV - [1999.09.10 13:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\ASPI32.SYS -- (ASPI32)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.no/ig/dell?hl=no&client=dell-row&channel=no&ibd=0061026
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = www.google.no/ig/dell?hl=no&client=dell-row&channel=no&ibd=0061026
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://no.msn.com/?pc=WLEM&ocid=bb7hp
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{29D4CD08-A6A5-4CC2-9106-FA68FD757606}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ000YYNO&apn_uid=F25F41A6-196E-4909-965D-9DDAD57A05BD&apn_sauid=BB4E5AF0-C9A0-4021-8F93-4F192755BEF8
IE - HKCU\..\SearchScopes\{62601834-BD9D-48AC-B731-1B0039BB78EE}: "URL" = http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{B57E3D23-2253-4281-9E80-20BCA71FD473}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7DANO
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaulturl: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q="
FF - prefs.js..browser.startup.homepage: "https://nb-no.facebook.com/"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1416
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programfiler\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Programfiler\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Programfiler\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programfiler\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Programfiler\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Programfiler\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.6: C:\Programfiler\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programfiler\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1:  File not found
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\\Lokale innstillinger\Programdata\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Programfiler\Mozilla Firefox\components [2013.04.17 15:15:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Programfiler\Mozilla Firefox\plugins [2013.04.16 23:37:23 | 000,000,000 | ---D | M]
 
[2009.05.24 17:11:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\\Programdata\Mozilla\Extensions
[2013.02.04 17:41:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\\Programdata\Mozilla\Firefox\Profiles\2gww0y9n.default\extensions
[2010.07.23 09:30:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\\Programdata\Mozilla\Firefox\Profiles\2gww0y9n.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.11.27 17:33:07 | 000,001,832 | ---- | M] () -- C:\Documents and Settings\\Programdata\Mozilla\Firefox\Profiles\2gww0y9n.default\searchplugins\bing.xml
[2013.04.16 19:59:34 | 000,000,000 | ---D | M] (No name found) -- C:\Programfiler\Mozilla Firefox\extensions
[2013.04.10 08:57:39 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Programfiler\mozilla firefox\components\browsercomps.dll
[2013.04.10 13:07:51 | 000,001,738 | ---- | M] () -- C:\Programfiler\mozilla firefox\searchplugins\amazon-en-GB.xml
[2013.04.10 13:07:51 | 000,002,465 | ---- | M] () -- C:\Programfiler\mozilla firefox\searchplugins\bing.xml
[2013.04.10 13:07:51 | 000,001,431 | ---- | M] () -- C:\Programfiler\mozilla firefox\searchplugins\bok-NO.xml
[2013.04.10 13:07:51 | 000,001,181 | ---- | M] () -- C:\Programfiler\mozilla firefox\searchplugins\qxl-NO.xml
[2013.04.10 13:07:51 | 000,001,416 | ---- | M] () -- C:\Programfiler\mozilla firefox\searchplugins\telefonkatalogen-NO.xml
[2013.04.10 13:07:52 | 000,001,389 | ---- | M] () -- C:\Programfiler\mozilla firefox\searchplugins\wikipedia-NO.xml
[2013.04.10 13:07:52 | 000,001,405 | ---- | M] () -- C:\Programfiler\mozilla firefox\searchplugins\yahoo-NO.xml
 
O1 HOSTS File: ([2013.04.19 16:41:02 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programfiler\Fellesfiler\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Påloggingshjelp for Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Programfiler\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programfiler\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programfiler\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Programfiler\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No CLSID value found.
O4 - HKLM..\Run: [ATICCC] C:\Programfiler\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [IntelWireless] C:\Programfiler\Fellesfiler\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Programfiler\Intel\WiFi\bin\ZCfgSvc.exe (Intel(R) Corporation)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Programfiler\Fellesfiler\InstallShield\UpdateService\isuspm.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [LXCRCATS] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.DLL ()
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programfiler\Fellesfiler\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKCU..\Run: [HP Photosmart 5520 series (NET)] C:\Programfiler\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Programfiler\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Programfiler\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe (Hewlett-Packard)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programfiler\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} http://www.musicnotes.com/download/mnviewer.cab (Reg Error: Key error.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Reg Error: Key error.)
O16 - DPF: {25C29129-E95F-4564-BFE3-000000007100} http://www.123hjemmeside.no/builder/pages/KvikVideo-7-1-0-0.CAB (KvikVideo 7.1)
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} http://host.cycore.net/plugins/windows/ie/Cult3D_IE_5.3.0.228.cab (Cult3D ActiveX Player)
O16 - DPF: {4445EA6A-9008-40D5-9160-035FDE5214C4} http://www.123hjemmeside.no/builder/pages/Mpu-dk-1-0-0-8.cab (MultiUpload Class)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab (Reg Error: Key error.)
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} http://upload.facebook.com/controls/FacebookPhotoUploader.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab (Reg Error: Key error.)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{27D95E0E-7797-49AF-91F5-EADB8642173F}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programfiler\Fellesfiler\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programfiler\Fellesfiler\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programfiler\Fellesfiler\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programfiler\Fellesfiler\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programfiler\Fellesfiler\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programfiler\Fellesfiler\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programfiler\Fellesfiler\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programfiler\Fellesfiler\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Min gjeldende hjemmeside) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\\Programdata\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Programdata\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004.09.28 19:23:36 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (OODBS)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013.04.19 16:05:34 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2013.04.19 16:05:34 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2013.04.19 16:05:34 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2013.04.19 16:05:34 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2013.04.19 15:56:58 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013.04.19 15:53:07 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Skrivebord\OTL.exe
[2013.04.19 15:52:34 | 004,745,728 | ---- | C] (AVAST Software) -- C:\Documents and Settings\\Skrivebord\aswMBR.exe
[2013.04.19 15:51:58 | 005,056,689 | R--- | C] (Swearware) -- C:\Documents and Settings\\Skrivebord\ComboFix.exe
[2013.04.17 16:24:01 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\\Siste
[2013.04.17 15:32:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\VideoLAN
[2013.04.17 15:21:40 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2013.04.17 15:21:40 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2013.04.17 15:21:40 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013.04.17 02:00:29 | 000,237,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2013.04.17 01:55:11 | 000,000,000 | ---D | C] -- C:\Programfiler\Microsoft Security Client
[2013.04.17 01:39:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Programdata\Intel
[2013.04.17 01:38:31 | 000,675,840 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\NETwLc32.dll
[2013.04.17 01:38:30 | 006,609,920 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\drivers\NETwLx32.sys
[2013.04.17 01:38:30 | 002,756,608 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\NETwLr32.dll
[2013.04.17 01:38:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\Intel PROSet Wireless
[2013.04.17 01:38:05 | 000,000,000 | ---D | C] -- C:\Programfiler\Fellesfiler\Intel
[2013.04.17 01:14:05 | 000,000,000 | ---D | C] -- C:\Programfiler\SystemRequirementsLab
[2013.04.16 23:55:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\iTunes
[2013.04.16 23:54:04 | 000,000,000 | ---D | C] -- C:\Programfiler\iPod
[2013.04.16 23:53:04 | 000,000,000 | ---D | C] -- C:\Programfiler\iTunes
[2013.04.16 23:53:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013.04.16 23:46:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Programdata\Apple Computer
[2013.04.16 23:44:19 | 000,000,000 | ---D | C] -- C:\Programfiler\Bonjour
[2013.04.16 23:13:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\ImgBurn
[2013.04.16 23:01:44 | 000,000,000 | ---D | C] -- C:\Programfiler\Fellesfiler\Skype
[2013.04.16 23:01:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\Skype
[2013.04.16 23:01:43 | 000,000,000 | R--D | C] -- C:\Programfiler\Skype
[2013.04.16 22:40:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\WinRAR
[2013.04.16 22:40:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\\Start-meny\Programmer\WinRAR
[2013.04.16 22:34:19 | 000,000,000 | ---D | C] -- C:\Programfiler\Fellesfiler\Adobe
[2013.04.16 22:32:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\\Lokale innstillinger\Programdata\MFAData
[2013.04.16 22:32:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lokale innstillinger\Programdata\Avg2013
[2013.04.16 19:18:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\CCleaner
[2013.04.16 19:18:54 | 000,000,000 | ---D | C] -- C:\Programfiler\CCleaner
[2013.04.16 15:50:57 | 000,006,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\serscan.sys
[2013.04.16 15:49:26 | 000,000,000 | ---D | C] -- C:\Programfiler\Hewlett-Packard
[2013.04.16 15:49:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\\Programdata\Hewlett-Packard
[2013.04.16 15:49:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Programdata\Visan
[2013.04.16 15:49:20 | 000,000,000 | ---D | C] -- C:\Programfiler\HP Photo Creations
[2013.04.16 15:49:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Programdata\HP Photo Creations
[2013.04.16 15:47:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\\Programdata\HpUpdate
[2013.04.16 15:46:48 | 000,580,712 | ---- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\HPDiscoPMB111.dll
[2013.04.16 15:46:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\HP
[2013.04.16 15:45:52 | 000,495,504 | ---- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\HPWia1_PS5520.dll
[2013.04.16 15:45:51 | 001,979,280 | ---- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\HPScanTRDrv_PS5520.dll
[2013.04.16 15:45:40 | 002,216,336 | ---- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpinkinsB111.exe
[2013.04.16 15:45:40 | 000,529,808 | ---- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpinkstsB111.dll
[2013.04.16 15:45:40 | 000,268,688 | ---- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpinkstsB111LM.dll
[2013.04.16 15:45:40 | 000,220,560 | ---- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpinkcoiB111.dll
[2013.04.16 15:45:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Programdata\HP
[2013.04.16 15:44:36 | 000,000,000 | ---D | C] -- C:\Programfiler\HP
[2013.04.16 15:43:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\\Lokale innstillinger\Programdata\HP
[2008.07.13 19:07:56 | 001,512,927 | ---- | C] (Audacity Team                                               ) -- C:\Programfiler\LADSPA_plugins-win-0.4.15.exe
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013.04.19 17:57:00 | 000,000,442 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{3F40AAB4-1FD5-4464-BBED-939DCC433843}.job
[2013.04.19 17:56:14 | 000,000,512 | ---- | M] () -- C:\Documents and Settings\\Skrivebord\MBR.dat
[2013.04.19 17:33:00 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.04.19 16:41:02 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2013.04.19 16:27:03 | 005,056,689 | R--- | M] (Swearware) -- C:\Documents and Settings\\Skrivebord\ComboFix.exe
[2013.04.19 16:22:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.04.19 16:22:35 | 1072,103,424 | -HS- | M] () -- C:\hiberfil.sys
[2013.04.19 16:21:19 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2013.04.19 15:54:05 | 004,745,728 | ---- | M] (AVAST Software) -- C:\Documents and Settings\\Skrivebord\aswMBR.exe
[2013.04.19 15:53:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\\Skrivebord\OTL.exe
[2013.04.19 15:48:31 | 000,000,464 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[2013.04.17 16:13:10 | 000,000,327 | ---- | M] () -- C:\Documents and Settings\\Skrivebord\HP skriverdiagnostikkverktøy.url
[2013.04.17 16:13:02 | 000,001,986 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\HP Photosmart 5520 series.lnk
[2013.04.17 15:50:08 | 004,734,976 | ---- | M] () -- C:\Documents and Settings\\ntuser.rhk
[2013.04.17 15:37:01 | 000,000,603 | ---- | M] () -- C:\Documents and Settings\\Skrivebord\Snarvei til spotify.lnk
[2013.04.17 15:32:29 | 000,000,712 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\VLC media player.lnk
[2013.04.17 14:00:25 | 000,000,464 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2013.04.17 10:10:25 | 000,000,464 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2013.04.17 01:55:53 | 000,001,912 | ---- | M] () -- C:\WINDOWS\epplauncher.mif
[2013.04.17 01:55:06 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.04.17 01:40:19 | 000,450,242 | ---- | M] () -- C:\WINDOWS\System32\perfh014.dat
[2013.04.17 01:40:19 | 000,447,840 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013.04.17 01:40:19 | 000,083,170 | ---- | M] () -- C:\WINDOWS\System32\perfc014.dat
[2013.04.17 01:40:19 | 000,074,184 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013.04.17 01:38:36 | 000,004,128 | ---- | M] () -- C:\INFCACHE.1
[2013.04.16 23:56:01 | 000,001,537 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\iTunes.lnk
[2013.04.16 23:37:00 | 000,001,599 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\QuickTime Player.lnk
[2013.04.16 23:21:16 | 006,770,060 | ---- | M] () -- C:\Documents and Settings\\Skrivebord\støv.JPG
[2013.04.16 23:13:35 | 000,001,519 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\ImgBurn.lnk
[2013.04.16 23:10:12 | 000,691,592 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.04.16 23:10:12 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.04.16 22:36:13 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\Adobe Reader XI.lnk
[2013.04.16 20:40:24 | 000,000,464 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2013.04.16 19:18:58 | 000,000,675 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\CCleaner.lnk
[2013.04.16 19:17:10 | 000,000,717 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\Mozilla Firefox.lnk
[2013.04.16 15:49:22 | 000,001,725 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\HP Photo Creations.lnk
[2013.04.16 15:46:39 | 000,000,918 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\Kjøp rekvisita - HP Photosmart 5520 series.lnk
[2013.04.16 15:43:54 | 000,000,057 | ---- | M] () -- C:\Documents and Settings\All Users\Programdata\Ament.ini
[2013.04.16 15:40:22 | 065,452,952 | ---- | M] () -- C:\Documents and Settings\\Skrivebord\PS5520_1315.exe
[2013.04.12 10:58:02 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013.04.10 15:45:31 | 000,309,992 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.04.04 05:35:08 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013.04.04 05:30:10 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2013.04.04 05:29:44 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2013.04.02 12:33:22 | 000,237,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013.04.19 17:56:14 | 000,000,512 | ---- | C] () -- C:\Documents and Settings\\Skrivebord\MBR.dat
[2013.04.19 16:22:35 | 1072,103,424 | -HS- | C] () -- C:\hiberfil.sys
[2013.04.19 16:05:34 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2013.04.19 16:05:34 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2013.04.19 16:05:34 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2013.04.19 16:05:34 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2013.04.19 16:05:34 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2013.04.19 15:55:22 | 006,770,060 | ---- | C] () -- C:\Documents and Settings\\Skrivebord\støv.JPG
[2013.04.17 16:13:10 | 000,000,327 | ---- | C] () -- C:\Documents and Settings\\Skrivebord\HP skriverdiagnostikkverktøy.url
[2013.04.17 15:50:07 | 004,734,976 | ---- | C] () -- C:\Documents and Settings\\ntuser.rhk
[2013.04.17 15:37:01 | 000,000,603 | ---- | C] () -- C:\Documents and Settings\\Skrivebord\Snarvei til spotify.lnk
[2013.04.17 15:32:29 | 000,000,712 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\VLC media player.lnk
[2013.04.17 01:55:53 | 000,001,912 | ---- | C] () -- C:\WINDOWS\epplauncher.mif
[2013.04.17 01:55:43 | 000,001,693 | ---- | C] () -- C:\Documents and Settings\All Users\Start-meny\Programmer\Microsoft Security Essentials.lnk
[2013.04.17 01:38:36 | 000,004,128 | ---- | C] () -- C:\INFCACHE.1
[2013.04.16 23:56:01 | 000,001,537 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\iTunes.lnk
[2013.04.16 23:37:00 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\QuickTime Player.lnk
[2013.04.16 22:36:13 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\Adobe Reader XI.lnk
[2013.04.16 22:35:48 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Start-meny\Programmer\Adobe Reader XI.lnk
[2013.04.16 19:18:58 | 000,000,675 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\CCleaner.lnk
[2013.04.16 15:49:22 | 000,001,725 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\HP Photo Creations.lnk
[2013.04.16 15:48:47 | 000,000,464 | ---- | C] () -- C:\WINDOWS\tasks\At4.job
[2013.04.16 15:48:47 | 000,000,464 | ---- | C] () -- C:\WINDOWS\tasks\At3.job
[2013.04.16 15:48:47 | 000,000,464 | ---- | C] () -- C:\WINDOWS\tasks\At2.job
[2013.04.16 15:48:46 | 000,000,464 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2013.04.16 15:46:39 | 000,000,918 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\Kjøp rekvisita - HP Photosmart 5520 series.lnk
[2013.04.16 15:46:35 | 000,001,986 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\HP Photosmart 5520 series.lnk
[2013.04.16 15:43:54 | 000,000,057 | ---- | C] () -- C:\Documents and Settings\All Users\Programdata\Ament.ini
[2013.04.16 15:40:39 | 065,452,952 | ---- | C] () -- C:\Documents and Settings\\Skrivebord\PS5520_1315.exe
[2012.09.20 15:45:33 | 000,059,940 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010.02.25 20:28:29 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\\intlname.ols
[2009.02.25 19:41:42 | 000,004,937 | ---- | C] () -- C:\Documents and Settings\All Users\Programdata\xqkcebzs.dik
[2008.07.13 19:11:41 | 002,228,534 | ---- | C] (                                                            ) -- C:\Programfiler\audacity-win-1.2.6.exe
[2007.10.14 23:18:20 | 000,029,184 | ---- | C] () -- C:\Documents and Settings\\Lokale innstillinger\Programdata\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007.10.07 19:56:39 | 000,001,759 | ---- | C] () -- C:\Documents and Settings\All Users\Programdata\QTSBandwidthCache
[2007.04.08 12:55:45 | 000,000,065 | ---- | C] () -- C:\Documents and Settings\\default.pls
[2006.11.08 17:39:34 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\\Programdata\wklnhst.dat
[2006.11.08 17:27:19 | 000,000,140 | ---- | C] () -- C:\Documents and Settings\\Lokale innstillinger\Programdata\fusioncache.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2004.09.28 19:31:54 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 18:22:21 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.02.09 12:56:06 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 18:22:31 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >