[Løst]Antivir log trenger hjelp

nipton · 11. mai 2009

Ser etter msn virus/noe annet som kan skade pcen.

Malwarebytes' Anti-Malware 1.36

Databaseversjon: 2096

Windows 6.0.6001 Service Pack 1

09.05.2009 02:41:09

mbam-log-2009-05-09 (02-41-09).txt

Skanntype: Rask Skann

Objekter skannet: 63350

Tid tilbakelagt: 2 minute(s), 0 second(s)

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registernøkler infisert: 0

Registerverdier infisert: 0

Registerfiler infisert: 0

Mapper infisert: 0

Filer infisert: 0

Minneprosesser infisert:

(Ingen mistenkelige filer funnet)

Minnemoduler infisert:

(Ingen mistenkelige filer funnet)

Registernøkler infisert:

(Ingen mistenkelige filer funnet)

Registerverdier infisert:

(Ingen mistenkelige filer funnet)

Registerfiler infisert:

(Ingen mistenkelige filer funnet)

Mapper infisert:

(Ingen mistenkelige filer funnet)

Filer infisert:

(Ingen mistenkelige filer funnet)

----------------------------------------------------------------------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 02:41:41, on 09.05.2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\ASUS\AASP\1.00.46\aaCenter.exe

C:\Program Files (x86)\Creative\Sync Manager Unicode\CTSyncU.exe

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe

C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe

C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe

C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe

C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files (x86)\Java\jre6\bin\jusched.exe

C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe

C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe

C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

C:\Windows\SysWOW64\NOTEPAD.EXE

C:\Users\Jonas\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll

O4 - HKLM\..\Run: [soundTray] "C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe"

O4 - HKLM\..\Run: [CPU Power Monitor] "C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe"

O4 - HKLM\..\Run: [Cpu Level Up help] C:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe

O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe"

O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe

O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /install /silent

O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files (x86)\Creative\Sync Manager Unicode\CTSyncU.exe"

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-19\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'LOKAL TJENESTE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETTVERKSTJENESTE')

O4 - HKUS\S-1-5-18\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'Default user')

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - Global Startup: Logitech SetPoint.lnk = ?

O13 - Gopher Prefix:

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing)

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\Windows\SysWOW64\CTsvcCDA.exe

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Update Service (gupdate1c98a42b3a2f0a7) (gupdate1c98a42b3a2f0a7) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe

O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe

O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe

O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmPfw.exe

O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 11207 bytes

---------------------------------------------------------------------------------------------------------------

Tusen takk for hjelpa smile.gif

Noen som vet hva jeg kan gjøre eller Hvilket antivirus program jeg skal kjøre.. har kjørt. Malwarebytes' Anti-Malware, Ad-Aware, AVG, uten hell..

Endret 11. mai 2009 av nipton

snippsat · 11. mai 2009

Loggen viser ikke noe malware.

Har du hatt problemer med msn,skift passord på kontoen.

Husk kun et antivirus installert,ser avrira og trend oss deg.

nipton · 11. mai 2009

rart, har skiftet. funket i 24 timer eller mindre. i dag så er det pån igjen med spam.

Last ned musikk her = virus Link.

Den kaster meg ut av msn og spammer. når jeg da logger inn så har til og med jeg fått linken siden jeg har meg selv på kontakt listen.

huff.. vet ikke hva jeg skal gjøre.

Endret 11. mai 2009 av nipton

snippsat · 11. mai 2009

Det ser ut som et msn problem.

Du kan kjøre combofix ,så vi er sikker på at du er ren.

Disable antivirus før du kjører combofix.

Last Combofix ned ,legg på skrivebordet.

Ikke klikk på vindu mens programmet kjører.

post logg C:\combofix.txt

nipton · 11. mai 2009

Får bare only works for xp and Win 2000. sett på forums at det skal funke til vista også men... jaa.. får ikke det til..

snippsat · 11. mai 2009

Combofix virker på vista,men du har vista64bit som jeg glemte bort i farten.

Da virker ikke den.

Last ned OTViewIt til skrivebordet.

Steng alle vinduer dobbelklikk på OTviewlt.

Merk av på "scan all user" boks.

KLikk på "Run Scan" la programmet kjøre.

Ferdig vil den lage to logger,post OTViewIt.txt og Extras.txt i din neste post.

Endret 11. mai 2009 av SNIPPSAT

nipton · 11. mai 2009

OTViewIt logfile created on: 11.05.2009 20:46:43 - Run 1

OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Users\Jonas\Desktop

Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18762)

Locale: 00000414 | Country: Norge | Language: NOR | Date Format: dd.MM.yyyy

3,25 Gb Total Physical Memory | 1,76 Gb Available Physical Memory | 54,28% Memory free

4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free

Paging file location(s): ?:\pagefile.sys;

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 698,63 Gb Total Space | 355,28 Gb Free Space | 50,85% Space Free | Partition Type: NTFS

D: Drive not present or media not loaded

E: Drive not present or media not loaded

Drive F: | 698,63 Gb Total Space | 222,35 Gb Free Space | 31,83% Space Free | Partition Type: NTFS

Drive G: | 953,72 Mb Total Space | 73,94 Mb Free Space | 7,75% Space Free | Partition Type: FAT

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: JONAS-PC

Current User Name: Jonas

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Whitelist: On

File Age = 14 Days

========== Processes ==========

[2008.05.12 12:38:28 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe

[2008.10.15 14:31:53 | 00,068,865 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\sched.exe

[2008.10.15 14:30:02 | 00,151,297 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avguard.exe

[1999.12.12 19:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\CTSVCCDA.EXE

[2008.06.09 11:21:58 | 00,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

[2008.12.05 17:11:54 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

[2009.04.16 01:26:37 | 00,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe

[2009.05.10 20:27:04 | 00,189,072 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe

[2005.08.08 07:54:00 | 00,167,936 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe

[2007.11.09 08:26:18 | 00,609,280 | R--- | M] () -- C:\Program Files (x86)\ASUS\AASP\1.00.46\aaCenter.exe

[2006.08.07 10:06:38 | 00,700,416 | ---- | M] () -- C:\Program Files (x86)\Creative\Sync Manager Unicode\CTSyncU.exe

[2008.09.29 22:23:42 | 00,091,440 | ---- | M] (Logitech Inc.) -- C:\Programfiler\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

[2008.03.26 15:04:48 | 00,143,360 | ---- | M] (Sonic Focus, Inc.) -- C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe

[2007.10.16 11:35:42 | 00,626,176 | ---- | M] () -- C:\Programfiler\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe

[2006.11.23 16:10:42 | 00,056,928 | ---- | M] (Cyberlink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe

[2008.03.17 07:40:44 | 01,302,528 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe

[2008.06.12 14:28:45 | 00,266,497 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe

[2009.03.09 06:19:17 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Java\jre6\bin\jusched.exe

[2008.05.02 05:00:00 | 00,077,824 | ---- | M] () -- C:\Programfiler\Logitech\SetPoint\x86\SetPoint32.exe

[2007.12.13 18:45:12 | 00,461,336 | ---- | M] (Logitech Inc.) -- C:\Programfiler\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe

[2009.05.11 20:44:39 | 00,422,912 | ---- | M] (OldTimer Tools) -- C:\Users\Jonas\Desktop\OTViewIt.exe

========== (O23) Win32 Services ==========

File not found -- -- (aawservice [Auto | Running])

File not found -- -- (AEADIFilters [Auto | Running])

File not found -- -- (AMD External Events Utility [Auto | Running])

File not found -- -- (AntiVirScheduler [Auto | Running])

File not found -- -- (AntiVirService [Auto | Running])

File not found -- -- (CertPropSvc [unknown | Stopped])

[2008.07.27 20:03:13 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])

[2008.07.27 20:01:49 | 00,093,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64 [On_Demand | Stopped])

[1999.12.12 19:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\CTSVCCDA.EXE -- (Creative Service for CDROM Access [Auto | Running])

File not found -- -- (DcomLaunch [unknown | Running])

File not found -- -- (DPS [unknown | Running])

[2008.01.19 10:00:14 | 00,344,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr [On_Demand | Stopped])

[2008.01.19 10:00:14 | 00,153,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehsched.exe -- (ehSched [On_Demand | Stopped])

[2008.06.20 03:17:12 | 00,046,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])

File not found -- -- (IDriverT [On_Demand | Stopped])

[2006.11.02 11:46:05 | 00,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\keyiso.dll -- (KeyIso [On_Demand | Stopped])

[2008.05.02 03:49:54 | 00,160,272 | ---- | M] (Logitech, Inc.) -- C:\Programfiler\Common Files\Logitech\Bluetooth\LBTServ.exe -- (LBTServ [On_Demand | Stopped])

File not found -- -- (LightScribeService [Auto | Running])

[2009.01.26 07:05:31 | 00,000,000 | ---D | M] -- C:\Windows\System32\MsDtc -- (MSDTC [unknown | Stopped])

File not found -- -- (NBService [On_Demand | Stopped])

File not found -- -- (Nero BackItUp Scheduler 4.0 [Auto | Running])

[2008.01.19 09:35:36 | 00,592,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netlogon.dll -- (Netlogon [On_Demand | Stopped])

[2008.06.20 03:16:54 | 00,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])

File not found -- -- (NMIndexingService [On_Demand | Stopped])

[2008.01.19 09:33:19 | 00,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\perfhost.exe -- (PerfHost [On_Demand | Stopped])

[2009.04.16 01:26:37 | 00,075,064 | ---- | M] () -- C:\Windows\System32\PnkBstrA.exe -- (PnkBstrA [Auto | Running])

[2009.05.10 20:27:04 | 00,189,072 | ---- | M] () -- C:\Windows\System32\PnkBstrB.exe -- (PnkBstrB [Auto | Running])

File not found -- -- (RichVideo [Auto | Running])

File not found -- -- (RpcSs [unknown | Running])

[2008.12.11 15:53:38 | 00,098,488 | ---- | M] (SiSoftware) -- C:\Programfiler\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe -- (SandraAgentSrv [On_Demand | Stopped])

[2008.01.19 09:36:19 | 00,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SCardSvr.dll -- (SCardSvr [unknown | Stopped])

File not found -- -- (Schedule [unknown | Running])

File not found -- -- (SCPolicySvc [unknown | Stopped])

[2009.04.01 05:26:32 | 00,833,872 | ---- | M] (Trend Micro Inc.) -- C:\Programfiler\Trend Micro\Internet Security\SfCtlCom.exe -- (SfCtlCom [Auto | Running])

File not found -- -- (Steam Client Service [On_Demand | Stopped])

[2009.05.08 18:47:41 | 00,562,440 | ---- | M] (Trend Micro Inc.) -- C:\Programfiler\Trend Micro\BM\TMBMSRV.exe -- (TMBMServer [Auto | Running])

[2009.04.01 05:26:46 | 00,593,864 | ---- | M] (Trend Micro Inc.) -- C:\Programfiler\Trend Micro\Internet Security\TmPfw.exe -- (TmPfw [Auto | Running])

[2009.04.01 05:26:28 | 00,900,360 | ---- | M] (Trend Micro Inc.) -- C:\Programfiler\Trend Micro\Internet Security\TmProxy.exe -- (TmProxy [Auto | Running])

[2006.11.02 08:35:15 | 00,060,994 | ---- | M] () -- C:\Windows\System32\wbem\vds.mof -- (vds [On_Demand | Stopped])

[2006.11.02 08:35:15 | 00,055,846 | ---- | M] () -- C:\Windows\System32\wbem\vss.mof -- (VSS [On_Demand | Stopped])

File not found -- -- (WdiServiceHost [unknown | Stopped])

File not found -- -- (WdiSystemHost [unknown | Running])

[2008.01.19 10:00:47 | 01,216,000 | ---- | M] (Microsoft Corporation) -- C:\Programfiler\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc [On_Demand | Running])

[2008.05.27 07:18:43 | 00,439,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe -- (WSearch [Auto | Running])

========== Driver Services ==========

File not found -- -- (ADIHdAudAddService [On_Demand | Running])

[2008.01.19 10:12:01 | 00,486,456 | ---- | M] (Adaptec, Inc.) -- C:\Windows\WinSxS\amd64_adp94xx.inf_31bf3856ad364e35_6.0.6001.18000_none_5e0fcb9b69814f7b\adp94xx.sys -- (adp94xx [Disabled | Stopped])

[2008.01.19 10:11:40 | 00,342,584 | ---- | M] (Adaptec, Inc.) -- C:\Windows\WinSxS\amd64_adpahci.inf_31bf3856ad364e35_6.0.6001.18000_none_c05c13aa3dfbc961\adpahci.sys -- (adpahci [Disabled | Stopped])

[2008.01.19 10:10:01 | 00,126,520 | ---- | M] (Adaptec, Inc.) -- C:\Windows\WinSxS\amd64_adpu160m.inf_31bf3856ad364e35_6.0.6001.18000_none_f2feed0b63bf261d\adpu160m.sys -- (adpu160m [Disabled | Stopped])

[2008.01.19 10:11:12 | 00,185,912 | ---- | M] (Adaptec, Inc.) -- C:\Windows\WinSxS\amd64_adpu320.inf_31bf3856ad364e35_6.0.6001.18000_none_f4cbbad1148c6b4a\adpu320.sys -- (adpu320 [Disabled | Stopped])

[2008.09.29 19:11:11 | 00,018,488 | ---- | M] (Acer Laboratories Inc.) -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_375215c7dcd73562\aliide.sys -- (aliide [Disabled | Stopped])

[2008.01.19 10:09:34 | 00,090,680 | ---- | M] (Adaptec, Inc.) -- C:\Windows\WinSxS\amd64_arc.inf_31bf3856ad364e35_6.0.6001.18000_none_7bfed8c7803713cf\arc.sys -- (arc [Disabled | Stopped])

[2008.01.19 10:09:37 | 00,091,192 | ---- | M] (Adaptec, Inc.) -- C:\Windows\WinSxS\amd64_arcsas.inf_31bf3856ad364e35_6.0.6001.18000_none_771684264153c2d4\arcsas.sys -- (arcsas [Disabled | Stopped])

[2006.10.18 21:12:46 | 00,013,632 | R--- | M] () -- C:\Windows\SysWOW64\drivers\AsIO.sys -- (AsIO [system | Running])

File not found -- -- (AtiHdmiService [On_Demand | Running])

File not found -- -- (atikmdag [On_Demand | Running])

File not found -- -- (atksgt [Auto | Running])

File not found -- -- (avgntflt [Auto | Running])

[2006.09.18 23:30:15 | 00,018,432 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\WinSxS\amd64_brmfcsto.inf_31bf3856ad364e35_6.0.6001.18000_none_800ff95700142785\BrFiltLo.sys -- (BrFiltLo [On_Demand | Stopped])

[2006.09.18 23:30:15 | 00,008,704 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\WinSxS\amd64_brmfcsto.inf_31bf3856ad364e35_6.0.6001.18000_none_800ff95700142785\BrFiltUp.sys -- (BrFiltUp [On_Demand | Stopped])

[2008.09.29 19:11:11 | 00,020,536 | ---- | M] (CMD Technology, Inc.) -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_375215c7dcd73562\cmdide.sys -- (cmdide [Disabled | Stopped])

[2008.09.29 17:48:19 | 00,000,000 | ---D | M] -- C:\Windows\CSC -- (CSC [system | Running])

[2008.01.05 13:22:47 | 00,146,176 | ---- | M] (Intel Corporation) -- C:\Windows\WinSxS\amd64_nete1g3e.inf_31bf3856ad364e35_6.0.6001.18000_none_04b0c96be9c034d3\E1G6032E.sys -- (E1G60 [On_Demand | Stopped])

[2008.01.19 10:11:53 | 00,397,368 | ---- | M] (Emulex) -- C:\Windows\WinSxS\amd64_elxstor.inf_31bf3856ad364e35_6.0.6001.18000_none_08ac13ff69b034ee\elxstor.sys -- (elxstor [Disabled | Stopped])

[2008.01.19 10:08:42 | 00,047,672 | ---- | M] (Hewlett-Packard Company) -- C:\Windows\WinSxS\amd64_hpcisss.inf_31bf3856ad364e35_6.0.6001.18000_none_d59c6600292b9522\HpCISSs.sys -- (HpCISSs [Disabled | Stopped])

[2008.01.19 10:11:31 | 00,290,872 | ---- | M] (Intel Corporation) -- C:\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_0b2fedfc40256bc5\iaStorV.sys -- (iaStorV [Disabled | Stopped])

File not found -- -- (L8042Kbd [On_Demand | Running])

File not found -- -- (LHidFilt [On_Demand | Running])

File not found -- -- (lirsgt [Auto | Running])

File not found -- -- (LMouFilt [On_Demand | Running])

[2008.01.19 10:09:57 | 00,113,720 | ---- | M] (LSI Logic) -- C:\Windows\WinSxS\amd64_lsi_fc.inf_31bf3856ad364e35_6.0.6001.18000_none_c59b4ac1fa719137\lsi_fc.sys -- (LSI_FC [Disabled | Stopped])

[2008.01.19 10:09:48 | 00,105,016 | ---- | M] (LSI Logic) -- C:\Windows\WinSxS\amd64_lsi_sas.inf_31bf3856ad364e35_6.0.6001.18000_none_5b86b7f9e8ff0dc5\lsi_sas.sys -- (LSI_SAS [Disabled | Stopped])

[2008.01.19 10:09:56 | 00,113,720 | ---- | M] (LSI Logic) -- C:\Windows\WinSxS\amd64_lsi_scsi.inf_31bf3856ad364e35_6.0.6001.18000_none_f883c787da42af0c\lsi_scsi.sys -- (LSI_SCSI [Disabled | Stopped])

[2008.01.19 10:08:18 | 00,035,896 | ---- | M] (LSI Corporation) -- C:\Windows\WinSxS\amd64_megasas.inf_31bf3856ad364e35_6.0.6001.18000_none_8c5ef0c0070fb814\megasas.sys -- (megasas [Disabled | Stopped])

[2008.09.29 19:43:14 | 00,001,088 | ---- | M] () -- C:\Windows\System32\wbem\mpsdrv.mof -- (mpsdrv [On_Demand | Running])

File not found -- -- (MTsensor [On_Demand | Running])

[2008.01.19 10:10:12 | 00,128,056 | ---- | M] (NVIDIA Corporation) -- C:\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_95f95eab775c159d\nvraid.sys -- (nvraid [Disabled | Stopped])

[2008.01.19 10:08:50 | 00,054,328 | ---- | M] (NVIDIA Corporation) -- C:\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_95f95eab775c159d\nvstor.sys -- (nvstor [Disabled | Stopped])

[2008.01.19 10:12:10 | 01,221,176 | ---- | M] (QLogic Corporation) -- C:\Windows\WinSxS\amd64_ql2300.inf_31bf3856ad364e35_6.0.6001.18000_none_90b29e0f5eb4b0a1\ql2300.sys -- (ql2300 [Disabled | Stopped])

File not found -- -- (RivaTuner64 [On_Demand | Running])

[2008.11.25 23:57:04 | 00,022,944 | ---- | M] (SiSoftware) -- C:\Programfiler\SiSoftware\SiSoftware Sandra Lite 2009.SP2\WNt500x64\sandra.sys -- (SANDRA [On_Demand | Stopped])

[2006.09.30 01:51:44 | 00,023,040 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\Windows\WinSxS\amd64_macrovision-protection-safedisc_31bf3856ad364e35_6.0.6000.16386_none_b794b0d578b7ec2e\secdrv.sys -- (secdrv [Auto | Running])

[2008.01.19 10:09:28 | 00,078,392 | ---- | M] (Silicon Integrated Systems) -- C:\Windows\WinSxS\amd64_sisraid4.inf_31bf3856ad364e35_6.0.6001.18000_none_8460e59f708bb476\sisraid4.sys -- (SiSRaid4 [Disabled | Stopped])

File not found -- -- (sptd [boot | Running])

[2006.09.18 23:36:40 | 00,003,066 | ---- | M] () -- C:\Windows\System32\wbem\tcpip.mof -- (Tcpip [boot | Running])

File not found -- -- (tmlwf [system | Running])

File not found -- -- (tmpreflt [Auto | Running])

File not found -- -- (tmtdi [system | Running])

File not found -- -- (tmwfp [Auto | Running])

File not found -- -- (tmxpflt [Auto | Running])

[2008.01.19 10:11:28 | 00,284,728 | ---- | M] (ULi Electronics Inc.) -- C:\Windows\WinSxS\amd64_uliahci.inf_31bf3856ad364e35_6.0.6001.18000_none_a21b1cbb80e47096\uliahci.sys -- (uliahci [Disabled | Stopped])

[2006.11.02 13:51:19 | 00,174,696 | ---- | M] (Promise Technology, Inc.) -- C:\Windows\WinSxS\amd64_ulsata2.inf_31bf3856ad364e35_6.0.6001.18000_none_9ce1027f4768b389\ulsata2.sys -- (ulsata2 [Disabled | Stopped])

[2008.09.29 19:11:11 | 00,020,536 | ---- | M] (VIA Technologies, Inc.) -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_375215c7dcd73562\viaide.sys -- (viaide [Disabled | Stopped])

File not found -- -- (vsapint [Auto | Running])

[2008.01.19 10:10:22 | 00,149,048 | ---- | M] (VIA Technologies Inc.,Ltd) -- C:\Windows\WinSxS\amd64_vsmraid.inf_31bf3856ad364e35_6.0.6001.18000_none_508698a452d25e17\vsmraid.sys -- (vsmraid [Disabled | Stopped])

File not found -- -- (yukonx64 [On_Demand | Running])

========== (R ) Internet Explorer ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]

"Default_Page_URL"=http://go.microsoft.com/fwlink/?LinkId=69157

"Default_Search_URL"=http://go.microsoft.com/fwlink/?LinkId=54896

"Default_Secondary_Page_URL"=

"Extensions Off Page"=about:NoAdd-ons

"Local Page"=C:\Windows\SysWOW64\blank.htm

"Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896

"Security Risk Page"=about:SecurityRisk

"Start Page"=http://go.microsoft.com/fwlink/?LinkId=69157

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main]

"Local Page"=C:\Windows\system32\blank.htm

"Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896

"Start Page"=http://www.daemon-search.com/startpage

"StartPageCache"=

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyEnable" = 0

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyEnable" = 0

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main]

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyEnable" = 0

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main]

[HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main]

[HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2082656387-3555810014-1221736663-1000\SOFTWARE\Microsoft\Internet Explorer\Main]

"Local Page"=C:\Windows\system32\blank.htm

"Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896

"Start Page"=http://www.daemon-search.com/startpage

"StartPageCache"=

[HKEY_USERS\S-1-5-21-2082656387-3555810014-1221736663-1000\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2082656387-3555810014-1221736663-1000\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found

[HKEY_USERS\S-1-5-21-2082656387-3555810014-1221736663-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyEnable" = 0

========== (O1) Hosts File ==========

HOSTS File = (292080 bytes) - C:\Windows\System32\drivers\etc\Hosts

First 23 entries...

127.0.0.1 localhost

::1 localhost

127.0.0.1 www.007guard.com

127.0.0.1 007guard.com

127.0.0.1 008i.com

127.0.0.1 www.008k.com

127.0.0.1 008k.com

127.0.0.1 www.00hq.com

127.0.0.1 00hq.com

127.0.0.1 010402.com

127.0.0.1 www.032439.com

127.0.0.1 032439.com

127.0.0.1 www.0scan.com

127.0.0.1 0scan.com

127.0.0.1 1000gratisproben.com

127.0.0.1 www.1000gratisproben.com

127.0.0.1 www.1001namen.com

127.0.0.1 1001namen.com

127.0.0.1 www.100888290cs.com

127.0.0.1 100888290cs.com

127.0.0.1 www.10sek.com

127.0.0.1 10sek.com

127.0.0.1 www.1-2005-search.com

10058 more lines...

========== (O2) BHO's ==========

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\]

{18DF081C-E8AD-4283-A596-FA578C2EBDC3} (HKLM) -- C:\Programfiler (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll File not found

{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found

{9030D464-4C02-4ABF-8ECC-5164760863C6} (HKLM) -- C:\Programfiler (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll File not found

{DBC80044-A445-435b-BC74-9C25C1C588A9} (HKLM) -- C:\Programfiler (x86)\Java\jre6\bin\jp2ssv.dll File not found

========== (O3) Toolbars ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]

"{32099AAC-C132-4136-9E9A-4E364A424E17}" (HKLM) -- C:\Programfiler (x86)\DAEMON Tools Toolbar\DTToolbar.dll File not found

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]

"{32099AAC-C132-4136-9E9A-4E364A424E17}" (HKLM) -- C:\Programfiler (x86)\DAEMON Tools Toolbar\DTToolbar.dll File not found

[HKEY_USERS\S-1-5-21-2082656387-3555810014-1221736663-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]

"{32099AAC-C132-4136-9E9A-4E364A424E17}" (HKLM) -- C:\Programfiler (x86)\DAEMON Tools Toolbar\DTToolbar.dll File not found

========== (O4) Run Keys ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" File not found

"avgnt"="C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min File not found

"Cpu Level Up help"=C:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe ()

"CPU Power Monitor"="C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe" ()

"LanguageShortcut"="C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe" File not found

"RemoteControl"="C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe" File not found

"SoundMAXPnP"=C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe File not found

"SoundTray"="C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe" File not found

"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun File not found

"SunJavaUpdateSched"="C:\Program Files (x86)\Java\jre6\bin\jusched.exe" File not found

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTSyncU.exe"="C:\Program Files (x86)\Creative\Sync Manager Unicode\CTSyncU.exe" File not found

"ehTray.exe"=C:\Windows\ehome\ehTray.exe (Microsoft Corporation)

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"OE"=C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (Trend Micro Inc.)

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"OE"=C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (Trend Micro Inc.)

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"OE"=C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (Trend Micro Inc.)

"Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem File not found

"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter (Microsoft Corporation)

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"OE"=C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (Trend Micro Inc.)

"Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem File not found

"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2082656387-3555810014-1221736663-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTSyncU.exe"="C:\Program Files (x86)\Creative\Sync Manager Unicode\CTSyncU.exe" File not found

"ehTray.exe"=C:\Windows\ehome\ehTray.exe (Microsoft Corporation)

========== (O6 & O7) Current Version Policies ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]

"NoActiveDesktop"=1

"ForceActiveDesktopOn"=0

"NoActiveDesktopChanges"=0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]

"ConsentPromptBehaviorAdmin"=2

"ConsentPromptBehaviorUser"=1

"EnableInstallerDetection"=1

"EnableLUA"=0

"EnableSecureUIAPaths"=1

"EnableVirtualization"=1

"PromptOnSecureDesktop"=1

"ValidateAdminCodeSignatures"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"scforceoption"=0

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"FilterAdministratorToken"=0

"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats]

"CF_TEXT"=1

"CF_BITMAP"=2

"CF_OEMTEXT"=7

"CF_DIB"=8

"CF_PALETTE"=9

"CF_UNICODETEXT"=13

"CF_DIBV5"=17

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]

"DisableRegistryTools"=0

[HKEY_USERS\S-1-5-21-2082656387-3555810014-1221736663-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]

"DisableRegistryTools"=0

========== (O13) Default Prefixes ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]

""=http://

========== (O15) Trusted Sites ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]

48 domain(s) and sub-domain(s) not assigned to a zone.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]

48 domain(s) and sub-domain(s) not assigned to a zone.

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]

48 domain(s) and sub-domain(s) not assigned to a zone.

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]

48 domain(s) and sub-domain(s) not assigned to a zone.

[HKEY_USERS\S-1-5-21-2082656387-3555810014-1221736663-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]

48 domain(s) and sub-domain(s) not assigned to a zone.

========== (O16) DPF ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\]

{39B0684F-D7BF-4743-B050-FDC3F48F7E3B}: http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab -- Reg Error: Key does not exist or could not be opened.

{8AD9C840-044E-11D1-B3E9-00805F499D93}: http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_13

{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}: http://fpdownload.macromedia.com/get/flash...r/ultrashim.cab -- Reg Error: Key does not exist or could not be opened.

{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_07

{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_13

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_13

{D27CDB6E-AE6D-11CF-96B8-444553540000}: http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab -- Shockwave Flash Object

========== (O17) DNS Name Servers ==========

{A80B7744-6064-4CA5-8470-36DC60B566E5} (Servers: | Description: Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller)

========== (O20) HKLM Winlogon Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

"Shell"=explorer.exe

>[2008.10.29 08:29:41 | 02,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\explorer.exe

========== (O21) SSODL Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

"WebCheck"={E6FB5E20-DE35-11CF-9C87-00AA005127ED} (HKLM) -- C:\Windows\SysWOW64\webcheck.dll (Microsoft Corporation)

========== HKLM *SecurityProviders* ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders]

"SecurityProviders"=credssp.dll

>[2008.01.19 09:33:59 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll

========== LSA *Security Packages* ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"Security Packages"=kerberos,msv1_0,schannel,wdigest,tspkg,

>[2008.01.19 09:36:42 | 00,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSpkg.dll

========== Safeboot Options ==========

"AlternateShell"=cmd.exe

========== CDRom AutoRun Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]

"AutoRun" = 1

========== MountPoints2 ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0af19d3e-8e43-11dd-ac20-001fc642a31d}\Shell]

""=AutoRun

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0af19d3e-8e43-11dd-ac20-001fc642a31d}\Shell\AutoRun\command]

""=E:\AUTORUN.EXE -- File not found

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9f98d116-a1cb-11dd-a431-001fc642a31d}\Shell]

""=AutoRun

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9f98d116-a1cb-11dd-a431-001fc642a31d}\Shell\AutoRun\command]

""=F:\autorun.exe -- File not found

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9f98d117-a1cb-11dd-a431-001fc642a31d}\Shell]

""=AutoRun

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9f98d117-a1cb-11dd-a431-001fc642a31d}\Shell\AutoRun\command]

""=G:\autorun.exe -- File not found

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9f98d118-a1cb-11dd-a431-001fc642a31d}\Shell]

""=AutoRun

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9f98d118-a1cb-11dd-a431-001fc642a31d}\Shell\AutoRun\command]

""=H:\FalloutLauncher.exe -- File not found

========== Files/Folders - Created Within 14 Days ==========

[2 C:\*.tmp files]

[26 C:\Windows\*.tmp files]

[6 C:\ProgramData\*.tmp files]

[2009.05.11 20:44:33 | 00,422,912 | ---- | C] (OldTimer Tools) -- C:\Users\Jonas\Desktop\OTViewIt.exe

[2009.05.11 18:23:16 | 06,291,456 | -H-- | C] () -- C:\Users\Jonas\AppData\Local\IconCache.db

[2009.05.11 18:21:22 | 00,318,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CF18593.exe

[2009.05.10 21:49:18 | 00,000,000 | -HSD | C] -- C:\Config.Msi

[2009.05.10 14:44:08 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft

[2009.05.10 14:43:53 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live

[2009.05.10 14:43:42 | 00,000,000 | ---D | C] -- C:\Windows\PCHEALTH

[2009.05.09 02:33:10 | 00,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Users\Jonas\Desktop\HiJackThis.exe

[2009.05.09 02:32:59 | 00,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com

[2009.05.09 02:32:20 | 00,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\SUPERAntiSpyware.com

[2009.05.09 02:32:20 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\SUPERAntiSpyware

[2009.05.08 20:19:49 | 00,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe

[2009.05.08 20:19:49 | 00,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll

[2009.05.08 20:19:49 | 00,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll

[2009.05.08 20:18:13 | 00,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll

[2009.05.08 20:18:13 | 00,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\advpack.dll

[2009.05.08 20:18:13 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll

[2009.05.08 20:18:13 | 00,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardie.dll

[2009.05.08 20:18:12 | 00,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll

[2009.05.08 20:18:12 | 00,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll

[2009.05.08 20:18:12 | 00,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe

[2009.05.08 20:18:12 | 00,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tdc.ocx

[2009.05.08 20:18:12 | 00,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll

[2009.05.08 20:18:12 | 00,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll

[2009.05.08 20:18:12 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\corpol.dll

[2009.05.08 20:18:12 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe

[2009.05.08 20:18:11 | 01,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb

[2009.05.08 20:18:11 | 00,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll

[2009.05.08 20:18:11 | 00,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll

[2009.05.08 20:18:11 | 00,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll

[2009.05.08 20:18:11 | 00,057,667 | ---- | C] () -- C:\Windows\System32\ieuinit.inf

[2009.05.08 20:18:11 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll

[2009.05.08 20:18:11 | 00,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll

[2009.05.08 20:18:10 | 00,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll

[2009.05.08 20:18:10 | 00,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll

[2009.05.08 20:18:10 | 00,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll

[2009.05.08 20:18:09 | 00,391,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll

[2009.05.08 20:18:09 | 00,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webcheck.dll

[2009.05.08 20:18:09 | 00,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll

[2009.05.08 20:18:09 | 00,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll

[2009.05.08 20:18:09 | 00,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll

[2009.05.08 20:18:09 | 00,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\occache.dll

[2009.05.08 20:18:09 | 00,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll

[2009.05.08 20:18:09 | 00,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmled.dll

[2009.05.08 20:18:09 | 00,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll

[2009.05.08 20:18:08 | 00,914,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll

[2009.05.08 20:18:08 | 00,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll

[2009.05.08 20:18:08 | 00,420,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vb script:{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} (HKLM) [Microsoft HTML Javascript Pluggable Protocol])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

File not found C:\Programfiler (x86)\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (livecall:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2009.03.08 13:34:55 | 01,206,784 | ---- | M] (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll (local:{79eac9e7-baf9-11ce-8c82-00aa004ba90b} (HKLM) [file:, local: Asychronous Pluggable Protocol Handler])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2009.03.08 13:41:15 | 05,937,152 | ---- | M] (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll (mailto:{3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} (HKLM) [Microsoft HTML Mailto Pluggable Protocol])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2009.03.08 13:34:55 | 01,206,784 | ---- | M] (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll (mk:{79eac9e6-baf9-11ce-8c82-00aa004ba90b} (HKLM) [mk: Asychronous Pluggable Protocol Handler])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

File not found C:\Programfiler (x86)\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (msnim:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2009.03.08 13:41:15 | 05,937,152 | ---- | M] (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll (res:{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} (HKLM) [Microsoft HTML Resource Pluggable Protocol])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2008.01.19 09:35:15 | 01,544,704 | ---- | M] (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll (tv:{CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} (HKLM) [TV: Pluggable Protocol])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2009.03.08 13:41:15 | 05,937,152 | ---- | M] (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll (vb script:{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} (HKLM) [Microsoft HTML Javascript Pluggable Protocol])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

File not found C:\Programfiler (x86)\Windows Live\Mail\mailcomm.dll (wlmailhtml:{03C514A3-1EFB-4856-9F99-10D7BE1653C0} (HKLM) [Windows Live Mail HTML Asynchronous Pluggable Protocol Handler])

========== (O18) Protocol Filters ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\] - Protocol Filters

[2009.03.08 13:34:55 | 01,206,784 | ---- | M] (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll deflate:{8f6b0360-b80d-11d0-a9b3-006097942311} (HKLM) [AP encoding/decoding Filters]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\] - Protocol Filters

[2009.03.08 13:34:55 | 01,206,784 | ---- | M] (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll gzip:{8f6b0360-b80d-11d0-a9b3-006097942311} (HKLM) [AP encoding/decoding Filters]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{000E79B7-E725-4F01-870A-C12942B7F8E4}"=Crysis®

"{021C4C4F-C93C-4425-BFFD-C2D16776BFAE}"=Visual C++ 8.0 Runtime Setup Package (x64)

"{02627ee5-eaca-4742-a9cc-e687631773e4}"=Nero ShowTime

"{048298C9-A4D3-490B-9FF9-AB023A9238F3}"=Steam

"{04AA8DF8-D7B9-AE86-F4A6-5257BD20DF53}"=CCC Help English

"{086a7d8c-0a38-4c7f-819a-620275550d5c}"=Nero Burning ROM Help

"{08B3869E-D282-424C-9AFC-870E04A4BA14}"=Rockstar Games Social Club

"{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}"=WD Diagnostics

"{0B533F34-22BA-4301-BAF8-EA1CEDB06F9E}"=Quake Live Mozilla Plugin

"{0CE1A6C0-F3F7-49E6-8F9D-2431F9827441}"=Guitar Hero III

"{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}"=LightScribe System Software 1.14.17.1

"{183AB714-2AA6-9073-2D2F-60B7FEC2F653}"=Catalyst Control Center Graphics Full Existing

"{1AEBE79A-63F4-0FB2-0269-282FB8CC5129}"=Catalyst Control Center HydraVision Full

"{1c00c7c5-e615-4139-b817-7f4003de68c0}"=Nero PhotoSnap Help

"{20400dbd-e6db-45b8-9b6b-1dd7033818ec}"=Nero InfoTool

"{205C6BDD-7B73-42DE-8505-9A093F35A238}"=Opplastingsverktøy for Windows Live

"{21BB0483-3D43-46A7-A63F-72C702701438}"=GameShadow

"{226EF119-7B43-4F08-8348-ED66A89BE63C}"=FEAR Perseus Mandate

"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}"=MSVCRT

"{2348b586-c9ae-46ce-936c-a68e9426e214}"=Nero StartSmart Help

"{26A24AE4-039D-4CA4-87B4-2F83216010FF}"=Java 6 Update 13

"{310BC5E2-31AF-49BB-904D-E71EB93645DC}"=AI Suite

"{3248F0A8-6813-11D6-A77B-00B0D0160070}"=Java 6 Update 7

"{33cf58f5-48d8-4575-83d6-96f574e4d83a}"=Nero DriveSpeed

"{33FE4D58-2D62-4969-8B0F-7F7ACBB7BD23}"=Windows Live Messenger

"{359cfc0a-beb1-440d-95ba-cf63a86da34f}"=Nero Recode

"{368ba326-73ad-4351-84ed-3c0a7a52cc53}"=Nero Rescue Agent

"{37288DA4-0426-2B76-ED1F-6E2DC8DB291A}"=Catalyst Control Center Graphics Full New

"{3B4A0DDA-2AAE-4467-A803-BF2520CD3D06}"=Påloggingsassistent for Windows Live

"{3B4E636E-9D65-4D67-BA61-189800823F52}"=Windows Live Communications Platform

"{3E7940A4-495B-4DC5-B5C9-D2EE1DE9E5EF}"=Call of Juarez

"{3F425F12-3A1B-4511-97B2-E2BB4701B745}"=Crysis Wars®

"{43e39830-1826-415d-8bae-86845787b54b}"=Nero Vision

"{4847c7d7-640c-4c8d-91e9-6cea829e509a}"=Nero 9 Trial

"{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}"=Microsoft Games for Windows - LIVE

"{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}"=Junk Mail filter update

"{50E4FCC7-90B9-48C6-9D17-7AE66F282878}"=Juiced2_HIN

"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}"=neroxml

"{579BA58C-F33D-4970-9953-B94B43768AC3}"=Grand Theft Auto IV

"{595a3116-40bb-4e0f-a2e8-d7951da56270}"=NeroExpress

"{5A0B7BA5-4682-4273-81C2-69B17E649103}"=GRID

"{5d9be3c1-8ba4-4e7e-82fd-9f74fa6815d1}"=Nero Vision

"{5e08ecd1-c98e-4711-bf65-8fd736b3f969}"=Nero RescueAgent Help

"{60c731fb-c951-41ce-ad41-8e54c8594609}"=Nero Disc Copy Gadget Help

"{62ac81f6-bdd3-4110-9d36-3e9eaab40999}"=Nero CoverDesigner

"{64F67489-76BB-4CDD-A236-F954BE774B35}"=NVIDIA PhysX

"{657201DD-30C8-4E50-88AD-164B3812E8F5}"=Framebuffer Crysis WARHEAD Benchmark Tool

"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}"=PowerDVD

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}"=Windows Media Player Firefox Plugin

"{6D49FC3F-1C9C-9A22-ADAB-17356CEA1BF5}"=ccc-core-static

"{716B866A-C4D3-4D58-9DE7-3780A5017344}"=Windows Live Essentials

"{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable

"{7353BAE6-5E49-46C4-A9B5-8A269A313789}"=Crysis WARHEAD®

"{7748ac8c-18e3-43bb-959b-088faea16fb2}"=Nero StartSmart

"{77DCDCE3-2DED-62F3-8154-05E745472D07}"=Acrobat.com

"{77e33d87-255e-413e-9c8d-eed2a7f9bebf}"=Nero Live Help

"{7829db6f-a066-4e40-8912-cb07887c20bb}"=Nero BurnRights

"{789289CA-F73A-4A16-A331-54D498CE069F}"=Ventrilo Client

"{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}"=Activision®

"{83202942-84b3-4c50-8622-b8c0aa2d2885}"=Nero Express Help

"{8356F0AB-7382-88C9-FF97-1687DB17703A}"=Catalyst Control Center InstallProxy

"{85243696-5e58-4357-9cf8-3498c609941d}"=NeroLiveGadget Help

"{869200db-287a-4dc0-b02b-2b6787fbcd4c}"=Nero DiscSpeed

"{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}"=Battlefield Heroes

"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}"=Choice Guard

"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}"=Logitech Desktop Messenger

"{931C37FC-594D-43A9-B10F-A2F2B1F03498}"=Call of Duty® 4 - Modern Warfare 1.7 Patch

"{9455959E-D588-EFAE-329C-F66CC797F32A}"=Adobe Media Player

"{974C4B12-4D02-4879-85E0-61C95CC63E9E}"=Fallout 3

"{97EA42A5-3FAB-4948-B74D-F3C44B13F5CE}"=Crysis WARHEAD® Patch

"{98613C99-1399-416C-A07C-1EE1C585D872}"=SeaTools for Windows

"{9862E0CB-4727-4FFC-963A-E22A9E9EC10C}"=Creative ZEN V Series (R2)

"{98a67610-a3b5-4098-a423-3708040026d3}"="Nero SoundTrax Help

"{9A996B6A-846E-4A89-B9C4-17546B7BE49F}"=Burnout Paradise The Ultimate Box

"{9e82b934-9a25-445b-b8df-8012808074ac}"=Nero PhotoSnap

"{9e9fdde6-2c26-492a-85a0-05646b3f2795}"=NeroLiveGadget

"{A05DD3BB-90A7-EC2D-D4F4-1439183ECB1A}"=Catalyst Control Center Graphics Previews Common

"{a209525b-3377-43f4-b886-32f6b6e7356f}"=Nero WaveEditor

"{A2BCA9F1-566C-4805-97D1-7FDC93386723}"=Adobe AIR

"{A49F249F-0C91-497F-86DF-B2585E8E76B7}"=Microsoft Visual C++ 2005 Redistributable

"{A5D9CDBD-B344-1B84-8B40-9F0A2C8D5D85}"=Catalyst Control Center Graphics Previews Vista

"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}"=ImagXpress

"{ABBFD29E-6744-D0E4-4353-5089DAA21CAA}"=Catalyst Control Center Core Implementation

"{AC76BA86-7AD7-1033-7B44-A91000000001}"=Adobe Reader 9.1

"{ad6bc5cc-2ef0-49c4-b33d-cdc8b2c4dc80}"=Nero Recode Help

"{AEA1A0DE-99F6-4036-2839-E48DA43CB76E}"=Skins

"{AEDBD563-24BB-4EE3-8366-A654DAC2D988}"=Mirror's Edge™

"{b1adf008-e898-4fe2-8a1f-690d9a06acaf}"=DolbyFiles

"{b2ec4a38-b545-4a00-8214-13fe0e915e6d}"=Advertising Center

"{b78120a0-cf84-4366-a393-4d0a59bc546c}"=Menu Templates - Starter Kit

"{BCB002B8-493D-4C3F-A968-774FC0881044}"=Nero 7 Essentials

"{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}"=Nero ControlCenter

"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}"=Futuremark SystemInfo

"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}"=Creative MediaSource 5

"{c5a7cb6c-e76d-408f-ba0e-85605420fe9d}"=SoundTrax

"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}"=Microsoft .NET Framework 1.1

"{cc019e3f-59d2-4486-8d4b-878105b62a71}"=Nero DiscSpeed

"{CCA238D3-4FFC-4B3E-B34F-3AD78AD11523}"=Windows Live Mail

"{ce96f5a5-584d-4f8f-aa3e-9baed413db72}"=Nero CoverDesigner Help

"{d025a639-b9c9-417d-8531-208859000af8}"=NeroBurningROM

"{D3B1C799-CB73-42DE-BA0F-2344793A095C}"=Catalyst Control Center - Branding

"{D4E5A687-797D-44B1-8F96-4FD7A24166A9}"=DEVIL MAY CRY 4

"{D80A6A73-E58A-4673-AFF5-F12D7110661F}"=Call of Duty® - World at War

"{d9dcf92e-72eb-412d-ac71-3b01276e5f8b}"=Nero ShowTime

"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}"=Ad-Aware

"{df6a95f5-adc1-406a-bdc6-2aa7cc0182aa}"=Nero Live

"{E1D3B4A5-CB7D-572B-A807-E1D266DA1DD2}"=Catalyst Control Center Graphics Light

"{E48469CC-635E-4FD5-A122-1497C286D217}"=Call of Duty® 4 - Modern Warfare

"{e498385e-1c51-459a-b45f-1721e37aa1a0}"=Movie Templates - Starter Kit

"{e5c7d048-f9b4-4219-b323-8bdb01a2563d}"=Nero DriveSpeed

"{e8631efb-6b9a-426c-b1ce-e7173ca26bf8}"=Nero WaveEditor Help

"{e8a80433-302b-4ff1-815d-fcc8eac482ff}"=Nero Installer

"{F0A37341-D692-11D4-A984-009027EC0A9C}"=SoundMAX

"{f1861f30-3419-44db-b2a1-c274825698b3}"=Nero Disc Copy Gadget

"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}"=Logitech SetPoint

"{f4041dce-3fe1-4e18-8a9e-9de65231ee36}"=Nero ControlCenter

"{F4DBD804-BB68-B437-34CA-619267E43596}"=Catalyst Control Center Graphics Previews Vista

"{f6bdd7c5-89ed-4569-9318-469aa9732572}"=Nero BurnRights

"{fbcdfd61-7dcf-4e71-9226-873ba0053139}"=Nero InfoTool

"{FD052FB9-FE90-4438-B355-15EDC89D8FB1}"=Microsoft Games for Windows - LIVE Redistributable

"{FD416706-875C-4B0B-A23A-9E740DAE029E}"=Tom Clancy's Rainbow Six Vegas 2

"{FE0646A7-19D0-41B4-A2BB-2C35D644270D}"=Windows Live OneCare safety scanner

"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}"=Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

"{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}"=Disc2Phone

"Adobe AIR"=Adobe AIR

"Adobe Flash Player ActiveX"=Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin"=Adobe Flash Player 10 Plugin

"AntiVir PersonalEdition Classic"=Avira AntiVir Personal - Free Antivirus

"CCleaner"=CCleaner (remove only)

"CDisplay_is1"=CDisplay 1.8

"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1"=Acrobat.com

"Creative Removable Disk Manager"=Creative Removable Disk Manager

"Crysis WARHEAD®"=Crysis WARHEAD®

"Crysis WARHEAD® Patch"=Crysis WARHEAD® Patch

"Crysis Wars®"=Crysis Wars®

"DAEMON Tools Toolbar"=DAEMON Tools Toolbar

"Defraggler"=Defraggler (remove only)

"Fraps"=Fraps

"HijackThis"=HijackThis 2.0.2

"Host OpenAL (ADI)"=Host OpenAL (ADI)

"InstallShield_{3E7940A4-495B-4DC5-B5C9-D2EE1DE9E5EF}"=Call of Juarez

"InstallShield_{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}"=X-Men Origins - Wolverine

"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}"=Call of Duty® 4 - Modern Warfare 1.7 Patch

"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}"=Call of Duty® - World at War

"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}"=Call of Duty® 4 - Modern Warfare

"KLiteCodecPack_is1"=K-Lite Codec Pack 4.3.1 (Full)

"Malwarebytes' Anti-Malware_is1"=Malwarebytes' Anti-Malware

"Microsoft .NET Framework 1.1 (1033)"=Microsoft .NET Framework 1.1

"Mozilla Firefox (3.0.10)"=Mozilla Firefox (3.0.10)

"OpenAL"=OpenAL

"PunkBusterSvc"=PunkBuster Services

"RivaTuner"=RivaTuner v2.11

"S.T.A.L.K.E.R. - Clear Sky_is1"=S.T.A.L.K.E.R. - Clear Sky [v1.0007]

"Steam App 100"=Condition Zero Deleted Scenes

"Steam App 12900"=Audiosurf

"Steam App 13210"=Unreal Tournament 3

"Steam App 215"=Source SDK Base

"Steam App 220"=Half-Life 2

"Steam App 240"=Counter-Strike: Source

"Steam App 30"=Day of Defeat

"Steam App 320"=Half-Life 2: Deathmatch

"Steam App 340"=Half-Life 2: Lost Coast

"Steam App 380"=Half-Life 2: Episode One

"Steam App 40"=Deathmatch Classic

"Steam App 400"=Portal

"Steam App 420"=Half-Life 2: Episode Two

"Steam App 440"=Team Fortress 2

"Steam App 500"=Left 4 Dead

"Steam App 510"=Left 4 Dead Dedicated Server

"Steam App 60"=Ricochet

"Steam App 80"=Condition Zero

"SysInfo"=Creative System Information

"SystemRequirementsLab"=System Requirements Lab

"Teamspeak 2 RC2_is1"=TeamSpeak 2 RC2

"UnityWebPlayer"=Unity Web Player

"VentriloMIX"=VentriloMIX

"VLC media player"=VLC media player 0.9.2

"Windows Live OneCare safety scanner"=Windows Live OneCare safety scanner

"WinLiveSuite_Wave3"=Windows Live Essentials

"WinRAR archiver"=WinRAR archiver

"World of Warcraft"=World of Warcraft

"ZENcast Organizer"=ZENcast Organizer

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"uTorrent"=µTorrent

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2082656387-3555810014-1221736663-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"uTorrent"=µTorrent

========== Last 10 Event Log Errors ==========

[ Application Events ]

Error - 11.05.2009 13:19:59 | Computer Name = Jonas-PC | Source = Windows Search Service | ID = 3013

Description =

Error - 11.05.2009 13:19:59 | Computer Name = Jonas-PC | Source = Windows Search Service | ID = 3013

Description =

Error - 11.05.2009 13:19:59 | Computer Name = Jonas-PC | Source = Windows Search Service | ID = 3013

Description =

Error - 11.05.2009 13:19:59 | Computer Name = Jonas-PC | Source = Windows Search Service | ID = 3013

Description =

Error - 11.05.2009 14:40:35 | Computer Name = Jonas-PC | Source = SideBySide | ID = 16842830

Description = Generering av aktiveringskontekst mislyktes for C:\Program Files (x86)\Nero\Nero

9\Nero PhotoSnap\PhotoSnapViewer.exe.Manifest. Feil i manifest- eller policyfilen

i linje . En komponentversjon som kreves av programmet, er i konflikt med en annen

komponentversjon som allerede er aktiv. Komponentene i konflikt er:. Komponent 1:

C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc.manifest.

Komponent

2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_152e7382f3bd50c6.manifest.

Error - 11.05.2009 14:40:35 | Computer Name = Jonas-PC | Source = SideBySide | ID = 16842830

Description = Generering av aktiveringskontekst mislyktes for C:\Program Files (x86)\Nero\Nero

9\Nero PhotoSnap\PhotoSnapViewer.exe.Manifest. Feil i manifest- eller policyfilen

i linje . En komponentversjon som kreves av programmet, er i konflikt med en annen

komponentversjon som allerede er aktiv. Komponentene i konflikt er:. Komponent 1:

C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc.manifest.

Komponent

2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_152e7382f3bd50c6.manifest.

Error - 11.05.2009 14:40:37 | Computer Name = Jonas-PC | Source = SideBySide | ID = 16842830

Description = Generering av aktiveringskontekst mislyktes for C:\Program Files (x86)\Nero\Nero

9\Nero Recode\Recode.exe.Manifest. Feil i manifest- eller policyfilen i linje

. En komponentversjon som kreves av programmet, er i konflikt med en annen komponentversjon

som allerede er aktiv. Komponentene i konflikt er:. Komponent 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc.manifest.

Komponent

2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_152e7382f3bd50c6.manifest.

Error - 11.05.2009 14:40:37 | Computer Name = Jonas-PC | Source = SideBySide | ID = 16842830

Description = Generering av aktiveringskontekst mislyktes for C:\Program Files (x86)\Nero\Nero

9\Nero Recode\Recode.exe.Manifest. Feil i manifest- eller policyfilen i linje

. En komponentversjon som kreves av programmet, er i konflikt med en annen komponentversjon

som allerede er aktiv. Komponentene i konflikt er:. Komponent 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc.manifest.

Komponent

2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_152e7382f3bd50c6.manifest.

Error - 11.05.2009 14:43:47 | Computer Name = Jonas-PC | Source = Windows Search Service | ID = 3013

Description =

Error - 11.05.2009 14:45:37 | Computer Name = Jonas-PC | Source = Application Hang | ID = 1002

Description = Programmet OTViewIt.exe versjon 1.0.21.0 sluttet å samhandle med Windows

og ble lukket. Hvis du vil se om det finnes mer informasjon tilgjengelig om problemet,

ser du i problemhistorikken i kontrollpanelet for Problemrapportering og -løsninger.

Prosess-ID:

1158 Starttidspunkt: 01c9d268939f18f6 Avslutningstidspunkt: 0

[ Media Center Events ]

Error - 16.11.2008 19:51:24 | Computer Name = Jonas-PC | Source = Media Center Guide | ID = 0

Description = Hendelsesinfo: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError