Treg pc, kjørt virus, spyware og ccleaner scan

skylinepower · 10. april 2012

Kjørte virusscan og kom opp noen trusler, slettet de.

Kjørte så en adaware scan den oppdaget vel 5-6stykk.. som visstnok var skumle, så slettet de.

Leste at jeg burde ta en Ccleaner scan gjorde det også, men ble ikke noe raskere:/

Her går pc'en på tomgang og tvert jeg bare rører musa så går den på 100% så det på slutten der er bare jeg som drar musa frem og tilbake.

Her er prosessene, har åpnet paint og chrome her da, men uttenom de så skal det være likt.

Synes også jeg hadde lite plass på C-disken med alt fra 200-500mb ledig plass, så slettet DropBox og har nå over 2Gb med ledigminne men merket ikke noe forskjell i det heller.

Håper noen kan gi meg noen gode råd:)

Kan hende dere må høyreklikke og åpne bilde i ny fane for å få det større.

Dr.Geek · 10. april 2012

Hai,

post alle loggene av de scannene som du gjennomførte. Hva ble funnet?

Scan med HitmanPro. Post loggen (Export scan result to XML file)

http://www.surfright.nl/en/hitmanpro

Post meg en OTL Log: (OTL.txt)

http://www.geekstogo.com/1888/otl-by-oldtimer-a-modern-replacement-for-hijackthis/

skylinepower · 11. april 2012

Brukte HitmanPro men fikk ingen logg + dne slettet alle automatisk..

Her er loggen fra OTL

1023,48 Mb Total Physical Memory | 582,00 Mb Available Physical Memory | 56,86% Memory free

2,40 Gb Paging File | 2,10 Gb Available in Paging File | 87,61% Paging File free

Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programfiler

Drive C: | 11,84 Gb Total Space | 2,32 Gb Free Space | 19,60% Space Free | Partition Type: NTFS

Drive D: | 76,68 Gb Total Space | 1,09 Gb Free Space | 1,42% Space Free | Partition Type: NTFS

Drive E: | 3,94 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Drive F: | 123,04 Gb Total Space | 1,69 Gb Free Space | 1,37% Space Free | Partition Type: NTFS

Drive G: | 3,70 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Drive H: | 534,43 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Drive J: | 98,00 Gb Total Space | 5,75 Gb Free Space | 5,87% Space Free | Partition Type: NTFS

Drive L: | 599,52 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: SKYLINEPOWER | User Name: Jonas | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

exefile [open] -- "%1" %*

InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- J:\Programfiler\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- J:\Programfiler\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"AntiVirusDisableNotify" = 0

"FirewallDisableNotify" = 0

"UpdatesDisableNotify" = 0

"AntiVirusOverride" = 0

"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]

"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

"57853:TCP" = 57853:TCP:*:Enabled:Pando Media Booster

"57853:UDP" = 57853:UDP:*:Enabled:Pando Media Booster

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"8674:TCP" = 8674:TCP:*:Enabled:BitComet 8674 TCP

"8674:UDP" = 8674:UDP:*:Enabled:BitComet 8674 UDP

"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007

"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

"57853:TCP" = 57853:TCP:*:Enabled:Pando Media Booster

"57853:UDP" = 57853:UDP:*:Enabled:Pando Media Booster

"8396:TCP" = 8396:TCP:*:Disabled:League of Legends Launcher

"8396:UDP" = 8396:UDP:*:Disabled:League of Legends Launcher

"6932:TCP" = 6932:TCP:*:Disabled:League of Legends Launcher

"6932:UDP" = 6932:UDP:*:Disabled:League of Legends Launcher

"6882:TCP" = 6882:TCP:*:Disabled:League of Legends Launcher

"6882:UDP" = 6882:UDP:*:Disabled:League of Legends Launcher

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"C:\Programfiler\Pando Networks\Media Booster\PMB.exe" = C:\Programfiler\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Programfiler\LimeWire\LimeWire.exe" = C:\Programfiler\LimeWire\LimeWire.exe:*:Enabled:LimeWire

"C:\Programfiler\Grisoft\AVG7\avginet.exe" = C:\Programfiler\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe

"C:\Programfiler\Grisoft\AVG7\avgamsvr.exe" = C:\Programfiler\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe

"C:\Programfiler\Grisoft\AVG7\avgcc.exe" = C:\Programfiler\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe

"J:\Programfiler\LimeWire\LimeWire.exe" = J:\Programfiler\LimeWire\LimeWire.exe:*:Enabled:LimeWire

"C:\Programfiler\Opera\Opera.exe" = C:\Programfiler\Opera\Opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)

"J:\Programfiler\Counter-Strike 1.6\hl.exe" = J:\Programfiler\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher -- (Valve)

"J:\Programfiler\oDC\oDC.exe" = J:\Programfiler\oDC\oDC.exe:*:Enabled:oDC

"C:\Programfiler\Joost\xulrunner\tvprunner.exe" = C:\Programfiler\Joost\xulrunner\tvprunner.exe:*:Enabled:tvprunner -- (Joost Technologies B.V.)

"C:\Programfiler\Nokia\Nokia Software Updater\nsu_ui_client.exe" = C:\Programfiler\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Disabled:Nokia Software Updater

"C:\Programfiler\Vuze\Azureus.exe" = C:\Programfiler\Vuze\Azureus.exe:*:Enabled:Azureus -- (Vuze Inc.)

"J:\Programfiler\VideoLAN\VLC\vlc.exe" = J:\Programfiler\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player -- ()

"C:\Programfiler\Spotify\spotify.exe" = C:\Programfiler\Spotify\spotify.exe:*:Enabled:Spotify -- (Spotify AB)

"J:\Programfiler\Spotify\spotify.exe" = J:\Programfiler\Spotify\spotify.exe:*:Enabled:Spotify -- (Spotify Ltd)

"C:\Programfiler\Skype\Plugin Manager\skypePM.exe" = C:\Programfiler\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager

"J:\Programfiler\uTorrent\uTorrent.exe" = J:\Programfiler\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)

"C:\Documents and Settings\Jonas\Programdata\Dropbox\bin\Dropbox.exe" = C:\Documents and Settings\Jonas\Programdata\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox

"C:\Programfiler\Pando Networks\Media Booster\PMB.exe" = C:\Programfiler\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()

"J:\Riot Games\League of Legends\game\League of Legends.exe" = J:\Riot Games\League of Legends\game\League of Legends.exe:*:Disabled:League of Legends Game Client

"J:\Riot Games\League of Legends\air\LolClient.exe" = J:\Riot Games\League of Legends\air\LolClient.exe:*:Disabled:League of Legends Lobby

"N:\Programfiler\Landwirtschafts Simulator 2011\FarmingSimulator2011.exe" = N:\Programfiler\Landwirtschafts Simulator 2011\FarmingSimulator2011.exe:*:Enabled:Landwirtschafts Simulator 2011

"N:\Programfiler\Landwirtschafts Simulator 2011\game.exe" = N:\Programfiler\Landwirtschafts Simulator 2011\game.exe:*:Enabled:Landwirtschafts Simulator 2011

"J:\Programfiler\Steam\steamapps\jonas405\counter-strike\hl.exe" = J:\Programfiler\Steam\steamapps\jonas405\counter-strike\hl.exe:*:Enabled:Counter-Strike -- (Valve)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{003E4AFB-085E-4599-B53E-A15736948F2A}" = Hot Rod American Street Drag

"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up

"{1219497F-FA96-4D8E-9571-9C27A2A66B38}" = Opera 9.51

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Opplastingsverktøy for Windows Live

"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86

"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java 6 Update 31

"{2C564A58-BD28-4926-95E1-EC7812FCA44F}" = Gigabyte Wireless LAN Card

"{2F750C77-1FEC-44F9-88CC-2CE322EBD61E}" = Microsoft Games for Windows - LIVE Redistributable

"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java 6 Update 2

"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java 6 Update 3

"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java 6 Update 5

"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java 6 Update 7

"{350C9414-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{3B4A0DDA-2AAE-4467-A803-BF2520CD3D06}" = Påloggingsassistent for Windows Live

"{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}" = DAEMON Tools

"{581CE7EA-A30D-0000-1211-088635773309}" = Jensen Scandinavia AirLink 6554

"{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic

"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}" = Text-To-Speech-Runtime

"{7E20EFE6-E604-48C6-8B39-BA4742F2CDB4}" = Zune Desktop Theme

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12

"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007

"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007

"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007

"{90120000-003B-0000-0000-0000000FF1CE}" = Microsoft Office Project Professional 2007

"{90120000-0051-0000-0000-0000000FF1CE}" = Microsoft Office Visio Professional 2007

"{90120000-0054-0409-0000-0000000FF1CE}" = Microsoft Office Visio MUI (English) 2007

"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007

"{90120000-00B4-0409-0000-0000000FF1CE}" = Microsoft Office Project MUI (English) 2007

"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007

"{94FB906A-CF42-4128-A509-D353026A607E}" = REALTEK Gigabit and Fast Ethernet NIC Driver

"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6

"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster

"{9C7C8898-DC29-4E8B-9E77-55A77C3250F6}" = PC Connectivity Solution

"{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AC76BA86-7AD7-1033-7B44-A81200000003}" = Adobe Reader 8.1.2

"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call

"{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}" = Fable - The Lost Chapters

"{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser

"{CA567AD5-33A4-403D-86D1-EE2D38251951}_is1" = VDownloader 1.0

"{cc937cbc-4be2-4227-9660-ff2f2a1d9467}" = Ad-Aware Antivirus

"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas

"{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry

"{DBEA1034-5882-4A88-8033-81C4EF0CFA29}" = Google Toolbar for Internet Explorer

"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8

"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard

"{F958CA02-BB40-4007-894B-258729456EE4}" = QuickTime

"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio

"{FBBD0C0A-717B-4A60-810F-E23C95FA6DA3}" = OpenOffice.org 2.1

"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Windows-driverpakke - Nokia pccsmcfd (10/12/2007 6.85.4.0)

"Ad-Aware Browsing Protection" = Ad-Aware Browsing Protection

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player

"avast" = avast! Free Antivirus

"C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Windows-driverpakke - Nokia Modem (05/22/2008 3.8)

"CCleaner" = CCleaner

"conduitEngine" = Conduit Engine

"Counter-Strike 1.6" = Counter-Strike 1.6

"Creative Live! Cam Vista IM User's Guide English" = Creative Live! Cam Vista IM User's Guide (English)

"Creative Software AutoUpdate" = Creative Software AutoUpdate

"Creative VF0260" = Creative Live! Cam Vista IM Driver (1.00.07.0401)

"Creative WebCam Center" = Creative WebCam Center

"DAEMON Tools Lite" = DAEMON Tools Lite

"DealScout" = DealScout for Google Chrome

"facemoods" = Facemoods Toolbar

"Google Chrome" = Google Chrome

"HitmanPro36" = HitmanPro 3.6

"InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0 Demo

"InstallShield_{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}" = Fable - The Lost Chapters

"InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry

"JLC's Internet TV" = JLC's Internet TV

"Joost" = Joost Beta 1.1.4

"Komputer for alle register 3.1.4" = Komputer for alle register 3.1.4

"Magic ISO Maker v5.4 (build 0251)" = Magic ISO Maker v5.4 (build 0251)

"MAGIX Movie Edit Pro 11 silver UK" = MAGIX Movie Edit Pro 11 silver (UK)

"MAGIX music maker 11 silver FL" = MAGIX music maker 11 silver (FL)

"MAGIX Photo Clinic 5.5 UK" = MAGIX Photo Clinic 5.5 5.5.31.0 (UK)

"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware versjon 1.51.0.1200

"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0

"NCH_EN Toolbar" = NCH EN Toolbar

"Need for Speed Most Wanted - Black Edition_is1" = Need for Speed Most Wanted - Black Edition

"NVIDIA Drivers" = NVIDIA Drivers

"Prism" = Prism Video File Converter

"PRJPRO" = Microsoft Office Project Professional 2007

"Spotify" = Spotify

"SUPER ©" = SUPER © Version 2008.bld.25 (Feb 5, 2008)

"SysInfo" = Creative System Information

"TextMaker Viewer" = TextMaker Viewer

"Toxic Biohazard" = Toxic Biohazard

"uTorrent" = µTorrent

"VISPRO" = Microsoft Office Visio Professional 2007

"VLC media player" = VLC media player 0.9.2

"Vuze" = Vuze

"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5

"WinRAR archiver" = WinRAR Arkiverer

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]

Error - 05.11.2009 01:11:08 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

Error - 06.11.2009 11:05:23 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

Error - 06.11.2009 11:05:23 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

Error - 07.11.2009 04:45:23 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

Error - 07.11.2009 04:45:23 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

Error - 07.11.2009 11:53:22 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

Error - 07.11.2009 11:53:22 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

Error - 08.11.2009 05:29:25 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

Error - 08.11.2009 05:29:25 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

Error - 17.11.2010 13:15:14 | Computer Name = SKYLINEPOWER | Source = avast! | ID = 33554522

Description =

[ Application Events ]

Error - 17.02.2012 00:34:29 | Computer Name = SKYLINEPOWER | Source = PerfNet | ID = 2004

Description = Kan ikke åpne servertjenesten. Ytelsesdata for server vil ikke bli

returnert. Den returnerte feilkoden er i data DWORD 0.

Error - 18.02.2012 17:51:28 | Computer Name = SKYLINEPOWER | Source = Application Error | ID = 1000

Description = Feilende program vlc.exe, versjon 0.9.2.0, feilende modul libglwin32_plugin.dll,

versjon 0.0.0.0, feiladresse 0x0000341a.

Error - 01.03.2012 23:51:25 | Computer Name = SKYLINEPOWER | Source = Application Error | ID = 1000

Description = Feilende program vlc.exe, versjon 0.9.2.0, feilende modul libglwin32_plugin.dll,

versjon 0.0.0.0, feiladresse 0x000033f6.

Error - 08.03.2012 13:37:23 | Computer Name = SKYLINEPOWER | Source = PerfNet | ID = 2004

Description = Kan ikke åpne servertjenesten. Ytelsesdata for server vil ikke bli

returnert. Den returnerte feilkoden er i data DWORD 0.

Error - 14.03.2012 23:55:40 | Computer Name = SKYLINEPOWER | Source = PerfNet | ID = 2004

Description = Kan ikke åpne servertjenesten. Ytelsesdata for server vil ikke bli

returnert. Den returnerte feilkoden er i data DWORD 0.

Error - 16.03.2012 14:13:24 | Computer Name = SKYLINEPOWER | Source = Application Error | ID = 1000

Description = Feilende program vlc.exe, versjon 0.9.2.0, feilende modul libglwin32_plugin.dll,

versjon 0.0.0.0, feiladresse 0x0000347c.

Error - 26.03.2012 23:36:34 | Computer Name = SKYLINEPOWER | Source = Application Error | ID = 1000

Description = Feilende program vlc.exe, versjon 0.9.2.0, feilende modul libglwin32_plugin.dll,

versjon 0.0.0.0, feiladresse 0x0000347c.

Error - 27.03.2012 23:43:25 | Computer Name = SKYLINEPOWER | Source = PerfNet | ID = 2004

Description = Kan ikke åpne servertjenesten. Ytelsesdata for server vil ikke bli

returnert. Den returnerte feilkoden er i data DWORD 0.

Error - 31.03.2012 04:55:29 | Computer Name = SKYLINEPOWER | Source = PerfNet | ID = 2004

Description = Kan ikke åpne servertjenesten. Ytelsesdata for server vil ikke bli

returnert. Den returnerte feilkoden er i data DWORD 0.

Error - 10.04.2012 15:49:31 | Computer Name = SKYLINEPOWER | Source = MsiInstaller | ID = 11719

Description = Product: Java Auto Updater -- Error 1719.The Windows Installer Service

could not be accessed. This can occur if you are running Windows in safe mode,

or if the Windows Installer is not correctly installed. Contact your support personnel

for assistance.

[ System Events ]

Error - 10.04.2012 12:00:00 | Computer Name = SKYLINEPOWER | Source = Schedule | ID = 7901

Description = Kommando At43.job startet ikke pga. feil: %%2147942402

Error - 10.04.2012 13:00:00 | Computer Name = SKYLINEPOWER | Source = Schedule | ID = 7901

Description = Kommando At44.job startet ikke pga. feil: %%2147942402

Error - 10.04.2012 14:00:00 | Computer Name = SKYLINEPOWER | Source = Schedule | ID = 7901

Description = Kommando At45.job startet ikke pga. feil: %%2147942402

Error - 10.04.2012 15:00:00 | Computer Name = SKYLINEPOWER | Source = Schedule | ID = 7901

Description = Kommando At46.job startet ikke pga. feil: %%2147942402

Error - 10.04.2012 23:00:00 | Computer Name = SKYLINEPOWER | Source = Schedule | ID = 7901

Description = Kommando At30.job startet ikke pga. feil: %%2147942402

Error - 10.04.2012 23:10:02 | Computer Name = SKYLINEPOWER | Source = atapi | ID = 262153

Description = Enheten \Device\Ide\IdePort0 svarte ikke før tidsavbruddet utløp.

Error - 10.04.2012 23:29:32 | Computer Name = SKYLINEPOWER | Source = Service Control Manager | ID = 7024

Description = Tjenesten HitmanPro 3.6 Crusader (Boot) ble avbrutt med tjenesteavhengig

feil 0 (0x0).

Error - 10.04.2012 23:38:49 | Computer Name = SKYLINEPOWER | Source = sr | ID = 1

Description = Systemgjenopprettingsfilteret fikk den uventede feilen 0xC0000243

under behandling av filen ## aswSnx private storage på volum Hardd .. lume1. Det

har sluttet å overvåke volumet.

Error - 10.04.2012 23:48:14 | Computer Name = SKYLINEPOWER | Source = sr | ID = 1

Description = Systemgjenopprettingsfilteret fikk den uventede feilen 0xC0000043

under behandling av filen ## aswSnx private storage på volum Hardd .. lume1. Det

har sluttet å overvåke volumet.

Error - 11.04.2012 12:41:10 | Computer Name = SKYLINEPOWER | Source = sr | ID = 1

Description = Systemgjenopprettingsfilteret fikk den uventede feilen 0xC0000243

under behandling av filen ## aswSnx private storage på volum Hardd .. lume1. Det

har sluttet å overvåke volumet.

< End of report >

Dr.Geek · 11. april 2012

Hai,

trenger OTL.txt, du postet Otl.extras. Det ble laget 2 logs post otl.txt

Hitmanlog:

Åpne Hitman gå til Settings(Instillinger) og History. Der finner du loggen.

Post den.

Allerede ser jeg dette:

Error - 10.04.2012 23:00:00 | Computer Name = SKYLINEPOWER | Source = Schedule | ID = 7901
Description = Kommando At30.job startet ikke pga. feil: %%2147942402

Er tegn på en http://startups.cesam-antimalware.com/En/Files/at30.job/44/

Du har også en del Error meldinger som tyder på Softwarefeil.

skylinepower · 12. april 2012

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programfiler
Drive C: | 11,84 Gb Total Space | 2,19 Gb Free Space | 18,52% Space Free | Partition Type: NTFS

Drive D: | 76,68 Gb Total Space | 1,09 Gb Free Space | 1,42% Space Free | Partition Type: NTFS

Drive E: | 3,94 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Drive F: | 123,04 Gb Total Space | 1,69 Gb Free Space | 1,37% Space Free | Partition Type: NTFS

Drive G: | 3,70 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Drive H: | 534,43 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Drive J: | 98,00 Gb Total Space | 5,74 Gb Free Space | 5,86% Space Free | Partition Type: NTFS

Drive L: | 599,52 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: SKYLINEPOWER | User Name: Jonas | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.04.11 05:36:39 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonas\Skrivebord\OTL.exe

PRC - [2012.04.09 22:28:49 | 001,224,176 | ---- | M] (Google Inc.) -- C:\Programfiler\Google\Chrome\Application\chrome.exe

PRC - [2012.03.29 12:44:02 | 001,161,072 | ---- | M] (Lavasoft Limited) -- J:\Programfiler\Ad-Aware Antivirus\AdAwareService.exe

PRC - [2012.03.29 12:43:58 | 020,670,304 | ---- | M] (Lavasoft Limited) -- J:\Programfiler\Ad-Aware Antivirus\AdAware.exe

PRC - [2011.10.21 11:09:36 | 000,198,032 | ---- | M] (Lavasoft) -- C:\Documents and Settings\All Users\Programdata\Ad-Aware Browsing Protection\adawarebp.exe

PRC - [2011.05.17 18:35:56 | 002,804,280 | ---- | M] (Sunbelt Software) -- J:\Programfiler\Ad-Aware Antivirus\Engine\SBAMSvc.exe

PRC - [2011.05.10 14:10:58 | 003,459,712 | ---- | M] (AVAST Software) -- C:\Programfiler\Alwil Software\Avast5\AvastUI.exe

PRC - [2011.05.10 14:10:57 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Programfiler\Alwil Software\Avast5\AvastSvc.exe

PRC - [2007.10.22 19:06:30 | 000,753,664 | ---- | M] (GIGABYTE TECHNOLOGY CO., LTD.) -- C:\Programfiler\GIGABYTE\Common\GNConfig.exe

PRC - [2005.10.31 17:50:38 | 001,298,432 | ---- | M] () -- C:\Programfiler\Jensen Scandinavia\AirLink_6554_Utility\ZDWlan.exe

PRC - [2005.10.27 12:00:22 | 000,299,008 | ---- | M] (Creative Technology Ltd) -- C:\Programfiler\Creative\Shared Files\CamTray.exe

PRC - [2004.08.22 17:05:02 | 000,081,920 | ---- | M] (DAEMON'S HOME) -- J:\Programfiler\D-Tools\daemon.exe

PRC - [2004.08.04 03:03:32 | 001,032,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2004.07.01 12:23:32 | 000,067,584 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE

========== Modules (No Company Name) ==========

MOD - [2012.04.11 20:18:39 | 001,755,136 | ---- | M] () -- C:\Programfiler\Alwil Software\Avast5\defs\12041101\algo.dll

MOD - [2012.04.11 08:02:40 | 001,755,136 | ---- | M] () -- C:\Programfiler\Alwil Software\Avast5\defs\12041100\algo.dll

MOD - [2012.04.09 22:28:48 | 000,444,400 | ---- | M] () -- C:\Programfiler\Google\Chrome\Application\18.0.1025.152\ppgooglenaclpluginchrome.dll

MOD - [2012.04.09 22:28:46 | 003,915,248 | ---- | M] () -- C:\Programfiler\Google\Chrome\Application\18.0.1025.152\pdf.dll

MOD - [2012.04.09 22:27:21 | 000,122,880 | ---- | M] () -- C:\Programfiler\Google\Chrome\Application\18.0.1025.152\avutil-51.dll

MOD - [2012.04.09 22:27:20 | 000,220,672 | ---- | M] () -- C:\Programfiler\Google\Chrome\Application\18.0.1025.152\avformat-53.dll

MOD - [2012.04.09 22:27:19 | 001,747,456 | ---- | M] () -- C:\Programfiler\Google\Chrome\Application\18.0.1025.152\avcodec-53.dll

MOD - [2012.04.09 21:42:11 | 008,743,584 | ---- | M] () -- C:\Programfiler\Google\Chrome\Application\18.0.1025.152\gcswf32.dll

MOD - [2012.03.29 12:44:18 | 002,180,968 | ---- | M] () -- J:\Programfiler\Ad-Aware Antivirus\ThreatWork.dll

MOD - [2012.02.05 13:41:50 | 000,181,616 | ---- | M] () -- J:\Programfiler\Ad-Aware Antivirus\Engine\Definitions\libMachoUniv.dll

MOD - [2012.02.05 13:41:48 | 000,210,288 | ---- | M] () -- J:\Programfiler\Ad-Aware Antivirus\Engine\Definitions\libBase64.dll

MOD - [2011.01.19 11:20:14 | 000,308,560 | ---- | M] () -- J:\Programfiler\Ad-Aware Antivirus\Engine\vipre.dll

MOD - [2006.07.12 15:36:36 | 001,167,360 | ---- | M] () -- C:\Programfiler\GIGABYTE\Common\acAuth.dll

MOD - [2005.10.31 17:50:38 | 001,298,432 | ---- | M] () -- C:\Programfiler\Jensen Scandinavia\AirLink_6554_Utility\ZDWlan.exe

MOD - [2005.06.08 15:36:46 | 000,045,056 | ---- | M] () -- C:\Programfiler\Jensen Scandinavia\AirLink_6554_Utility\ZDWlan.dll

MOD - [2005.06.07 15:56:50 | 000,208,896 | ---- | M] () -- C:\Programfiler\Jensen Scandinavia\AirLink_6554_Utility\dot1x_dll.dll

MOD - [2004.08.22 17:04:56 | 000,069,120 | ---- | M] () -- C:\WINDOWS\daemon.dll

MOD - [2004.08.04 03:03:18 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll

MOD - [2004.03.05 15:00:58 | 000,155,648 | ---- | M] () -- C:\Programfiler\Jensen Scandinavia\AirLink_6554_Utility\ssleay32.dll

MOD - [2004.03.05 15:00:26 | 000,827,392 | ---- | M] () -- C:\Programfiler\Jensen Scandinavia\AirLink_6554_Utility\libeay32.dll

MOD - [2003.12.30 21:52:00 | 000,007,168 | ---- | M] () -- J:\Programfiler\D-Tools\Plugins\Images\bw5mount.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)

SRV - File not found [On_Demand | Stopped] -- C:\Programfiler\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)

SRV - [2012.03.29 12:44:02 | 001,161,072 | ---- | M] (Lavasoft Limited) [Auto | Running] -- J:\Programfiler\Ad-Aware Antivirus\AdAwareService.exe -- (Ad-Aware Service)

SRV - [2012.02.29 08:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programfiler\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2011.05.29 09:11:28 | 000,366,640 | ---- | M] (Malwarebytes Corporation) [Disabled | Stopped] -- J:\Programfiler\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2011.05.17 18:35:56 | 002,804,280 | ---- | M] (Sunbelt Software) [Auto | Running] -- J:\Programfiler\Ad-Aware Antivirus\Engine\SBAMSvc.exe -- (SBAMSvc)

SRV - [2011.05.10 14:10:57 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programfiler\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)

SRV - [2008.05.30 12:32:16 | 000,572,416 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2006.10.26 20:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programfiler\Fellesfiler\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)

SRV - [2006.10.26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programfiler\Fellesfiler\Microsoft Shared\Source Engine\OSE.EXE -- (ose)

SRV - [2004.10.22 04:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programfiler\Fellesfiler\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\usbser_lowerflt.sys -- (upperdev)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)

DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)

DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)

DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Jonas\LOKALE~1\Temp\GPU-Z.sys -- (GPU-Z)

DRV - File not found [Kernel | System | Stopped] -- -- (Changer)

DRV - [2012.04.11 05:27:52 | 000,026,400 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hitmanpro36.sys -- (hitmanpro35)

DRV - [2011.11.20 20:29:40 | 000,239,168 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)

DRV - [2011.07.15 23:55:55 | 000,101,720 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SBREDrv.sys -- (SBRE)

DRV - [2011.05.29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)

DRV - [2011.05.11 16:26:04 | 000,074,968 | ---- | M] (Sunbelt Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\sbapifs.sys -- (sbapifs)

DRV - [2011.05.11 16:26:04 | 000,021,592 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sbaphd.sys -- (sbaphd)

DRV - [2011.05.10 14:03:44 | 000,307,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)

DRV - [2011.05.10 14:02:37 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)

DRV - [2011.05.10 14:02:25 | 000,102,616 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)

DRV - [2011.05.10 13:59:56 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)

DRV - [2011.05.10 13:59:37 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)

DRV - [2011.04.18 19:17:46 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)

DRV - [2011.04.18 19:12:58 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV - [2011.04.05 17:35:20 | 000,332,248 | ---- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SbFw.sys -- (SbFw)

DRV - [2011.04.05 17:35:20 | 000,212,568 | ---- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sbtis.sys -- (SbTis)

DRV - [2011.04.05 17:35:20 | 000,094,040 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sbhips.sys -- (sbhips)

DRV - [2011.02.08 09:14:22 | 000,069,208 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SbFwIm.sys -- (SBFWIMCLMP)

DRV - [2011.02.08 09:14:22 | 000,069,208 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SbFwIm.sys -- (SBFWIMCL)

DRV - [2007.09.17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)

DRV - [2007.07.28 17:10:18 | 000,483,968 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61)

DRV - [2006.04.01 17:16:44 | 000,162,176 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\V0260Vid.sys -- (V0260VID)

DRV - [2005.06.17 08:57:24 | 000,276,992 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZD1211U.sys -- (ZD1211U(ZyDAS)) Jensen Scandinavia AirLink 6554(ZyDAS)

DRV - [2005.06.08 18:44:20 | 000,020,608 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BRGSp50.sys -- (BRGSp50)

DRV - [2004.10.25 13:40:58 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50)

DRV - [2004.08.22 16:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\d347prt.sys -- (d347prt)

DRV - [2004.08.22 16:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\d347bus.sys -- (d347bus)

DRV - [2004.08.04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)

DRV - [2004.07.01 08:49:00 | 000,626,977 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)

DRV - [2004.04.13 14:14:12 | 000,070,144 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)

DRV - [2004.02.24 05:08:52 | 000,400,384 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS)

DRV - [2002.09.16 18:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q=

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q=

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.live.com/sphome.aspx

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.live.com/sphome.aspx

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.live.com

IE - HKCU\..\URLSearchHook: {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Programfiler\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)

IE - HKCU\..\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Programfiler\AskSearch\bin\DefaultSearch.dll ()

IE - HKCU\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2801948

IE - HKCU\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = http://toolbar.ask.com/toolbarv/askRedirect?gct=&gc=1&q={searchTerms}&crm=1&toolbar=VZ2

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programfiler\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programfiler\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Programfiler\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programfiler\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programfiler\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Programfiler\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

[2009.11.23 07:20:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonas\Programdata\Mozilla\Extensions

[2009.11.23 07:20:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonas\Programdata\Mozilla\Extensions\[email protected]

[2011.12.01 00:22:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonas\Programdata\Mozilla\Firefox\Profiles\lb40b5i1.default\extensions

[2010.11.14 18:13:44 | 000,000,000 | ---D | M] (uTorrentBar Toolbar) -- C:\Documents and Settings\Jonas\Programdata\Mozilla\Firefox\Profiles\lb40b5i1.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}

[2011.12.01 00:22:49 | 000,000,000 | ---D | M] (Facemoods) -- C:\Documents and Settings\Jonas\Programdata\Mozilla\Firefox\Profiles\lb40b5i1.default\extensions\[email protected]

[2008.10.11 14:25:02 | 000,000,000 | ---D | M] (No name found) -- C:\Programfiler\Mozilla Firefox\extensions

[2008.03.26 19:14:04 | 000,066,208 | ---- | M] (Joost Technologies B.V. ) -- C:\Programfiler\mozilla firefox\plugins\npJoostPlugin.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}

CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Programfiler\Google\Chrome\Application\18.0.1025.152\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programfiler\Google\Chrome\Application\18.0.1025.152\pdf.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Programfiler\Google\Chrome\Application\18.0.1025.152\gcswf32.dll

CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programfiler\QuickTime\plugins\npqtplugin.dll

CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programfiler\QuickTime\plugins\npqtplugin2.dll

CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programfiler\QuickTime\plugins\npqtplugin3.dll

CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programfiler\QuickTime\plugins\npqtplugin4.dll

CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programfiler\QuickTime\plugins\npqtplugin5.dll

CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programfiler\QuickTime\plugins\npqtplugin6.dll

CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programfiler\QuickTime\plugins\npqtplugin7.dll

CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programfiler\Windows Media Player\npdrmv2.dll

CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programfiler\Windows Media Player\npwmsdrm.dll

CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programfiler\Windows Media Player\npdsplay.dll

CHR - plugin: Adobe Acrobat (Disabled) = J:\Programfiler\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll

CHR - plugin: Google Update (Enabled) = C:\Programfiler\Google\Update\1.3.21.111\npGoogleUpdate3.dll

CHR - plugin: Java Platform SE 6 U31 (Enabled) = C:\Programfiler\Java\jre6\bin\plugin2\npjp2.dll

CHR - plugin: Silverlight Plug-In (Enabled) = C:\Programfiler\Microsoft Silverlight\3.0.40624.0\npctrl.dll

CHR - plugin: Pando Web Plugin (Enabled) = C:\Programfiler\Pando Networks\Media Booster\npPandoWebPlugin.dll

CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

CHR - Extension: YouTube = C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\

CHR - Extension: Google Search = C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\

CHR - Extension: DealScout = C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\mpmfjcpampmdgkjfjbjfloolnfojlogf\2.1.11.0_0\

CHR - Extension: Gmail = C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2007.08.15 19:51:37 | 000,000,722 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Fellesfiler\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programfiler\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

O2 - BHO: (NCH EN Toolbar) - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Programfiler\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)

O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\BitComet\tools\BitCometBHO.dll (BitComet)

O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Programfiler\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll (facemoods.com BHO)

O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (Påloggingshjelp for Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programfiler\Fellesfiler\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programfiler\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programfiler\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (NCH EN Toolbar) - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Programfiler\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Programfiler\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll (facemoods.com)

O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (NCH EN Toolbar) - {37483B40-C254-4A72-BDA4-22EE90182C1E} - C:\Programfiler\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)

O4 - HKLM..\Run: [Ad-Aware Antivirus] J:\Programfiler\Ad-Aware Antivirus\AdAwareLauncher.exe (Lavasoft Limited)

O4 - HKLM..\Run: [Ad-Aware Browsing Protection] C:\Documents and Settings\All Users\Programdata\Ad-Aware Browsing Protection\adawarebp.exe (Lavasoft)

O4 - HKLM..\Run: [avast5] C:\Programfiler\Alwil Software\Avast5\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [DAEMON Tools-1033] J:\Programfiler\D-Tools\daemon.exe (DAEMON'S HOME)

O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()

O4 - HKLM..\Run: [soundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)

O4 - HKCU..\Run: [Creative WebCam Tray] C:\Programfiler\Creative\Shared Files\CamTray.exe (Creative Technology Ltd)

O4 - HKCU..\Run: [MsnMsgr] "C:\Programfiler\Windows Live\Messenger\MsnMsgr.Exe" /background File not found

O4 - Startup: C:\Documents and Settings\All Users\Start-meny\Programmer\Oppstart\AirLink 6554 Utility.lnk = C:\Programfiler\Jensen Scandinavia\AirLink_6554_Utility\ZDWlan.exe ()

O4 - Startup: C:\Documents and Settings\All Users\Start-meny\Programmer\Oppstart\Gigabyte Wireless Utility.lnk = C:\Programfiler\GIGABYTE\Common\GNConfig.exe (GIGABYTE TECHNOLOGY CO., LTD.)

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8 - Extra context menu item: Download all links using BitComet - D:\BitComet\BitComet.exe (www.BitComet.com)

O8 - Extra context menu item: Download all videos using BitComet - D:\BitComet\BitComet.exe (www.BitComet.com)

O8 - Extra context menu item: Download link using &BitComet - D:\BitComet\BitComet.exe (www.BitComet.com)

O9 - Extra Button: Blogg dette - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Reg Error: Key error. File not found

O9 - Extra 'Tools' menuitem : &Blogg dette i Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Reg Error: Key error. File not found

O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programfiler\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programfiler\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O16 - DPF: {41564D57-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/0/A/9/0A9F8B32-9F8C-4D74-A130-E4CAB36EB01F/wmvadvd.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)

O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 193.213.112.4 130.67.15.198

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0615F7D7-CDD6-4A7F-A591-B039D42FBD56}: DhcpNameServer = 193.213.112.4 130.67.15.198

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programfiler\Fellesfiler\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programfiler\Fellesfiler\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programfiler\Fellesfiler\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programfiler\Fellesfiler\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programfiler\Fellesfiler\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programfiler\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programfiler\Fellesfiler\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20 - AppInit_DLLs: (C:\WINDOWS\system32\__c009777C.dat) - File not found

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2007.07.07 20:18:23 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2005.02.25 18:24:46 | 000,000,051 | R--- | M] () - E:\autorun.inf -- [ UDF ]

O32 - AutoRun File - [2007.07.06 01:08:41 | 000,000,044 | R--- | M] () - G:\AUTORUN.INF -- [ UDF ]

O32 - AutoRun File - [2007.11.12 19:26:00 | 000,304,944 | R--- | M] (Juice Games) - G:\AutoRun.exe -- [ UDF ]

O32 - AutoRun File - [2005.05.19 01:59:05 | 000,000,228 | R--- | M] () - H:\Autorun.inf -- [ CDFS ]

O32 - AutoRun File - [2005.07.06 01:05:52 | 001,019,904 | R--- | M] (Microsoft Corporation) - H:\autorun.exe -- [ CDFS ]

O32 - AutoRun File - [2004.02.15 16:20:09 | 000,000,058 | R--- | M] () - L:\Autorun.inf -- [ CDFS ]

O33 - MountPoints2\{64c32f3a-ebf7-11de-9c81-00027251c9f6}\Shell\AutoRun\command - "" = G:\Toshiba\more4you.exe

O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\Install.exe -- [2004.10.21 19:38:02 | 000,126,976 | R--- | M] (Macrovision Corporation)

O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2007.11.12 19:26:00 | 000,304,944 | R--- | M] (Juice Games)

O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\autorun.exe -- [2005.07.06 01:05:52 | 001,019,904 | R--- | M] (Microsoft Corporation)

O33 - MountPoints2\H\Shell\directx\command - "" = H:\directx9\DXSETUP.exe -- [2005.03.19 03:19:41 | 000,480,976 | R--- | M] (Microsoft Corporation)

O33 - MountPoints2\H\Shell\setup\command - "" = H:\setup.exe -- [2005.07.15 21:19:47 | 000,253,952 | R--- | M] (Microsoft Game Studios )

O33 - MountPoints2\L\Shell\AutoRun\command - "" = L:\FarCryAutoCD.exe -- [2004.02.26 13:36:51 | 003,227,648 | R--- | M] (Crytek)

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012.04.11 05:55:10 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jonas\Skrivebord\OTL.exe

[2012.04.11 05:08:43 | 000,000,000 | ---D | C] -- C:\Programfiler\HitmanPro

[2012.04.11 05:08:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\HitmanPro

[2012.04.11 05:07:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Programdata\HitmanPro

[2012.04.10 21:43:32 | 007,156,360 | ---- | C] (SurfRight B.V.) -- C:\Documents and Settings\Jonas\Skrivebord\HitmanPro36.exe

[2012.04.10 20:20:35 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Jonas\Siste

[2012.04.03 08:44:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonas\Mine dokumenter\Ny mappe

[2012.04.03 08:32:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\Skype

[2012.04.03 08:32:21 | 000,000,000 | ---D | C] -- C:\Programfiler\Fellesfiler\Skype

[2012.03.31 08:47:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Programdata\Ad-Aware Antivirus

[2012.03.31 08:39:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\adaware

[2012.03.31 08:38:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Programdata\Ad-Aware Browsing Protection

[2012.03.31 08:38:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start-meny\Programmer\Ad-Aware Antivirus

[2012.03.31 08:38:16 | 000,074,968 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\sbapifs.sys

[2012.03.31 08:38:16 | 000,021,592 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\sbaphd.sys

[2012.03.31 08:38:15 | 000,212,568 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\sbtis.sys

[2012.03.31 08:38:15 | 000,094,040 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\sbhips.sys

[2012.03.31 08:37:55 | 000,332,248 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFw.sys

[2012.03.31 08:37:55 | 000,069,208 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFwIm.sys

[2012.03.31 08:35:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonas\Programdata\Ad-Aware Antivirus

[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.04.12 05:02:09 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2012.04.12 05:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At30.job

[2012.04.12 04:58:20 | 000,396,586 | ---- | M] () -- C:\WINDOWS\System32\perfh014.dat

[2012.04.12 04:58:20 | 000,392,296 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2012.04.12 04:58:20 | 000,066,686 | ---- | M] () -- C:\WINDOWS\System32\perfc014.dat

[2012.04.12 04:58:20 | 000,058,596 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2012.04.12 04:54:49 | 000,000,695 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\Ad-Aware Antivirus.lnk

[2012.04.12 04:54:15 | 000,000,974 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2012.04.12 04:53:45 | 000,050,257 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml

[2012.04.12 04:53:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2012.04.11 19:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At44.job

[2012.04.11 05:36:39 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonas\Skrivebord\OTL.exe

[2012.04.11 05:29:56 | 000,000,944 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Antivirus Scheduled Scan.job

[2012.04.11 05:27:52 | 000,026,400 | ---- | M] () -- C:\WINDOWS\System32\drivers\hitmanpro36.sys

[2012.04.11 05:26:03 | 000,000,450 | ---- | M] () -- C:\WINDOWS\System32\.crusader

[2012.04.11 05:08:44 | 000,001,603 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\HitmanPro.lnk

[2012.04.11 05:07:59 | 000,001,804 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\Google Chrome.lnk

[2012.04.10 21:39:47 | 007,156,360 | ---- | M] (SurfRight B.V.) -- C:\Documents and Settings\Jonas\Skrivebord\HitmanPro36.exe

[2012.04.10 21:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At46.job

[2012.04.10 20:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At45.job

[2012.04.10 18:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At43.job

[2012.04.09 00:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At25.job

[2012.04.08 23:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At48.job

[2012.04.08 22:36:28 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2012.04.04 08:00:03 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At33.job

[2012.04.03 09:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At34.job

[2012.04.03 08:32:22 | 000,001,874 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\Skype.lnk

[2012.04.02 01:00:01 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At26.job

[2012.04.01 12:00:03 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At37.job

[2012.04.01 11:47:59 | 000,096,256 | ---- | M] () -- C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2012.04.01 11:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At36.job

[2012.03.31 23:48:46 | 000,001,190 | ---- | M] () -- C:\WINDOWS\System32\ServiceConfig.xml

[2012.03.31 22:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At47.job

[2012.03.31 19:45:00 | 000,000,482 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

[2012.03.31 17:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At42.job

[2012.03.31 16:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At41.job

[2012.03.31 15:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At40.job

[2012.03.31 14:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At39.job

[2012.03.31 13:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At38.job

[2012.03.31 10:50:58 | 000,000,673 | ---- | M] () -- C:\Documents and Settings\All Users\Skrivebord\Hot Rod American Street Drag.lnk

[2012.03.31 10:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At35.job

[2012.03.30 18:00:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\Norton Security Scan.job

[2012.03.15 07:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At31.job

[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.04.11 05:27:52 | 000,026,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\hitmanpro36.sys

[2012.04.11 05:26:03 | 000,000,450 | ---- | C] () -- C:\WINDOWS\System32\.crusader

[2012.04.11 05:08:44 | 000,001,603 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\HitmanPro.lnk

[2012.04.03 08:32:22 | 000,001,874 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\Skype.lnk

[2012.03.31 23:48:46 | 000,001,190 | ---- | C] () -- C:\WINDOWS\System32\ServiceConfig.xml

[2012.03.31 10:50:58 | 000,000,673 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\Hot Rod American Street Drag.lnk

[2012.03.31 08:48:48 | 000,000,944 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Antivirus Scheduled Scan.job

[2012.03.31 08:38:27 | 000,000,695 | ---- | C] () -- C:\Documents and Settings\All Users\Skrivebord\Ad-Aware Antivirus.lnk

[2012.03.21 21:30:18 | 003,996,570 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\DJ_Splash_-_You.mp3

[2012.03.21 21:28:28 | 000,427,619 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde090.jpg

[2012.03.21 21:28:28 | 000,410,479 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde072.jpg

[2012.03.21 21:28:28 | 000,409,375 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde074.jpg

[2012.03.21 21:28:28 | 000,405,352 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde073.jpg

[2012.03.21 21:28:28 | 000,370,933 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde082.jpg

[2012.03.21 21:28:28 | 000,369,709 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde075.jpg

[2012.03.21 21:28:28 | 000,360,863 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde078.jpg

[2012.03.21 21:28:28 | 000,351,227 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde077.jpg

[2012.03.21 21:28:28 | 000,320,803 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde076.jpg

[2012.03.21 21:28:28 | 000,318,044 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde083.jpg

[2012.03.21 21:28:28 | 000,284,197 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde084.jpg

[2012.03.21 21:28:28 | 000,221,419 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\Bilde080.jpg

[2012.03.21 21:23:16 | 001,755,551 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11670.JPG

[2012.03.21 21:23:16 | 001,753,635 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11671.JPG

[2012.03.21 21:23:16 | 001,748,069 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11672.JPG

[2012.03.21 21:23:16 | 001,741,479 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11674.JPG

[2012.03.21 21:20:23 | 001,760,941 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10849.JPG

[2012.03.21 21:20:23 | 001,758,261 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10851.JPG

[2012.03.21 21:20:23 | 001,754,879 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10852.JPG

[2012.03.21 21:20:23 | 001,750,093 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10855.JPG

[2012.03.21 21:20:23 | 001,743,437 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10850.JPG

[2012.03.21 21:20:23 | 001,717,612 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10854.JPG

[2012.03.21 21:20:23 | 001,706,434 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10853.JPG

[2012.03.21 21:20:23 | 001,663,177 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10856.JPG

[2012.03.21 21:20:23 | 001,627,218 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10857.JPG

[2012.03.21 21:20:22 | 001,766,902 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10840.JPG

[2012.03.21 21:20:22 | 001,756,058 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10843.JPG

[2012.03.21 21:20:22 | 001,755,535 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10841.JPG

[2012.03.21 21:20:22 | 001,749,699 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10847.JPG

[2012.03.21 21:20:22 | 001,744,132 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10845.JPG

[2012.03.21 21:20:22 | 001,737,642 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10848.JPG

[2012.03.21 21:20:22 | 001,735,706 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10842.JPG

[2012.03.21 21:20:22 | 001,728,722 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10846.JPG

[2012.03.21 21:20:22 | 001,716,556 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10844.JPG

[2012.03.21 21:20:22 | 001,648,418 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10858.JPG

[2012.03.21 21:16:54 | 001,794,250 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC12675.JPG

[2012.03.21 21:16:54 | 001,777,939 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC12677.JPG

[2012.03.21 21:16:54 | 001,753,665 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC12674.JPG

[2012.03.21 21:16:54 | 001,752,724 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC12678.JPG

[2012.03.21 21:16:54 | 001,742,882 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC12676.JPG

[2012.03.21 21:16:22 | 001,753,954 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC12663.JPG

[2012.03.21 21:07:16 | 001,768,838 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10998.JPG

[2012.03.21 21:07:16 | 001,754,075 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11001.JPG

[2012.03.21 21:07:16 | 001,750,695 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10982.JPG

[2012.03.21 21:07:16 | 001,750,067 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11000.JPG

[2012.03.21 21:07:16 | 001,749,194 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11002.JPG

[2012.03.21 21:07:16 | 001,747,328 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10978.JPG

[2012.03.21 21:07:16 | 001,747,067 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10981.JPG

[2012.03.21 21:07:16 | 001,744,250 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10990.JPG

[2012.03.21 21:07:16 | 001,741,420 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10980.JPG

[2012.03.21 21:07:16 | 001,739,756 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10999.JPG

[2012.03.21 21:07:16 | 001,735,832 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10979.JPG

[2012.03.21 21:07:16 | 001,735,056 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10992.JPG

[2012.03.21 21:07:16 | 001,734,088 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10977.JPG

[2012.03.21 21:07:16 | 001,724,459 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC10993.JPG

[2012.03.21 21:04:26 | 001,752,604 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11385.JPG

[2012.03.21 21:04:26 | 001,734,229 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11382.JPG

[2012.03.21 21:04:26 | 001,731,967 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11386.JPG

[2012.03.21 21:04:25 | 001,773,150 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11384.JPG

[2012.03.21 21:04:25 | 001,720,632 | ---- | C] () -- C:\Documents and Settings\Jonas\Skrivebord\SDC11383.JPG

[2011.06.04 22:39:48 | 000,000,064 | ---- | C] () -- C:\WINDOWS\System32\rp_stats.dat

[2011.06.04 22:39:48 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\rp_rules.dat

========== LOP Check ==========

[2012.03.31 08:39:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\Ad-Aware Browsing Protection

[2011.02.16 06:12:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\Alwil Software

[2008.12.23 14:44:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\Azureus

[2011.11.20 20:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\DAEMON Tools Lite

[2011.02.22 21:53:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\Dartfish

[2008.08.28 20:02:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\Downloaded Installations

[2008.05.12 12:02:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\Grisoft

[2008.10.11 16:33:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\HighAndes

[2012.04.11 05:25:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\HitmanPro

[2008.08.28 19:57:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\Installations

[2011.12.01 00:23:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\InstallMate

[2007.08.04 12:29:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\MAGIX

[2008.08.01 17:32:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\Nokia

[2007.07.12 18:27:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\PC Suite

[2011.01.04 18:39:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\PMB Files

[2011.12.01 00:20:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\Premium

[2007.08.15 08:01:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Programdata\TEMP

[2012.04.02 19:34:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\.minecraft

[2012.03.31 08:50:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Ad-Aware Antivirus

[2012.04.10 20:20:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Azureus

[2011.11.20 20:26:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\DAEMON Tools Lite

[2009.02.01 16:32:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Dartfish

[2007.07.12 18:32:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\DataLayer

[2009.11.04 08:21:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Desktopicon

[2012.04.08 22:53:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Dropbox

[2011.12.01 00:32:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\facemoods.com

[2008.12.27 19:59:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\FinalBurner Video DVD

[2011.12.01 00:09:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\FLV Blaster

[2008.02.03 11:38:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Grisoft

[2010.07.28 16:27:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\gtk-2.0

[2008.10.11 16:33:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\HighAndes

[2007.11.20 19:16:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Image Zone Express

[2007.12.20 18:23:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\JLC's Software

[2010.12.08 21:07:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\LimeWire

[2011.01.04 21:50:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\LolClient

[2008.08.28 20:22:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Nokia

[2007.07.24 10:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Opera

[2008.08.28 20:07:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\PC Suite

[2011.02.20 10:52:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\PriceGong

[2008.05.23 19:55:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Snapfish

[2009.08.24 15:37:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Sony Setup

[2011.05.19 22:52:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\Spotify

[2012.03.31 10:28:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonas\Programdata\uTorrent

[2012.04.11 05:29:56 | 000,000,944 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Antivirus Scheduled Scan.job

[2012.03.31 19:45:00 | 000,000,482 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job

[2012.04.09 00:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job

[2012.04.02 01:00:01 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job

[2012.03.04 03:00:01 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job

[2011.12.18 04:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job

[2011.12.18 05:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job

[2012.04.12 05:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job

[2012.03.15 07:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At31.job

[2011.08.15 07:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job

[2012.04.04 08:00:03 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job

[2012.04.03 09:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job

[2012.03.31 10:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job

[2012.04.01 11:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At36.job

[2012.04.01 12:00:03 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job

[2012.03.31 13:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job

[2012.03.31 14:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job

[2012.03.31 15:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job

[2012.03.31 16:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At41.job

[2012.03.31 17:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job

[2012.04.10 18:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job

[2012.04.11 19:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job

[2012.04.10 20:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job

[2012.04.10 21:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At46.job

[2012.03.31 22:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job

[2012.04.08 23:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job

[2011.09.15 22:22:11 | 000,000,266 | ---- | M] () -- C:\WINDOWS\Tasks\prismShakeIcon.job

========== Purity Check ==========

========== Files - Unicode (All) ==========

[2011.01.12 05:49:58 | 000,000,000 | ---- | M] ()(C:\Documents and Settings\Jonas\Mine dokumenter\David Guetta feat. Rihanna - Whoâ??s That Chick.mp3) -- C:\Documents and Settings\Jonas\Mine dokumenter\David Guetta feat. Rihanna - Whoâ€s That Chick.mp3

[2011.01.12 05:49:58 | 000,000,000 | ---- | C] ()(C:\Documents and Settings\Jonas\Mine dokumenter\David Guetta feat. Rihanna - Whoâ??s That Chick.mp3) -- C:\Documents and Settings\Jonas\Mine dokumenter\David Guetta feat. Rihanna - Whoâ€s That Chick.mp3

========== Alternate Data Streams ==========

@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Programdata\TEMP:44DAF2F1

< End of report >

skylinepower · 12. april 2012

HitmanPro

c/programfiler/facemoods.com/facemoods/1.4.17.11/

Dr.Geek · 12. april 2012

HitmanPro

c/programfiler/facemoods.com/facemoods/1.4.17.11/

Hai,

pcen er både infisert med Adware og Malware, samt at det er mye gammelt software her som utgjør en stor sikkerhetsrisiko. Det første vi gjør er å rense den med en Otl.fix og scanne for Rootkits.

1. Deinstaller alle Antivirus program untatt en.

2. Gjør følgende Fix med OTL.exe:

- start otl.exe

- kopier følgende text in i den hvite tomme textboxen til otl.exe

:OTL
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)

SRV - File not found [On_Demand | Stopped] -- C:\Programfiler\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\usbser_lowerflt.sys -- (upperdev)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)

DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)

DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)

DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Jonas\LOKALE~1\Temp\GPU-Z.sys -- (GPU-Z)

DRV - File not found [Kernel | System | Stopped] -- -- (Changer)

FF - user.js - File not found

IE - HKCU\..\URLSearchHook: {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Programfiler\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)

IE - HKCU\..\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Programfiler\AskSearch\bin\DefaultSearch.dll ()

IE - HKCU\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

[2011.12.01 00:22:49 | 000,000,000 | ---D | M] (Facemoods) -- C:\Documents and Settings\Jonas\Programdata\Mozilla\Firefox\Profiles\lb40b5i1.default\extensions\[email protected]

CHR - Extension: YouTube = C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\

CHR - Extension: Google Search = C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\

CHR - Extension: DealScout = C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\mpmfjcpampmdgkjfjbjfloolnfojlogf\2.1.11.0_0\

CHR - Extension: Gmail = C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Programfiler\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll (facemoods.com BHO)

O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programfiler\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (NCH EN Toolbar) - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Programfiler\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Programfiler\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll (facemoods.com)

O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (NCH EN Toolbar) - {37483B40-C254-4A72-BDA4-22EE90182C1E} - C:\Programfiler\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)

O20 - AppInit_DLLs: (C:\WINDOWS\system32\__c009777C.dat) - File not found

O32 - AutoRun File - [2007.07.07 20:18:23 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2005.02.25 18:24:46 | 000,000,051 | R--- | M] () - E:\autorun.inf -- [ UDF ]

O32 - AutoRun File - [2007.07.06 01:08:41 | 000,000,044 | R--- | M] () - G:\AUTORUN.INF -- [ UDF ]

O32 - AutoRun File - [2007.11.12 19:26:00 | 000,304,944 | R--- | M] (Juice Games) - G:\AutoRun.exe -- [ UDF ]

O32 - AutoRun File - [2005.05.19 01:59:05 | 000,000,228 | R--- | M] () - H:\Autorun.inf -- [ CDFS ]

O32 - AutoRun File - [2005.07.06 01:05:52 | 001,019,904 | R--- | M] (Microsoft Corporation) - H:\autorun.exe -- [ CDFS ]

O32 - AutoRun File - [2004.02.15 16:20:09 | 000,000,058 | R--- | M] () - L:\Autorun.inf -- [ CDFS ]

O33 - MountPoints2\{64c32f3a-ebf7-11de-9c81-00027251c9f6}\Shell\AutoRun\command - "" = G:\Toshiba\more4you.exe

O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\Install.exe -- [2004.10.21 19:38:02 | 000,126,976 | R--- | M] (Macrovision Corporation)

O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2007.11.12 19:26:00 | 000,304,944 | R--- | M] (Juice Games)

O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\autorun.exe -- [2005.07.06 01:05:52 | 001,019,904 | R--- | M] (Microsoft Corporation)

O33 - MountPoints2\H\Shell\directx\command - "" = H:\directx9\DXSETUP.exe -- [2005.03.19 03:19:41 | 000,480,976 | R--- | M] (Microsoft Corporation)

O33 - MountPoints2\H\Shell\setup\command - "" = H:\setup.exe -- [2005.07.15 21:19:47 | 000,253,952 | R--- | M] (Microsoft Game Studios )

O33 - MountPoints2\L\Shell\AutoRun\command - "" = L:\FarCryAutoCD.exe -- [2004.02.26 13:36:51 | 003,227,648 | R--- | M] (Crytek)

[2012.04.12 05:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At30.job

[2012.04.12 04:58:20 | 000,396,586 | ---- | M] () -- C:\WINDOWS\System32\perfh014.dat

[2012.04.12 04:58:20 | 000,392,296 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2012.04.12 04:58:20 | 000,066,686 | ---- | M] () -- C:\WINDOWS\System32\perfc014.dat

[2012.04.12 04:58:20 | 000,058,596 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2012.04.10 21:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At46.job

[2012.04.10 20:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At45.job

[2012.04.10 18:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At43.job

[2012.04.09 00:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At25.job

[2012.04.08 23:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At48.job

[2012.04.08 22:36:28 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2012.04.04 08:00:03 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At33.job

[2012.04.03 09:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At34.job

[2012.04.09 00:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job

[2012.04.02 01:00:01 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job

[2012.03.04 03:00:01 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job

[2011.12.18 04:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job

[2011.12.18 05:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job

[2012.04.12 05:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job

[2012.03.15 07:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At31.job

[2011.08.15 07:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job

[2012.04.04 08:00:03 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job

[2012.04.03 09:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job

[2012.03.31 10:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job

[2012.04.01 11:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At36.job

[2012.04.01 12:00:03 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job

[2012.03.31 13:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job

[2012.03.31 14:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job

[2012.03.31 15:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job

[2012.03.31 16:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At41.job

[2012.03.31 17:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job

[2012.04.10 18:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job

[2012.04.11 19:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job

[2012.04.10 20:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job

[2012.04.10 21:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At46.job

[2012.03.31 22:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job

[2012.04.08 23:00:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job

[2011.09.15 22:22:11 | 000,000,266 | ---- | M] () -- C:\WINDOWS\Tasks\prismShakeIcon.job

@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Programdata\TEMP:44DAF2F1

:Commands

[purity]

[EMPTYFLASH]

[emptytemp]

[Reboot]

- Lukk alle programer!

- Click på "Fix"

- Otl kommer til å restarte pcen.

- Etter restarten vil det åpne seg en textfile. Post denne her.

3. Scan med TDSS Killer. Post log:

http://support.kaspersky.com/faq/?qid=208280684

skylinepower · 14. april 2012

Gjort punkt 2 flere ganger.

Men den vil ikke restarte seg, så må trykke på restartknappen på pcen, men da kommer det heller ikke noe tekstfil opp:/

Dr.Geek · 15. april 2012

Gjort punkt 2 flere ganger.

Men den vil ikke restarte seg, så må trykke på restartknappen på pcen, men da kommer det heller ikke noe tekstfil opp:/

Flytt Otl.exe til skrivebordet.

Start Otl.exe som Administrator (høyre click)

Marker hele texten fra:

:OTL

og helt ned til

:Commands

[purity]

[EMPTYFLASH]

[emptytemp]

[Reboot]

Klick "Kopier"

Før inn teksten in i den hvite tomme boxen til OTL, gjennom å klicke "Past".

Lukk alle programer, deaktiver Antivirus-Software-Guards.

Klick på "FIX".

Vent...

Pcen vil restarte som beskrevet.

Post loggen av TDSS Killer, skulle OTL.fixes fortsatt ikke fungere.

Endret 15. april 2012 av TheGenius

skylinepower · 16. april 2012

OTL logg:

All processes killed
========== OTL ==========

Service HidServ stopped successfully!

Service HidServ deleted successfully!

File %SystemRoot%\System32\hidserv.dll not found.

Service gusvc stopped successfully!

Service gusvc deleted successfully!

File C:\Programfiler\Google\Common\Google Updater\GoogleUpdaterService.exe not found.

Service WDICA stopped successfully!

Service WDICA deleted successfully!

Service upperdev stopped successfully!

Service upperdev deleted successfully!

File system32\DRIVERS\usbser_lowerflt.sys not found.

Service PDRFRAME stopped successfully!

Service PDRFRAME deleted successfully!

Service PDRELI stopped successfully!

Service PDRELI deleted successfully!

Service PDFRAME stopped successfully!

Service PDFRAME deleted successfully!

Service PDCOMP stopped successfully!

Service PDCOMP deleted successfully!

Service PCIDump stopped successfully!

Service PCIDump deleted successfully!

Service lbrtfdc stopped successfully!

Service lbrtfdc deleted successfully!

Service i2omgmt stopped successfully!

Service i2omgmt deleted successfully!

Service GPU-Z stopped successfully!

Service GPU-Z deleted successfully!

File C:\DOCUME~1\Jonas\LOKALE~1\Temp\GPU-Z.sys not found.

Service Changer stopped successfully!

Service Changer deleted successfully!

Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{37483b40-c254-4a72-bda4-22ee90182c1e} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{37483b40-c254-4a72-bda4-22ee90182c1e}\ deleted successfully.

C:\Programfiler\NCH_EN\prxtbNCH_.dll moved successfully.

Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{C94E154B-1459-4A47-966B-4B843BEFC7DB} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C94E154B-1459-4A47-966B-4B843BEFC7DB}\ deleted successfully.

C:\Programfiler\AskSearch\bin\DefaultSearch.dll moved successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!

C:\Documents and Settings\Jonas\Programdata\Mozilla\Firefox\Profiles\lb40b5i1.default\extensions\[email protected]\defaults\preferences folder moved successfully.

C:\Documents and Settings\Jonas\Programdata\Mozilla\Firefox\Profiles\lb40b5i1.default\extensions\[email protected]\defaults folder moved successfully.

C:\Documents and Settings\Jonas\Programdata\Mozilla\Firefox\Profiles\lb40b5i1.default\extensions\[email protected]\components folder moved successfully.

C:\Documents and Settings\Jonas\Programdata\Mozilla\Firefox\Profiles\lb40b5i1.default\extensions\[email protected] folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\zh_TW folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\zh_CN folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\vi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\uk folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\tr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\th folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\sv folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\sr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\sl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\sk folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\ru folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\ro folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\pt_PT folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\pt_BR folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\pl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\no folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\nl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\lv folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\lt folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\ko folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\ja folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\it folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\id folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\hu folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\hr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\hi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\he folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\fr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\fil folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\fi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\es folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\en folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\el folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\de folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\da folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\cs folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\ca folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\bg folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales\ar folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX\_locales folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__MACOSX folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_TW folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_CN folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\vi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\uk folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\tr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\th folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sv folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sk folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ru folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ro folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_PT folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_BR folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\no folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\nl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lv folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lt folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ko folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ja folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\it folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\id folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hu folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\he folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fil folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\es folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\en folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\el folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\de folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\da folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\cs folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ca folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\bg folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ar folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_TW folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_CN folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\vi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\uk folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\tr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\th folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sv folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sk folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ru folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ro folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_PT folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_BR folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\no folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\nl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lv folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lt folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ko folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ja folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\it folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\id folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hu folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\he folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fil folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\et folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es_419 folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_US folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_GB folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\el folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\de folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\da folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\cs folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ca folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\bg folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ar folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\mpmfjcpampmdgkjfjbjfloolnfojlogf\2.1.11.0_0 folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__MACOSX\_locales folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__MACOSX folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_TW folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_CN folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_PT folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_BR folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales folder moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Programdata\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 folder moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64182481-4F71-486b-A045-B233BD0DA8FC}\ deleted successfully.

C:\Programfiler\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}\ not found.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}\ not found.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.

C:\Programfiler\ConduitEngine\prxConduitEngine.dll moved successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{37483b40-c254-4a72-bda4-22ee90182c1e} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{37483b40-c254-4a72-bda4-22ee90182c1e}\ not found.

File C:\Programfiler\NCH_EN\prxtbNCH_.dll not found.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DB4E9724-F518-4dfd-9C7C-78B52103CAB9}\ deleted successfully.

C:\Programfiler\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll moved successfully.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{A057A204-BACC-4D26-9990-79A187E2698E} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}\ not found.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{37483B40-C254-4A72-BDA4-22EE90182C1E} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{37483B40-C254-4A72-BDA4-22EE90182C1E}\ not found.

File C:\Programfiler\NCH_EN\prxtbNCH_.dll not found.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\WINDOWS\system32\__c009777C.dat deleted successfully.

C:\AUTOEXEC.BAT moved successfully.

File move failed. E:\autorun.inf scheduled to be moved on reboot.

File move failed. G:\AUTORUN.INF scheduled to be moved on reboot.

File move failed. G:\AutoRun.exe scheduled to be moved on reboot.

File move failed. H:\Autorun.inf scheduled to be moved on reboot.

File move failed. H:\autorun.exe scheduled to be moved on reboot.

File move failed. L:\Autorun.inf scheduled to be moved on reboot.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{64c32f3a-ebf7-11de-9c81-00027251c9f6}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64c32f3a-ebf7-11de-9c81-00027251c9f6}\ not found.

File G:\Toshiba\more4you.exe not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ deleted successfully.

File move failed. E:\Install.exe scheduled to be moved on reboot.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G\ deleted successfully.

File move failed. G:\AutoRun.exe scheduled to be moved on reboot.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H\ deleted successfully.

File move failed. H:\autorun.exe scheduled to be moved on reboot.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H\ not found.

File move failed. H:\directx9\DXSETUP.exe scheduled to be moved on reboot.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H\ not found.

File move failed. H:\setup.exe scheduled to be moved on reboot.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\L\ deleted successfully.

File move failed. L:\FarCryAutoCD.exe scheduled to be moved on reboot.

C:\WINDOWS\tasks\At30.job moved successfully.

C:\WINDOWS\system32\perfh014.dat moved successfully.

C:\WINDOWS\system32\perfh009.dat moved successfully.

C:\WINDOWS\system32\perfc014.dat moved successfully.

C:\WINDOWS\system32\perfc009.dat moved successfully.

C:\WINDOWS\tasks\At46.job moved successfully.

C:\WINDOWS\tasks\At45.job moved successfully.

C:\WINDOWS\tasks\At43.job moved successfully.

C:\WINDOWS\tasks\At25.job moved successfully.

C:\WINDOWS\tasks\At48.job moved successfully.

C:\WINDOWS\system32\wpa.dbl moved successfully.

C:\WINDOWS\tasks\At33.job moved successfully.

C:\WINDOWS\tasks\At34.job moved successfully.

File C:\WINDOWS\Tasks\At25.job not found.

C:\WINDOWS\Tasks\At26.job moved successfully.

C:\WINDOWS\Tasks\At27.job moved successfully.

C:\WINDOWS\Tasks\At28.job moved successfully.

C:\WINDOWS\Tasks\At29.job moved successfully.

File C:\WINDOWS\Tasks\At30.job not found.

C:\WINDOWS\Tasks\At31.job moved successfully.

C:\WINDOWS\Tasks\At32.job moved successfully.

File C:\WINDOWS\Tasks\At33.job not found.

File C:\WINDOWS\Tasks\At34.job not found.

C:\WINDOWS\Tasks\At35.job moved successfully.

C:\WINDOWS\Tasks\At36.job moved successfully.

C:\WINDOWS\Tasks\At37.job moved successfully.

C:\WINDOWS\Tasks\At38.job moved successfully.

C:\WINDOWS\Tasks\At39.job moved successfully.

C:\WINDOWS\Tasks\At40.job moved successfully.

C:\WINDOWS\Tasks\At41.job moved successfully.

C:\WINDOWS\Tasks\At42.job moved successfully.

File C:\WINDOWS\Tasks\At43.job not found.

C:\WINDOWS\Tasks\At44.job moved successfully.

File C:\WINDOWS\Tasks\At45.job not found.

File C:\WINDOWS\Tasks\At46.job not found.

C:\WINDOWS\Tasks\At47.job moved successfully.

File C:\WINDOWS\Tasks\At48.job not found.

C:\WINDOWS\Tasks\prismShakeIcon.job moved successfully.

ADS C:\Documents and Settings\All Users\Programdata\TEMP:44DAF2F1 deleted successfully.

========== COMMANDS ==========

[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: Jonas

->Flash cache emptied: 7667 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

[EMPTYTEMP]

User: Administrator

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

User: All Users

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

User: Jonas

->Temp folder emptied: 20978076 bytes

->Temporary Internet Files folder emptied: 3686220 bytes

->Java cache emptied: 35756 bytes

->FireFox cache emptied: 2714832 bytes

->Google Chrome cache emptied: 10626157 bytes

->Opera cache emptied: 340610251 bytes

->Flash cache emptied: 0 bytes

User: LocalService

->Temp folder emptied: 65984 bytes

->Temporary Internet Files folder emptied: 770784 bytes

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 2960665 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 2501708 bytes

%systemroot%\System32 .tmp files removed: 2573 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 98304 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 367,00 mb

OTL by OldTimer - Version 3.2.39.2 log created on 04162012_045948

Files\Folders moved on Reboot...

File move failed. E:\autorun.inf scheduled to be moved on reboot.

File move failed. G:\AUTORUN.INF scheduled to be moved on reboot.

File move failed. G:\AutoRun.exe scheduled to be moved on reboot.

File move failed. H:\Autorun.inf scheduled to be moved on reboot.

File move failed. H:\autorun.exe scheduled to be moved on reboot.

File move failed. L:\Autorun.inf scheduled to be moved on reboot.

File move failed. E:\Install.exe scheduled to be moved on reboot.

File move failed. H:\directx9\DXSETUP.exe scheduled to be moved on reboot.

File move failed. H:\setup.exe scheduled to be moved on reboot.

File move failed. L:\FarCryAutoCD.exe scheduled to be moved on reboot.

C:\Documents and Settings\Jonas\Lokale innstillinger\Temporary Internet Files\Content.IE5\GHSHATKL\background-banner-right-v9[1].jpg moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Temporary Internet Files\Content.IE5\CL6BWLAV\button-flex-blue2[1].png moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Temporary Internet Files\Content.IE5\CL6BWLAV\tick-blue[1].png moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Temporary Internet Files\Content.IE5\9183ATI1\background-banner-middle-v9[2].jpg moved successfully.

C:\Documents and Settings\Jonas\Lokale innstillinger\Temporary Internet Files\Content.IE5\9183ATI1\background_banner_7_en[1].jpg moved successfully.

File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

skylinepower · 16. april 2012

05:13:22.0312 2320 ============================================================
05:13:22.0312 2320 Scan started

05:13:22.0312 2320 Mode: Manual;

05:13:22.0312 2320 ============================================================

05:13:22.0609 2320 Aavmker4 (3f6884eff406238d39aaa892218f1df7) C:\WINDOWS\system32\drivers\Aavmker4.sys

05:13:22.0625 2320 Aavmker4 - ok

05:13:22.0687 2320 Abiosdsk - ok

05:13:22.0703 2320 abp480n5 - ok

05:13:22.0750 2320 ACPI (61e2aca714a1e28c0fb74cef76868fc0) C:\WINDOWS\system32\DRIVERS\ACPI.sys

05:13:22.0765 2320 ACPI - ok

05:13:22.0812 2320 ACPIEC (eab54ea21ab7ea92fb9975c02779080b) C:\WINDOWS\system32\drivers\ACPIEC.sys

05:13:22.0812 2320 ACPIEC - ok

05:13:22.0828 2320 adpu160m - ok

05:13:22.0875 2320 aec (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys

05:13:22.0875 2320 aec - ok

05:13:22.0937 2320 AegisP (15e655baa989444f56787ef558823643) C:\WINDOWS\system32\DRIVERS\AegisP.sys

05:13:22.0937 2320 AegisP - ok

05:13:22.0968 2320 AFD (5ac495f4cb807b2b98ad2ad591e6d92e) C:\WINDOWS\System32\drivers\afd.sys

05:13:22.0968 2320 AFD - ok

05:13:23.0031 2320 agp440 (2c428fa0c3e3a01ed93c9b2a27d8d4bb) C:\WINDOWS\system32\DRIVERS\agp440.sys

05:13:23.0031 2320 agp440 - ok

05:13:23.0046 2320 Aha154x - ok

05:13:23.0062 2320 aic78u2 - ok

05:13:23.0093 2320 aic78xx - ok

05:13:23.0125 2320 ALCXSENS (ba88534a3ceb6161e7432438b9ea4f54) C:\WINDOWS\system32\drivers\ALCXSENS.SYS

05:13:23.0125 2320 ALCXSENS - ok

05:13:23.0171 2320 ALCXWDM (6725434f5eb0a975b7716d68566e5d86) C:\WINDOWS\system32\drivers\ALCXWDM.SYS

05:13:23.0171 2320 ALCXWDM - ok

05:13:23.0203 2320 Alerter (2ea187ceddbd73c3ca987688e861c73b) C:\WINDOWS\system32\alrsvc.dll

05:13:23.0218 2320 Alerter - ok

05:13:23.0265 2320 ALG (cf4214650c8c6f99d064b18282ea3a17) C:\WINDOWS\System32\alg.exe

05:13:23.0328 2320 ALG - ok

05:13:23.0390 2320 AliIde - ok

05:13:23.0406 2320 amsint - ok

05:13:23.0437 2320 AppMgmt (7a0302c81672be362e0a9c7195597758) C:\WINDOWS\System32\appmgmts.dll

05:13:23.0453 2320 AppMgmt - ok

05:13:23.0468 2320 asc - ok

05:13:23.0484 2320 asc3350p - ok

05:13:23.0500 2320 asc3550 - ok

05:13:23.0578 2320 aspnet_state (d33c507942299753868204cc7642fa27) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

05:13:23.0609 2320 aspnet_state - ok

05:13:23.0640 2320 aswFsBlk (9bdb29e81abceb883556df44649696c4) C:\WINDOWS\system32\drivers\aswFsBlk.sys

05:13:23.0640 2320 aswFsBlk - ok

05:13:23.0671 2320 aswMon2 (c2181ef6b54752273a0759a968c59279) C:\WINDOWS\system32\drivers\aswMon2.sys

05:13:23.0671 2320 aswMon2 - ok

05:13:23.0718 2320 aswRdr (ac48bdd4cd5d44af33087c06d6e9511c) C:\WINDOWS\system32\drivers\aswRdr.sys

05:13:23.0718 2320 aswRdr - ok

05:13:23.0765 2320 aswSnx (f7969934cca2e566e95df17380a3cb11) C:\WINDOWS\system32\drivers\aswSnx.sys

05:13:23.0781 2320 aswSnx - ok

05:13:23.0812 2320 aswSP (d6788e3211afa9951ed7a4d617f68a4f) C:\WINDOWS\system32\drivers\aswSP.sys

05:13:23.0812 2320 aswSP - ok

05:13:23.0843 2320 aswTdi (4d100c45517809439c7b6dd98997fa00) C:\WINDOWS\system32\drivers\aswTdi.sys

05:13:23.0843 2320 aswTdi - ok

05:13:23.0875 2320 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

05:13:23.0875 2320 AsyncMac - ok

05:13:23.0906 2320 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys

05:13:23.0906 2320 atapi - ok

05:13:23.0921 2320 Atdisk - ok

05:13:23.0953 2320 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

05:13:23.0953 2320 Atmarpc - ok

05:13:23.0984 2320 AudioSrv (6f55b224dfa0a3da9b8b12fcaded28d9) C:\WINDOWS\System32\audiosrv.dll

05:13:23.0984 2320 AudioSrv - ok

05:13:24.0000 2320 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

05:13:24.0000 2320 audstub - ok

05:13:24.0078 2320 avast! Antivirus (7de3ee7dbee14c1f8375cb82466c9321) C:\Programfiler\Alwil Software\Avast5\AvastSvc.exe

05:13:24.0078 2320 avast! Antivirus - ok

05:13:24.0125 2320 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

05:13:24.0125 2320 Beep - ok

05:13:24.0156 2320 BITS (dacf8c08ae1583a1f5bc2c2277b77580) C:\WINDOWS\system32\qmgr.dll

05:13:24.0203 2320 BITS - ok

05:13:24.0218 2320 BRGSp50 (ee0f41fa0466189a2c8b9caf7d1cddd5) C:\WINDOWS\system32\Drivers\BRGSp50.sys

05:13:24.0234 2320 BRGSp50 - ok

05:13:24.0250 2320 Browser (94ed9fb74221e31b6de21ded0369d9f6) C:\WINDOWS\System32\browser.dll

05:13:24.0265 2320 Browser - ok

05:13:24.0296 2320 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

05:13:24.0296 2320 cbidf2k - ok

05:13:24.0343 2320 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

05:13:24.0343 2320 CCDECODE - ok

05:13:24.0375 2320 cd20xrnt - ok

05:13:24.0406 2320 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

05:13:24.0406 2320 Cdaudio - ok

05:13:24.0437 2320 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys

05:13:24.0437 2320 Cdfs - ok

05:13:24.0468 2320 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys

05:13:24.0468 2320 Cdrom - ok

05:13:24.0500 2320 CiSvc (12a8b41a8a231b171d36327f0ca4fe9e) C:\WINDOWS\system32\cisvc.exe

05:13:24.0500 2320 CiSvc - ok

05:13:24.0531 2320 ClipSrv (e32df45c47b0c3ab2735c2916cef0474) C:\WINDOWS\system32\clipsrv.exe

05:13:24.0531 2320 ClipSrv - ok

05:13:24.0609 2320 clr_optimization_v2.0.50727_32 (3c4d595e7f9b747325aef28b4adcaae5) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

05:13:24.0640 2320 clr_optimization_v2.0.50727_32 - ok

05:13:24.0656 2320 CmdIde - ok

05:13:24.0671 2320 COMSysApp - ok

05:13:24.0703 2320 Cpqarray - ok

05:13:24.0734 2320 CryptSvc (7b15795f0ae8cc5413cda98dced01fa1) C:\WINDOWS\System32\cryptsvc.dll

05:13:24.0734 2320 CryptSvc - ok

05:13:24.0781 2320 d347bus (5776322f93cdb91086111f5ffbfda2a0) C:\WINDOWS\system32\DRIVERS\d347bus.sys

05:13:24.0781 2320 d347bus - ok

05:13:24.0812 2320 d347prt (b49f79ace459763f4e0380071be9cb45) C:\WINDOWS\system32\Drivers\d347prt.sys

05:13:24.0812 2320 d347prt - ok

05:13:24.0828 2320 dac2w2k - ok

05:13:24.0843 2320 dac960nt - ok

05:13:24.0875 2320 DcomLaunch (6b5738aa180aa22c917d14bbcd6408b3) C:\WINDOWS\system32\rpcss.dll

05:13:24.0890 2320 DcomLaunch - ok

05:13:24.0921 2320 Dhcp (3c9f7fa82e52d5b125ed4f40a7a2b99a) C:\WINDOWS\System32\dhcpcsvc.dll

05:13:24.0921 2320 Dhcp - ok

05:13:24.0937 2320 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys

05:13:24.0953 2320 Disk - ok

05:13:24.0968 2320 dmadmin - ok

05:13:25.0000 2320 dmboot (36a47ac9b8d99db8f5d8178539c3ef52) C:\WINDOWS\system32\drivers\dmboot.sys

05:13:25.0015 2320 dmboot - ok

05:13:25.0046 2320 dmio (8188805b8a0c9d128b97e0b573a7c681) C:\WINDOWS\system32\drivers\dmio.sys

05:13:25.0062 2320 dmio - ok

05:13:25.0078 2320 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

05:13:25.0093 2320 dmload - ok

05:13:25.0125 2320 dmserver (155e4f5efffaeec74e7b4a6422f4496e) C:\WINDOWS\System32\dmserver.dll

05:13:25.0203 2320 dmserver - ok

05:13:25.0281 2320 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys

05:13:25.0281 2320 DMusic - ok

05:13:25.0328 2320 Dnscache (d12d7f1fff62e2e0e396984ef7c5ce96) C:\WINDOWS\System32\dnsrslvr.dll

05:13:25.0328 2320 Dnscache - ok

05:13:25.0343 2320 dpti2o - ok

05:13:25.0390 2320 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys

05:13:25.0390 2320 drmkaud - ok

05:13:25.0437 2320 dtsoftbus01 (fb38473835476a6fb272215a1d972af9) C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys

05:13:25.0453 2320 dtsoftbus01 - ok

05:13:25.0484 2320 ERSvc (81937cdc3435a6c961b5f6c920362872) C:\WINDOWS\System32\ersvc.dll

05:13:25.0484 2320 ERSvc - ok

05:13:25.0546 2320 Eventlog (b44f7f43d33e308d07ba54c23b897e20) C:\WINDOWS\system32\services.exe

05:13:25.0546 2320 Eventlog - ok

05:13:25.0578 2320 EventSystem (bb29d915111818c61c9edc6301154d62) C:\WINDOWS\system32\es.dll

05:13:25.0593 2320 EventSystem - ok

05:13:25.0625 2320 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys

05:13:25.0625 2320 Fastfat - ok

05:13:25.0671 2320 FastUserSwitchingCompatibility (750781e0f7e0c8b2360dddde3fac74b4) C:\WINDOWS\System32\shsvcs.dll

05:13:25.0687 2320 FastUserSwitchingCompatibility - ok

05:13:25.0703 2320 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys

05:13:25.0703 2320 Fdc - ok

05:13:25.0750 2320 Fips (7842e596b6867abbf27f665762f30665) C:\WINDOWS\system32\drivers\Fips.sys

05:13:25.0750 2320 Fips - ok

05:13:25.0765 2320 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys

05:13:25.0765 2320 Flpydisk - ok

05:13:25.0812 2320 FltMgr (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\DRIVERS\fltMgr.sys

05:13:25.0828 2320 FltMgr - ok

05:13:25.0859 2320 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

05:13:25.0859 2320 Fs_Rec - ok

05:13:25.0921 2320 Ftdisk (f49589d9b1b3229eb3e761e569b20aca) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

05:13:25.0921 2320 Ftdisk - ok

05:13:25.0953 2320 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys

05:13:25.0953 2320 Gpc - ok

05:13:26.0031 2320 gupdate1ca816bb90beef2 (626a24ed1228580b9518c01930936df9) C:\Programfiler\Google\Update\GoogleUpdate.exe

05:13:26.0046 2320 gupdate1ca816bb90beef2 - ok

05:13:26.0062 2320 gupdatem (626a24ed1228580b9518c01930936df9) C:\Programfiler\Google\Update\GoogleUpdate.exe

05:13:26.0062 2320 gupdatem - ok

05:13:26.0093 2320 helpsvc (071f96543b4653780e3e265565e68e16) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll

05:13:26.0093 2320 helpsvc - ok

05:13:26.0140 2320 HidUsb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys

05:13:26.0156 2320 HidUsb - ok

05:13:26.0171 2320 hpn - ok

05:13:26.0218 2320 HTTP (c19b522a9ae0bbc3293397f3055e80a1) C:\WINDOWS\system32\Drivers\HTTP.sys

05:13:26.0218 2320 HTTP - ok

05:13:26.0250 2320 HTTPFilter (0d81f1c2001d9ae6a651b1a22281d383) C:\WINDOWS\System32\w3ssl.dll

05:13:26.0265 2320 HTTPFilter - ok

05:13:26.0281 2320 i2omp - ok

05:13:26.0328 2320 i8042prt (8442639723d68b70a04df8b9466a3531) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

05:13:26.0328 2320 i8042prt - ok

05:13:26.0421 2320 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Programfiler\Fellesfiler\InstallShield\Driver\1050\Intel 32\IDriverT.exe

05:13:26.0421 2320 IDriverT - ok

05:13:26.0468 2320 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys

05:13:26.0468 2320 Imapi - ok

05:13:26.0500 2320 ImapiService (c495ded91357b8840d43f11288639235) C:\WINDOWS\system32\imapi.exe

05:13:26.0500 2320 ImapiService - ok

05:13:26.0531 2320 ini910u - ok

05:13:26.0562 2320 IntelIde (17c10f6b32a8b5bef2410859af4ed778) C:\WINDOWS\system32\DRIVERS\intelide.sys

05:13:26.0562 2320 IntelIde - ok

05:13:26.0593 2320 intelppm (448cf31018abacc59bbe7ce2803b5828) C:\WINDOWS\system32\DRIVERS\intelppm.sys

05:13:26.0593 2320 intelppm - ok

05:13:26.0625 2320 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys

05:13:26.0640 2320 Ip6Fw - ok

05:13:26.0671 2320 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

05:13:26.0671 2320 IpFilterDriver - ok

05:13:26.0703 2320 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys

05:13:26.0703 2320 IpInIp - ok

05:13:26.0734 2320 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys

05:13:26.0750 2320 IpNat - ok

05:13:26.0781 2320 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys

05:13:26.0796 2320 IPSec - ok

05:13:26.0843 2320 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys

05:13:26.0843 2320 IRENUM - ok

05:13:26.0890 2320 isapnp (9b65a642df79be4f26930270cf6bd723) C:\WINDOWS\system32\DRIVERS\isapnp.sys

05:13:26.0890 2320 isapnp - ok

05:13:26.0953 2320 JavaQuickStarterService (0a5709543986843d37a92290b7838340) C:\Programfiler\Java\jre6\bin\jqs.exe

05:13:26.0953 2320 JavaQuickStarterService - ok

05:13:27.0000 2320 Kbdclass (12bea82362cffce1769e101549302b57) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

05:13:27.0000 2320 Kbdclass - ok

05:13:27.0062 2320 kmixer (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys

05:13:27.0062 2320 kmixer - ok

05:13:27.0125 2320 KSecDD (eb7ffe87fd367ea8fca0506f74a87fbb) C:\WINDOWS\system32\drivers\KSecDD.sys

05:13:27.0125 2320 KSecDD - ok

05:13:27.0156 2320 lanmanserver (98d523e838d774df37208fd0c4ff2c3f) C:\WINDOWS\System32\srvsvc.dll

05:13:27.0171 2320 lanmanserver - ok

05:13:27.0203 2320 lanmanworkstation (8a85724b7e495343577169aa305722be) C:\WINDOWS\System32\wkssvc.dll

05:13:27.0218 2320 lanmanworkstation - ok

05:13:27.0250 2320 LmHosts (9909fe118b0dba321916f10c3af7cb20) C:\WINDOWS\System32\lmhsvc.dll

05:13:27.0265 2320 LmHosts - ok

05:13:27.0296 2320 Messenger (38c67dba96a26855356850d52d5ec6a6) C:\WINDOWS\System32\msgsvc.dll

05:13:27.0312 2320 Messenger - ok

05:13:27.0343 2320 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

05:13:27.0343 2320 mnmdd - ok

05:13:27.0406 2320 mnmsrvc (82bbff029085b88fa89f34c25ba510a1) C:\WINDOWS\system32\mnmsrvc.exe

05:13:27.0406 2320 mnmsrvc - ok

05:13:27.0453 2320 Modem (1eb04a47e3ffe5198548f8d4d6a4c32a) C:\WINDOWS\system32\drivers\Modem.sys

05:13:27.0468 2320 Modem - ok

05:13:27.0500 2320 Mouclass (50c387897a7094a09c6b7bec6db4a9d4) C:\WINDOWS\system32\DRIVERS\mouclass.sys

05:13:27.0500 2320 Mouclass - ok

05:13:27.0546 2320 mouhid (2c8ace099162a015d464c9a427148651) C:\WINDOWS\system32\DRIVERS\mouhid.sys

05:13:27.0546 2320 mouhid - ok

05:13:27.0578 2320 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys

05:13:27.0578 2320 MountMgr - ok

05:13:27.0609 2320 mraid35x - ok

05:13:27.0687 2320 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

05:13:27.0687 2320 MRxDAV - ok

05:13:27.0718 2320 MRxSmb (1fd607fc67f7f7c633c3da65bfc53d18) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

05:13:27.0734 2320 MRxSmb - ok

05:13:27.0765 2320 MSDTC (131fd91f24d74a07f39dc9756e65e159) C:\WINDOWS\system32\msdtc.exe

05:13:27.0765 2320 MSDTC - ok

05:13:27.0796 2320 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys

05:13:27.0812 2320 Msfs - ok

05:13:27.0828 2320 MSIServer - ok

05:13:27.0859 2320 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys

05:13:27.0859 2320 MSKSSRV - ok

05:13:27.0890 2320 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

05:13:27.0890 2320 MSPCLOCK - ok

05:13:27.0921 2320 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys

05:13:27.0921 2320 MSPQM - ok

05:13:27.0953 2320 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

05:13:27.0953 2320 mssmbios - ok

05:13:28.0000 2320 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys

05:13:28.0000 2320 MSTEE - ok

05:13:28.0031 2320 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys

05:13:28.0031 2320 Mup - ok

05:13:28.0093 2320 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

05:13:28.0093 2320 NABTSFEC - ok

05:13:28.0125 2320 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys

05:13:28.0140 2320 NDIS - ok

05:13:28.0156 2320 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys

05:13:28.0156 2320 NdisIP - ok

05:13:28.0187 2320 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

05:13:28.0203 2320 NdisTapi - ok

05:13:28.0250 2320 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

05:13:28.0265 2320 Ndisuio - ok

05:13:28.0281 2320 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

05:13:28.0281 2320 NdisWan - ok

05:13:28.0328 2320 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys

05:13:28.0328 2320 NDProxy - ok

05:13:28.0390 2320 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys

05:13:28.0406 2320 NetBIOS - ok

05:13:28.0453 2320 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys

05:13:28.0468 2320 NetBT - ok

05:13:28.0500 2320 NetDDE (700d4e2108d01c9ec94c26a3858190d0) C:\WINDOWS\system32\netdde.exe

05:13:28.0500 2320 NetDDE - ok

05:13:28.0515 2320 NetDDEdsdm (700d4e2108d01c9ec94c26a3858190d0) C:\WINDOWS\system32\netdde.exe

05:13:28.0531 2320 NetDDEdsdm - ok

05:13:28.0578 2320 Netlogon (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:13:28.0578 2320 Netlogon - ok

05:13:28.0609 2320 Netman (7c0c4e76b05c9785617c9d9ff94a4e5d) C:\WINDOWS\System32\netman.dll

05:13:28.0609 2320 Netman - ok

05:13:28.0640 2320 Nla (1356cd8e82aea138a931bdb3b4a2122d) C:\WINDOWS\System32\mswsock.dll

05:13:28.0656 2320 Nla - ok

05:13:28.0703 2320 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys

05:13:28.0703 2320 Npfs - ok

05:13:28.0750 2320 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys

05:13:28.0765 2320 Ntfs - ok

05:13:28.0781 2320 NtLmSsp (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:13:28.0781 2320 NtLmSsp - ok

05:13:28.0843 2320 NtmsSvc (3c0a2006537e4783e27fe801ec0b6188) C:\WINDOWS\system32\ntmssvc.dll

05:13:28.0859 2320 NtmsSvc - ok

05:13:28.0875 2320 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

05:13:28.0875 2320 Null - ok

05:13:29.0031 2320 nv (29b9163a6d9c486dcaefed190130acb0) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

05:13:29.0062 2320 nv - ok

05:13:29.0093 2320 NVSvc (aa78c4677e06cfd4fe048718ee7f6332) C:\WINDOWS\system32\nvsvc32.exe

05:13:29.0093 2320 NVSvc - ok

05:13:29.0140 2320 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

05:13:29.0140 2320 NwlnkFlt - ok

05:13:29.0156 2320 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

05:13:29.0171 2320 NwlnkFwd - ok

05:13:29.0296 2320 odserv (84de1dd996b48b05ace31ad015fa108a) C:\Programfiler\Fellesfiler\Microsoft Shared\OFFICE12\ODSERV.EXE

05:13:29.0312 2320 odserv - ok

05:13:29.0359 2320 ose (5a432a042dae460abe7199b758e8606c) C:\Programfiler\Fellesfiler\Microsoft Shared\Source Engine\OSE.EXE

05:13:29.0375 2320 ose - ok

05:13:29.0421 2320 Parport (ccc0b44b5233247f88dad5ea00f328b4) C:\WINDOWS\system32\DRIVERS\parport.sys

05:13:29.0437 2320 Parport - ok

05:13:29.0500 2320 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys

05:13:29.0500 2320 PartMgr - ok

05:13:29.0515 2320 ParVdm (12297b25ccc4d89d9d2e794a8fd6ee3d) C:\WINDOWS\system32\drivers\ParVdm.sys

05:13:29.0531 2320 ParVdm - ok

05:13:29.0578 2320 pccsmcfd (175cc28dcf819f78caa3fbd44ad9e52a) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys

05:13:29.0578 2320 pccsmcfd - ok

05:13:29.0609 2320 PCI (5577d08d9839930415894e21d0742b1d) C:\WINDOWS\system32\DRIVERS\pci.sys

05:13:29.0609 2320 PCI - ok

05:13:29.0656 2320 PCIIde (c9ef84891a111f6f5ebb758a29252e54) C:\WINDOWS\system32\DRIVERS\pciide.sys

05:13:29.0656 2320 PCIIde - ok

05:13:29.0703 2320 Pcmcia (5dfa4d9e3ea819c9578e0df3fd69c5ab) C:\WINDOWS\system32\drivers\Pcmcia.sys

05:13:29.0703 2320 Pcmcia - ok

05:13:29.0750 2320 perc2 - ok

05:13:29.0765 2320 perc2hib - ok

05:13:29.0828 2320 PlugPlay (b44f7f43d33e308d07ba54c23b897e20) C:\WINDOWS\system32\services.exe

05:13:29.0828 2320 PlugPlay - ok

05:13:29.0843 2320 PolicyAgent (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:13:29.0859 2320 PolicyAgent - ok

05:13:29.0875 2320 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys

05:13:29.0890 2320 PptpMiniport - ok

05:13:29.0921 2320 PQNTDrv (4228630829c0e521c43d882a00533374) C:\WINDOWS\system32\drivers\PQNTDrv.sys

05:13:29.0921 2320 PQNTDrv - ok

05:13:29.0937 2320 ProtectedStorage (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:13:29.0937 2320 ProtectedStorage - ok

05:13:29.0968 2320 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys

05:13:29.0968 2320 PSched - ok

05:13:29.0984 2320 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

05:13:30.0000 2320 Ptilink - ok

05:13:30.0015 2320 ql1080 - ok

05:13:30.0031 2320 Ql10wnt - ok

05:13:30.0062 2320 ql12160 - ok

05:13:30.0078 2320 ql1240 - ok

05:13:30.0093 2320 ql1280 - ok

05:13:30.0109 2320 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

05:13:30.0125 2320 RasAcd - ok

05:13:30.0156 2320 RasAuto (7883be77cc7f0d3a5063933602d70d66) C:\WINDOWS\System32\rasauto.dll

05:13:30.0171 2320 RasAuto - ok

05:13:30.0203 2320 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

05:13:30.0203 2320 Rasl2tp - ok

05:13:30.0218 2320 RasMan (63645f768097a5869275b8cdf3bb196f) C:\WINDOWS\System32\rasmans.dll

05:13:30.0234 2320 RasMan - ok

05:13:30.0265 2320 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

05:13:30.0265 2320 RasPppoe - ok

05:13:30.0296 2320 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

05:13:30.0296 2320 Raspti - ok

05:13:30.0328 2320 Rdbss (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERS\rdbss.sys

05:13:30.0328 2320 Rdbss - ok

05:13:30.0390 2320 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

05:13:30.0390 2320 RDPCDD - ok

05:13:30.0421 2320 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

05:13:30.0437 2320 rdpdr - ok

05:13:30.0468 2320 RDPWD (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys

05:13:30.0484 2320 RDPWD - ok

05:13:30.0515 2320 RDSessMgr (e2f4bdb6cd0e75403ae25bfa9ac47952) C:\WINDOWS\system32\sessmgr.exe

05:13:30.0515 2320 RDSessMgr - ok

05:13:30.0562 2320 redbook (680f9f9318a1f4cf913c57113edaccfb) C:\WINDOWS\system32\DRIVERS\redbook.sys

05:13:30.0562 2320 redbook - ok

05:13:30.0593 2320 RemoteAccess (ee796496c9d7e2469f01b02c319c1220) C:\WINDOWS\System32\mprdim.dll

05:13:30.0593 2320 RemoteAccess - ok

05:13:30.0625 2320 RemoteRegistry (bd618a9e0eec1f828bc4d4c35e592d4b) C:\WINDOWS\system32\regsvc.dll

05:13:30.0625 2320 RemoteRegistry - ok

05:13:30.0671 2320 RpcLocator (fbf189c3db882420c98d2d8565744bea) C:\WINDOWS\system32\locator.exe

05:13:30.0671 2320 RpcLocator - ok

05:13:30.0703 2320 RpcSs (6b5738aa180aa22c917d14bbcd6408b3) C:\WINDOWS\system32\rpcss.dll

05:13:30.0718 2320 RpcSs - ok

05:13:30.0765 2320 RSVP (ce5adeb463466c484da7d2c0e4ef62a9) C:\WINDOWS\system32\rsvp.exe

05:13:30.0781 2320 RSVP - ok

05:13:30.0843 2320 RT61 (ef64988c8e699e2481d1fd45bf472ef0) C:\WINDOWS\system32\DRIVERS\RT61.sys

05:13:30.0843 2320 RT61 - ok

05:13:30.0890 2320 RTL8023xp (e9877aa069dc11b03dbd1d33b8b2a3ca) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys

05:13:30.0890 2320 RTL8023xp - ok

05:13:30.0921 2320 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS

05:13:30.0937 2320 rtl8139 - ok

05:13:30.0953 2320 SamSs (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:13:30.0953 2320 SamSs - ok

05:13:31.0000 2320 SbFw (eb4a2b5faa3decd33ed682a5569e287f) C:\WINDOWS\system32\drivers\SbFw.sys

05:13:31.0015 2320 SbFw - ok

05:13:31.0046 2320 SBFWIMCL (f27b38d70b7621378161d6f48be04d2c) C:\WINDOWS\system32\DRIVERS\sbfwim.sys

05:13:31.0046 2320 SBFWIMCL - ok

05:13:31.0078 2320 SBFWIMCLMP (f27b38d70b7621378161d6f48be04d2c) C:\WINDOWS\system32\DRIVERS\SBFWIM.sys

05:13:31.0078 2320 SBFWIMCLMP - ok

05:13:31.0125 2320 sbhips (53e5e7dc26bb920b97f258bbd52abfdc) C:\WINDOWS\system32\drivers\sbhips.sys

05:13:31.0125 2320 sbhips - ok

05:13:31.0156 2320 SBRE - ok

05:13:31.0187 2320 SbTis (44062a740434b7c3946096d615aaa91c) C:\WINDOWS\system32\drivers\sbtis.sys

05:13:31.0203 2320 SbTis - ok

05:13:31.0234 2320 SCardSvr (cb4a581237088decc658046ac669ef54) C:\WINDOWS\System32\SCardSvr.exe

05:13:31.0250 2320 SCardSvr - ok

05:13:31.0296 2320 Schedule (d553c29b80a3bdeb4db14bc5cae013b7) C:\WINDOWS\system32\schedsvc.dll

05:13:31.0296 2320 Schedule - ok

05:13:31.0328 2320 Secdrv (314a998b1732c1acd6b6459ec9961ad8) C:\WINDOWS\system32\DRIVERS\secdrv.sys

05:13:31.0343 2320 Secdrv - ok

05:13:31.0375 2320 seclogon (c10ba5499cac6683d0b428e067193613) C:\WINDOWS\System32\seclogon.dll

05:13:31.0375 2320 seclogon - ok

05:13:31.0406 2320 SENS (868542b9e8bd9238967c5682a568688b) C:\WINDOWS\system32\sens.dll

05:13:31.0421 2320 SENS - ok

05:13:31.0437 2320 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys

05:13:31.0437 2320 serenum - ok

05:13:31.0468 2320 Serial (ea56aa495f4a53563ed3db2b96bd0dc8) C:\WINDOWS\system32\DRIVERS\serial.sys

05:13:31.0468 2320 Serial - ok

05:13:31.0546 2320 ServiceLayer (979ae6e47129e51a242434da9664054c) C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe

05:13:31.0562 2320 ServiceLayer - ok

05:13:31.0593 2320 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys

05:13:31.0593 2320 Sfloppy - ok

05:13:31.0625 2320 SharedAccess (b207908a71a1477d0083917b6f5da3ed) C:\WINDOWS\System32\ipnathlp.dll

05:13:31.0640 2320 SharedAccess - ok

05:13:31.0656 2320 ShellHWDetection (750781e0f7e0c8b2360dddde3fac74b4) C:\WINDOWS\System32\shsvcs.dll

05:13:31.0671 2320 ShellHWDetection - ok

05:13:31.0687 2320 Simbad - ok

05:13:31.0734 2320 SkypeUpdate (6128e98eaaed364ed1a32708d2fd22cb) C:\Programfiler\Skype\Updater\Updater.exe

05:13:31.0734 2320 SkypeUpdate - ok

05:13:31.0765 2320 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys

05:13:31.0765 2320 SLIP - ok

05:13:31.0796 2320 Sparrow - ok

05:13:31.0843 2320 splitter (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys

05:13:31.0843 2320 splitter - ok

05:13:31.0859 2320 Spooler (1efb05d36736d2b6df8fd81c76fa0be6) C:\WINDOWS\system32\spoolsv.exe

05:13:31.0875 2320 Spooler - ok

05:13:31.0906 2320 sr (bc6e4b796d212e336d6565676112221c) C:\WINDOWS\system32\DRIVERS\sr.sys

05:13:31.0906 2320 sr - ok

05:13:31.0937 2320 srservice (a4c2d7b494a30b96d7a8490138ac231f) C:\WINDOWS\system32\srsvc.dll

05:13:31.0953 2320 srservice - ok

05:13:31.0984 2320 Srv (20b7e396720353e4117d64d9dcb926ca) C:\WINDOWS\system32\DRIVERS\srv.sys

05:13:32.0000 2320 Srv - ok

05:13:32.0031 2320 SSDPSRV (8da0d5fa9e4f5c46102e5a01cbbabbbd) C:\WINDOWS\System32\ssdpsrv.dll

05:13:32.0031 2320 SSDPSRV - ok

05:13:32.0078 2320 stisvc (ab66df9bf218c0973963c0e207c14483) C:\WINDOWS\system32\wiaservc.dll

05:13:32.0093 2320 stisvc - ok

05:13:32.0140 2320 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys

05:13:32.0140 2320 streamip - ok

05:13:32.0171 2320 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys

05:13:32.0171 2320 swenum - ok

05:13:32.0203 2320 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys

05:13:32.0203 2320 swmidi - ok

05:13:32.0250 2320 SwPrv - ok

05:13:32.0265 2320 symc810 - ok

05:13:32.0296 2320 symc8xx - ok

05:13:32.0312 2320 sym_hi - ok

05:13:32.0328 2320 sym_u3 - ok

05:13:32.0375 2320 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys

05:13:32.0375 2320 sysaudio - ok

05:13:32.0437 2320 SysmonLog (7c98c7a6bb7d8edda5e594975a36bdf3) C:\WINDOWS\system32\smlogsvc.exe

05:13:32.0453 2320 SysmonLog - ok

05:13:32.0484 2320 TapiSrv (18797597911654d846724e3fb1ee25e5) C:\WINDOWS\System32\tapisrv.dll

05:13:32.0484 2320 TapiSrv - ok

05:13:32.0531 2320 Tcpip (9f4b36614a0fc234525ba224957de55c) C:\WINDOWS\system32\DRIVERS\tcpip.sys

05:13:32.0546 2320 Tcpip - ok

05:13:32.0578 2320 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys

05:13:32.0578 2320 TDPIPE - ok

05:13:32.0625 2320 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys

05:13:32.0625 2320 TDTCP - ok

05:13:32.0656 2320 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys

05:13:32.0656 2320 TermDD - ok

05:13:32.0703 2320 TermService (cdfde4ac03bf56bf5b383c4f849d34e5) C:\WINDOWS\System32\termsrv.dll

05:13:32.0718 2320 TermService - ok

05:13:32.0750 2320 Themes (750781e0f7e0c8b2360dddde3fac74b4) C:\WINDOWS\System32\shsvcs.dll

05:13:32.0750 2320 Themes - ok

05:13:32.0781 2320 TlntSvr (e145f457f802384b53f980baa4671544) C:\WINDOWS\system32\tlntsvr.exe

05:13:32.0796 2320 TlntSvr - ok

05:13:32.0812 2320 TosIde - ok

05:13:32.0843 2320 TrkWks (1aa114500840f9e89b9f9d156e9376e6) C:\WINDOWS\system32\trkwks.dll

05:13:32.0859 2320 TrkWks - ok

05:13:32.0906 2320 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys

05:13:32.0921 2320 Udfs - ok

05:13:32.0953 2320 ultra - ok

05:13:33.0015 2320 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys

05:13:33.0015 2320 Update - ok

05:13:33.0046 2320 upnphost (0c38087ca8fd66fd87a5cf29f0799817) C:\WINDOWS\System32\upnphost.dll

05:13:33.0046 2320 upnphost - ok

05:13:33.0078 2320 UPS (1e7ed5993f337690104f2826e658b4d6) C:\WINDOWS\System32\ups.exe

05:13:33.0078 2320 UPS - ok

05:13:33.0109 2320 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys

05:13:33.0109 2320 usbehci - ok

05:13:33.0156 2320 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys

05:13:33.0156 2320 usbhub - ok

05:13:33.0203 2320 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys

05:13:33.0203 2320 usbscan - ok

05:13:33.0234 2320 usbstor (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

05:13:33.0234 2320 usbstor - ok

05:13:33.0281 2320 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

05:13:33.0281 2320 usbuhci - ok

05:13:33.0328 2320 V0260VID (4f6d02349cac986a017ad1a0f2e2b099) C:\WINDOWS\system32\DRIVERS\V0260Vid.sys

05:13:33.0328 2320 V0260VID - ok

05:13:33.0375 2320 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys

05:13:33.0390 2320 VgaSave - ok

05:13:33.0406 2320 ViaIde - ok

05:13:33.0453 2320 VolSnap (078659d1b11d26c227444d3ae0ebdbc8) C:\WINDOWS\system32\drivers\VolSnap.sys

05:13:33.0453 2320 VolSnap - ok

05:13:33.0515 2320 VSS (0129f1b481b24f3533ddbf877bc0595d) C:\WINDOWS\System32\vssvc.exe

05:13:33.0531 2320 VSS - ok

05:13:33.0562 2320 W32Time (93478e5371ca437a316c2677f72683a2) C:\WINDOWS\system32\w32time.dll

05:13:33.0578 2320 W32Time - ok

05:13:33.0625 2320 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys

05:13:33.0625 2320 Wanarp - ok

05:13:33.0687 2320 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys

05:13:33.0703 2320 Wdf01000 - ok

05:13:33.0750 2320 wdmaud (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys

05:13:33.0750 2320 wdmaud - ok

05:13:33.0781 2320 WebClient (bbaa5c89c024c20d3de3c196872969f0) C:\WINDOWS\System32\webclnt.dll

05:13:33.0796 2320 WebClient - ok

05:13:33.0859 2320 winmgmt (732eba66d098195c02a31f1236998fbd) C:\WINDOWS\system32\wbem\WMIsvc.dll

05:13:33.0859 2320 winmgmt - ok

05:13:33.0937 2320 WmdmPmSN (55be0ba7b6c9a9dcf86caf6d76439e02) C:\WINDOWS\system32\mspmsnsv.dll

05:13:33.0937 2320 WmdmPmSN - ok

05:13:34.0000 2320 Wmi (829b27f4821bfe8011676de51cf2d03b) C:\WINDOWS\System32\advapi32.dll

05:13:34.0062 2320 Wmi - ok

05:13:34.0109 2320 WmiApSrv (79324ccd7c8ebdbe2f0c678d237f2071) C:\WINDOWS\system32\wbem\wmiapsrv.exe

05:13:34.0109 2320 WmiApSrv - ok

05:13:34.0171 2320 wscsvc (7a5fb48ab35b0b01825fb5729032c38c) C:\WINDOWS\system32\wscsvc.dll

05:13:34.0171 2320 wscsvc - ok

05:13:34.0218 2320 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

05:13:34.0218 2320 WSTCODEC - ok

05:13:34.0265 2320 wuauserv (1408a284fd9d90bf84549b81a2d3609f) C:\WINDOWS\system32\wuauserv.dll

05:13:34.0281 2320 wuauserv - ok

05:13:34.0312 2320 WZCSVC (a920082bfc0d713460fc5e00d60236c2) C:\WINDOWS\System32\wzcsvc.dll

05:13:34.0328 2320 WZCSVC - ok

05:13:34.0359 2320 xmlprov (c3e971426f3d436f5d5fdd8c345b0306) C:\WINDOWS\System32\xmlprov.dll

05:13:34.0375 2320 xmlprov - ok

05:13:34.0421 2320 ZD1211U(ZyDAS) (4f62f94e65df211c8b6ec7315604fa47) C:\WINDOWS\system32\DRIVERS\zd1211u.sys

05:13:34.0437 2320 ZD1211U(ZyDAS) - ok

05:13:34.0468 2320 ZDPSp50 (00ae175b903d45ed4a62384d3315dc2a) C:\WINDOWS\system32\Drivers\ZDPSp50.sys

05:13:34.0468 2320 ZDPSp50 - ok

05:13:34.0515 2320 MBR (0x1B8) (ad99111085a864d39cdff4d3a646e97b) \Device\Harddisk0\DR0

05:13:34.0796 2320 \Device\Harddisk0\DR0 - ok

05:13:34.0812 2320 MBR (0x1B8) (ad99111085a864d39cdff4d3a646e97b) \Device\Harddisk1\DR1

05:13:35.0046 2320 \Device\Harddisk1\DR1 - ok

05:13:35.0062 2320 Boot (0x1200) (33b11bce183ae884e5bf6103863498de) \Device\Harddisk0\DR0\Partition0

05:13:35.0062 2320 \Device\Harddisk0\DR0\Partition0 - ok

05:13:35.0078 2320 Boot (0x1200) (995c9a20aabb4bb3016657530ecde453) \Device\Harddisk0\DR0\Partition1

05:13:35.0078 2320 \Device\Harddisk0\DR0\Partition1 - ok

05:13:35.0109 2320 Boot (0x1200) (58be9f71934d49e9229c5a1815da0773) \Device\Harddisk0\DR0\Partition2

05:13:35.0125 2320 \Device\Harddisk0\DR0\Partition2 - ok

05:13:35.0125 2320 Boot (0x1200) (4e9722f561a7f76064a435bc0e7d342c) \Device\Harddisk1\DR1\Partition0

05:13:35.0125 2320 \Device\Harddisk1\DR1\Partition0 - ok

05:13:35.0140 2320 ============================================================

05:13:35.0140 2320 Scan finished

05:13:35.0140 2320 ============================================================

05:13:35.0156 1568 Detected object count: 0

05:13:35.0156 1568 Actual detected object count: 0

05:13:54.0343 2736 ============================================================

05:13:54.0343 2736 Scan started

05:13:54.0343 2736 Mode: Manual; SigCheck; TDLFS;

05:13:54.0343 2736 ============================================================

05:13:54.0687 2736 Aavmker4 (3f6884eff406238d39aaa892218f1df7) C:\WINDOWS\system32\drivers\Aavmker4.sys

05:13:54.0953 2736 Aavmker4 - ok

05:13:54.0968 2736 Abiosdsk - ok

05:13:54.0984 2736 abp480n5 - ok

05:13:55.0031 2736 ACPI (61e2aca714a1e28c0fb74cef76868fc0) C:\WINDOWS\system32\DRIVERS\ACPI.sys

05:13:55.0703 2736 ACPI - ok

05:13:55.0750 2736 ACPIEC (eab54ea21ab7ea92fb9975c02779080b) C:\WINDOWS\system32\drivers\ACPIEC.sys

05:13:55.0906 2736 ACPIEC - ok

05:13:55.0937 2736 adpu160m - ok

05:13:55.0968 2736 aec (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys

05:13:56.0140 2736 aec - ok

05:13:56.0187 2736 AegisP (15e655baa989444f56787ef558823643) C:\WINDOWS\system32\DRIVERS\AegisP.sys

05:13:56.0187 2736 AegisP ( UnsignedFile.Multi.Generic ) - warning

05:13:56.0187 2736 AegisP - detected UnsignedFile.Multi.Generic (1)

05:13:56.0218 2736 AFD (5ac495f4cb807b2b98ad2ad591e6d92e) C:\WINDOWS\System32\drivers\afd.sys

05:13:56.0390 2736 AFD - ok

05:13:56.0437 2736 agp440 (2c428fa0c3e3a01ed93c9b2a27d8d4bb) C:\WINDOWS\system32\DRIVERS\agp440.sys

05:13:56.0593 2736 agp440 - ok

05:13:56.0609 2736 Aha154x - ok

05:13:56.0640 2736 aic78u2 - ok

05:13:56.0656 2736 aic78xx - ok

05:13:56.0687 2736 ALCXSENS (ba88534a3ceb6161e7432438b9ea4f54) C:\WINDOWS\system32\drivers\ALCXSENS.SYS

05:13:56.0796 2736 ALCXSENS - ok

05:13:56.0843 2736 ALCXWDM (6725434f5eb0a975b7716d68566e5d86) C:\WINDOWS\system32\drivers\ALCXWDM.SYS

05:13:56.0937 2736 ALCXWDM - ok

05:13:56.0968 2736 Alerter (2ea187ceddbd73c3ca987688e861c73b) C:\WINDOWS\system32\alrsvc.dll

05:13:57.0140 2736 Alerter - ok

05:13:57.0171 2736 ALG (cf4214650c8c6f99d064b18282ea3a17) C:\WINDOWS\System32\alg.exe

05:13:57.0250 2736 ALG - ok

05:13:57.0265 2736 AliIde - ok

05:13:57.0281 2736 amsint - ok

05:13:57.0312 2736 AppMgmt (7a0302c81672be362e0a9c7195597758) C:\WINDOWS\System32\appmgmts.dll

05:13:57.0406 2736 AppMgmt - ok

05:13:57.0421 2736 asc - ok

05:13:57.0437 2736 asc3350p - ok

05:13:57.0453 2736 asc3550 - ok

05:13:57.0531 2736 aspnet_state (d33c507942299753868204cc7642fa27) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

05:13:57.0546 2736 aspnet_state - ok

05:13:57.0578 2736 aswFsBlk (9bdb29e81abceb883556df44649696c4) C:\WINDOWS\system32\drivers\aswFsBlk.sys

05:13:57.0593 2736 aswFsBlk - ok

05:13:57.0640 2736 aswMon2 (c2181ef6b54752273a0759a968c59279) C:\WINDOWS\system32\drivers\aswMon2.sys

05:13:57.0656 2736 aswMon2 - ok

05:13:57.0687 2736 aswRdr (ac48bdd4cd5d44af33087c06d6e9511c) C:\WINDOWS\system32\drivers\aswRdr.sys

05:13:57.0703 2736 aswRdr - ok

05:13:57.0750 2736 aswSnx (f7969934cca2e566e95df17380a3cb11) C:\WINDOWS\system32\drivers\aswSnx.sys

05:13:57.0781 2736 aswSnx - ok

05:13:57.0796 2736 aswSP (d6788e3211afa9951ed7a4d617f68a4f) C:\WINDOWS\system32\drivers\aswSP.sys

05:13:57.0828 2736 aswSP - ok

05:13:57.0859 2736 aswTdi (4d100c45517809439c7b6dd98997fa00) C:\WINDOWS\system32\drivers\aswTdi.sys

05:13:57.0875 2736 aswTdi - ok

05:13:57.0890 2736 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

05:13:58.0062 2736 AsyncMac - ok

05:13:58.0109 2736 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys

05:13:58.0281 2736 atapi - ok

05:13:58.0296 2736 Atdisk - ok

05:13:58.0312 2736 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

05:13:58.0515 2736 Atmarpc - ok

05:13:58.0531 2736 AudioSrv (6f55b224dfa0a3da9b8b12fcaded28d9) C:\WINDOWS\System32\audiosrv.dll

05:13:58.0703 2736 AudioSrv - ok

05:13:58.0750 2736 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

05:13:58.0906 2736 audstub - ok

05:13:58.0968 2736 avast! Antivirus (7de3ee7dbee14c1f8375cb82466c9321) C:\Programfiler\Alwil Software\Avast5\AvastSvc.exe

05:13:58.0984 2736 avast! Antivirus - ok

05:13:59.0015 2736 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

05:13:59.0187 2736 Beep - ok

05:13:59.0234 2736 BITS (dacf8c08ae1583a1f5bc2c2277b77580) C:\WINDOWS\system32\qmgr.dll

05:13:59.0421 2736 BITS - ok

05:13:59.0453 2736 BRGSp50 (ee0f41fa0466189a2c8b9caf7d1cddd5) C:\WINDOWS\system32\Drivers\BRGSp50.sys

05:13:59.0468 2736 BRGSp50 ( UnsignedFile.Multi.Generic ) - warning

05:13:59.0468 2736 BRGSp50 - detected UnsignedFile.Multi.Generic (1)

05:13:59.0500 2736 Browser (94ed9fb74221e31b6de21ded0369d9f6) C:\WINDOWS\System32\browser.dll

05:13:59.0656 2736 Browser - ok

05:13:59.0687 2736 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

05:13:59.0859 2736 cbidf2k - ok

05:13:59.0890 2736 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

05:14:00.0078 2736 CCDECODE - ok

05:14:00.0093 2736 cd20xrnt - ok

05:14:00.0109 2736 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

05:14:00.0265 2736 Cdaudio - ok

05:14:00.0296 2736 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys

05:14:00.0468 2736 Cdfs - ok

05:14:00.0515 2736 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys

05:14:00.0687 2736 Cdrom - ok

05:14:00.0718 2736 CiSvc (12a8b41a8a231b171d36327f0ca4fe9e) C:\WINDOWS\system32\cisvc.exe

05:14:00.0890 2736 CiSvc - ok

05:14:00.0921 2736 ClipSrv (e32df45c47b0c3ab2735c2916cef0474) C:\WINDOWS\system32\clipsrv.exe

05:14:01.0093 2736 ClipSrv - ok

05:14:01.0156 2736 clr_optimization_v2.0.50727_32 (3c4d595e7f9b747325aef28b4adcaae5) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

05:14:01.0171 2736 clr_optimization_v2.0.50727_32 - ok

05:14:01.0187 2736 CmdIde - ok

05:14:01.0203 2736 COMSysApp - ok

05:14:01.0234 2736 Cpqarray - ok

05:14:01.0265 2736 CryptSvc (7b15795f0ae8cc5413cda98dced01fa1) C:\WINDOWS\System32\cryptsvc.dll

05:14:01.0437 2736 CryptSvc - ok

05:14:01.0468 2736 d347bus (5776322f93cdb91086111f5ffbfda2a0) C:\WINDOWS\system32\DRIVERS\d347bus.sys

05:14:01.0500 2736 d347bus ( UnsignedFile.Multi.Generic ) - warning

05:14:01.0500 2736 d347bus - detected UnsignedFile.Multi.Generic (1)

05:14:01.0515 2736 d347prt (b49f79ace459763f4e0380071be9cb45) C:\WINDOWS\system32\Drivers\d347prt.sys

05:14:01.0531 2736 d347prt ( UnsignedFile.Multi.Generic ) - warning

05:14:01.0531 2736 d347prt - detected UnsignedFile.Multi.Generic (1)

05:14:01.0546 2736 dac2w2k - ok

05:14:01.0562 2736 dac960nt - ok

05:14:01.0593 2736 DcomLaunch (6b5738aa180aa22c917d14bbcd6408b3) C:\WINDOWS\system32\rpcss.dll

05:14:01.0765 2736 DcomLaunch - ok

05:14:01.0781 2736 Dhcp (3c9f7fa82e52d5b125ed4f40a7a2b99a) C:\WINDOWS\System32\dhcpcsvc.dll

05:14:01.0937 2736 Dhcp - ok

05:14:01.0968 2736 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys

05:14:02.0156 2736 Disk - ok

05:14:02.0171 2736 dmadmin - ok

05:14:02.0218 2736 dmboot (36a47ac9b8d99db8f5d8178539c3ef52) C:\WINDOWS\system32\drivers\dmboot.sys

05:14:02.0421 2736 dmboot - ok

05:14:02.0453 2736 dmio (8188805b8a0c9d128b97e0b573a7c681) C:\WINDOWS\system32\drivers\dmio.sys

05:14:02.0625 2736 dmio - ok

05:14:02.0640 2736 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

05:14:02.0812 2736 dmload - ok

05:14:02.0843 2736 dmserver (155e4f5efffaeec74e7b4a6422f4496e) C:\WINDOWS\System32\dmserver.dll

05:14:03.0000 2736 dmserver - ok

05:14:03.0031 2736 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys

05:14:03.0187 2736 DMusic - ok

05:14:03.0203 2736 Dnscache (d12d7f1fff62e2e0e396984ef7c5ce96) C:\WINDOWS\System32\dnsrslvr.dll

05:14:03.0390 2736 Dnscache - ok

05:14:03.0406 2736 dpti2o - ok

05:14:03.0437 2736 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys

05:14:03.0609 2736 drmkaud - ok

05:14:03.0656 2736 dtsoftbus01 (fb38473835476a6fb272215a1d972af9) C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys

05:14:03.0671 2736 dtsoftbus01 - ok

05:14:03.0703 2736 ERSvc (81937cdc3435a6c961b5f6c920362872) C:\WINDOWS\System32\ersvc.dll

05:14:03.0875 2736 ERSvc - ok

05:14:03.0906 2736 Eventlog (b44f7f43d33e308d07ba54c23b897e20) C:\WINDOWS\system32\services.exe

05:14:04.0093 2736 Eventlog - ok

05:14:04.0125 2736 EventSystem (bb29d915111818c61c9edc6301154d62) C:\WINDOWS\system32\es.dll

05:14:04.0281 2736 EventSystem - ok

05:14:04.0328 2736 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys

05:14:04.0500 2736 Fastfat - ok

05:14:04.0515 2736 FastUserSwitchingCompatibility (750781e0f7e0c8b2360dddde3fac74b4) C:\WINDOWS\System32\shsvcs.dll

05:14:04.0687 2736 FastUserSwitchingCompatibility - ok

05:14:04.0718 2736 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys

05:14:04.0890 2736 Fdc - ok

05:14:04.0921 2736 Fips (7842e596b6867abbf27f665762f30665) C:\WINDOWS\system32\drivers\Fips.sys

05:14:05.0062 2736 Fips - ok

05:14:05.0078 2736 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys

05:14:05.0234 2736 Flpydisk - ok

05:14:05.0265 2736 FltMgr (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\DRIVERS\fltMgr.sys

05:14:05.0437 2736 FltMgr - ok

05:14:05.0468 2736 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

05:14:05.0625 2736 Fs_Rec - ok

05:14:05.0640 2736 Ftdisk (f49589d9b1b3229eb3e761e569b20aca) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

05:14:05.0812 2736 Ftdisk - ok

05:14:05.0843 2736 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys

05:14:06.0000 2736 Gpc - ok

05:14:06.0078 2736 gupdate1ca816bb90beef2 (626a24ed1228580b9518c01930936df9) C:\Programfiler\Google\Update\GoogleUpdate.exe

05:14:06.0093 2736 gupdate1ca816bb90beef2 - ok

05:14:06.0093 2736 gupdatem (626a24ed1228580b9518c01930936df9) C:\Programfiler\Google\Update\GoogleUpdate.exe

05:14:06.0125 2736 gupdatem - ok

05:14:06.0140 2736 helpsvc (071f96543b4653780e3e265565e68e16) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll

05:14:06.0312 2736 helpsvc - ok

05:14:06.0343 2736 HidUsb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys

05:14:06.0500 2736 HidUsb - ok

05:14:06.0515 2736 hpn - ok

05:14:06.0562 2736 HTTP (c19b522a9ae0bbc3293397f3055e80a1) C:\WINDOWS\system32\Drivers\HTTP.sys

05:14:06.0718 2736 HTTP - ok

05:14:06.0765 2736 HTTPFilter (0d81f1c2001d9ae6a651b1a22281d383) C:\WINDOWS\System32\w3ssl.dll

05:14:06.0937 2736 HTTPFilter - ok

05:14:06.0953 2736 i2omp - ok

05:14:06.0984 2736 i8042prt (8442639723d68b70a04df8b9466a3531) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

05:14:07.0140 2736 i8042prt - ok

05:14:07.0203 2736 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Programfiler\Fellesfiler\InstallShield\Driver\1050\Intel 32\IDriverT.exe

05:14:07.0234 2736 IDriverT ( UnsignedFile.Multi.Generic ) - warning

05:14:07.0234 2736 IDriverT - detected UnsignedFile.Multi.Generic (1)

05:14:07.0250 2736 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys

05:14:07.0437 2736 Imapi - ok

05:14:07.0468 2736 ImapiService (c495ded91357b8840d43f11288639235) C:\WINDOWS\system32\imapi.exe

05:14:07.0609 2736 ImapiService - ok

05:14:07.0640 2736 ini910u - ok

05:14:07.0687 2736 IntelIde (17c10f6b32a8b5bef2410859af4ed778) C:\WINDOWS\system32\DRIVERS\intelide.sys

05:14:07.0843 2736 IntelIde - ok

05:14:07.0875 2736 intelppm (448cf31018abacc59bbe7ce2803b5828) C:\WINDOWS\system32\DRIVERS\intelppm.sys

05:14:08.0046 2736 intelppm - ok

05:14:08.0078 2736 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys

05:14:08.0234 2736 Ip6Fw - ok

05:14:08.0265 2736 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

05:14:08.0453 2736 IpFilterDriver - ok

05:14:08.0484 2736 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys

05:14:08.0640 2736 IpInIp - ok

05:14:08.0671 2736 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys

05:14:08.0828 2736 IpNat - ok

05:14:08.0859 2736 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys

05:14:09.0015 2736 IPSec - ok

05:14:09.0046 2736 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys

05:14:09.0125 2736 IRENUM - ok

05:14:09.0156 2736 isapnp (9b65a642df79be4f26930270cf6bd723) C:\WINDOWS\system32\DRIVERS\isapnp.sys

05:14:09.0328 2736 isapnp - ok

05:14:09.0421 2736 JavaQuickStarterService (0a5709543986843d37a92290b7838340) C:\Programfiler\Java\jre6\bin\jqs.exe

05:14:09.0437 2736 JavaQuickStarterService - ok

05:14:09.0484 2736 Kbdclass (12bea82362cffce1769e101549302b57) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

05:14:09.0640 2736 Kbdclass - ok

05:14:09.0671 2736 kmixer (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys

05:14:09.0843 2736 kmixer - ok

05:14:09.0859 2736 KSecDD (eb7ffe87fd367ea8fca0506f74a87fbb) C:\WINDOWS\system32\drivers\KSecDD.sys

05:14:10.0031 2736 KSecDD - ok

05:14:10.0062 2736 lanmanserver (98d523e838d774df37208fd0c4ff2c3f) C:\WINDOWS\System32\srvsvc.dll

05:14:10.0218 2736 lanmanserver - ok

05:14:10.0250 2736 lanmanworkstation (8a85724b7e495343577169aa305722be) C:\WINDOWS\System32\wkssvc.dll

05:14:10.0437 2736 lanmanworkstation - ok

05:14:10.0468 2736 LmHosts (9909fe118b0dba321916f10c3af7cb20) C:\WINDOWS\System32\lmhsvc.dll

05:14:10.0640 2736 LmHosts - ok

05:14:10.0671 2736 Messenger (38c67dba96a26855356850d52d5ec6a6) C:\WINDOWS\System32\msgsvc.dll

05:14:10.0843 2736 Messenger - ok

05:14:10.0875 2736 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

05:14:11.0031 2736 mnmdd - ok

05:14:11.0062 2736 mnmsrvc (82bbff029085b88fa89f34c25ba510a1) C:\WINDOWS\system32\mnmsrvc.exe

05:14:11.0218 2736 mnmsrvc - ok

05:14:11.0234 2736 Modem (1eb04a47e3ffe5198548f8d4d6a4c32a) C:\WINDOWS\system32\drivers\Modem.sys

05:14:11.0406 2736 Modem - ok

05:14:11.0437 2736 Mouclass (50c387897a7094a09c6b7bec6db4a9d4) C:\WINDOWS\system32\DRIVERS\mouclass.sys

05:14:11.0593 2736 Mouclass - ok

05:14:11.0609 2736 mouhid (2c8ace099162a015d464c9a427148651) C:\WINDOWS\system32\DRIVERS\mouhid.sys

05:14:11.0765 2736 mouhid - ok

05:14:11.0796 2736 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys

05:14:11.0953 2736 MountMgr - ok

05:14:11.0968 2736 mraid35x - ok

05:14:11.0984 2736 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

05:14:12.0140 2736 MRxDAV - ok

05:14:12.0171 2736 MRxSmb (1fd607fc67f7f7c633c3da65bfc53d18) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

05:14:12.0343 2736 MRxSmb - ok

05:14:12.0390 2736 MSDTC (131fd91f24d74a07f39dc9756e65e159) C:\WINDOWS\system32\msdtc.exe

05:14:12.0546 2736 MSDTC - ok

05:14:12.0562 2736 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys

05:14:12.0750 2736 Msfs - ok

05:14:12.0750 2736 MSIServer - ok

05:14:12.0796 2736 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys

05:14:12.0953 2736 MSKSSRV - ok

05:14:12.0984 2736 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

05:14:13.0156 2736 MSPCLOCK - ok

05:14:13.0171 2736 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys

05:14:13.0343 2736 MSPQM - ok

05:14:13.0375 2736 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

05:14:13.0531 2736 mssmbios - ok

05:14:13.0578 2736 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys

05:14:13.0718 2736 MSTEE - ok

05:14:13.0734 2736 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys

05:14:13.0890 2736 Mup - ok

05:14:13.0937 2736 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

05:14:14.0078 2736 NABTSFEC - ok

05:14:14.0109 2736 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys

05:14:14.0265 2736 NDIS - ok

05:14:14.0296 2736 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys

05:14:14.0453 2736 NdisIP - ok

05:14:14.0484 2736 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

05:14:14.0625 2736 NdisTapi - ok

05:14:14.0640 2736 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

05:14:14.0796 2736 Ndisuio - ok

05:14:14.0828 2736 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

05:14:14.0984 2736 NdisWan - ok

05:14:15.0015 2736 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys

05:14:15.0171 2736 NDProxy - ok

05:14:15.0187 2736 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys

05:14:15.0359 2736 NetBIOS - ok

05:14:15.0390 2736 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys

05:14:15.0546 2736 NetBT - ok

05:14:15.0593 2736 NetDDE (700d4e2108d01c9ec94c26a3858190d0) C:\WINDOWS\system32\netdde.exe

05:14:15.0765 2736 NetDDE - ok

05:14:15.0781 2736 NetDDEdsdm (700d4e2108d01c9ec94c26a3858190d0) C:\WINDOWS\system32\netdde.exe

05:14:15.0968 2736 NetDDEdsdm - ok

05:14:15.0984 2736 Netlogon (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:14:16.0140 2736 Netlogon - ok

05:14:16.0171 2736 Netman (7c0c4e76b05c9785617c9d9ff94a4e5d) C:\WINDOWS\System32\netman.dll

05:14:16.0328 2736 Netman - ok

05:14:16.0375 2736 Nla (1356cd8e82aea138a931bdb3b4a2122d) C:\WINDOWS\System32\mswsock.dll

05:14:16.0531 2736 Nla - ok

05:14:16.0562 2736 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys

05:14:16.0718 2736 Npfs - ok

05:14:16.0750 2736 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys

05:14:16.0921 2736 Ntfs - ok

05:14:16.0937 2736 NtLmSsp (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:14:17.0109 2736 NtLmSsp - ok

05:14:17.0156 2736 NtmsSvc (3c0a2006537e4783e27fe801ec0b6188) C:\WINDOWS\system32\ntmssvc.dll

05:14:17.0328 2736 NtmsSvc - ok

05:14:17.0359 2736 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

05:14:17.0531 2736 Null - ok

05:14:17.0656 2736 nv (29b9163a6d9c486dcaefed190130acb0) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

05:14:17.0781 2736 nv ( UnsignedFile.Multi.Generic ) - warning

05:14:17.0781 2736 nv - detected UnsignedFile.Multi.Generic (1)

05:14:17.0828 2736 NVSvc (aa78c4677e06cfd4fe048718ee7f6332) C:\WINDOWS\system32\nvsvc32.exe

05:14:17.0843 2736 NVSvc ( UnsignedFile.Multi.Generic ) - warning

05:14:17.0843 2736 NVSvc - detected UnsignedFile.Multi.Generic (1)

05:14:17.0890 2736 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

05:14:18.0062 2736 NwlnkFlt - ok

05:14:18.0078 2736 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

05:14:18.0250 2736 NwlnkFwd - ok

05:14:18.0328 2736 odserv (84de1dd996b48b05ace31ad015fa108a) C:\Programfiler\Fellesfiler\Microsoft Shared\OFFICE12\ODSERV.EXE

05:14:18.0375 2736 odserv - ok

05:14:18.0406 2736 ose (5a432a042dae460abe7199b758e8606c) C:\Programfiler\Fellesfiler\Microsoft Shared\Source Engine\OSE.EXE

05:14:18.0421 2736 ose - ok

05:14:18.0453 2736 Parport (ccc0b44b5233247f88dad5ea00f328b4) C:\WINDOWS\system32\DRIVERS\parport.sys

05:14:18.0609 2736 Parport - ok

05:14:18.0625 2736 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys

05:14:18.0796 2736 PartMgr - ok

05:14:18.0828 2736 ParVdm (12297b25ccc4d89d9d2e794a8fd6ee3d) C:\WINDOWS\system32\drivers\ParVdm.sys

05:14:18.0984 2736 ParVdm - ok

05:14:19.0031 2736 pccsmcfd (175cc28dcf819f78caa3fbd44ad9e52a) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys

05:14:19.0062 2736 pccsmcfd - ok

05:14:19.0093 2736 PCI (5577d08d9839930415894e21d0742b1d) C:\WINDOWS\system32\DRIVERS\pci.sys

05:14:19.0250 2736 PCI - ok

05:14:19.0265 2736 PCIIde (c9ef84891a111f6f5ebb758a29252e54) C:\WINDOWS\system32\DRIVERS\pciide.sys

05:14:19.0437 2736 PCIIde - ok

05:14:19.0468 2736 Pcmcia (5dfa4d9e3ea819c9578e0df3fd69c5ab) C:\WINDOWS\system32\drivers\Pcmcia.sys

05:14:19.0625 2736 Pcmcia - ok

05:14:19.0640 2736 perc2 - ok

05:14:19.0656 2736 perc2hib - ok

05:14:19.0703 2736 PlugPlay (b44f7f43d33e308d07ba54c23b897e20) C:\WINDOWS\system32\services.exe

05:14:19.0859 2736 PlugPlay - ok

05:14:19.0890 2736 PolicyAgent (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:14:20.0031 2736 PolicyAgent - ok

05:14:20.0062 2736 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys

05:14:20.0250 2736 PptpMiniport - ok

05:14:20.0281 2736 PQNTDrv (4228630829c0e521c43d882a00533374) C:\WINDOWS\system32\drivers\PQNTDrv.sys

05:14:20.0296 2736 PQNTDrv ( UnsignedFile.Multi.Generic ) - warning

05:14:20.0296 2736 PQNTDrv - detected UnsignedFile.Multi.Generic (1)

05:14:20.0296 2736 ProtectedStorage (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:14:20.0468 2736 ProtectedStorage - ok

05:14:20.0500 2736 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys

05:14:20.0656 2736 PSched - ok

05:14:20.0671 2736 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

05:14:20.0828 2736 Ptilink - ok

05:14:20.0843 2736 ql1080 - ok

05:14:20.0859 2736 Ql10wnt - ok

05:14:20.0875 2736 ql12160 - ok

05:14:20.0906 2736 ql1240 - ok

05:14:20.0921 2736 ql1280 - ok

05:14:20.0937 2736 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

05:14:21.0093 2736 RasAcd - ok

05:14:21.0109 2736 RasAuto (7883be77cc7f0d3a5063933602d70d66) C:\WINDOWS\System32\rasauto.dll

05:14:21.0265 2736 RasAuto - ok

05:14:21.0281 2736 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

05:14:21.0453 2736 Rasl2tp - ok

05:14:21.0484 2736 RasMan (63645f768097a5869275b8cdf3bb196f) C:\WINDOWS\System32\rasmans.dll

05:14:21.0640 2736 RasMan - ok

05:14:21.0671 2736 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

05:14:21.0843 2736 RasPppoe - ok

05:14:21.0859 2736 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

05:14:22.0015 2736 Raspti - ok

05:14:22.0062 2736 Rdbss (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERS\rdbss.sys

05:14:22.0218 2736 Rdbss - ok

05:14:22.0250 2736 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

05:14:22.0406 2736 RDPCDD - ok

05:14:22.0453 2736 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

05:14:22.0609 2736 rdpdr - ok

05:14:22.0656 2736 RDPWD (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys

05:14:22.0812 2736 RDPWD - ok

05:14:22.0843 2736 RDSessMgr (e2f4bdb6cd0e75403ae25bfa9ac47952) C:\WINDOWS\system32\sessmgr.exe

05:14:22.0984 2736 RDSessMgr - ok

05:14:23.0015 2736 redbook (680f9f9318a1f4cf913c57113edaccfb) C:\WINDOWS\system32\DRIVERS\redbook.sys

05:14:23.0156 2736 redbook - ok

05:14:23.0187 2736 RemoteAccess (ee796496c9d7e2469f01b02c319c1220) C:\WINDOWS\System32\mprdim.dll

05:14:23.0343 2736 RemoteAccess - ok

05:14:23.0375 2736 RemoteRegistry (bd618a9e0eec1f828bc4d4c35e592d4b) C:\WINDOWS\system32\regsvc.dll

05:14:23.0515 2736 RemoteRegistry - ok

05:14:23.0546 2736 RpcLocator (fbf189c3db882420c98d2d8565744bea) C:\WINDOWS\system32\locator.exe

05:14:23.0703 2736 RpcLocator - ok

05:14:23.0718 2736 RpcSs (6b5738aa180aa22c917d14bbcd6408b3) C:\WINDOWS\system32\rpcss.dll

05:14:23.0890 2736 RpcSs - ok

05:14:23.0937 2736 RSVP (ce5adeb463466c484da7d2c0e4ef62a9) C:\WINDOWS\system32\rsvp.exe

05:14:24.0109 2736 RSVP - ok

05:14:24.0156 2736 RT61 (ef64988c8e699e2481d1fd45bf472ef0) C:\WINDOWS\system32\DRIVERS\RT61.sys

05:14:24.0187 2736 RT61 - ok

05:14:24.0234 2736 RTL8023xp (e9877aa069dc11b03dbd1d33b8b2a3ca) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys

05:14:24.0265 2736 RTL8023xp - ok

05:14:24.0296 2736 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS

05:14:24.0468 2736 rtl8139 - ok

05:14:24.0500 2736 SamSs (8235198cdb70aaeb3c1435c1911641f9) C:\WINDOWS\system32\lsass.exe

05:14:24.0656 2736 SamSs - ok

05:14:24.0703 2736 SbFw (eb4a2b5faa3decd33ed682a5569e287f) C:\WINDOWS\system32\drivers\SbFw.sys

05:14:24.0718 2736 SbFw - ok

05:14:24.0765 2736 SBFWIMCL (f27b38d70b7621378161d6f48be04d2c) C:\WINDOWS\system32\DRIVERS\sbfwim.sys

05:14:24.0781 2736 SBFWIMCL - ok

05:14:24.0812 2736 SBFWIMCLMP (f27b38d70b7621378161d6f48be04d2c) C:\WINDOWS\system32\DRIVERS\SBFWIM.sys

05:14:24.0828 2736 SBFWIMCLMP - ok

05:14:24.0859 2736 sbhips (53e5e7dc26bb920b97f258bbd52abfdc) C:\WINDOWS\system32\drivers\sbhips.sys

05:14:24.0875 2736 sbhips - ok

05:14:24.0890 2736 SBRE - ok

05:14:24.0937 2736 SbTis (44062a740434b7c3946096d615aaa91c) C:\WINDOWS\system32\drivers\sbtis.sys

05:14:24.0953 2736 SbTis - ok

05:14:24.0984 2736 SCardSvr (cb4a581237088decc658046ac669ef54) C:\WINDOWS\System32\SCardSvr.exe

05:14:25.0156 2736 SCardSvr - ok

05:14:25.0203 2736 Schedule (d553c29b80a3bdeb4db14bc5cae013b7) C:\WINDOWS\system32\schedsvc.dll

05:14:25.0375 2736 Schedule - ok

05:14:25.0390 2736 Secdrv (314a998b1732c1acd6b6459ec9961ad8) C:\WINDOWS\system32\DRIVERS\secdrv.sys

05:14:25.0406 2736 Secdrv ( UnsignedFile.Multi.Generic ) - warning

05:14:25.0406 2736 Secdrv - detected UnsignedFile.Multi.Generic (1)

05:14:25.0437 2736 seclogon (c10ba5499cac6683d0b428e067193613) C:\WINDOWS\System32\seclogon.dll

05:14:25.0609 2736 seclogon - ok

05:14:25.0640 2736 SENS (868542b9e8bd9238967c5682a568688b) C:\WINDOWS\system32\sens.dll

05:14:25.0796 2736 SENS - ok

05:14:25.0828 2736 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys

05:14:25.0968 2736 serenum - ok

05:14:26.0000 2736 Serial (ea56aa495f4a53563ed3db2b96bd0dc8) C:\WINDOWS\system32\DRIVERS\serial.sys

05:14:26.0156 2736 Serial - ok

05:14:26.0234 2736 ServiceLayer (979ae6e47129e51a242434da9664054c) C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe

05:14:26.0250 2736 ServiceLayer ( UnsignedFile.Multi.Generic ) - warning

05:14:26.0250 2736 ServiceLayer - detected UnsignedFile.Multi.Generic (1)

05:14:26.0281 2736 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys

05:14:26.0421 2736 Sfloppy - ok

05:14:26.0468 2736 SharedAccess (b207908a71a1477d0083917b6f5da3ed) C:\WINDOWS\System32\ipnathlp.dll

05:14:26.0625 2736 SharedAccess - ok

05:14:26.0656 2736 ShellHWDetection (750781e0f7e0c8b2360dddde3fac74b4) C:\WINDOWS\System32\shsvcs.dll

05:14:26.0796 2736 ShellHWDetection - ok

05:14:26.0828 2736 Simbad - ok

05:14:26.0859 2736 SkypeUpdate (6128e98eaaed364ed1a32708d2fd22cb) C:\Programfiler\Skype\Updater\Updater.exe

05:14:26.0875 2736 SkypeUpdate - ok

05:14:26.0906 2736 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys

05:14:27.0046 2736 SLIP - ok

05:14:27.0062 2736 Sparrow - ok

05:14:27.0093 2736 splitter (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys

05:14:27.0234 2736 splitter - ok

05:14:27.0265 2736 Spooler (1efb05d36736d2b6df8fd81c76fa0be6) C:\WINDOWS\system32\spoolsv.exe

05:14:27.0421 2736 Spooler - ok

05:14:27.0453 2736 sr (bc6e4b796d212e336d6565676112221c) C:\WINDOWS\system32\DRIVERS\sr.sys

05:14:27.0531 2736 sr - ok

05:14:27.0562 2736 srservice (a4c2d7b494a30b96d7a8490138ac231f) C:\WINDOWS\system32\srsvc.dll

05:14:27.0671 2736 srservice - ok

05:14:27.0703 2736 Srv (20b7e396720353e4117d64d9dcb926ca) C:\WINDOWS\system32\DRIVERS\srv.sys

05:14:27.0875 2736 Srv - ok

05:14:27.0906 2736 SSDPSRV (8da0d5fa9e4f5c46102e5a01cbbabbbd) C:\WINDOWS\System32\ssdpsrv.dll

05:14:28.0015 2736 SSDPSRV - ok

05:14:28.0062 2736 stisvc (ab66df9bf218c0973963c0e207c14483) C:\WINDOWS\system32\wiaservc.dll

05:14:28.0265 2736 stisvc - ok

05:14:28.0296 2736 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys

05:14:28.0468 2736 streamip - ok

05:14:28.0500 2736 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys

05:14:28.0656 2736 swenum - ok

05:14:28.0703 2736 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys

05:14:28.0875 2736 swmidi - ok

05:14:28.0890 2736 SwPrv - ok

05:14:28.0906 2736 symc810 - ok

05:14:28.0921 2736 symc8xx - ok

05:14:28.0937 2736 sym_hi - ok

05:14:28.0968 2736 sym_u3 - ok

05:14:29.0000 2736 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys

05:14:29.0140 2736 sysaudio - ok

05:14:29.0171 2736 SysmonLog (7c98c7a6bb7d8edda5e594975a36bdf3) C:\WINDOWS\system32\smlogsvc.exe

05:14:29.0328 2736 SysmonLog - ok

05:14:29.0359 2736 TapiSrv (18797597911654d846724e3fb1ee25e5) C:\WINDOWS\System32\tapisrv.dll

05:14:29.0515 2736 TapiSrv - ok

05:14:29.0562 2736 Tcpip (9f4b36614a0fc234525ba224957de55c) C:\WINDOWS\system32\DRIVERS\tcpip.sys

05:14:29.0703 2736 Tcpip - ok

05:14:29.0750 2736 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys

05:14:29.0890 2736 TDPIPE - ok

05:14:29.0921 2736 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys

05:14:30.0078 2736 TDTCP - ok

05:14:30.0109 2736 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys

05:14:30.0234 2736 TermDD - ok

05:14:30.0281 2736 TermService (cdfde4ac03bf56bf5b383c4f849d34e5) C:\WINDOWS\System32\termsrv.dll

05:14:30.0453 2736 TermService - ok

05:14:30.0484 2736 Themes (750781e0f7e0c8b2360dddde3fac74b4) C:\WINDOWS\System32\shsvcs.dll

05:14:30.0640 2736 Themes - ok

05:14:30.0671 2736 TlntSvr (e145f457f802384b53f980baa4671544) C:\WINDOWS\system32\tlntsvr.exe

05:14:30.0765 2736 TlntSvr - ok

05:14:30.0781 2736 TosIde - ok

05:14:30.0812 2736 TrkWks (1aa114500840f9e89b9f9d156e9376e6) C:\WINDOWS\system32\trkwks.dll

05:14:30.0953 2736 TrkWks - ok

05:14:31.0000 2736 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys

05:14:31.0140 2736 Udfs - ok

05:14:31.0156 2736 ultra - ok

05:14:31.0187 2736 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys

05:14:31.0375 2736 Update - ok

05:14:31.0406 2736 upnphost (0c38087ca8fd66fd87a5cf29f0799817) C:\WINDOWS\System32\upnphost.dll

05:14:31.0500 2736 upnphost - ok

05:14:31.0515 2736 UPS (1e7ed5993f337690104f2826e658b4d6) C:\WINDOWS\System32\ups.exe

05:14:31.0671 2736 UPS - ok

05:14:31.0703 2736 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys

05:14:31.0875 2736 usbehci - ok

05:14:31.0890 2736 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys

05:14:32.0046 2736 usbhub - ok

05:14:32.0078 2736 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys

05:14:32.0218 2736 usbscan - ok

05:14:32.0250 2736 usbstor (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

05:14:32.0406 2736 usbstor - ok

05:14:32.0437 2736 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

05:14:32.0562 2736 usbuhci - ok

05:14:32.0609 2736 V0260VID (4f6d02349cac986a017ad1a0f2e2b099) C:\WINDOWS\system32\DRIVERS\V0260Vid.sys

05:14:32.0671 2736 V0260VID - ok

05:14:32.0687 2736 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys

05:14:32.0843 2736 VgaSave - ok

05:14:32.0859 2736 ViaIde - ok

05:14:32.0906 2736 VolSnap (078659d1b11d26c227444d3ae0ebdbc8) C:\WINDOWS\system32\drivers\VolSnap.sys

05:14:33.0031 2736 VolSnap - ok

05:14:33.0062 2736 VSS (0129f1b481b24f3533ddbf877bc0595d) C:\WINDOWS\System32\vssvc.exe

05:14:33.0156 2736 VSS - ok

05:14:33.0187 2736 W32Time (93478e5371ca437a316c2677f72683a2) C:\WINDOWS\system32\w32time.dll

05:14:33.0343 2736 W32Time - ok

05:14:33.0375 2736 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys

05:14:33.0531 2736 Wanarp - ok

05:14:33.0593 2736 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys

05:14:33.0625 2736 Wdf01000 - ok

05:14:33.0671 2736 wdmaud (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys

05:14:33.0812 2736 wdmaud - ok

05:14:33.0843 2736 WebClient (bbaa5c89c024c20d3de3c196872969f0) C:\WINDOWS\System32\webclnt.dll

05:14:34.0015 2736 WebClient - ok

05:14:34.0062 2736 winmgmt (732eba66d098195c02a31f1236998fbd) C:\WINDOWS\system32\wbem\WMIsvc.dll

05:14:34.0203 2736 winmgmt - ok

05:14:34.0265 2736 WmdmPmSN (55be0ba7b6c9a9dcf86caf6d76439e02) C:\WINDOWS\system32\mspmsnsv.dll

05:14:34.0437 2736 WmdmPmSN - ok

05:14:34.0468 2736 Wmi (829b27f4821bfe8011676de51cf2d03b) C:\WINDOWS\System32\advapi32.dll

05:14:34.0625 2736 Wmi - ok

05:14:34.0671 2736 WmiApSrv (79324ccd7c8ebdbe2f0c678d237f2071) C:\WINDOWS\system32\wbem\wmiapsrv.exe

05:14:34.0812 2736 WmiApSrv - ok

05:14:34.0859 2736 wscsvc (7a5fb48ab35b0b01825fb5729032c38c) C:\WINDOWS\system32\wscsvc.dll

05:14:35.0000 2736 wscsvc - ok

05:14:35.0031 2736 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

05:14:35.0171 2736 WSTCODEC - ok

05:14:35.0218 2736 wuauserv (1408a284fd9d90bf84549b81a2d3609f) C:\WINDOWS\system32\wuauserv.dll

05:14:35.0359 2736 wuauserv - ok

05:14:35.0390 2736 WZCSVC (a920082bfc0d713460fc5e00d60236c2) C:\WINDOWS\System32\wzcsvc.dll

05:14:35.0546 2736 WZCSVC - ok

05:14:35.0578 2736 xmlprov (c3e971426f3d436f5d5fdd8c345b0306) C:\WINDOWS\System32\xmlprov.dll

05:14:35.0734 2736 xmlprov - ok

05:14:35.0781 2736 ZD1211U(ZyDAS) (4f62f94e65df211c8b6ec7315604fa47) C:\WINDOWS\system32\DRIVERS\zd1211u.sys

05:14:35.0796 2736 ZD1211U(ZyDAS) ( UnsignedFile.Multi.Generic ) - warning

05:14:35.0796 2736 ZD1211U(ZyDAS) - detected UnsignedFile.Multi.Generic (1)

05:14:35.0843 2736 ZDPSp50 (00ae175b903d45ed4a62384d3315dc2a) C:\WINDOWS\system32\Drivers\ZDPSp50.sys

05:14:35.0859 2736 ZDPSp50 ( UnsignedFile.Multi.Generic ) - warning

05:14:35.0859 2736 ZDPSp50 - detected UnsignedFile.Multi.Generic (1)

05:14:35.0890 2736 MBR (0x1B8) (ad99111085a864d39cdff4d3a646e97b) \Device\Harddisk0\DR0

05:14:36.0828 2736 \Device\Harddisk0\DR0 - ok

05:14:36.0843 2736 MBR (0x1B8) (ad99111085a864d39cdff4d3a646e97b) \Device\Harddisk1\DR1

05:14:37.0109 2736 \Device\Harddisk1\DR1 - ok

05:14:37.0125 2736 Boot (0x1200) (33b11bce183ae884e5bf6103863498de) \Device\Harddisk0\DR0\Partition0

05:14:37.0125 2736 \Device\Harddisk0\DR0\Partition0 - ok

05:14:37.0140 2736 Boot (0x1200) (995c9a20aabb4bb3016657530ecde453) \Device\Harddisk0\DR0\Partition1

05:14:37.0140 2736 \Device\Harddisk0\DR0\Partition1 - ok

05:14:37.0171 2736 Boot (0x1200) (58be9f71934d49e9229c5a1815da0773) \Device\Harddisk0\DR0\Partition2

05:14:37.0171 2736 \Device\Harddisk0\DR0\Partition2 - ok

05:14:37.0171 2736 Boot (0x1200) (4e9722f561a7f76064a435bc0e7d342c) \Device\Harddisk1\DR1\Partition0

05:14:37.0171 2736 \Device\Harddisk1\DR1\Partition0 - ok

05:14:37.0187 2736 ============================================================

05:14:37.0187 2736 Scan finished

05:14:37.0187 2736 ============================================================

05:14:37.0296 3920 Detected object count: 12

05:14:37.0296 3920 Actual detected object count: 12

05:14:59.0656 3920 C:\WINDOWS\system32\DRIVERS\AegisP.sys - copied to quarantine

05:14:59.0656 3920 AegisP ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:14:59.0734 3920 C:\WINDOWS\system32\Drivers\BRGSp50.sys - copied to quarantine

05:14:59.0734 3920 BRGSp50 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:14:59.0812 3920 C:\WINDOWS\system32\DRIVERS\d347bus.sys - copied to quarantine

05:14:59.0812 3920 d347bus ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:14:59.0843 3920 C:\WINDOWS\system32\Drivers\d347prt.sys - copied to quarantine

05:14:59.0859 3920 d347prt ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:14:59.0984 3920 C:\Programfiler\Fellesfiler\InstallShield\Driver\1050\Intel 32\IDriverT.exe - copied to quarantine

05:14:59.0984 3920 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:15:00.0187 3920 C:\WINDOWS\system32\DRIVERS\nv4_mini.sys - copied to quarantine

05:15:00.0187 3920 nv ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:15:00.0265 3920 C:\WINDOWS\system32\nvsvc32.exe - copied to quarantine

05:15:00.0265 3920 NVSvc ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:15:00.0328 3920 C:\WINDOWS\system32\drivers\PQNTDrv.sys - copied to quarantine

05:15:00.0328 3920 PQNTDrv ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:15:00.0406 3920 C:\WINDOWS\system32\DRIVERS\secdrv.sys - copied to quarantine

05:15:00.0406 3920 Secdrv ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:15:00.0515 3920 C:\Programfiler\PC Connectivity Solution\ServiceLayer.exe - copied to quarantine

05:15:00.0515 3920 ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:15:00.0609 3920 C:\WINDOWS\system32\DRIVERS\zd1211u.sys - copied to quarantine

05:15:00.0609 3920 ZD1211U(ZyDAS) ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

05:15:00.0656 3920 C:\WINDOWS\system32\Drivers\ZDPSp50.sys - copied to quarantine

05:15:00.0656 3920 ZDPSp50 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

Dr.Geek · 16. april 2012

Hai,

ser at du lot TDSS Killer scanne etter "usigned files" også og satt dem i karantene. Dette er litt risky da usignerte filer ikke trenger å være malware. Skulle det være problemer med programmer må du gjennomrette de filene fra Kaspersky TDSS Killers Quarantine/Karantene eller deinstallere programmene og installere dem på ny.

Post meg nå en combofix log:

https://www.diskusjon.no/index.php?showtopic=691246

Deaktiver alle Antivirus Guards før du utfører combofix og lukk alle programmer!

Tan28 · 16. april 2012

Spoiler er en fin funksjon...

Det kan, for alles del, lønne seg å legge lange sitat, kodesnutter, logger og lignende i en spoiler-tag, slik at innleggene blir enklere å følge.

skylinepower · 16. april 2012

Minneprosesser oppdaget: 0
(Ingen skadelige objekter funnet)

Minnemoduler oppdaget: 0

(Ingen skadelige objekter funnet)

Registernøkler oppdaget: 0

(Ingen skadelige objekter funnet)

Registerverdier oppdaget: 0

(Ingen skadelige objekter funnet)

Registerfiler oppdaget: 0

(Ingen skadelige objekter funnet)

Mapper oppdaget: 0

(Ingen skadelige objekter funnet)

Filer oppdaget 1

F:\Downloads\Messenger_installer.exe (PUP.Adware.Agent) -> Ingen tiltak tatt.

(klar)

Dr.Geek · 17. april 2012

Minneprosesser oppdaget: 0
(Ingen skadelige objekter funnet)

Minnemoduler oppdaget: 0

(Ingen skadelige objekter funnet)

Registernøkler oppdaget: 0

(Ingen skadelige objekter funnet)

Registerverdier oppdaget: 0

(Ingen skadelige objekter funnet)

Registerfiler oppdaget: 0

(Ingen skadelige objekter funnet)

Mapper oppdaget: 0

(Ingen skadelige objekter funnet)

Filer oppdaget 1

F:\Downloads\Messenger_installer.exe (PUP.Adware.Agent) -&--#62; Ingen tiltak tatt.

(klar)

Dette er ingen comofix.log

Se linken eller:

http://www.bleepingc...to-use-combofix

Endret 17. april 2012 av TheGenius

skylinepower · 19. april 2012

combofix:

ComboFix 12-04-17.01 - Jonas 18.04.2012 5:17.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.47.1044.18.1023.526 [GMT 2:00]

Kjører fra: c:\documents and settings\Jonas\Mine dokumenter\Downloads\ComboFix.exe

AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

* Opprettet nytt gjenopprettingspunkt

.

.

((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\documents and settings\All Users\Programdata\TEMP

c:\documents and settings\Jonas\Programdata\Desktopicon

c:\documents and settings\Jonas\Programdata\facemoods.com

c:\documents and settings\Jonas\Programdata\PriceGong

c:\documents and settings\Jonas\Programdata\PriceGong\Data\1.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\a.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\b.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\c.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\d.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\e.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\f.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\g.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\h.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\i.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\J.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\k.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\l.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\m.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\mru.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\n.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\o.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\p.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\q.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\r.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\s.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\t.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\u.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\v.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\w.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\x.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\y.xml

c:\documents and settings\Jonas\Programdata\PriceGong\Data\z.xml

c:\documents and settings\Jonas\WINDOWS

c:\programfiler\DealScout

c:\programfiler\DealScout\dealscout.crx

c:\programfiler\DealScout\installer.ico

c:\programfiler\DealScout\uninstall.exe

c:\programfiler\facemoods.com

c:\programfiler\facemoods.com\facemoods\1.4.17.11\facemoods.crx

c:\programfiler\facemoods.com\facemoods\1.4.17.11\facemoods.png

c:\programfiler\facemoods.com\facemoods\1.4.17.11\facemoodsApp.dll

c:\programfiler\facemoods.com\facemoods\1.4.17.11\facemoodsEng.dll

c:\programfiler\facemoods.com\facemoods\1.4.17.11\uninstall.exe

c:\programfiler\facemoods.com\sqlite3.dll

F:\install.exe

.

.

((((((((((((((((((((((((((( Filer Opprettet Fra 2012-03-18 til 2012-04-18 )))))))))))))))))))))))))))))))))

.

.

2012-04-16 17:16 . 2012-04-16 17:17 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2012-04-16 17:15 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-04-16 17:15 . 2012-04-16 17:15 -------- d-----w- c:\programfiler\Malwarebytes' Anti-Malware

2012-04-16 03:14 . 2012-04-16 03:14 -------- d-----w- C:\TDSSKiller_Quarantine

2012-04-16 03:09 . 2012-04-18 03:05 3218 ----a-w- c:\windows\system32\PerfStringBackup.TMP

2012-04-16 02:59 . 2012-04-16 02:59 -------- d-----w- C:\_OTL

2012-04-11 03:08 . 2012-04-11 03:08 -------- d-----w- c:\programfiler\HitmanPro

2012-04-11 03:07 . 2012-04-11 03:25 -------- d-----w- c:\documents and settings\All Users\Programdata\HitmanPro

2012-04-10 19:37 . 2012-04-10 19:44 73728 ----a-w- c:\windows\system32\javacpl.cpl

2012-04-10 18:20 . 2012-04-16 18:44 -------- d--h--r- c:\documents and settings\Jonas\Siste

2012-04-03 06:32 . 2012-04-03 06:32 -------- d-----w- c:\programfiler\Fellesfiler\Skype

2012-03-31 06:47 . 2012-03-31 06:47 -------- d-----w- c:\documents and settings\LocalService\Programdata\Ad-Aware Antivirus

2012-03-31 06:38 . 2011-04-05 15:35 94040 ----a-w- c:\windows\system32\drivers\sbhips.sys

2012-03-31 06:38 . 2011-04-05 15:35 212568 ----a-w- c:\windows\system32\drivers\sbtis.sys

2012-03-31 06:37 . 2011-04-05 15:35 332248 ----a-w- c:\windows\system32\drivers\SbFw.sys

2012-03-31 06:37 . 2011-02-08 07:14 69208 ----a-w- c:\windows\system32\drivers\SbFwIm.sys

2012-03-31 06:35 . 2012-03-31 06:50 -------- d-----w- c:\documents and settings\Jonas\Programdata\Ad-Aware Antivirus

.

.

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-04-10 19:44 . 2010-05-13 08:27 472808 -c--a-w- c:\windows\system32\deployJava1.dll

2006-05-03 10:06 163328 --sh--r- c:\windows\system32\flvDX.dll

2007-02-21 11:47 31232 --sh--r- c:\windows\system32\msfDX.dll

2007-12-17 13:43 27648 -csh--w- c:\windows\system32\Smab0.dll

2008-02-04 19:26 151040 -csh--w- c:\windows\system32\VistaUltm.dll

.

.

(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

.

.

*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2011-05-10 12:10 122512 ----a-w- c:\programfiler\Alwil Software\Avast5\ashShell.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Creative WebCam Tray"="c:\programfiler\Creative\Shared Files\CamTray.exe" [2005-10-27 299008]

"Skype"="c:\programfiler\Skype\Phone\Skype.exe" [2012-02-29 17148552]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-03-09 7561216]

"nwiz"="nwiz.exe" [2006-03-09 1519616]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-03-09 86016]

"SoundMan"="SOUNDMAN.EXE" [2004-07-01 67584]

"DAEMON Tools-1033"="j:\programfiler\D-Tools\daemon.exe" [2004-08-22 81920]

"Adobe Reader Speed Launcher"="j:\programfiler\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]

"QuickTime Task"="c:\programfiler\QuickTime\qttask.exe" [2008-11-04 413696]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

.

c:\documents and settings\All Users\Start-meny\Programmer\Oppstart\

AirLink 6554 Utility.lnk - c:\programfiler\Jensen Scandinavia\AirLink_6554_Utility\ZDWlan.exe [2009-4-29 1298432]

Gigabyte Wireless Utility.lnk - c:\programfiler\GIGABYTE\Common\GNConfig.exe [2009-11-3 753664]

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Programfiler\\Messenger\\msmsgs.exe"=

"c:\\Programfiler\\Opera\\Opera.exe"=

"j:\\Programfiler\\Counter-Strike 1.6\\hl.exe"=

"c:\\Programfiler\\Joost\\xulrunner\\tvprunner.exe"=

"c:\\Programfiler\\Vuze\\Azureus.exe"=

"j:\\Programfiler\\VideoLAN\\VLC\\vlc.exe"=

"c:\\Programfiler\\Spotify\\spotify.exe"=

"j:\\Programfiler\\Spotify\\spotify.exe"=

"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=

"j:\\Programfiler\\uTorrent\\uTorrent.exe"=

"c:\\Programfiler\\Pando Networks\\Media Booster\\PMB.exe"=

"j:\\Programfiler\\Steam\\steamapps\\jonas405\\counter-strike\\hl.exe"=

"c:\\Programfiler\\Skype\\Phone\\Skype.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"8674:TCP"= 8674:TCP:BitComet 8674 TCP

"8674:UDP"= 8674:UDP:BitComet 8674 UDP

"57853:TCP"= 57853:TCP:Pando Media Booster

"57853:UDP"= 57853:UDP:Pando Media Booster

"8396:TCP"= 8396:TCP:*:Disabled:League of Legends Launcher

"8396:UDP"= 8396:UDP:*:Disabled:League of Legends Launcher

"6932:TCP"= 6932:TCP:*:Disabled:League of Legends Launcher

"6932:UDP"= 6932:UDP:*:Disabled:League of Legends Launcher

"6882:TCP"= 6882:TCP:*:Disabled:League of Legends Launcher

"6882:UDP"= 6882:UDP:*:Disabled:League of Legends Launcher

.

R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [28.09.2007 18:59 155136]

R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [28.09.2007 18:59 5248]

R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [27.04.2011 05:19 441176]

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [03.11.2009 18:48 307928]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [20.11.2011 20:29 239168]

R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [31.03.2012 08:37 332248]

R1 SbTis;SbTis;c:\windows\system32\drivers\sbtis.sys [31.03.2012 08:38 212568]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [03.11.2009 18:48 19544]

R3 SBFWIMCLMP;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [31.03.2012 08:37 69208]

R3 V0260VID;Live! Cam Vista IM;c:\windows\system32\drivers\V0260Vid.sys [10.07.2007 20:34 162176]

S1 SBRE;SBRE;\??\c:\windows\system32\drivers\SBREdrv.sys --> c:\windows\system32\drivers\SBREdrv.sys [?]

S2 gupdate1ca816bb90beef2;Googles oppdateringstjeneste (gupdate1ca816bb90beef2);c:\programfiler\Google\Update\GoogleUpdate.exe [20.12.2009 13:58 133104]

S2 SkypeUpdate;Skype Updater;c:\programfiler\Skype\Updater\Updater.exe [29.02.2012 08:50 158856]

S3 gupdatem;Google-oppdatering-tjenesten (gupdatem);c:\programfiler\Google\Update\GoogleUpdate.exe [20.12.2009 13:58 133104]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [16.04.2012 19:16 40776]

S3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service;c:\windows\system32\drivers\SbFwIm.sys [31.03.2012 08:37 69208]

S3 sbhips;sbhips;c:\windows\system32\drivers\sbhips.sys [31.03.2012 08:38 94040]

.

Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)

.

2012-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\programfiler\Google\Update\GoogleUpdate.exe [2009-12-20 11:57]

.

2012-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\programfiler\Google\Update\GoogleUpdate.exe [2009-12-20 11:57]

.

.

------- Tilleggsskanning -------

.

uSearchURL,(Default) = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q=%s

IE: Download all links using BitComet - d:\bitcomet\BitComet.exe/AddAllLink.htm

IE: Download all videos using BitComet - d:\bitcomet\BitComet.exe/AddVideo.htm

IE: Download link using &BitComet - d:\bitcomet\BitComet.exe/AddLink.htm

.

- - - - TOMME PEKERE FJERNET - - - -

.

BHO-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)

BHO-{37483b40-c254-4a72-bda4-22ee90182c1e} - (no file)

WebBrowser-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - (no file)

AddRemove-Counter-Strike 1.6 - g:\kingston\Emil\Counter-Strike 1.6\Uninstal.exe

AddRemove-DAEMON Tools Lite - g:\programfiler\DAEMON Tools Lite\uninst.exe

AddRemove-DealScout - c:\programfiler\DealScout\uninstall.exe

AddRemove-facemoods - c:\programfiler\facemoods.com\facemoods\1.4.17.11\uninstall.exe

.

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2012-04-18 05:30

Windows 5.1.2600 Service Pack 2 NTFS

.

skanner skjulte prosesser ...

.

skanner skjulte autostart-oppføringer ...

.

skanner skjulte filer ...

.

skanning vellykket

skjulte filer: 0

.

**************************************************************************

.

Tidspunkt ferdig: 2012-04-18 05:34:57

ComboFix-quarantined-files.txt 2012-04-18 03:34

.

Pre-Run: 2 585 165 824 byte ledig

Post-Run: 2 648 743 936 byte ledig

.

WindowsXP-KB310994-SP2-Pro-BootDisk-NOR.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

UnsupportedDebug="do not select this" /debug

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

.

- - End Of File - - 9CD38D4D39D24E64B54218D2B0B31D68

Dr.Geek · 19. april 2012

Det ser bra ut. Kan ikke se noe Malware nå.

Videre skritt:

Gammel programvare utgjør en stor sikkerhetsrisiko, da den gjør det mulig for malware og hackere og infiltrere PCen gjennom såkalte sikkerhetshul i programvaren.

- Gjør en update check med:

http://secunia.com/v...canning/online/

- Deinstall gammel software og last ned de nyste versjoner. Dette gjelder spesielt Adobe Reader, Flash og Java.

- Deinstall unødvendig software, som starter opp ved hver oppstart og belaster PCen.

- Deaktiver autostart programmer som ikke absolut trenger å starte:

Gå til Start, skriv inn msconfig . Det åpner seg et vindu. Klick "Oppstart"

- Deinstall Combofix og OTL:

Åpne OTL.exe. Klick på "Clean up". Pc vil restartes og OTL og CB vil deinstalleres.

Anbefalinger:

Anbefaler deg å bruke alltid bare ET antivirus progam og Windows egen Firewall.

IT-Sikkerhet:

http://www.microsoft...rhet/index.html

Forhåpentligvis vil PCen nå fungere raskere.

Endret 19. april 2012 av TheGenius

torfinns · 19. april 2012

"Deinstall gammel software og last ned de nyste versjoner. Dette gjelder spesielt Adobe Reader, Flash og Java."

Bruk gjerne et mer lettdrevet program enn Adobe reader, HW har testet flere gode alternativer. Selv bruker jeg Foxit reader selvom den ikke var regnet som beste alternativ.

Treg pc, kjørt virus, spyware og ccleaner scan

Anbefalte innlegg

Lenke til kommentar

Videoannonse

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Lenke til kommentar

Opprett en konto eller logg inn for å kommentere

Opprett konto

Logg inn

Populær nå

Hvem er aktive 0 medlemmer