Virus der sfspiller radio og viser hjemmesider
Antal indlæg: 136

Hej alle

Det går godt for mig for tiden. Jeg har fået en virus der med jævne mellemrun der starter browseren op på en vilkårlig hjemmeside. Samtidig starter den radio op i baggrunden uden at browseren er åben.

Kan nogen hjælpe mig? Hvor skal jeg starte?

Venligst

Martin

Administrator
Avatar
Antal indlæg: 29619

Hej         wink


Hvis du følger nedenstående vejledning er vi kommet godt i gang:

http://www.spywarefri.dk/vejledning-til-rensning/

Antal indlæg: 136

Hej igen

Nu har jeg kørt programmerne og Antimalware fandt syv inficerede filer, som jeg har slettet.

Nu må foreløbig se, om det hjælper.

Vh

Martin

Administrator
Avatar
Antal indlæg: 29619

Fint   grin

Hvis du synes, så send DDS log filerne herind.

Antal indlæg: 136

Hej igen

Jeg kørte programmerne og fik fjernet 7 betændte filer, men virussen er der stadig. Helt konkret leder den mig hen til en suspekt hjemmeside når jeg klikker på et søgeresultat i Google…

Jeg smider en logfil fra AntiMalware i morgen, så tråden skal ikke lukkes endnu.

Vh

Martin

Administrator
Avatar
Antal indlæg: 29619

Ok, så send DDS filer med herind….......

Antal indlæg: 136

Hej. her er så logfilen fra AntiMalware:

Malwarebytes’ Anti-Malware 1.46
http://www.malwarebytes.org

Database version: 8239

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

25-11-2011 21:01:35
mbam-log-2011-11-25 (21-01-35).txt

Skanningstype: Fuldstændig skanning (C:\|)
Objekter skannet: 408695
Tid gået: 1 time(e), 16 minut(ter), 29 sekund(er)

Hukommelses Processorer Inficeret: 0
Hukommelses Moduler Inficeret: 0
Registreringsdatabasenøgler Inficeret: 0
Registreringsdatabaseværdier Inficeret: 0
Registreringsdatabasedata Objekter Inficeret: 0
Inficerede Mapper: 2
Inficerede Filer: 8

Hukommelses Processorer Inficeret:
(Ingen skadelige objekter blev fundet)

Hukommelses Moduler Inficeret:
(Ingen skadelige objekter blev fundet)

Registreringsdatabasenøgler Inficeret:
(Ingen skadelige objekter blev fundet)

Registreringsdatabaseværdier Inficeret:
(Ingen skadelige objekter blev fundet)

Registreringsdatabasedata Objekter Inficeret:
(Ingen skadelige objekter blev fundet)

Inficerede Mapper:
C:\Documents and Settings\All Users\Application Data\01026312 (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\78777541 (Rogue.Multiple) -> Quarantined and deleted successfully.

Inficerede Filer:
C:\Documents and Settings\mak\Skrivebord\Backup\imagesCA1QOW4Q.jpg (Extension.Mismatch) -> Quarantined and deleted successfully.
C:\Documents and Settings\mak\Skrivebord\Backup\Documents and Settings\mak\Dokumenter\Billeder\Skrivebord\Grafikker til kilder\2011.10.14-PureBilge-rensesystem.jpg (Extension.Mismatch) -> Quarantined and deleted successfully.
C:\Documents and Settings\mak\Skrivebord\Backup\Documents and Settings\mak\Skrivebord\Hjemmearbejde\Nordstream gasledning\HIRES~1\Til grafik\Inger og karl og hunden.jpg (Extension.Mismatch) -> Quarantined and deleted successfully.
C:\Documents and Settings\mak\Skrivebord\Backup\Ukendt mappe\tv med jesus.jpg (Extension.Mismatch) -> Quarantined and deleted successfully.
C:\Documents and Settings\mak\Skrivebord\Backup\Ukendt mappe\zenith.jpg (Extension.Mismatch) -> Quarantined and deleted successfully.
C:\Documents and Settings\mak\Skrivebord\Backup\Ukendt mappe\42612448-L.jpg (Extension.Mismatch) -> Quarantined and deleted successfully.
C:\Documents and Settings\mak\Skrivebord\Backup\Ukendt mappe\DSCN1044.jpg (Extension.Mismatch) -> Quarantined and deleted successfully.
C:\Documents and Settings\administrator.ING.DK\Menuen Start\Programmer\Security Tool.LNK (Rogue.SecurityTool) -> Quarantined and deleted successfully.

Administrator
Avatar
Antal indlæg: 29619

Fint.


Hent Combofix, og gem den på dit skrivebord:
Her

Vigtigt-> Deaktiver dit antivirus/antispyware program. Da det/de kan ”forstyrre” og konflikte med combofix, eller fjerne vigtige combofix filer, hvilket kan få computeren til fryse. 


Kør så combofix.exe, og følg anvisningerne.


Du bør ikke klikke på vinduet imens værktøjet kører, idet det kan få din computer til at fryse.

Når combofix er færdig, og efter det (muligvis) har genstartet, skulle der gerne åbnes en logfil: combofix.txt
Indholdet af denne fil må du gerne lægge herind.

Den kan også findes her - > C: combofix txt.

☺☻♥♠♣♠

Antal indlæg: 136

Hej igen. Det vil jeg gøre i løbet af torsdag/fredag, så jeg håber du har tålmodighed,

Venligst

Martin

Administrator
Avatar
Antal indlæg: 29619

Det vil jeg gøre i løbet af torsdag/fredag, så jeg håber du har tålmodighed,

 


Ja, det er fint nok         grin

Antal indlæg: 136

Hej igen

Nu har jeg kørt ComboFix’en og den så ud til at slette noget snavs. Jeg kan se et ComboFix-icon på C-drevet, men det er ikke en tekstfil som jeg kan åbne. Hvad nu?

Venligst

Martin

Administrator
Avatar
Antal indlæg: 29619

Det vil rigtigt drille         grin


Så prøver vi bare noget andet.

Download OTL af Oldtimer, gem den på dit skrivebord:
http://oldtimer.geekstogo.com/OTL.exe

Luk alle åbne vinduer.
Klik på OTL ikonet (for Vista/win7, skal du højreklikke på ikonet og Kør som Administrator) for at starte programmet.

Når vinduet vises, under Output i toppen skift til Minimal Output.
Marker felterne ud for LOP check og Purity Check.


Klik så på Quick Scan.

Det vil give to (2) logfiler på skrivebordet, en kaldet OTL.txt, den anden vil blive navngivet Extras.txt.Husk, hvor du har gemt disse 2 filer.

Da de er forholdsvis lange, kan du blive nødt til at sende dem i flere indlæg.

Antal indlæg: 136

Ok. Jeg prøver og vender tilbage. Vh. Martin

Administrator
Avatar
Antal indlæg: 29619

Bare i orden                     wink

Antal indlæg: 136

Her er den første:

OTL Extras logfile created on: 02-12-2011 15:25:35 - Run 1
OTL by OldTimer - Version 3.2.31.0   Folder = C:\Documents and Settings\mak\Dokumenter\Installationsfiler
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000406 | Country: Danmark | Language: DAN | Date Format: dd-MM-yyyy

1,98 Gb Total Physical Memory | 1,37 Gb Available Physical Memory | 69,09% Memory free
3,83 Gb Paging File | 3,11 Gb Available in Paging File | 81,22% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programmer
Drive C: | 143,81 Gb Total Space | 44,87 Gb Free Space | 31,20% Space Free | Partition Type: NTFS
Drive H: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive J: | 68,35 Gb Total Space | 42,25 Gb Free Space | 61,81% Space Free | Partition Type: NTFS
Drive K: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive M: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive N: | 499,99 Gb Total Space | 61,03 Gb Free Space | 12,21% Space Free | Partition Type: NTFS
Drive P: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive S: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive T: | 302,77 Gb Total Space | 96,38 Gb Free Space | 31,83% Space Free | Partition Type: NTFS

Computer Name: INGWXP157 | User Name: mak | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile]—rundll32.exe shell32.dll,Control_RunDLL “%1”,%*
.html [@ = ChromeHTML]—C:\Programmer\Google\Chrome\Application\chrome.exe (Google Inc.)
.url [@ = InternetShortcut]—rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML]—C:\Programmer\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open]—“%1” %*
cmdfile [open]—“%1” %*
comfile [open]—“%1” %*
cplfile [cplopen]—rundll32.exe shell32.dll,Control_RunDLL “%1”,%*
exefile [open]—“%1” %*
htmlfile [open]—“C:\Program Files\Internet Explorer\iexplore.exe” -nohome
htmlfile [opennew]—“C:\Program Files\Internet Explorer\iexplore.exe” %1
http [open]—“C:\Program Files\Internet Explorer\iexplore.exe” -nohome
https [open]—“C:\Program Files\Internet Explorer\iexplore.exe” -nohome
InternetShortcut [open]—rundll32.exe shdocvw.dll,OpenURL %l
piffile [open]—“%1” %*
regfile [merge]—Reg Error: Key error.
scrfile [config]—“%1”
scrfile [install]—rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open]—“%1” /S
txtfile [edit]—Reg Error: Key error.
Unknown [openas]—%SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find]—%SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open]—%SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore]—%SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find]—%SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
“FirstRunDisabled” = 1
“AntiVirusDisableNotify” = 0
“FirewallDisableNotify” = 0
“UpdatesDisableNotify” = 0
“AntiVirusOverride” = 0
“FirewallOverride” = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
“DisableMonitoring” = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
“DisableMonitoring” = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
“DisableMonitoring” = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
“DisableMonitoring” = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
“DisableMonitoring” = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
“DisableSR” = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
“Start” = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
“Start” = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
“EnableFirewall” = 1
“DoNotAllowExceptions” = 0
“DisableNotifications” = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
“1900:UDP” = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
“2869:TCP” = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
“59276:TCP” = 59276:TCP:*:Enabled:Trend Micro OfficeScan Listener
“12946:TCP” = 12946:TCP:LocalSubNet:Enabled:CapaInstaller Agent Service communication port
“11954:TCP” = 11954:TCP:LocalSubNet:Enabled:CapaInstaller InfoCenter communication port
“10243:TCP” = 10243:TCP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10280:UDP” = 10280:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10281:UDP” = 10281:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10282:UDP” = 10282:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10283:UDP” = 10283:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10284:UDP” = 10284:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“5353:TCP” = 5353:TCP:*:Enabled:Adobe CSI CS4
“8383:TCP” = 8383:TCP:LocalSubNet:Enabled:CapaInstaller Agent Service communication port
“3703:TCP” = 3703:TCP:*:Enabled:Adobe Version Cue CS4 Server
“3704:TCP” = 3704:TCP:*:Enabled:Adobe Version Cue CS4 Server
“51000:TCP” = 51000:TCP:*:Enabled:Adobe Version Cue CS4 Server
“51001:TCP” = 51001:TCP:*:Enabled:Adobe Version Cue CS4 Server
“5985:TCP” = 5985:TCP:*:Disabled:Windows Fjernadministration
“80:TCP” = 80:TCP:*:Disabled:Windows Fjernadministration - kompatibilitetstilstand (HTTP-In)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
“1900:UDP” = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
“2869:TCP” = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
“12946:TCP” = 12946:TCP:LocalSubNet:Enabled:CapaInstaller Agent Service communication port
“11954:TCP” = 11954:TCP:LocalSubNet:Enabled:CapaInstaller InfoCenter communication port
“10243:TCP” = 10243:TCP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10280:UDP” = 10280:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10281:UDP” = 10281:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10282:UDP” = 10282:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10283:UDP” = 10283:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
“10284:UDP” = 10284:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
“C:\Programmer\Autodesk\Backburner\monitor.exe” = C:\Programmer\Autodesk\Backburner\monitor.exe:*:Enabled:backburner 2.3 monitor—(Autodesk, Inc.)
“C:\Programmer\Autodesk\Backburner\manager.exe” = C:\Programmer\Autodesk\Backburner\manager.exe:*:Enabled:backburner 2.3 manager—(Autodesk, Inc.)
“C:\Programmer\Autodesk\Backburner\server.exe” = C:\Programmer\Autodesk\Backburner\server.exe:*:Enabled:backburner 2.3 server—(Autodesk, Inc.)
“C:\Programmer\Autodesk\3ds Max 2009\3dsmax.exe” = C:\Programmer\Autodesk\3ds Max 2009\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2009 32-bit—(Autodesk, Inc.)
“C:\Programmer\e frontier\Poser 7\Poser.exe” = C:\Programmer\e frontier\Poser 7\Poser.exe:*:Enabled:Poser executable file—(Smith Micro Software, Inc)
“C:\Programmer\Chaos Group\V-Ray\3dsmax 2009 for x86\vrlservice.exe” = C:\Programmer\Chaos Group\V-Ray\3dsmax 2009 for x86\vrlservice.exe:*:Enabled:VRLService Module—()
“C:\Programmer\Fælles filer\Adobe\CS4ServiceManager\CS4ServiceManager.exe” = C:\Programmer\Fælles filer\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4—(Adobe Systems Incorporated)
“C:\Programmer\Adobe\Adobe Flash CS4\Flash.exe” = C:\Programmer\Adobe\Adobe Flash CS4\Flash.exe:*:Enabled:Adobe Flash CS4—(Adobe Systems Incorporated.)
“C:\Programmer\Fælles filer\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe” = C:\Programmer\Fælles filer\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe:*:Enabled:Adobe Version Cue CS4 Server—(Adobe Systems Incorporated)
“C:\Programmer\Google\Google Earth\client\googleearth.exe” = C:\Programmer\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth—(Google)
“C:\Programmer\Google\Google Earth\plugin\geplugin.exe” = C:\Programmer\Google\Google Earth\plugin\geplugin.exe:*:Disabled:Google Earth—(Google)
“C:\Programmer\SmartFTP Client\SmartFTP.exe” = C:\Programmer\SmartFTP Client\SmartFTP.exe:*:Enabled:SmartFTP Client—(SmartSoft Ltd.)
“C:\Documents and Settings\mak\Application Data\Dropbox\bin\Dropbox.exe” = C:\Documents and Settings\mak\Application Data\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox—(Dropbox, Inc.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
“C:\Programmer\Autodesk\3ds Max 2009\3dsmax.exe” = C:\Programmer\Autodesk\3ds Max 2009\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2009 32-bit—(Autodesk, Inc.)
“C:\Programmer\Chaos Group\V-Ray\3dsmax 2009 for x86\vrlservice.exe” = C:\Programmer\Chaos Group\V-Ray\3dsmax 2009 for x86\vrlservice.exe:*:Enabled:VRLService Module—()
“C:\Programmer\e frontier\Poser 7\Poser.exe” = C:\Programmer\e frontier\Poser 7\Poser.exe:*:Enabled:Poser executable file—(Smith Micro Software, Inc)
“C:\Programmer\SmartFTP Client\SmartFTP.exe” = C:\Programmer\SmartFTP Client\SmartFTP.exe:*:Enabled:SmartFTP Client 4.0—(SmartSoft Ltd.)
“C:\Documents and Settings\mak\Application Data\Dropbox\bin\Dropbox.exe” = C:\Documents and Settings\mak\Application Data\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox—(Dropbox, Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
“{00060000-0000-1004-8002-0000C06B5161}” = WIBU-KEY Setup (WIBU-KEY Remove)
“{0134A1A1-C283-4A47-91A1-92F19F960372}” = Adobe Creative Suite 2
“{05308C4E-7285-4066-BAE3-6B50DA6ED755}” = Adobe Update Manager CS4
“{054EFA56-2AC1-48F4-A883-0AB89874B972}” = Adobe Extension Manager CS4
“{075473F5-846A-448B-BCB3-104AA1760205}” = RecordNow Data
“{098727E1-775A-4450-B573-3F441F1CA243}” = kuler
“{098A2A49-7CF3-4F08-A38D-FB879117152A}” = Adobe Color NA Extra Settings CS4
“{0B56244C-7B61-0409-A739-3E29DDE4DC3C}” = Bluerock Technologies Flight Studio 3ds Max 2009 32-bit
“{0D6013AB-A0C7-41DC-973C-E93129C9A29F}” = Adobe Color JA Extra Settings CS4
“{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}” = Adobe Color EU Recommended Settings CS4
“{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}” = PlayStation(R)Store
“{0F723FC1-7606-4867-866C-CE80AD292DAF}” = Adobe CSI CS4
“{1007F41F-7D69-468E-8017-3849A5A973C2}” = ThinkVantage Technologies Welcome Message
“{11964613-805F-432D-A12B-169554B793E7}” = Nokia Connectivity Cable Driver
“{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}” = Sonic DLA
“{127AE4A9-68AE-4876-0002-6E90A7D8E996}” = Autodesk Mechanical Desktop Object Enabler
“{13F3917B56CD4C25848BDC69916971BB}” = DivX Converter
“{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B}” = Adobe SGM CS4
“{1618734A-3957-4ADD-8199-F973763109A8}” = Adobe Anchor Service CS4
“{16E16F01-2E2D-4248-A42F-76261C147B6C}” = Adobe Drive CS4
“{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}” = AdobeColorCommonSetRGB
“{18455581-E099-4BA8-BC6B-F34B2F06600C}” = Google Toolbar for Internet Explorer
“{18D10072035C4515918F7E37EAFAACFC}” = AutoUpdate
“{1B7C06E1-4888-47A6-992A-0990B9683486}” = Adobe Version Cue CS4 Server
“{1DCA3EAA-6EB5-4563-A970-EA14D75037BA}” = Adobe InDesign CS4
“{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1}” = Adobe InDesign CS4 Icon Handler
“{1ECDC253-9BB4-4994-9410-10CC7320EE80}” = CapaInstaller Client v4.9
“{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
“{2168245A-B5AD-40D8-A641-48E3E070B5B6}” = Adobe Flash CS4 STI-en
“{2318C2B1-4965-11d4-9B18-009027A5CD4F}” = Google Toolbar for Internet Explorer
“{236BB7C4-4419-42FD-0409-1E257A25E34D}” = Adobe Photoshop CS2
“{23FB368F-1399-4EAC-817C-4B83ECBE3D83}” = mProSafe
“{26A24AE4-039D-4CA4-87B4-2F83216011FF}” = Java(TM) 6 Update 29
“{2729C4B5-822B-43BB-9645-3E2C23F88489}” = Windows Presentation Foundation Language Pack (DAN)
“{2AB45FAF-2D92-0409-8D33-E2FE6172280E}” = Autodesk 3ds Max 2009 32-bit ProMaterials™ Library
“{2BAF2B96-7560-48B4-87D4-10178DDBE217}” = Adobe InDesign CS4 Application Feature Set Files (Roman)
“{2D978567-CE3E-404C-AABA-6C05B3D7DF35}” = Adobe InCopy CS4
“{303F7619-4E67-450F-985A-A2DF51B30AC8}” = Adobe Setup
“{30465B6C-B53F-49A1-9EBA-A3F187AD502E}” = Sonic Update Manager
“{305D5417-E687-0409-AA09-53DE06E059F8}” = Autodesk 3ds Max 2009 32-bit Movies
“{3248F0A8-6813-11D6-A77B-00B0D0150060}” = J2SE Runtime Environment 5.0 Update 6
“{350C9406-3D7C-4EE8-BAA9-00BCB3D54227}” = WebFldrs XP
“{353FE16B-30FE-469A-BF55-B978F4218003}” = iTunes
“{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}” = PDF Settings CS4
“{399C37FB-08AF-493B-BFED-20FBD85EDF7F}” = Integrated Camera
“{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}” = Adobe Media Player
“{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}” = Adobe XMP Panels CS4
“{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}” = Adobe Color - Photoshop Specific CS4
“{3D347E6D-5A03-4342-B5BA-6A771885F379}” = Autodesk Backburner 2008.1
“{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}” = Adobe WinSoft Linguistics Plugin
“{3FC7CBBC4C1E11DCA1A752EA55D89593}” = DivX Version Checker
“{41894269-0DD1-4C85-B3DD-1EB41B07621D}” = ThinkVantage Fingerprint Software 5.6
“{43509E18-076E-40FE-AF38-CA5ED400A5A9}” = Pixel Bender Toolkit
“{46548E80-0409-0000-C6A8-846700F85501}” = Adobe GoLive CS2 CoAuthor
“{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}” = Adobe AIR
“{47985AEA-2CA2-3344-851E-BA4DC9101C68}” = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DAN
“{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}” = Adobe Service Manager Extension
“{4A03706F-666A-4037-7777-5F2748764D10}” = Java Auto Updater
“{4A52555C-032A-4083-BDD9-6A85ABFB39A8}” = Adobe SING CS4
“{4F2D0C45-FA25-47B2-A013-E2B15D3C6E7E}_is1” = X2X Free Video Flip and Rotate 2.0
“{50A0893D-47D8-48E0-A7E8-44BCD7E4422E}” = Microsoft SQL Server Native Client
“{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}” = Microsoft SQL Server Setup Support Files (English)
“{55A0CB85-F941-11D6-945B-00E09880E9D6}” = FasType Typing Tutorial 6
“{55D9E026-DCB0-46FF-B60A-68B972228CF6}” = Autodesk Design Review 2010
“{57752979-A1C9-4C02-856B-FBB27AC4E02C}” = QuickTime
“{5783F2D7-8028-0409-0000-0060B0CE6BBA}” = DWG TrueView 2010
“{59F6A514-9813-47A3-948C-8A155460CC2A}” = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02
“{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}” = Google Earth
“{5EE7D259-D137-4438-9A5F-42F432EC0421}” = VC80CRTRedist - 8.0.50727.4053
“{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}” = Adobe Dynamiclink Support
“{63C24A08-70F3-4C8E-B9FB-9F21A903801D}” = Adobe Color Video Profiles CS CS4
“{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}” = Adobe Photoshop CS4 Support
“{65706020-7B6F-41F2-8047-FC69579E386A}” = Præsentationsstyring
“{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}” = Activation Assistant for the 2007 Microsoft Office suites
“{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}” = Sonic Express Labeler
“{67F0E67A-8E93-4C2C-B29D-47C48262738A}” = Adobe Device Central CS4
“{68243FF8-83CA-466B-B2B8-9F99DA5479C4}” = AdobeColorCommonSetCMYK
“{69333A04-5134-40A5-A055-9166A7AA1EC8}” =
“{6956856F-B6B3-4BE0-BA0B-8F495BE32033}” = Apple Software Update
“{744A5C19-AA4C-0409-BC07-9F4C73C8B247}” = Autodesk 3ds Max 2009 32-bit Vault 2009 Plug-In
“{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}” = Avanquest update
“{77DCDCE3-2DED-62F3-8154-05E745472D07}” = Acrobat.com
“{793D1D88-6141-43DE-BE58-59BCE31B4090}” = Adobe Flash CS4 Extension - Flash Lite STI en
“{796E076A-82F7-4D49-98C8-DEC0C3BC733A}” = Diskeeper Lite
“{7A046E1F-BEB7-49C8-83E2-78E1F1C65C60}” = Turbo Squid Tentacles 3ds Max 2009 32-bit
“{7B63B2922B174135AFC0E1377DD81EC2}” = DivX Codec
“{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C}” = Adobe InDesign CS4 Common Base Files
“{7F4C8163-F259-49A0-A018-2857A90578BC}” = Adobe InDesign CS2
“{7FC3BBEC-5A91-41B0-9CB8-960EC4421411}” = InterVideo WinDVD Creator 3
“{8186FF34-D389-4B7E-9A2F-C197585BCFBD}” = Adobe Media Encoder CS4 Importer
“{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}” = Adobe Type Support CS4
“{837b34e3-7c30-493c-8f6a-2b0f04e2912c}” = Microsoft Visual C++ 2005 Redistributable
“{83877DB1-8B77-45BC-AB43-2BAC22E093E0}” = Adobe Bridge CS4
“{842B4B72-9E8F-4962-B3C1-1C422A5C4434}” = Suite Shared Configuration CS4
“{853A4763-6643-4604-8D64-28BDD8925F4C}” = Apple Application Support
“{854ADF56-8C3A-429E-8A20-2B75E8E15DC5}” = SmartFTP Client
“{86BBD345-0CE6-4AB1-8ADE-FB12D86EAB90}” = 32 Bit HP CIO Components Installer
“{87532CAB-7932-4F84-8937-823337622807}” = Adobe Illustrator CS4
“{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}” = Microsoft Silverlight
“{8A7AC18E-2249-4BCB-81BE-CB2F7F7E6EFE}” = Adobe Stock Photos 1.0
“{8ADFC4160D694100B5B8A22DE9DCABD9}” = DivX Player
“{8B08E38A-73EF-4A3D-B166-EB8B7D98E0BA}” = Microsoft .NET Framework 3.0 Danish Language Pack
“{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}” = mPfMgr
“{8EDBA74D-0686-4C99-BFDD-F894678E5B39}” = Adobe Common File Installer
“{90120000-0020-0406-0000-0000000FF1CE}” = Kompatibilitetspakke til Office 2007-systemet
“{90120000-0020-0409-0000-0000000FF1CE}” = Compatibility Pack for the 2007 Office system
“{90140000-2005-0000-0000-0000000FF1CE}” = Microsoft Office File Validation Add-In
“{90520409-6000-11D3-8CFE-0150048383C9}” = Microsoft Office Visio Viewer 2003 (English)
“{90A40406-6000-11D3-8CFE-0150048383C9}” = Microsoft Office 2003 Webkomponenter
“{91120406-6000-11D3-8CFE-0150048383C9}” = Microsoft Office Standard Edition 2003
“{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}” = InterVideo WinDVD
“{931AB7EA-3656-4BB7-864D-022B09E3DD67}” = Adobe Linguistics CS4
“{94D398EB-D2FD-4FD1-B8C4-592635E8A191}” = Adobe CMaps CS4
“{9529805B-3C9F-4A5E-B2C6-7060478A6408}” = SmartFTP Client Danish (Denmark) MUI
“{986F64DC-FF15-449D-998F-EE3BCEC6666A}” = Help Center
“{99A40651-0BC2-4095-8F9A-A40FAB224FEF}” = PC Connectivity Solution
“{9A25302D-30C0-39D9-BD6F-21E6EC160475}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
“{A00FC2FA-FE3C-4752-8D8B-62A064231E0D}” = Performance Guard Agent (msi)
“{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}” = mDriver
“{A1C62179-A9E6-4F25-B978-ACFD01524762}” = Adobe Setup
“{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}” = Microsoft .NET Framework 3.0 Service Pack 2
“{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}” = Google Update Helper
“{A939D341-5A04-4E0A-BB55-3E65B386432D}” = Microsoft Office Small Business-forbindelseskomponenter
“{A96E97134CA649888820BCDE5E300BBD}” = H.264 Decoder
“{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}” = Nokia PC Suite
“{AB708C9B-97C8-4AC9-899B-DBF226AC9382}” = RecordNow Audio
“{AC76BA86-1033-F400-7760-000000000004}” = Adobe Acrobat 9 Pro - English, Français, Deutsch
“{AC76BA86-1033-F400-7760-000000000004}_946” = Adobe Acrobat 9.4.6 - CPSID_83708
“{AC76BA86-1033-F400-7760-000000000004}{AC76BA86-1033-F400-7760-000000000004}” = Adobe Acrobat 9 Pro - English, Français, Deutsch
“{AC76BA86-7AD7-1030-7B44-A94000000001}” = Adobe Reader 9.4.6 - Dansk
“{AC76BA86-7AD7-5464-3428-900000000004}” = Spelling Dictionaries Support For Adobe Reader 9
“{AC76BA86-7AD7-5670-0000-900000000003}” = Korean Fonts Support For Adobe Reader 9
“{AEB9948B-4FF2-47C9-990E-47014492A0FE}” = MSXML 6.0 Parser
“{AEF9DC35ADDF4825B049ACBFD1C6EB37}” = AAC Decoder
“{AFD9E698-03C2-4E88-80A6-1496562D4304}” = Google SketchUp 7.1
“{B12665F4-4E93-4AB4-B7FC-37053B524629}” = RecordNow Copy
“{B13A7C41581B411290FBC0395694E2A9}” = DivX Converter
“{B29AD377-CC12-490A-A480-1452337C618D}” = Connect
“{B2F5D08C-7E79-4FCD-AAF4-57AD35FF0601}” = Adobe Illustrator CS2
“{B334D9AE-1393-423E-97C0-3BDC3360E692}” = Sonic Icons for Lenovo
“{B4A6F010-5AD6-4216-B5A0-000002001374}” = SAXOTECH Editorial Adobe CS2 Plug-ins
“{B4A6F010-5AD6-4216-B5A0-000003002290}” = SAXOTECH Mediaware Center
“{B4A6F010-5AD6-4216-B5A0-000016002290}” = MWC Adobe CS4 Plug-ins
“{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}” = Adobe Photoshop CS4
“{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}” = PlayStation(R)Network Downloader
“{B69349AE-2D41-3708-8BA4-4DC22645CA04}” = Microsoft .NET Framework 3.5 Language Pack SP1 - dan
“{B7050CBDB2504B34BC2A9CA0A692CC29}” = DivX Plus Web Player
“{B74D4E10-1033-0000-0000-000000000001}” = Adobe Bridge 1.0
“{B9F4561A-924D-4510-A85A-BB0960C338CB}” = Adobe Asset Services CS4
“{BAF78226-3200-4DB4-BE33-4D922A799840}” = Windows Presentation Foundation
“{BB4E33EC-8181-4685-96F7-8554293DEC6A}” = Adobe Output Module
“{BC7E2C06-D255-4300-AA12-33AB54D009AC}” = Adobe Creative Suite 4 Design Standard
“{BEB57E7F-FF01-4CBB-9857-FF9DC655C7F1}” = Adobe InCopy CS4 Application Feature Set Files (Roman)
“{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}” = Microsoft .NET Framework 2.0 Service Pack 2
“{C0D2F614-5CE5-4DCB-8678-E5C9AF7044F8}” = Microsoft SQL Server VSS Writer
“{C251E4E6-89BA-0409-9B42-1B3D01D34783}” = Autodesk 3ds Max 2009 32-bit Architectural Materials Library
“{C2E4B5BD-32DB-4817-A060-341AB17C3F90}” = Bonjour
“{C35B3785-531C-4D00-9EFA-44A130BFF73F}” = Adobe InCopy CS2
“{C49DAA9C-5BA8-459A-8244-E57B69DF0F04}” = Suite Specific
“{C52E3EC1-048C-45E1-8D53-10B0C6509683}” = Adobe Default Language CS4
“{C54ED2B6-1AF2-416F-BBA8-5E2B8CDCB5C4}” = XP Themes
“{CACAEB5F-174D-4C7C-AC56-A33289A807CA}” = Apple Mobile Device Support
“{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}” = Microsoft .NET Framework 1.1
“{CC75AB5C-2110-4A7F-AF52-708680D22FE8}” = Photoshop Camera Raw
“{CCBAA1F7-E5E1-48B2-9ED9-A79C6A37CE78}” = Cisco Systems VPN Client 5.0.00.0340
“{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}” = SUPERAntiSpyware Free Edition
“{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}” = Microsoft .NET Framework 3.5 SP1
“{D22002ED-EE2A-4CB1-A63D-430E62A2E8D8}” = Google SketchUp 8
“{DB71210F-8314-4AE3-B7A7-EBAF85BD30E9}” = Wallpapers
“{DDB95B2B-68B8-4DF8-85F9-58E34F88FA81}” = SolidWorks eDrawings 2011
“{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}” = Adobe Media Encoder CS4
“{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1” = Auslogics Disk Defrag
“{DFCB15E0-969C-3E74-8654-F5978478E876}” = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DAN
“{E3E71D07-CD27-46CB-8448-16D4FB29AA13}” = Microsoft WSE 3.0 Runtime
“{E7E836B8-4BDD-454F-82E6-5FEA17C83AD4}” = Meddelelsescenter
“{E81667C6-2856-46D6-ABEA-6A2F42166779}” = mCore
“{E9787678-551D-4478-9682-DBB587257110}” = Adobe Help Center 1.0
“{EEAD135D-84F0-AAF1-8F80-F72B02C3C807}” = 3DRT Flexi : Setup Utility v.0.6.1
“{EED50C97-C79E-4149-BD82-7C5A22437708}” = Adobe Setup
“{EFCBBB01-F876-0409-B91F-7B6132E8BB64}” = Autodesk 3ds Max 2009 32-bit Vault 2008 Plug-In
“{EAAC8D70-AC68-4D5D-B23F-CDDA9D2CAE77}” = ComArchive For Outlook
“{F0A37341-D692-11D4-A984-009027EC0A9C}” = SoundMAX
“{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}” = mMHouse
“{F0E64E2E-3A60-40D8-A55D-92F6831875DA}” = Adobe Search for Help
“{F151F2B3-0C32-44D3-90E2-E639B8024622}” = Rescue and Recovery
“{F18DB86D-BC16-4E01-BCCE-63F62B931D82}” = InterVideo Register Manager
“{F681200C-0446-0409-ABE4-EA9105E40EE4}” = Autodesk 3ds Max 2009 32-bit Additional Maps and Material Libraries
“{F6E99614-F042-4459-82B7-8B38B2601356}” = Adobe Flash CS4
“{F705E3E1-A471-426B-9A09-73429F3418EE}” = System Migration Assistant
“{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}” = Adobe ExtendScript Toolkit CS4
“{F93C84A6-0DC6-42AF-89FA-776F7C377353}” = Adobe PDF Library Files CS4
“{FBE5AA96-22F0-4C4A-8E92-4BE3498D4CCB}” = Media Go
“{FC7BACF0-1FFA-4605-B3B4-A66AB382752D}” = XML Notepad 2007
“{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}” = mWlsSafe
“{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}” = Adobe Fonts All
“{FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}” = Message Center Plus
“{FDD8070F-E3B9-0409-822C-CCFE5E82C14D}” = Autodesk 3ds Max 2009 32-bit
“{FE2FDC72-3059-4F6C-9A31-563178C60226}” = Adobe InCopy CS4 Common Base Files
“{AAC389499AEF40428987B3D30CFC76C9}” = MKV Splitter
“0C5EDC3653FED5B121F464339EAC12534D253B25” = Windows-driverpakke - Nokia Modem (02/15/2007 3.1)
“4077F884D1BB007055BDB83B621D87220A73F30F” = Windows-driverpakke - Nokia (WUDFRd) WPD (06/01/2007 6.84.33.0)
“Activation Assistant for the 2007 Microsoft Office suites” = Activation Assistant for the 2007 Microsoft Office suites
“Adobe AIR” = Adobe AIR
“Adobe Flash Player ActiveX” = Adobe Flash Player 11 ActiveX
“Adobe Flash Player Plugin” = Adobe Flash Player 11 Plugin
“Adobe GoLive CS2 CoAuthor” = Adobe GoLive CS2 CoAuthor
“Adobe InCopy CS2 - {C35B3785-531C-4D00-9EFA-44A130BFF73F}” = Adobe InCopy CS2
“Adobe Shockwave Player” = Adobe Shockwave Player 11.5
“Adobe SVG Viewer” = Adobe SVG Viewer 3.0
“Adobe_1e3ba55b33b1e8227645fb9c82acca3” = Adobe Creative Suite 4 Design Standard
“Adobe_a1975414e6d27a39455e1ce210403d7” = Adobe InCopy CS4
“Adobe_a68eec966ce913ddaa63251dc82ed31” = Adobe Flash CS4 Professional
“Aleo Flash Pan Zoom Viewer_is1” = Aleo Flash Pan Zoom Viewer 1.2
“Autodesk Design Review 2010” = Autodesk Design Review 2010
“AwayTask” = Maintenance Manager
“B726756F5B5A5AA9D798B399386FC6205A45F19E” = Windows-driverpakke - Nokia Modem (02/15/2007 3.1)
“CCleaner” = CCleaner
“CD8424B9400BFF7D34AA18F816C71322AC4BDAA7” = Windows-driverpakke - Nokia Modem (05/24/2007 6.84.0.1)
“CNXT_MODEM_HDAUDIO_VEN_14F1&DEV;_2BFA&SUBSYS;_10140588” = ThinkPad Modem
“com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1” = Adobe Media Player
“com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1” = Acrobat.com
“com.yofla.3DRTFlexiSetupUtility-Native” = 3DRT Flexi : Setup Utility v.0.6.1
“DivX Plus DirectShow Filters” = DivX Plus DirectShow Filters
“DWG TrueView 2010” = DWG TrueView 2010
“ESET Online Scanner” = ESET Online Scanner v3
“Eye-One Match_is1” = Eye-One Match 3.6.1
“FBX Plugin 2009.0 for Max 2009” = FBX Plugin 2009.0 for Max 2009
“Google Chrome” = Google Chrome
“Google Updater” = Google Updater
“HijackThis” = HijackThis 2.0.2
“IDNMitigationAPIs” = Microsoft Internationalized Domain Names Mitigation APIs
“ie7” = Windows Internet Explorer 7
“ie8” = Windows Internet Explorer 8
“Malwarebytes’ Anti-Malware_is1” = Malwarebytes’ Anti-Malware
“MetaFrame Presentation Server Web Client for Win32” = MetaFrame Presentation Server Web Client for Win32
“Microsoft .NET Framework 1.1 (1033)” = Microsoft .NET Framework 1.1
“Microsoft .NET Framework 3.0 Danish Language Pack” = Dansk sprogpakke til Microsoft .NET Framework 3.0
“Microsoft .NET Framework 3.5 Language Pack SP1 - dan” = Sprogpakke til Microsoft .NET Framework 3.5 SP1 - dansk
“Microsoft .NET Framework 3.5 SP1” = Microsoft .NET Framework 3.5 SP1
“Mozilla Firefox 8.0.1 (x86 da)” = Mozilla Firefox 8.0.1 (x86 da)
“MSCompPackV1” = Microsoft Compression Client Pack 1.0 for Windows XP
“NLSDownlevelMapping” = Microsoft National Language Support Downlevel APIs
“Nokia PC Suite” = Nokia PC Suite
“NVIDIA Drivers” = NVIDIA Drivers
“OfficeScanNT” = Trend Micro OfficeScan Client
“OnScreenDisplay” = Vis på skærm
“PC-Doctor 5 for Windows” = PC-Doctor 5 for Windows
“PCMCIAPW” = ThinkPad PC Card Power Policy
“Picasa 3” = Picasa 3
“Poser 7_is1” = Poser 7.0.4 Service Release
“ProInst” = Intel(R) PROSet/Wireless Software
“PROSet” = Intel(R) PRO Network Connections Drivers
“Rebus Manager” = Rebus Manager
“Recuva” = Recuva
“Remove Multimedia Center” = Remove Multimedia Center
“Secunia PSI” = Secunia PSI (2.0.0.4003)
“SmartFTP Client 4.0 Setup Files” = SmartFTP Client 4.0 Setup Files (remove only)
“TypeFaster” = TypeFaster Typing Tutor
“UnityWebPlayer” = Unity Web Player (All users)
“V-Ray for 3dsmax 2009 for x86” = V-Ray for 3dsmax 2009 for x86
“Windows Media Format Runtime” = Windows Media Format 11 runtime
“Windows Media Player” = Windows Media Player 11
“Windows XP Service Pack” = Windows XP Service Pack 3
“WinRAR archiver” = WinRAR arkivering
“WMCSetup” = Windows Media Connect
“WMFDist11” = Windows Media Format 11 runtime
“wmp11” = Windows Media Player 11
“Wudf01005” = Microsoft User-Mode Driver Framework Feature Pack 1.5
“XpsEPSC” = XML Paper Specification Shared Components Pack 1.0
“XPSEPSCLP” = XML Paper Specification Shared Components Language Pack 1.0
“Yahoo! Widget Engine” = Yahoo! Widgets
“YInstHelper” = Yahoo! Install Manager

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
“Dropbox” = Dropbox

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

Error - 02-12-2011 04:26:51 | Computer Name = INGWXP157 | Source = nview_info | ID = 11141121
Description =

[ Lenovo-Message Center Plus/Admin Events ]
Error - 22-02-2011 07:06:09 | Computer Name = INGWXP157 | Source = Lenovo-Message Center Plus/Admin | ID = 4
Description = The file size of the downloaded file /TOC.cab is not the same as the
file size of the file on the server

Error - 22-02-2011 07:06:10 | Computer Name = INGWXP157 | Source = Lenovo-Message Center Plus/Admin | ID = 4
Description = The file C:\Documents and Settings\All Users\Application Data\Lenovo\MessageCenterPlus\ServerRepository\temp\TOC.cab
does not have a Lenovo Digital Signature. The file will be deleted

Error - 29-06-2011 04:59:54 | Computer Name = INGWXP157 | Source = Lenovo-Message Center Plus/Admin | ID = 2
Description = Uncaught exception -> Exception message: Der kunne ikke opnås en vindues-handle
til objektet ‘WebBrowser’. ActiveX-objekter uden vinduer understøttes ikke.

[ System Events ]
Error - 01-12-2011 11:49:57 | Computer Name = INGWXP157 | Source = Service Control Manager | ID = 7026
Description = Følgende boot-start- eller system-start-driver kunne ikke indlæses:
  SASKUTIL

Error - 02-12-2011 02:37:00 | Computer Name = INGWXP157 | Source = NETLOGON | ID = 5719
Description = Der er ingen tilgængelig domænecontroller til domænet ING.DK af følgende
årsag:  “.  Kontroller, at computeren har forbindelse til netværket, og prøv igen.
Kontakt domæneadministratoren, hvis problemet fortsætter.

Error - 02-12-2011 04:33:36 | Computer Name = INGWXP157 | Source = Service Control Manager | ID = 7031
Description = Tjenesten Windows Media Player Network Sharing Service blev afbrudt
uventet. Dette er sket 1 gange. Følgende korrigerende handling foretages om 30000
millisekunder: Genstart tjenesten.

Error - 02-12-2011 04:37:57 | Computer Name = INGWXP157 | Source = Service Control Manager | ID = 7034
Description = Tjenesten tvtnetwk afsluttede uventet. Dette er sket 1 gang(e).

Error - 02-12-2011 04:37:57 | Computer Name = INGWXP157 | Source = Service Control Manager | ID = 7034
Description = Tjenesten mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit
32-bit afsluttede uventet. Dette er sket 1 gang(e).

Error - 02-12-2011 04:37:59 | Computer Name = INGWXP157 | Source = Service Control Manager | ID = 7031
Description = Tjenesten Windows Media Player Network Sharing Service blev afbrudt
uventet. Dette er sket 1 gange. Følgende korrigerende handling foretages om 30000
millisekunder: Genstart tjenesten.

Error - 02-12-2011 04:41:57 | Computer Name = INGWXP157 | Source = Service Control Manager | ID = 7022
Description = Tjenesten DNS-klient hang ved start.

Error - 02-12-2011 04:41:57 | Computer Name = INGWXP157 | Source = Service Control Manager | ID = 7026
Description = Følgende boot-start- eller system-start-driver kunne ikke indlæses:
  SASKUTIL

Error - 02-12-2011 04:41:57 | Computer Name = INGWXP157 | Source = Service Control Manager | ID = 7034
Description = Tjenesten DNS-klient afsluttede uventet. Dette er sket 1 gang(e).

Error - 02-12-2011 04:44:42 | Computer Name = INGWXP157 | Source = System Error | ID = 1003
Description = Fejlkode 00000077, parameter 1 00000001, parameter 2 00000000, parameter
3 00000000, parameter 4 b5968c34.


< End of report >

Antal indlæg: 136

Og næste:

OTL logfile created on: 02-12-2011 15:25:34 - Run 1
OTL by OldTimer - Version 3.2.31.0   Folder = C:\Documents and Settings\mak\Dokumenter\Installationsfiler
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000406 | Country: Danmark | Language: DAN | Date Format: dd-MM-yyyy

1,98 Gb Total Physical Memory | 1,37 Gb Available Physical Memory | 69,09% Memory free
3,83 Gb Paging File | 3,11 Gb Available in Paging File | 81,22% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programmer
Drive C: | 143,81 Gb Total Space | 44,87 Gb Free Space | 31,20% Space Free | Partition Type: NTFS
Drive H: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive J: | 68,35 Gb Total Space | 42,25 Gb Free Space | 61,81% Space Free | Partition Type: NTFS
Drive K: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive M: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive N: | 499,99 Gb Total Space | 61,03 Gb Free Space | 12,21% Space Free | Partition Type: NTFS
Drive P: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive S: | 499,99 Gb Total Space | 51,62 Gb Free Space | 10,32% Space Free | Partition Type: NTFS
Drive T: | 302,77 Gb Total Space | 96,38 Gb Free Space | 31,83% Space Free | Partition Type: NTFS

Computer Name: INGWXP157 | User Name: mak | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\mak\Dokumenter\Installationsfiler\OTL.exe (OldTimer Tools)
PRC - C:\Documents and Settings\mak\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Programmer\Google\Update\1.3.21.79\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Programmer\Secunia\PSI\psia.exe (Secunia)
PRC - C:\Programmer\Secunia\PSI\sua.exe (Secunia)
PRC - C:\Programmer\Secunia\PSI\psi_tray.exe (Secunia)
PRC - C:\Programmer\Fælles filer\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Programmer\Fælles filer\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Programmer\CapaInstaller\Client\Util\CapaInstaller InfoCenter.exe (CapaSystems A/S)
PRC - C:\Programmer\CapaInstaller\Services\CiStub\CIStub.exe (CapaSystems A/S)
PRC - C:\Programmer\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\Programmer\CapaInstaller\Services\SIS\ciInstSvc.exe (CapaSystems A/S)
PRC - C:\Programmer\Premitech\Performance Guard Agent\GUARDagent.exe (PremiTech A/S)
PRC - C:\WINDOWS\system32\spool\drivers\w32x86\3\hpmup091.bin (Hewlett-Packard)
PRC - C:\Programmer\Lenovo\Message Center Plus\MCPLaunch.exe ()
PRC - C:\Programmer\Chaos Group\V-Ray\3dsmax 2009 for x86\vrlservice.exe ()
PRC - C:\Programmer\Fælles filer\Autodesk Shared\Service\AdskScSrv.exe (Autodesk)
PRC - C:\Programmer\Trend Micro\OfficeScan Client\CNTAoSMgr.exe (Trend Micro Inc.)
PRC - C:\Programmer\Adobe\Adobe Bridge CS4\Bridge.exe (Adobe Systems, Inc.)
PRC - C:\Programmer\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programmer\Fælles filer\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited)
PRC - c:\Programmer\Fælles filer\Lenovo\Scheduler\tvtsched.exe (Lenovo Group Limited)
PRC - C:\Programmer\Fælles filer\Lenovo\tvt_reg_monitor_svc.exe (Lenovo Group Limited)
PRC - C:\Programmer\Nokia\Nokia PC Suite 6\LaunchApplication.exe (Nokia)
PRC - C:\Programmer\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
PRC - C:\Programmer\Trend Micro\OfficeScan Client\TmListen.exe (Trend Micro Inc.)
PRC - C:\Programmer\Trend Micro\OfficeScan Client\NTRtScan.exe (Trend Micro Inc.)
PRC - C:\WINDOWS\Temp\UED41B.EXE (Trend Micro Inc.)
PRC - C:\Programmer\Trend Micro\OfficeScan Client\PccNTMon.exe (Trend Micro Inc.)
PRC - C:\Programmer\Lenovo\NPDIRECT\tpfnf7sp.exe (Lenovo Group Limited)
PRC - C:\Programmer\Trend Micro\OfficeScan Client\TmPfw.exe (Trend Micro Inc.)
PRC - C:\Programmer\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
PRC - C:\Programmer\Lenovo\HOTKEY\TPOSDSVC.exe (Lenovo Group Limited)
PRC - C:\Programmer\Lenovo\Rescue and Recovery\rrpservice.exe ()
PRC - C:\Programmer\Fælles filer\Lenovo\Logger\logmon.exe ()
PRC - C:\Programmer\Lenovo\Rescue and Recovery\ADM\IUService.exe ()
PRC - C:\WINDOWS\system32\IPSSVC.EXE (Lenovo Group Limited)
PRC - C:\Programmer\Fælles filer\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
PRC - C:\Programmer\Lenovo\AwayTask\AwaySch.EXE (Lenovo Group Limited)
PRC - C:\Programmer\Diskeeper Corporation\Diskeeper\DkService.exe (Diskeeper Corporation)
PRC - C:\Programmer\Diskeeper Corporation\Diskeeper\DkIcon.exe (Diskeeper Corporation)
PRC - C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
PRC - C:\Programmer\Fælles filer\Installshield\UpdateService\issch.exe (InstallShield Software Corporation)


========== Modules (No Company Name) ==========

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\24331b719aa25ac2b21099e32232840c\Microsoft.VisualBasic.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\CustomMarshalers.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\90b90e700e59d73d6d692cf74e1ba16e\System.Management.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\60df958ca96c9b8945f836759b6abd34\System.Web.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\36bf3d5f05a40c9e3cadca5789c8a469\System.Runtime.Remoting.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e\System.ServiceProcess.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll ()
MOD - C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\CapaInstaller.JobTrigCommunication\4.9.1569.0__4095d0cb70d806a2\CapaInstaller.JobTrigCommunication.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_da_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_da_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Programmer\Fælles filer\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Programmer\Lenovo\Message Center Plus\MCPLaunch.exe ()
MOD - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\pdfshell.DAN ()
MOD - C:\Programmer\Adobe\Acrobat 9.0\Acrobat\AcroTray.DEU ()
MOD - C:\Programmer\Adobe\Acrobat 9.0\Acrobat\AcroTray.FRA ()
MOD - C:\Programmer\Chaos Group\V-Ray\3dsmax 2009 for x86\vrlservice.exe ()
MOD - C:\Programmer\Adobe\Adobe Bridge CS4\FileInfo.dll ()
MOD - C:\Programmer\Adobe\Adobe Bridge CS4\AdobeXMPFiles.dll ()
MOD - C:\Programmer\Adobe\Adobe Bridge CS4\AdobeXMP.dll ()
MOD - C:\Programmer\Adobe\Adobe Bridge CS4\Symlib.dll ()
MOD - C:\Programmer\Adobe\Adobe Bridge CS4\libmysqld.dll ()
MOD - C:\Programmer\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe ()
MOD - C:\WINDOWS\system32\nview.dll ()
MOD - C:\WINDOWS\system32\nvshell.dll ()
MOD - C:\Programmer\Trend Micro\OfficeScan Client\libNetCtrl.dll ()
MOD - C:\Programmer\Intel\Wireless\Bin\iWMSProv.dll ()
MOD - C:\Programmer\Trend Micro\OfficeScan Client\tmdbg.dll ()
MOD - C:\Programmer\Lenovo\NPDIRECT\tpfnf7.dll ()
MOD - C:\WINDOWS\system32\vpnapi.dll ()
MOD - C:\Programmer\Lenovo\Rescue and Recovery\rrpservice.exe ()
MOD - C:\Programmer\Fælles filer\Lenovo\Logger\logmon.exe ()
MOD - C:\Programmer\Lenovo\Rescue and Recovery\CDRecord.dll ()
MOD - C:\Programmer\Fælles filer\Lenovo\CDRecord.dll ()
MOD - C:\Programmer\Lenovo\Rescue and Recovery\ADM\IUService.exe ()
MOD - C:\Programmer\Lenovo\HOTKEY\HKVOLKEY.dll ()
MOD - C:\Programmer\Lenovo\HOTKEY\tphklock.dll ()
MOD - C:\Programmer\Lenovo\HOTKEY\TPOSDSVC.dll ()


========== Win32 Services (SafeList) ==========

SRV - (Secunia PSI Agent)—C:\Programmer\Secunia\PSI\PSIA.exe (Secunia)
SRV - (Secunia Update Agent)—C:\Programmer\Secunia\PSI\sua.exe (Secunia)
SRV - (SolidWorks Licensing Service)—C:\Programmer\Fælles filer\SolidWorks Shared\Service\SolidWorksLicensing.exe (SolidWorks)
SRV - (Apple Mobile Device)—C:\Programmer\Fælles filer\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (CIStub)—C:\Programmer\CapaInstaller\Services\CiStub\CIStub.exe (CapaSystems A/S)
SRV - (ciInstSvc)—C:\Programmer\CapaInstaller\Services\SIS\ciInstSvc.exe (CapaSystems A/S)
SRV - (PremiTech pga)—C:\Programmer\Premitech\Performance Guard Agent\GUARDagent.exe (PremiTech A/S)
SRV - (FLEXnet Licensing Service)—C:\Programmer\Fælles filer\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (Autodesk Licensing Service)—C:\Programmer\Fælles filer\Autodesk Shared\Service\AdskScSrv.exe (Autodesk)
SRV - (Adobe LM Service)—C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe (Adobe Systems)
SRV - (mi-raysat_3dsMax2009_32)—C:\Programmer\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe ()
SRV - (Adobe Version Cue CS4)—C:\Programmer\Fælles filer\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe (Adobe Systems Incorporated)
SRV - (TVT Scheduler)—c:\Programmer\Fælles filer\Lenovo\Scheduler\tvtsched.exe (Lenovo Group Limited)
SRV - (ThinkVantage Registry Monitor Service)—C:\Programmer\Fælles filer\Lenovo\tvt_reg_monitor_svc.exe (Lenovo Group Limited)
SRV - (ServiceLayer)—C:\Programmer\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (tmlisten)—C:\Programmer\Trend Micro\OfficeScan Client\tmlisten.exe (Trend Micro Inc.)
SRV - (ntrtscan)—C:\Programmer\Trend Micro\OfficeScan Client\ntrtscan.exe (Trend Micro Inc.)
SRV - (TmProxy)—C:\Programmer\Trend Micro\OfficeScan Client\TmProxy.exe (Trend Micro Inc.)
SRV - (TmPfw)—C:\Programmer\Trend Micro\OfficeScan Client\TmPfw.exe (Trend Micro Inc.)
SRV - (CVPND)—C:\Programmer\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
SRV - (TVT Backup Protection Service)—C:\Programmer\Lenovo\Rescue and Recovery\rrpservice.exe ()
SRV - (tvtnetwk)—C:\Programmer\Lenovo\Rescue and Recovery\ADM\IUService.exe ()
SRV - (IPSSVC)—C:\WINDOWS\system32\IPSSVC.EXE (Lenovo Group Limited)
SRV - (IviRegMgr)—C:\Programmer\Fælles filer\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
SRV - (ose)—C:\Programmer\Fælles filer\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (CIBITS)—C:\Programmer\CapaInstaller\Client\Util\ciBITSSvc.exe (CapaSystems A/S)
SRV - (Diskeeper)—C:\Programmer\Diskeeper Corporation\Diskeeper\DkService.exe (Diskeeper Corporation)
SRV - (IDriverT)—C:\Programmer\Fælles filer\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (OracleOraHome92ClientCache)—C:\ORACLE\ORA92\bin\ONRSD.EXE ()


========== Driver Services (SafeList) ==========

DRV - (PSI)—C:\WINDOWS\system32\drivers\psi_mf.sys (Secunia)
DRV - (TmFilter)—C:\Programmer\Trend Micro\OfficeScan Client\tmxpflt.sys (Trend Micro Inc.)
DRV - (TmPreFilter)—C:\Programmer\Trend Micro\OfficeScan Client\tmpreflt.sys (Trend Micro Inc.)
DRV - (VSApiNt)—C:\Programmer\Trend Micro\OfficeScan Client\vsapint.sys (Trend Micro Inc.)
DRV - (psadd)—C:\WINDOWS\system32\drivers\psadd.sys (Lenovo (United States) Inc.)
DRV - (s1018mdm)—C:\WINDOWS\system32\drivers\s1018mdm.sys (MCCI Corporation)
DRV - (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM)—C:\WINDOWS\system32\drivers\s1018unic.sys (MCCI Corporation)
DRV - (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM)—C:\WINDOWS\system32\drivers\s1018mgmt.sys (MCCI Corporation)
DRV - (s1018obex)—C:\WINDOWS\system32\drivers\s1018obex.sys (MCCI Corporation)
DRV - (s1018bus) Sony Ericsson Device 1018 driver (WDM)—C:\WINDOWS\system32\drivers\s1018bus.sys (MCCI Corporation)
DRV - (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS)—C:\WINDOWS\system32\drivers\s1018nd5.sys (MCCI Corporation)
DRV - (s1018mdfl)—C:\WINDOWS\system32\drivers\s1018mdfl.sys (MCCI Corporation)
DRV - (tmcomm)—C:\WINDOWS\system32\drivers\tmcomm.sys (Trend Micro Inc.)
DRV - (rimmptsk)—C:\WINDOWS\system32\drivers\rimmptsk.sys (REDC)
DRV - (rismxdp)—C:\WINDOWS\system32\drivers\rixdptsk.sys (REDC)
DRV - (rimsptsk)—C:\WINDOWS\system32\drivers\rimsptsk.sys (REDC)
DRV - (TVTI2C)—C:\WINDOWS\system32\drivers\tvti2c.sys (Lenovo (United States) Inc.)
DRV - (NETw4x32) Intel(R)—C:\WINDOWS\system32\drivers\NETw4x32.sys (Intel Corporation)
DRV - (tmcfw)—C:\WINDOWS\system32\drivers\TM_CFW.sys (Trend Micro Inc.)
DRV - (TSMAPIP)—C:\WINDOWS\system32\drivers\TSMAPIP.SYS ()
DRV - (CVPNDRVA)—C:\WINDOWS\system32\drivers\CVPNDRVA.sys (Cisco Systems, Inc.)
DRV - (s24trans)—C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (smihlp) SMI Helper Driver (smihlp)—C:\Programmer\Fælles filer\ThinkVantage Fingerprint Software\Drivers\smihlp.sys (UPEK Inc.)
DRV - (nmwcd)—C:\WINDOWS\system32\drivers\nmwcd.sys (Nokia)
DRV - (nmwcdcm)—C:\WINDOWS\system32\drivers\nmwcdcm.sys (Nokia)
DRV - (nmwcdcj)—C:\WINDOWS\system32\drivers\nmwcdcj.sys (Nokia)
DRV - (nmwcdc)—C:\WINDOWS\system32\drivers\nmwcdc.sys (Nokia)
DRV - (DNE)—C:\WINDOWS\system32\drivers\dne2000.sys (Deterministic Networks, Inc.)
DRV - (CVirtA)—C:\WINDOWS\system32\drivers\CVirtA.sys (Cisco Systems, Inc.)
DRV - (HSF_DPV)—C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL)—C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf)—C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (WIBUKEY)—C:\WINDOWS\system32\drivers\WibuKey.sys (WIBU-SYSTEMS AG)
DRV - (tmtdi)—C:\WINDOWS\system32\drivers\tmtdi.sys (Trend Micro Incorporated.)
DRV - (Wibukey2)—C:\WINDOWS\system32\drivers\Wibukey2.sys (WIBU-SYSTEMS AG)
DRV - (PROCDD)—C:\WINDOWS\system32\drivers\PROCDD.SYS (Lenovo Group Limited)
DRV - (PDIHWCTL)—C:\WINDOWS\system32\drivers\pdihwctl.sys (Portrait Displays, Inc.)
DRV - (DLAUDFAM)—C:\WINDOWS\system32\DLA\DLAUDFAM.SYS (Sonic Solutions)
DRV - (DLAUDF_M)—C:\WINDOWS\system32\DLA\DLAUDF_M.SYS (Sonic Solutions)
DRV - (DLAIFS_M)—C:\WINDOWS\system32\DLA\DLAIFS_M.SYS (Sonic Solutions)
DRV - (DLABOIOM)—C:\WINDOWS\system32\DLA\DLABOIOM.SYS (Sonic Solutions)
DRV - (DLAOPIOM)—C:\WINDOWS\system32\DLA\DLAOPIOM.SYS (Sonic Solutions)
DRV - (DLAPoolM)—C:\WINDOWS\system32\DLA\DLAPoolM.SYS (Sonic Solutions)
DRV - (DLADResN)—C:\WINDOWS\system32\DLA\DLADResN.SYS (Sonic Solutions)
DRV - (DLACDBHM)—C:\WINDOWS\system32\drivers\DLACDBHM.SYS (Sonic Solutions)
DRV - (DLARTL_N)—C:\WINDOWS\system32\drivers\DLARTL_N.SYS (Sonic Solutions)
DRV - (vsdatant)—C:\WINDOWS\system32\vsdatant.sys (Zone Labs LLC)
DRV - (i1)—C:\WINDOWS\system32\drivers\i1.sys (GretagMacbeth)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ing.dk/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: “ing.dk”

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programmer\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programmer\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Programmer\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programmer\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Programmer\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programmer\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programmer\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Programmer\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: c:\Programmer\Sony\Media Go\npmediago.dll (Sony Creative Software Inc)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programmer\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programmer\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Programmer\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Programmer\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programmer\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Programmer\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Programmer\Mozilla Firefox\components [2011-11-28 10:13:52 | 000,000,000 |—-D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Programmer\Mozilla Firefox\plugins

[2011-11-28 10:13:58 | 000,000,000 |—-D | M] (No name found)—C:\Documents and Settings\mak\Application Data\Mozilla\Extensions
[2011-11-28 10:13:52 | 000,000,000 |—-D | M] (No name found)—C:\Programmer\Mozilla Firefox\extensions
[2011-11-21 05:19:37 | 000,134,104 |——| M] (Mozilla Foundation)—C:\Programmer\mozilla firefox\components\browsercomps.dll
[2011-11-21 02:56:15 | 000,001,525 |——| M] ()—C:\Programmer\mozilla firefox\searchplugins\amazon-co-uk.xml
[2011-11-21 02:08:07 | 000,002,252 |——| M] ()—C:\Programmer\mozilla firefox\searchplugins\bing.xml
[2011-11-21 02:56:15 | 000,001,178 |——| M] ()—C:\Programmer\mozilla firefox\searchplugins\wikipedia-da.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie;={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl;={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Programmer\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programmer\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programmer\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programmer\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programmer\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programmer\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programmer\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Programmer\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Programmer\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Programmer\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Programmer\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Programmer\Microsoft Silverlight\4.0.60310.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Programmer\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programmer\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Programmer\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programmer\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programmer\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programmer\Windows Media Player\npwmsdrm.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Programmer\DivX\DivX Player\npDivxPlayerPlugin.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Programmer\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Programmer\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Google Update (Enabled) = C:\Programmer\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: Picasa (Enabled) = C:\Programmer\Picasa2\npPicasa3.dll
CHR - plugin: Unity Player (Enabled) = C:\Programmer\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Yahoo! activeX Plug-in Bridge (Enabled) = C:\Programmer\Yahoo!\Common\npyaxmpb.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Programmer\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Media Go Detector (Enabled) = c:\Programmer\Sony\Media Go\npmediago.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin

O1 HOSTS File: ([2009-09-14 07:25:31 | 000,000,716 |——| M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1   localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\DLA\DLASHX_W.DLL (Sonic Solutions)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmer\Google\GoogleToolbarNotifier\5.7.7018.1622\swg.dll (Google Inc.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Programmer\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Programmer\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe ARM] C:\Programmer\Fælles filer\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe_ID0ENQBO] C:\Programmer\Fælles filer\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Programmer\Fælles filer\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AwaySch] C:\Programmer\Lenovo\AwayTask\AwaySch.EXE (Lenovo Group Limited)
O4 - HKLM..\Run: [CapaInstaller Info Center] C:\Programmer\CapaInstaller\Client\Util\CapaInstaller InfoCenter.exe (CapaSystems A/S)
O4 - HKLM..\Run: [DiskeeperSystray] C:\Programmer\Diskeeper Corporation\Diskeeper\DkIcon.exe (Diskeeper Corporation)
O4 - HKLM..\Run: [DLA] C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
O4 - HKLM..\Run: [GuardAgentGui] C:\Programmer\Premitech\Performance Guard Agent\GUARDagent.exe (PremiTech A/S)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Programmer\Fælles filer\Installshield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Programmer\Fælles filer\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [Message Center Plus] C:\Programmer\LENOVO\Message Center Plus\MCPLaunch.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [OfficeScanNT Monitor] C:\Programmer\Trend Micro\OfficeScan Client\pccntmon.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [PCSuiteTrayApplication] C:\Programmer\Nokia\Nokia PC Suite 6\LaunchApplication.exe (Nokia)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programmer\Fælles filer\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TPFNF7] C:\Programmer\Lenovo\NPDIRECT\TPFNF7SP.exe (Lenovo Group Limited)
O4 - HKLM..\Run: [TPHOTKEY] C:\Programmer\Lenovo\HOTKEY\TPOSDSVC.exe (Lenovo Group Limited)
O4 - HKLM..\Run: [TVT Scheduler Proxy] C:\Programmer\Fælles filer\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited)
O4 - HKCU..\Run: [AdobeBridge] C:\Programmer\Adobe\Adobe Bridge CS4\Bridge.exe (Adobe Systems, Inc.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe File not found
O4 - Startup: C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\Adobe Gamma.lnk = C:\Programmer\Fælles filer\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\Secunia PSI Tray.lnk = C:\Programmer\Secunia\PSI\psi_tray.exe (Secunia)
O4 - Startup: C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\VPN Client.lnk = C:\WINDOWS\Installer\{CCBAA1F7-E5E1-48B2-9ED9-A79C6A37CE78}\Icon3E5562ED7.ico ()
O4 - Startup: C:\Documents and Settings\mak\Menuen Start\Programmer\Start\Dropbox.lnk = C:\Documents and Settings\mak\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver; - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Programmer\Fælles filer\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Send til &Bluetooth;-enhed… - C:\Programmer\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programmer\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} http://downol.dr.dk/download/netradio/Rawflow.cab (Rawflow ICD Client)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} http://www.ipix.com/viewers/ipixx.cab (iPIX ActiveX Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Programmer\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} http://www.geograf.com/viewer/mgaxctrl.cab (Autodesk MapGuide ActiveX Control)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E55FD215-A32E-43FE-A777-A7E8F165F557} http://92.51.137.94/objects/NpFv501.dll (Flatcast Viewer 5.0)
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} http://fotomail.billedbutikken.dk/upload/xupload/XUpload2101.ocx (Persits Software XUpload)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.17.0.26 172.17.0.27
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ing.loc
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5C1B65D7-88E1-4F61-9FE0-B959FC89C299}: DhcpNameServer = 89.150.129.4 89.150.129.10
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D18DADAD-3A68-4B36-A0C5-438F6B615C42}: DhcpNameServer = 172.17.0.26 172.17.0.27
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmer\Fælles filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmer\Fælles filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmer\Fælles filer\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programmer\Fælles filer\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programmer\Fælles filer\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (vrlogon.dll) -C:\WINDOWS\System32\vrlogon.dll (UPEK Inc.)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Programmer\SUPERAntiSpyware\SASWINLO.dll) -  File not found
O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) -  File not found
O20 - Winlogon\Notify\psfus: DllName - (C:\WINDOWS\system32\psqlpwd.dll) - C:\WINDOWS\system32\psqlpwd.dll (UPEK Inc.)
O20 - Winlogon\Notify\tpfnf2: DllName - (C:\Programmer\Lenovo\HOTKEY\notifyf2.dll) - C:\Programmer\Lenovo\HOTKEY\notifyf2.dll ()
O20 - Winlogon\Notify\tphotkey: DllName - (C:\Programmer\Lenovo\HOTKEY\tphklock.dll) - C:\Programmer\Lenovo\HOTKEY\tphklock.dll ()
O24 - Desktop Components:0 (Min aktuelle startside) - About:Home
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Programmer\SUPERAntiSpyware\SASSEH.DLL File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-02-17 21:50:54 | 000,000,000 |——| M] () - C:\AUTOEXEC.BAT—[ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open]—“%1” %*
O35 - HKLM\..exefile [open]—“%1” %*
O37 - HKLM\...com [@ = comfile]—“%1” %*
O37 - HKLM\...exe [@ = exefile]—“%1” %*

========== Files/Folders - Created Within 30 Days ==========

[2011-12-02 09:28:36 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Adobe SVG Viewer
[2011-12-02 09:28:26 | 000,060,416 |——| C] (NirSoft)—C:\WINDOWS\NIRCMD.exe
[2011-12-02 09:28:24 | 000,518,144 |——| C] (SteelWerX)—C:\WINDOWS\SWREG.exe
[2011-12-02 09:28:24 | 000,406,528 |——| C] (SteelWerX)—C:\WINDOWS\SWSC.exe
[2011-12-02 09:28:24 | 000,212,480 |——| C] (SteelWerX)—C:\WINDOWS\SWXCACLS.exe
[2011-12-02 09:25:49 | 000,000,000 |—SD | C]—C:\ComboFix
[2011-12-02 09:17:54 | 000,000,000 |—-D | C]—C:\WINDOWS\ERDNT
[2011-12-01 16:45:22 | 000,000,000 |—-D | C]—C:\Qoobox
[2011-12-01 16:44:57 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Dokumenter\Videoer
[2011-12-01 16:44:57 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Menuen Start\Programmer\Administration
[2011-11-28 14:55:00 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\saxotech
[2011-11-28 10:14:14 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\Hentede filer
[2011-11-28 10:13:56 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Mozilla
[2011-11-28 10:13:56 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Mozilla
[2011-11-28 10:13:49 | 000,000,000 |—-D | C]—C:\Programmer\Mozilla Firefox
[2011-11-26 00:17:42 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Secunia PSI
[2011-11-26 00:17:24 | 000,000,000 |—-D | C]—C:\Programmer\Secunia
[2011-11-25 22:13:59 | 000,000,000 |—-D | C]—C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2011-11-25 19:14:29 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Malwarebytes
[2011-11-25 19:14:21 | 000,000,000 |—-D | C]—C:\Documents and Settings\All Users\Menuen Start\Programmer\Malwarebytes’ Anti-Malware
[2011-11-25 19:14:18 | 000,038,224 |——| C] (Malwarebytes Corporation)—C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011-11-25 19:14:17 | 000,000,000 |—-D | C]—C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011-11-25 19:14:16 | 000,020,952 |——| C] (Malwarebytes Corporation)—C:\WINDOWS\System32\drivers\mbam.sys
[2011-11-25 19:14:16 | 000,000,000 |—-D | C]—C:\Programmer\Malwarebytes’ Anti-Malware
[2011-11-25 17:46:58 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord\SWF
[2011-11-25 17:22:50 | 000,000,000 |—-D | C]—C:\Programmer\ESET
[2011-11-25 15:16:08 | 000,000,000 | RH-D | C]—C:\Documents and Settings\mak\Recent
[2011-11-25 14:28:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\Martins div
[2011-11-24 16:41:03 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord\Fukushima Året Rundt
[2011-11-24 14:21:28 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\Jobsøgning
[2011-11-24 14:14:50 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\Graceland
[2011-11-24 14:08:23 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\Adgangskoder
[2011-11-24 14:05:17 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Dokumenter\Dropbox
[2011-11-24 14:02:46 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\Drengestreger
[2011-11-24 13:58:02 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Menuen Start\Programmer\Dropbox
[2011-11-24 13:57:28 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Dropbox
[2011-11-24 13:45:51 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord\Mars Curiosity
[2011-11-24 12:35:47 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Poser 7
[2011-11-24 12:16:19 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\WinRAR
[2011-11-24 00:23:12 | 000,000,000 |—-D | C]—C:\Documents and Settings\All Users\Menuen Start\Programmer\Google Earth
[2011-11-23 12:03:17 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord\Backup
[2011-11-23 12:01:48 | 000,000,000 |—-D | C]—C:\Backup crash
[2011-11-23 11:03:15 | 000,000,000 |—-D | C]—C:\Documents and Settings\All Users\Menuen Start\Programmer\Recuva
[2011-11-23 11:03:14 | 000,000,000 |—-D | C]—C:\Programmer\Recuva
[2011-11-23 11:03:08 | 000,000,000 |—-D | C]—C:\Documents and Settings\All Users\Menuen Start\Programmer\Google Chrome
[2011-11-23 09:26:39 | 000,000,000 |—-D | C]—C:\Programmer\DiskInternals
[2011-11-23 09:25:24 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\Installationsfiler
[2011-11-22 15:57:00 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Auslogics
[2011-11-22 15:56:22 | 000,000,000 |—-D | C]—C:\Documents and Settings\All Users\Menuen Start\Programmer\Auslogics
[2011-11-22 15:56:21 | 000,000,000 |—-D | C]—C:\Programmer\Auslogics
[2011-11-22 15:53:53 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Google
[2011-11-22 15:53:53 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Google
[2011-11-22 15:38:58 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord\Storstroemsbroen
[2011-11-22 15:38:58 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord\PureBilge rensefilter
[2011-11-22 15:37:38 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord\Hjemmearbejde
[2011-11-22 15:37:37 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord\Grafikker til kilder
[2011-11-22 15:37:28 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord\Grafik GIF’er
[2011-11-22 15:30:12 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Sun
[2011-11-22 15:25:53 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Autodesk
[2011-11-22 15:25:53 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\3dsmax
[2011-11-22 15:25:48 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Autodesk
[2011-11-22 15:25:04 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Apple Computer
[2011-11-22 15:25:03 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Apple Computer
[2011-11-22 15:24:52 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\PC Suite
[2011-11-22 15:24:33 | 000,000,000 | -HSD | C]—C:\Documents and Settings\mak\PrivacIE
[2011-11-22 15:23:31 | 000,000,000 | -HSD | C]—C:\Documents and Settings\mak\IETldCache
[2011-11-22 15:23:16 | 000,000,000 |—SD | C]—C:\Documents and Settings\mak\Application Data\Microsoft
[2011-11-22 15:23:16 | 000,000,000 | RH-D | C]—C:\Documents and Settings\mak\SendTo
[2011-11-22 15:23:16 | 000,000,000 | RH-D | C]—C:\Documents and Settings\mak\Application Data
[2011-11-22 15:23:16 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Menuen Start\Programmer\Tilbehør
[2011-11-22 15:23:16 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Menuen Start\Programmer\Start
[2011-11-22 15:23:16 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Dokumenter\Musik
[2011-11-22 15:23:16 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Menuen Start
[2011-11-22 15:23:16 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Foretrukne
[2011-11-22 15:23:16 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Dokumenter
[2011-11-22 15:23:16 | 000,000,000 | R—D | C]—C:\Documents and Settings\mak\Dokumenter\Billeder
[2011-11-22 15:23:16 | 000,000,000 | -HSD | C]—C:\Documents and Settings\mak\Cookies
[2011-11-22 15:23:16 | 000,000,000 | -H-D | C]—C:\Documents and Settings\mak\Skabeloner
[2011-11-22 15:23:16 | 000,000,000 | -H-D | C]—C:\Documents and Settings\mak\Printere
[2011-11-22 15:23:16 | 000,000,000 | -H-D | C]—C:\Documents and Settings\mak\Lokale indstillinger
[2011-11-22 15:23:16 | 000,000,000 | -H-D | C]—C:\Documents and Settings\mak\Andre computere
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Skrivebord
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Seven Zip
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Microsoft Help
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Microsoft
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Macromedia
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Lenovo
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\InstallShield
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Identities
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\Bluetooth udvekslingsmappe
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Bluetooth Software
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\ApplicationHistory
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\Adobe
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Application Data\Adobe
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Dokumenter\Access Connections
[2011-11-22 15:23:16 | 000,000,000 |—-D | C]—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150060}
[2011-11-22 13:43:47 | 000,000,000 |—-D | C]—C:\WINDOWS\Prefetch
[2007-11-26 18:49:02 | 000,167,936 |——| C] ( )—C:\WINDOWS\System32\rsnp2uvc.dll
[2007-11-26 18:49:02 | 000,053,248 |——| C] ( )—C:\WINDOWS\System32\csnp2uvc.dll
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011-12-02 15:32:23 | 000,000,410 | -H—| M] ()—C:\WINDOWS\tasks\User_Feed_Synchronization-{2E2ADC8F-16B3-46FD-B9F6-95C569D785E5}.job
[2011-12-02 15:21:01 | 000,000,908 |——| M] ()—C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011-12-02 13:10:01 | 000,000,856 |——| M] ()—C:\WINDOWS\tasks\Google Software Updater.job
[2011-12-02 13:05:45 | 002,678,501 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\mand.3ds
[2011-12-02 13:05:28 | 003,921,482 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\Untitled.pz3
[2011-12-02 09:43:07 | 000,002,429 |——| M] ()—C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\VPN Client.lnk
[2011-12-02 09:41:54 | 000,001,170 |——| M] ()—C:\WINDOWS\System32\wpa.dbl
[2011-12-02 09:41:50 | 000,025,263 |——| M] ()—C:\WINDOWS\System32\PROCDB.INI
[2011-12-02 09:41:47 | 000,000,904 |——| M] ()—C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011-12-02 09:41:42 | 000,000,380 |——| M] ()—C:\WINDOWS\System32\IPSCtrl.INI
[2011-12-02 09:40:17 | 000,002,048 |—S- | M] ()—C:\WINDOWS\bootstat.dat
[2011-12-02 09:40:15 | 2128,896,000 | -HS- | M] ()—C:\hiberfil.sys
[2011-11-28 10:13:53 | 000,000,728 |——| M] ()—C:\Documents and Settings\mak\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011-11-28 10:13:53 | 000,000,710 |——| M] ()—C:\Documents and Settings\All Users\Skrivebord\Mozilla Firefox.lnk
[2011-11-28 09:42:02 | 000,000,278 |——| M] ()—C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011-11-28 09:13:54 | 000,000,252 |——| M] ()—C:\WINDOWS\SAXoPRESS.ini
[2011-11-26 00:17:33 | 000,000,739 |——| M] ()—C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\Secunia PSI Tray.lnk
[2011-11-25 19:14:22 | 000,000,688 |——| M] ()—C:\Documents and Settings\All Users\Skrivebord\Malwarebytes’ Anti-Malware.lnk
[2011-11-25 19:10:38 | 002,418,784 |——| M] ()—C:\WINDOWS\System32\FNTCACHE.DAT
[2011-11-25 16:13:00 | 000,000,664 |——| M] ()—C:\WINDOWS\System32\d3d9caps.dat
[2011-11-25 15:17:36 | 000,078,202 |——| M] ()—C:\Documents and Settings\mak\Dokumenter\cc_20111125_151727.reg
[2011-11-25 15:14:10 | 000,000,668 |——| M] ()—C:\Documents and Settings\All Users\Skrivebord\CCleaner.lnk
[2011-11-25 14:24:54 | 000,000,784 |——| M] ()—C:\Documents and Settings\mak\Application Data\Microsoft\Internet Explorer\Quick Launch\Start Microsoft Office Outlook.lnk
[2011-11-25 13:37:37 | 000,460,028 |——| M] ()—C:\WINDOWS\System32\perfh006.dat
[2011-11-25 13:37:37 | 000,444,822 |——| M] ()—C:\WINDOWS\System32\perfh009.dat
[2011-11-25 13:37:37 | 000,084,142 |——| M] ()—C:\WINDOWS\System32\perfc006.dat
[2011-11-25 13:37:37 | 000,072,698 |——| M] ()—C:\WINDOWS\System32\perfc009.dat
[2011-11-25 12:31:25 | 030,619,283 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Fukushima.ai
[2011-11-24 14:32:23 | 000,214,528 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\2011.01.24_ING_FLASH_TEMPLATE.fla
[2011-11-24 13:58:18 | 000,000,993 |——| M] ()—C:\Documents and Settings\mak\Menuen Start\Programmer\Start\Dropbox.lnk
[2011-11-24 12:15:57 | 000,000,619 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\Genvej (2) til Martin.lnk
[2011-11-24 11:59:28 | 002,028,286 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Atomkraft i Europa.ai
[2011-11-24 00:23:12 | 000,001,901 |——| M] ()—C:\Documents and Settings\All Users\Skrivebord\Google Earth.lnk
[2011-11-23 16:22:44 | 005,782,645 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Året Rundt forside KOPI 2.ai
[2011-11-23 15:05:57 | 000,000,012 |——| M] ()—C:\Documents and Settings\mak\intlname.ols
[2011-11-23 11:23:06 | 001,060,183 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Atomkraft nein danke.ai
[2011-11-23 11:03:15 | 000,001,492 |——| M] ()—C:\Documents and Settings\All Users\Skrivebord\Recuva.lnk
[2011-11-23 11:03:08 | 000,001,793 |——| M] ()—C:\Documents and Settings\All Users\Skrivebord\Google Chrome.lnk
[2011-11-23 11:03:08 | 000,001,771 |——| M] ()—C:\Documents and Settings\mak\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011-11-23 09:20:41 | 000,000,376 |——| M] ()—C:\WINDOWS\ODBC.INI
[2011-11-22 15:56:22 | 000,000,885 |——| M] ()—C:\Documents and Settings\All Users\Skrivebord\Auslogics Disk Defrag.lnk
[2011-11-22 15:50:47 | 005,801,510 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Året Rundt forside KOPI.ai
[2011-11-22 15:24:10 | 000,000,807 |——| M] ()—C:\Documents and Settings\mak\Application Data\Microsoft\Internet Explorer\Quick Launch\Start Internet Explorer-browser.lnk
[2011-11-22 15:23:21 | 000,001,386 | RHS- | M] ()—C:\Documents and Settings\mak\ntuser.pol
[2011-11-22 15:17:54 | 000,006,533 | RHS- | M] ()—C:\Documents and Settings\All Users\ntuser.pol
[2011-11-22 15:03:57 | 005,777,428 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Året Rundt forside.ai
[2011-11-16 15:10:33 | 004,382,720 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\N01ING0T181111A11A008.indd
[2011-11-14 16:07:35 | 000,113,161 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\dem.jpg
[2011-11-14 16:03:57 | 000,057,347 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\untitled.jpg
[2011-11-10 13:47:10 | 000,010,836 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\judelawtopbånd.png
[2011-11-10 13:37:53 | 000,007,642 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\topbåndstørrrsle.png
[2011-11-07 16:03:54 | 000,024,597 |——| M] ()—C:\Documents and Settings\mak\Skrivebord\Formanden efter endnu en aften uden Fifa.jpg
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011-12-02 13:05:26 | 003,921,482 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Untitled.pz3
[2011-12-02 13:04:04 | 002,678,501 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\mand.3ds
[2011-12-02 09:28:26 | 000,208,896 |——| C] ()—C:\WINDOWS\MBR.exe
[2011-12-02 09:28:24 | 000,256,000 |——| C] ()—C:\WINDOWS\PEV.exe
[2011-12-02 09:28:24 | 000,098,816 |——| C] ()—C:\WINDOWS\sed.exe
[2011-12-02 09:28:24 | 000,080,412 |——| C] ()—C:\WINDOWS\grep.exe
[2011-12-02 09:28:24 | 000,068,096 |——| C] ()—C:\WINDOWS\zip.exe
[2011-11-28 10:13:53 | 000,000,728 |——| C] ()—C:\Documents and Settings\mak\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011-11-28 10:13:53 | 000,000,710 |——| C] ()—C:\Documents and Settings\All Users\Skrivebord\Mozilla Firefox.lnk
[2011-11-28 10:13:52 | 000,000,716 |——| C] ()—C:\Documents and Settings\All Users\Menuen Start\Programmer\Mozilla Firefox.lnk
[2011-11-26 00:17:33 | 000,000,739 |——| C] ()—C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\Secunia PSI Tray.lnk
[2011-11-26 00:17:33 | 000,000,702 |——| C] ()—C:\Documents and Settings\All Users\Menuen Start\Programmer\Secunia PSI.lnk
[2011-11-25 19:14:22 | 000,000,688 |——| C] ()—C:\Documents and Settings\All Users\Skrivebord\Malwarebytes’ Anti-Malware.lnk
[2011-11-25 15:17:32 | 000,078,202 |——| C] ()—C:\Documents and Settings\mak\Dokumenter\cc_20111125_151727.reg
[2011-11-25 15:14:10 | 000,000,668 |——| C] ()—C:\Documents and Settings\All Users\Skrivebord\CCleaner.lnk
[2011-11-24 16:42:39 | 030,619,283 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Fukushima.ai
[2011-11-24 16:42:39 | 005,777,428 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Året Rundt forside.ai
[2011-11-24 16:42:38 | 002,028,286 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Atomkraft i Europa.ai
[2011-11-24 16:42:38 | 001,060,183 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Atomkraft nein danke.ai
[2011-11-24 16:42:37 | 005,801,510 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Året Rundt forside KOPI.ai
[2011-11-24 16:42:37 | 005,782,645 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\2011.12.16 Året Rundt forside KOPI 2.ai
[2011-11-24 14:32:22 | 000,214,528 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\2011.01.24_ING_FLASH_TEMPLATE.fla
[2011-11-24 13:58:18 | 000,000,993 |——| C] ()—C:\Documents and Settings\mak\Menuen Start\Programmer\Start\Dropbox.lnk
[2011-11-24 00:23:12 | 000,001,901 |——| C] ()—C:\Documents and Settings\All Users\Skrivebord\Google Earth.lnk
[2011-11-23 15:05:51 | 000,000,012 |——| C] ()—C:\Documents and Settings\mak\intlname.ols
[2011-11-23 13:14:29 | 000,000,784 |——| C] ()—C:\Documents and Settings\mak\Application Data\Microsoft\Internet Explorer\Quick Launch\Start Microsoft Office Outlook.lnk
[2011-11-23 11:03:15 | 000,001,492 |——| C] ()—C:\Documents and Settings\All Users\Skrivebord\Recuva.lnk
[2011-11-23 11:03:08 | 000,001,793 |——| C] ()—C:\Documents and Settings\All Users\Skrivebord\Google Chrome.lnk
[2011-11-23 11:03:08 | 000,001,771 |——| C] ()—C:\Documents and Settings\mak\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011-11-22 15:56:26 | 000,000,885 |——| C] ()—C:\Documents and Settings\All Users\Skrivebord\Auslogics Disk Defrag.lnk
[2011-11-22 15:39:08 | 000,113,161 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\dem.jpg
[2011-11-22 15:39:08 | 000,026,819 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\24573062-9a327662b76bc4b0b21bb1b0acf31d2f.jpg
[2011-11-22 15:39:08 | 000,024,597 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Formanden efter endnu en aften uden Fifa.jpg
[2011-11-22 15:39:08 | 000,023,258 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\abe.jpg
[2011-11-22 15:39:08 | 000,001,206 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej til Grafik.lnk
[2011-11-22 15:39:08 | 000,000,993 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Dropbox.lnk
[2011-11-22 15:39:08 | 000,000,619 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej (2) til Martin.lnk
[2011-11-22 15:39:08 | 000,000,530 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej (2) til ing CF input.lnk
[2011-11-22 15:39:08 | 000,000,519 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej til 2010.lnk
[2011-11-22 15:39:08 | 000,000,430 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej (2) til Netgrafik.lnk
[2011-11-22 15:37:24 | 004,382,720 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\N01ING0T181111A11A008.indd
[2011-11-22 15:37:24 | 002,403,981 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\spænding i Europa.psd
[2011-11-22 15:37:24 | 001,731,919 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\PICT9930.JPG
[2011-11-22 15:37:24 | 000,585,770 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Rapport IC4-IC2[2].pdf
[2011-11-22 15:37:24 | 000,198,474 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Neoterm-gulvarmeanlæg.jpg
[2011-11-22 15:37:24 | 000,057,347 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\untitled.jpg
[2011-11-22 15:37:24 | 000,048,521 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\spænding-i-Europa.jpg
[2011-11-22 15:37:24 | 000,010,836 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\judelawtopbånd.png
[2011-11-22 15:37:24 | 000,007,642 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\topbåndstørrrsle.png
[2011-11-22 15:37:24 | 000,001,662 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\SAXoPRESS.lnk
[2011-11-22 15:37:24 | 000,000,665 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\VPN til ING.pcf
[2011-11-22 15:37:24 | 000,000,530 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej til ing CF input.lnk
[2011-11-22 15:37:24 | 000,000,445 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej til Ingeniøren.lnk
[2011-11-22 15:37:24 | 000,000,430 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej til Netgrafik.lnk
[2011-11-22 15:37:24 | 000,000,425 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej til MARSTRAND.lnk
[2011-11-22 15:37:24 | 000,000,354 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej til Martin.lnk
[2011-11-22 15:37:24 | 000,000,290 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Genvej til MaK$ på ‘Fil server (ing03)’ (P).lnk
[2011-11-22 15:24:10 | 000,000,795 |——| C] ()—C:\Documents and Settings\mak\Menuen Start\Programmer\Internet Explorer.lnk
[2011-11-22 15:23:50 | 000,000,780 |——| C] ()—C:\Documents and Settings\mak\Menuen Start\Programmer\Windows Media Player.lnk
[2011-11-22 15:23:50 | 000,000,774 |——| C] ()—C:\Documents and Settings\mak\Skrivebord\Windows Media Player.lnk
[2011-11-22 15:23:21 | 000,001,386 | RHS- | C] ()—C:\Documents and Settings\mak\ntuser.pol
[2011-11-22 15:23:18 | 000,000,807 |——| C] ()—C:\Documents and Settings\mak\Application Data\Microsoft\Internet Explorer\Quick Launch\Start Internet Explorer-browser.lnk
[2011-11-22 15:23:18 | 000,000,079 |——| C] ()—C:\Documents and Settings\mak\Application Data\Microsoft\Internet Explorer\Quick Launch\Vis skrivebord.scf
[2011-11-22 15:23:17 | 000,001,600 |——| C] ()—C:\Documents and Settings\mak\Menuen Start\Programmer\Fjernsupport.lnk
[2011-11-22 15:23:17 | 000,000,730 |——| C] ()—C:\Documents and Settings\mak\Menuen Start\Programmer\Outlook Express.lnk
[2011-11-22 15:23:17 | 000,000,142 |——| C] ()—C:\Documents and Settings\mak\Lokale indstillinger\Application Data\fusioncache.dat
[2011-11-22 13:43:25 | 2128,896,000 | -HS- | C] ()—C:\hiberfil.sys
[2011-02-22 09:33:36 | 000,000,000 |——| C] ()—C:\WINDOWS\eDrawingOfficeAutomator.INI
[2010-10-31 20:05:45 | 000,000,664 |——| C] ()—C:\WINDOWS\System32\d3d9caps.dat
[2010-10-04 15:45:34 | 000,508,704 |——| C] ()—C:\Documents and Settings\LocalService\Lokale indstillinger\Application Data\FontCache3.0.0.0.dat
[2010-08-19 12:31:35 | 000,000,112 |——| C] ()—C:\WINDOWS\ActiveSkin.INI
[2010-05-14 10:25:09 | 000,000,037 |——| C] ()—C:\WINDOWS\ipixActivex.ini
[2009-11-27 21:06:26 | 000,084,364 | -H—| C] ()—C:\WINDOWS\System32\mlfcache.dat
[2009-01-09 14:11:36 | 000,000,209 |——| C] ()—C:\WINDOWS\FASTYPE60.INI
[2008-11-11 14:07:55 | 000,057,552 |——| C] ()—C:\WINDOWS\System32\WkDos.exe
[2008-11-10 11:13:20 | 000,044,344 |——| C] ()—C:\WINDOWS\System32\drivers\EyeOneDp.sys
[2008-11-03 11:07:10 | 000,016,384 |——| C] ()—C:\WINDOWS\System32\FileOps.exe
[2008-11-03 10:47:42 | 000,001,694 |——| C] ()—C:\Programmer\Adobe Help Center.lnk
[2008-10-31 09:25:41 | 000,000,159 |——| C] ()—C:\WINDOWS\hpbafd.ini
[2008-10-27 13:57:20 | 000,000,376 |——| C] ()—C:\WINDOWS\ODBC.INI
[2008-10-27 13:38:00 | 000,012,352 |——| C] ()—C:\WINDOWS\System32\cistub.dat
[2008-10-27 13:09:29 | 000,012,656 |——| C] ()—C:\WINDOWS\cfgall.ini
[2008-07-24 09:42:40 | 001,626,112 |——| C] ()—C:\WINDOWS\System32\nwiz.exe
[2008-07-24 09:42:03 | 001,019,904 |——| C] ()—C:\WINDOWS\System32\nvwimg.dll
[2008-07-24 09:42:02 | 001,703,936 |——| C] ()—C:\WINDOWS\System32\nvwdmcpl.dll
[2008-07-24 09:41:19 | 000,466,944 |——| C] ()—C:\WINDOWS\System32\nvshell.dll
[2008-07-24 09:40:03 | 001,478,656 |——| C] ()—C:\WINDOWS\System32\nview.dll
[2008-07-24 09:39:51 | 001,339,392 |——| C] ()—C:\WINDOWS\System32\nvdspsch.exe
[2008-07-24 09:37:57 | 000,442,368 |——| C] ()—C:\WINDOWS\System32\nvappbar.exe
[2008-07-24 09:37:15 | 000,425,984 |——| C] ()—C:\WINDOWS\System32\keystone.exe
[2007-11-26 19:33:34 | 000,000,061 |——| C] ()—C:\WINDOWS\smscfg.ini
[2007-11-26 19:06:30 | 000,114,688 |——| C] ()—C:\WINDOWS\desktopset.exe
[2007-11-26 19:01:15 | 000,000,126 |——| C] ()—C:\WINDOWS\wininit.ini
[2007-11-26 18:59:30 | 000,204,800 |——| C] ()—C:\WINDOWS\System32\IVIresizeW7.dll
[2007-11-26 18:59:30 | 000,200,704 |——| C] ()—C:\WINDOWS\System32\IVIresizeA6.dll
[2007-11-26 18:59:30 | 000,192,512 |——| C] ()—C:\WINDOWS\System32\IVIresizeP6.dll
[2007-11-26 18:59:30 | 000,192,512 |——| C] ()—C:\WINDOWS\System32\IVIresizeM6.dll
[2007-11-26 18:59:30 | 000,188,416 |——| C] ()—C:\WINDOWS\System32\IVIresizePX.dll
[2007-11-26 18:59:30 | 000,020,480 |——| C] ()—C:\WINDOWS\System32\IVIresize.dll
[2007-11-26 18:49:03 | 000,015,497 |——| C] ()—C:\WINDOWS\snp2uvc.ini
[2007-11-26 18:49:02 | 009,598,080 |——| C] ()—C:\WINDOWS\System32\drivers\snp2uvc.sys
[2007-11-26 18:42:38 | 000,000,138 |——| C] ()—C:\WINDOWS\System32\Softkbd.exe.config
[2007-07-27 07:37:40 | 000,025,263 |——| C] ()—C:\WINDOWS\System32\PROCDB.INI
[2007-07-27 07:37:29 | 000,000,380 |——| C] ()—C:\WINDOWS\System32\IPSCtrl.INI
[2007-04-03 16:18:26 | 000,197,672 |——| C] ()—C:\WINDOWS\System32\vpnapi.dll
[2007-04-03 16:18:06 | 000,193,576 |——| C] ()—C:\WINDOWS\System32\CSGina.dll
[2007-03-29 23:00:40 | 000,203,264 | R—- | C] ()—C:\WINDOWS\System32\CddbCdda.dll
[2007-01-16 16:12:12 | 000,000,000 |——| C] ()—C:\WINDOWS\System32\px.ini
[2006-09-05 14:20:36 | 000,079,400 |——| C] ()—C:\WINDOWS\System32\DEVMAN.DLL
[2006-02-18 06:56:02 | 000,002,154 |——| C] ()—C:\WINDOWS\System32\OEMINFO.INI
[2006-02-18 05:32:29 | 000,460,028 |——| C] ()—C:\WINDOWS\System32\perfh006.dat
[2006-02-18 05:32:29 | 000,284,912 |——| C] ()—C:\WINDOWS\System32\perfi006.dat
[2006-02-18 05:32:29 | 000,084,142 |——| C] ()—C:\WINDOWS\System32\perfc006.dat
[2006-02-18 05:32:29 | 000,034,026 |——| C] ()—C:\WINDOWS\System32\perfd006.dat
[2006-02-18 05:32:09 | 000,004,569 |——| C] ()—C:\WINDOWS\System32\secupd.dat
[2006-02-18 05:32:05 | 000,444,822 |——| C] ()—C:\WINDOWS\System32\perfh009.dat
[2006-02-18 05:32:05 | 000,272,128 |——| C] ()—C:\WINDOWS\System32\perfi009.dat
[2006-02-18 05:32:05 | 000,072,698 |——| C] ()—C:\WINDOWS\System32\perfc009.dat
[2006-02-18 05:32:05 | 000,028,626 |——| C] ()—C:\WINDOWS\System32\perfd009.dat
[2006-02-18 05:32:04 | 000,004,547 |——| C] ()—C:\WINDOWS\System32\oembios.dat
[2006-02-18 05:32:02 | 013,107,200 |——| C] ()—C:\WINDOWS\System32\oembios.bin
[2006-02-18 05:32:00 | 000,000,741 |——| C] ()—C:\WINDOWS\System32\noise.dat
[2006-02-18 05:31:53 | 000,673,088 |——| C] ()—C:\WINDOWS\System32\mlang.dat
[2006-02-18 05:31:53 | 000,046,258 |——| C] ()—C:\WINDOWS\System32\mib.bin
[2006-02-18 05:31:46 | 000,218,003 |——| C] ()—C:\WINDOWS\System32\dssec.dat
[2006-02-18 05:31:38 | 000,001,804 |——| C] ()—C:\WINDOWS\System32\dcache.bin
[2006-02-17 22:40:33 | 000,004,161 |——| C] ()—C:\WINDOWS\ODBCINST.INI
[2006-02-17 22:39:33 | 002,418,784 |——| C] ()—C:\WINDOWS\System32\FNTCACHE.DAT
[2006-02-17 21:57:22 | 000,002,048 |—S- | C] ()—C:\WINDOWS\bootstat.dat
[2006-02-17 21:47:16 | 000,021,644 |——| C] ()—C:\WINDOWS\System32\emptyregdb.dat
[2004-04-16 14:32:38 | 000,000,252 |——| C] ()—C:\WINDOWS\SAXoPRESS.ini
[2003-04-07 12:18:40 | 000,005,464 |——| C] ()—C:\WINDOWS\System32\OUTLPERF.INI
[1999-01-22 18:46:58 | 000,065,536 |——| C] ()—C:\WINDOWS\System32\MSRTEDIT.DLL

========== LOP Check ==========

[2011-11-22 12:40:18 | 000,0