OBS! Har renset med CCleaner også
Systen: Win 7 32bit

Sorry.. Jeg er en utålmodig mand, så jeg tog altså chancen og kørte Combofix.

Det ser ud til forbindelsen virker igen.. Vil dog lige teste resten af dagen.
Sig til hvis i vil se en log

Longhorn - 28.05.2012 14:53:15

Sorry.. Jeg er en utålmodig mand, så jeg tog altså chancen og kørte Combofix.

Nu får jeg på puklen, men ved du selv hvad du laver

Nej jeg famler i blinde

Er ellers ikke helt nybegynder.. Men lige det her gav mig grå hår og fik mig til at tage chancer.

BTW Selvom Combofix hjalp lidt synes jeg ikke helt den er 100% i orden.

Så lykkes det at hente DDS.. Vil nogen være søde at tjekke den? 

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by Longhorn at 13:56:47 on 2012-05-29
Microsoft Windows 7 Professional   6.1.7600.1.1252.45.1030.18.8190.7072 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\NetCutDefender\services\AIPS.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\AMD\OverDrive\AODAssist.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\System32\digi96.exe
C:\Windows\V0690Mon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Users\Longhorn\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Windows\system32\sppsvc.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT3072253
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\programdata\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GR469A~1.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [AdobeAAMUpdater-1.0] “c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe”
mRun: [SwitchBoard] c:\program files\common files\adobe\switchboard\SwitchBoard.exe
mRun: [AdobeCS5.5ServiceManager] “c:\program files\common files\adobe\cs5.5servicemanager\CS5.5ServiceManager.exe” -launchedbylogin
mRun: [avast] “c:\program files\avast software\avast\avastUI.exe” /nogui
mRun: [RMETray] digi96.exe
mRun: [V0690Mon.exe] c:\windows\V0690Mon.exe
mRun: [Adobe ARM] “c:\program files\common files\adobe\arm\1.0\AdobeARM.exe”
mRun: [SunJavaUpdateSched] “c:\program files\common files\java\java update\jusched.exe”
mRun: [GrooveMonitor] “c:\program files\microsoft office\office12\GrooveMonitor.exe”
mRun: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
StartupFolder: c:\users\longhorn\appdata\roaming\micros~1\windows\startm~1\programs\startup\dropbox.lnk - c:\users\longhorn\appdata\roaming\dropbox\bin\Dropbox.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\logoca~1.lnk - c:\program files\gretagmacbeth\i1\eye-one match 3\calibrationloader\CalibrationLoader.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: E&ksporter; til Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Locate Spot on Map by GPS - c:\program files\opanda\iexif 2.3\IExifMap.htm
IE: View Exif/GPS/IPTC with IExif - c:\program files\opanda\iexif 2.3\IExifCom.htm
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {DC6FEBC5-0A2D-458A-A01B-5DB15EEC4305} - hxxp://webc.hipcat.dk/auth/controls/IlosoftImageUpload.dll
TCP: DhcpNameServer = 212.10.10.5 212.10.10.4
TCP: Interfaces\{3E6E6F16-8E88-432A-89FC-A5332F344D2F} : NameServer = 208.67.222.222,208.67.220.220
TCP: Interfaces\{3E6E6F16-8E88-432A-89FC-A5332F344D2F} : DhcpNameServer = 212.10.10.5 212.10.10.4
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GRA32A~1.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GR469A~1.DLL
.
============= SERVICES / DRIVERS ===============
.
R0 RRamdisk;Ramdisk Driver;c:\windows\system32\drivers\rramdisk.sys [2012-5-17 10368]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-2-1 612184]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-2-1 337880]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2011-8-12 116608]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2012-1-3 63928]
R2 AIPS;Arp Intelligent Protection Service;c:\program files\netcutdefender\services\aips.exe [2012-5-28 262144]
R2 AODDriver4.1;AODDriver4.1;c:\program files\amd\overdrive\i386\AODDriver2.sys [2011-10-14 39936]
R2 AODService;AODService;c:\program files\amd\overdrive\AODAssist.exe [2011-10-14 136616]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-2-1 20696]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-2-1 57688]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-3-24 44768]
R2 digi96;RME Digi Audio Device;c:\windows\system32\drivers\digi96.sys [2005-7-21 48768]
R2 PDIHWCTL;PDIHWCTL;c:\windows\system32\drivers\pdihwctl.sys [2012-2-1 14416]
R3 netr28u;Driver til trådløst RT2870 USB LAN-kort til Vista;c:\windows\system32\drivers\netr28u.sys [2009-6-10 657408]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-3-2 139776]
R3 V0690Vid;Creative Live! Cam Socialize HD AF / ZiiCam Driver;c:\windows\system32\drivers\V0690Vid.sys [2011-7-26 322432]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 14336]
S1 cdrblock;cdrblock;c:\windows\system32\drivers\cdrblock.sys [2008-5-30 27704]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-2-29 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-6 257696]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 i1display;i1 Display;c:\windows\system32\drivers\i1display.sys [2012-2-1 44344]
S3 StorSvc;Lagertjeneste;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 SwitchBoard;SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-2-3 52224]
S3 WatAdminSvc;Tjenesten Windows Aktivering;c:\windows\system32\wat\WatAdminSvc.exe [2012-3-4 1343400]
.
=============== Created Last 30 ================
.
2012-05-28 11:45:45   ————  d-sh—w-  C:\$RECYCLE.BIN
2012-05-28 11:44:23   ————  d——-w-  c:\users\longhorn\appdata\local\temp
2012-05-28 11:24:53   98816   ——a-w-  c:\windows\sed.exe
2012-05-28 11:24:53   518144   ——a-w-  c:\windows\SWREG.exe
2012-05-28 11:24:53   256000   ——a-w-  c:\windows\PEV.exe
2012-05-28 11:24:53   208896   ——a-w-  c:\windows\MBR.exe
2012-05-28 11:24:49   ————  d——-w-  C:\ComboFix
2012-05-28 08:33:32   ————  d——-w-  c:\program files\NetCutDefender
2012-05-28 07:51:09   ————  d——-w-  c:\program files\WinPcap
2012-05-28 07:49:46   389120   ——a-w-  c:\windows\system32\actskn43.ocx
2012-05-28 07:49:45   ————  d——-w-  c:\program files\netcut
2012-05-27 20:51:16   ————  d——-w-  c:\users\longhorn\appdata\roaming\QuickScan
2012-05-26 10:08:24   6737808   ——a-w-  c:\programdata\microsoft\windows defender\definition updates\{fe62f183-5256-4145-83ed-1a5cde3af288}\mpengine.dll
2012-05-20 14:09:31   ————  d——-w-  c:\users\longhorn\appdata\local\CRE
2012-05-20 14:09:28   ————  d——-w-  c:\program files\Conduit
2012-05-20 14:09:26   ————  d——-w-  c:\users\longhorn\appdata\local\Conduit
2012-05-17 23:24:30   3948600   ——a-r-  c:\windows\system32\ntkrlStaforce.exe
2012-05-17 21:56:30   10368   ——a-w-  c:\windows\system32\drivers\rramdisk.sys
2012-05-14 14:02:20   936960   ——a-w-  c:\program files\common files\microsoft shared\ink\journal.dll
2012-05-14 14:02:19   1221632   ——a-w-  c:\program files\windows journal\NBDoc.DLL
2012-05-14 14:02:18   989184   ——a-w-  c:\program files\windows journal\JNTFiltr.dll
2012-05-14 14:02:16   969216   ——a-w-  c:\program files\windows journal\JNWDRV.dll
2012-05-14 14:02:05   3968368   ——a-w-  c:\windows\system32\ntkrnlpa.exe
2012-05-14 14:02:04   3913072   ——a-w-  c:\windows\system32\ntoskrnl.exe
2012-05-14 14:02:04   2343424   ——a-w-  c:\windows\system32\win32k.sys
2012-05-14 14:02:01   1291632   ——a-w-  c:\windows\system32\drivers\tcpip.sys
2012-05-14 14:02:00   56176   ——a-w-  c:\windows\system32\drivers\partmgr.sys
2012-05-14 14:01:57   1077248   ——a-w-  c:\windows\system32\DWrite.dll
2012-05-08 11:35:52   ————  d——-w-  c:\program files\common files\Canon
2012-05-07 20:13:18   ————  d——-w-  c:\program files\Opanda
2012-05-06 21:30:47   ————  d——-w-  c:\users\longhorn\appdata\local\Facebook
2012-05-01 00:49:25   ————  d——-w-  c:\windows\pss
2012-04-30 20:11:19   ————  d——-w-  c:\users\longhorn\appdata\roaming\X-Rite
2012-04-30 20:10:11   ————  d——-w-  c:\programdata\X-Rite
2012-04-30 11:08:26   ————  d——-w-  c:\users\longhorn\appdata\roaming\com.adobe.bridge.PublishPanel
.
==================== Find3M ====================
.
2012-05-04 23:55:07   70304   ——a-w-  c:\windows\system32\FlashPlayerCPLApp.cpl
2012-05-04 23:55:07   419488   ——a-w-  c:\windows\system32\FlashPlayerApp.exe
2012-04-04 13:56:40   22344   ——a-w-  c:\windows\system32\drivers\mbam.sys
2012-03-17 03:17:39   499712   ——a-w-  c:\windows\system32\msvcp71.dll
2012-03-17 03:17:39   348160   ——a-w-  c:\windows\system32\msvcr71.dll
2012-03-13 11:53:25   472808   ——a-w-  c:\windows\system32\deployJava1.dll
2012-03-07 00:15:19   41184   ——a-w-  c:\windows\avastSS.scr
2012-03-07 00:03:51   612184   ——a-w-  c:\windows\system32\drivers\aswSnx.sys
2012-03-07 00:02:14   44376   ——a-w-  c:\windows\system32\drivers\aswRdr2.sys
2012-03-07 00:01:48   57688   ——a-w-  c:\windows\system32\drivers\aswMonFlt.sys
2012-03-04 12:12:48   409088   ——a-w-  c:\windows\system32\systemcpl.dll
2012-03-04 12:12:48   13824   ——a-w-  c:\windows\system32\slwga.dll
2012-03-04 12:12:46   811520   ——a-w-  c:\windows\system32\user32.dll
2012-03-01 05:46:57   19824   ——a-w-  c:\windows\system32\drivers\fs_rec.sys
2012-03-01 05:37:41   172544   ——a-w-  c:\windows\system32\wintrust.dll
2012-03-01 05:33:23   159232   ——a-w-  c:\windows\system32\imagehlp.dll
2012-03-01 05:29:16   5120   ——a-w-  c:\windows\system32\wmi.dll
.
============= FINISH: 13:57:54,83 ===============

Download OTL af OldTimer og gem den på dit skrivebord.

Start OTL

Vista og Windows 7 - højreklik på filen - Kør som Administrator.

Når vinduet vises, skal du under Output i toppen skifte til “Minimal Output”.

Øverst sætter du flueben i “Scan All Users”

I nederste højre hjørne af det øverste panel, sæt fluben ved “LOP Check” og “Purity Check”.

I boksen “Custom Scans/Fixes” kopierer du det fremhævede ind.

netsvcs
drivers32
msconfig
safebootminimal
safebootnetwork
set /c
/md5start
iexplore.exe
explorer.exe
winlogon.exe
userinit.exe
svchost.exe
services.exe
wininit.exe
atapi.sys
cdrom.sys
afd.sys
tdx.sys
netbt.sys
redbook.sys
i8042prt.sys
nv4_mini.sys
mrxsmb.sys
volsnap.sys
sfc.dll´
consrv.dll
hlp.dat
/md5stop
%SYSTEMDRIVE%\*.*
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\*. /rp /s
%systemroot%\*. /mp /s
%USERPROFILE%\..|smtmp;true;true;true /FP
%systemroot%\System32\config\*.sav
%programfiles%\*.
%systemroot%\assembly\tmp\*.* /S /MD5
%systemroot%\assembly\GAC_32\*.* /S /MD5
%systemroot%\assembly\GAC_64\*.* /S /MD5
%SystemRoot%\assembly\GAC_MSIL\*.* /S /MD5
CREATERESTOREPOINT
DRIVES
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Luk alle åbne vinduer og klik på “Run Scan” øverst til venstre og lad programmet køre. Scanningen kan tage 5-10 minutter.

Det vil give to logfiler på skrivebordet, OTL.txt og Extras.txt.

Så kopier følgende ind i dit næste indlæg (i rækkefølge):

Indholdet af OTL.txt
Indholdet af Extras.txt

Da de er forholdsvis lange, kan du blive nødt til at sende dem i flere indlæg.

OTL logfile created on: 03-06-2012 23:10:54 - Run 1
OTL by OldTimer - Version 3.2.46.0   Folder = C:\Users\Longhorn\Downloads
Professional Service Pack 1 (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000406 | Country: Danmark | Language: DAN | Date Format: dd-MM-yyyy

8,00 Gb Total Physical Memory | 7,09 Gb Available Physical Memory | 88,68% Memory free
16,00 Gb Paging File | 14,82 Gb Available in Paging File | 92,66% Paging File free
Paging file location(s): e:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 195,21 Gb Total Space | 55,41 Gb Free Space | 28,38% Space Free | Partition Type: NTFS
Drive D: | 233,76 Gb Total Space | 199,19 Gb Free Space | 85,21% Space Free | Partition Type: NTFS
Drive E: | 38,45 Gb Total Space | 30,31 Gb Free Space | 78,84% Space Free | Partition Type: NTFS
Drive H: | 926,62 Gb Total Space | 109,94 Gb Free Space | 11,86% Space Free | Partition Type: NTFS
Drive J: | 4,88 Gb Total Space | 4,87 Gb Free Space | 99,77% Space Free | Partition Type: FAT32
Drive L: | 7,45 Gb Total Space | 6,68 Gb Free Space | 89,71% Space Free | Partition Type: FAT32

Computer Name: LONGHORN-PC2 | User Name: Longhorn | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Longhorn\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Users\Longhorn\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\AMD\OverDrive\AODAssist.exe ()
PRC - C:\Program Files\SUPERAntiSpyware\SASCore.exe (SUPERAntiSpyware.com)
PRC - C:\Program Files\NetCutDefender\services\aips.exe (Arcai.com)
PRC - C:\Windows\V0690Mon.exe (Creative Technology Ltd.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\audiodg.exe (Microsoft Corporation)
PRC - C:\Windows\System32\digi96.exe (RME)


========== Modules (No Company Name) ==========

MOD - C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll ()
MOD - C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll ()
MOD - C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL ()
MOD - C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()


========== Win32 Services (SafeList) ==========

SRV - (AdobeFlashPlayerUpdateSvc)—C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate)—C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (avast! Antivirus)—C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (WatAdminSvc)—C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (AdobeARMservice)—C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AODService)—C:\Program Files\AMD\OverDrive\AODAssist.exe ()
SRV - (!SASCORE)—C:\Program Files\SUPERAntiSpyware\SASCore.exe (SUPERAntiSpyware.com)
SRV - (AIPS)—C:\Program Files\NetCutDefender\services\aips.exe (Arcai.com)
SRV - (WSearch)—C:\Windows\System32\SearchIndexer.exe (Microsoft Corporation)
SRV - (Mcx2Svc)—C:\Windows\System32\Mcx2Svc.dll (Microsoft Corporation)
SRV - (NetTcpPortSharing)—C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental)—C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (SwitchBoard)—C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (StorSvc)—C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
SRV - (SensrSvc)—C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc)—C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend)—C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (RemoteAccess)—C:\Windows\System32\mprdim.dll (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32)—C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (WcesComm)—C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr)—C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (catchme)—C:\Users\Longhorn\AppData\Local\Temp\catchme.sys File not found
DRV - (aswSnx)—C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP)—C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRdr)—C:\Windows\System32\drivers\aswRdr2.sys (AVAST Software)
DRV - (aswTdi)—C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMonFlt)—C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk)—C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (AODDriver4.1)—C:\Program Files\AMD\OverDrive\i386\AODDriver2.sys (Advanced Micro Devices)
DRV - (V0690Vid)—C:\Windows\System32\drivers\V0690Vid.sys (Creative Technology Ltd.)
DRV - (SASDIFSV)—C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL)—C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SCDEmu)—C:\Windows\System32\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV - (vmbus)—C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt)—C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc)—C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt)—C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (VMBusHID)—C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap)—C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (udfs)—C:\Windows\System32\drivers\udfs.sys (Microsoft Corporation)
DRV - (NPF)—C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (digi96)—C:\Windows\System32\drivers\digi96.sys (RME)
DRV - (crcdisk)—C:\Windows\System32\drivers\crcdisk.sys (Microsoft Corporation)
DRV - (vwifimp)—C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (Serial)—C:\Windows\System32\drivers\serial.sys (Brother Industries Ltd.)
DRV - (cdfs)—C:\Windows\System32\drivers\cdfs.sys (Microsoft Corporation)
DRV - (atikmdag)—C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (netr28u)—C:\Windows\System32\drivers\netr28u.sys (Ralink Technology Corp.)
DRV - (cdrblock)—C:\Windows\System32\drivers\cdrblock.sys (Canopus Co,. Ltd.)
DRV - (PDIHWCTL)—C:\Windows\System32\drivers\pdihwctl.sys (Portrait Displays, Inc.)
DRV - (i1display)—C:\Windows\System32\drivers\i1display.sys ()
DRV - (RRamdisk)—C:\Windows\System32\drivers\rramdisk.sys (gavotte)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0



IE - HKU\S-1-5-21-271018237-3272951753-4025275856-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT3072253
IE - HKU\S-1-5-21-271018237-3272951753-4025275856-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = da-DK
IE - HKU\S-1-5-21-271018237-3272951753-4025275856-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0F B2 EB E3 25 14 CD 01 [binary data]
IE - HKU\S-1-5-21-271018237-3272951753-4025275856-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-271018237-3272951753-4025275856-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: “URL” = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-271018237-3272951753-4025275856-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.2.72: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.2.72: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.2.72: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.2.72: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.2.72: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Longhorn\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Longhorn\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-03-17 05:17:59 | 000,000,000 |—-D | M]

[2012-05-20 16:09:29 | 000,000,000 |—-D | M] (No name found)—C:\Users\Longhorn\AppData\Roaming\mozilla\Firefox\extensions
[2012-05-20 16:09:30 | 000,000,000 |—-D | M] (uTorrentControl2 Community Toolbar)—C:\Users\Longhorn\AppData\Roaming\mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie;={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl;={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\19.0.1084.52\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\19.0.1084.52\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Longhorn\AppData\Local\Google\Chrome\Application\19.0.1084.52\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Longhorn\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Longhorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit)  (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit)  (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Longhorn\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Longhorn\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - Extension: FB Chat Sidebar Disabler = C:\Users\Longhorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfipfkeoidmndggnnpobeenlamiclald\2.4.8_0\
CHR - Extension: AdBlock = C:\Users\Longhorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.34_0\
CHR - Extension: avast! WebRep = C:\Users\Longhorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Longhorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: Skype Click to Call = C:\Users\Longhorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\
CHR - Extension: uTorrentControl2 = C:\Users\Longhorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.7.1_0\

O1 HOSTS File: ([2012-05-28 13:44:24 | 000,000,027 |——| M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1     localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] “C:\Program Files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe” -launchedbylogin File not found
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [RMETray] C:\Windows\System32\digi96.exe (RME)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [V0690Mon.exe] C:\Windows\V0690Mon.exe (Creative Technology Ltd.)
O4 - HKU\S-1-5-21-271018237-3272951753-4025275856-1000..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-271018237-3272951753-4025275856-1000..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - Startup: C:\Users\Longhorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Longhorn\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-271018237-3272951753-4025275856-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-271018237-3272951753-4025275856-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-271018237-3272951753-4025275856-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Locate Spot on Map by GPS - C:\Program Files\Opanda\IExif 2.3\IExifMap.htm ()
O8 - Extra context menu item: View Exif/GPS/IPTC with IExif - C:\Program Files\Opanda\IExif 2.3\IExifCom.htm ()
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra ‘Tools’ menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra ‘Tools’ menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {DC6FEBC5-0A2D-458A-A01B-5DB15EEC4305} http://webc.hipcat.dk/auth/controls/IlosoftImageUpload.dll (IlosoftImageUploadCtl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.10.10.5 212.10.10.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3E6E6F16-8E88-432A-89FC-A5332F344D2F}: DhcpNameServer = 212.10.10.5 212.10.10.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3E6E6F16-8E88-432A-89FC-A5332F344D2F}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 |——| M] () - C:\autoexec.bat—[ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open]—“%1” %*
O35 - HKLM\..exefile [open]—“%1” %*
O37 - HKLM\...com [@ = ComFile]—“%1” %*
O37 - HKLM\...exe [@ = exefile]—“%1” %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.C210 - C:\Windows\System32\c210codc.dll (Thomson Canopus Co., Ltd.)
Drivers32: vidc.CDV5 - C:\Windows\System32\cdv5codc.dll (Thomson Canopus Co., Ltd.)
Drivers32: vidc.CDVC - C:\Windows\System32\cdvccodc.dll (Thomson Canopus Co., Ltd.)
Drivers32: vidc.CDVH - C:\Windows\System32\cdvhcodc.dll (Thomson Canopus Co., Ltd.)
Drivers32: vidc.CHQX - C:\Windows\System32\chqxcodc.dll (Thomson Canopus Co., Ltd.)
Drivers32: vidc.CLLC - C:\Windows\System32\cllccodc.dll (Thomson Canopus Co., Ltd.)
Drivers32: vidc.CMIC - C:\Windows\System32\cmiccodc.dll (Thomson Canopus Co., Ltd.)
Drivers32: vidc.CUVC - C:\Windows\System32\cuvccodc.dll (Thomson Canopus Co., Ltd.)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: wave2 - C:\Windows\System32\digi96.dll (RME)

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ProfileReminder.lnk - C:\Program Files\GretagMacbeth\i1\Eye-One Match 3\ProfileReminder.exe - (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)
MsConfig - StartUpReg: AVP - hkey= - key= -  File not found
MsConfig - StartUpReg: Facebook Update - hkey= - key= -  File not found
MsConfig - StartUpReg: PWRISOVM.EXE - hkey= - key= - C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
MsConfig - StartUpReg: Skype - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig - StartUpReg: TkBellExe - hkey= - key= - C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
MsConfig - State: “startup” - 2

SafeBootMin: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCore.exe (SUPERAntiSpyware.com)
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS -  File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCore.exe (SUPERAntiSpyware.com)
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS -  File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012-05-28 13:49:13 | 000,000,000 |—-D | C]—C:\Windows\temp
[2012-05-28 13:45:45 | 000,000,000 | -HSD | C]—C:\$RECYCLE.BIN
[2012-05-28 13:44:23 | 000,000,000 |—-D | C]—C:\Users\Longhorn\AppData\Local\temp
[2012-05-28 13:24:53 | 000,518,144 |——| C] (SteelWerX)—C:\Windows\SWREG.exe
[2012-05-28 13:24:53 | 000,406,528 |——| C] (SteelWerX)—C:\Windows\SWSC.exe
[2012-05-28 13:24:53 | 000,060,416 |——| C] (NirSoft)—C:\Windows\NIRCMD.exe
[2012-05-28 13:24:49 | 000,000,000 |—-D | C]—C:\Windows\ERDNT
[2012-05-28 13:24:49 | 000,000,000 |—-D | C]—C:\ComboFix
[2012-05-28 13:24:46 | 000,000,000 |—-D | C]—C:\Qoobox
[2012-05-28 13:24:16 | 000,000,000 |—-D | C]—C:\Users\Longhorn\Desktop\PC fix
[2012-05-28 10:33:32 | 000,000,000 |—-D | C]—C:\Program Files\NetCutDefender
[2012-05-28 09:51:13 | 000,000,000 |—-D | C]—C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
[2012-05-28 09:51:09 | 000,000,000 |—-D | C]—C:\Program Files\WinPcap
[2012-05-28 09:49:49 | 000,000,000 |—-D | C]—C:\ProgramData\Microsoft\Windows\Start Menu\Programs\arcai.com
[2012-05-27 22:51:16 | 000,000,000 |—-D | C]—C:\Users\Longhorn\AppData\Roaming\QuickScan
[2012-05-20 16:09:31 | 000,000,000 |—-D | C]—C:\Users\Longhorn\AppData\Local\CRE
[2012-05-20 16:09:29 | 000,000,000 |—-D | C]—C:\Users\Longhorn\AppData\Roaming\Mozilla
[2012-05-20 16:09:28 | 000,000,000 |—-D | C]—C:\Program Files\Conduit
[2012-05-20 16:09:26 | 000,000,000 |—-D | C]—C:\Users\Longhorn\AppData\Local\Conduit
[2012-05-18 01:24:30 | 003,948,600 | R—- | C] (Microsoft Corporation)—C:\Windows\System32\ntkrlStaforce.exe
[2012-05-17 23:56:30 | 000,010,368 |——| C] (gavotte)—C:\Windows\System32\drivers\rramdisk.sys
[2012-05-14 16:02:05 | 003,968,368 |——| C] (Microsoft Corporation)—C:\Windows\System32\ntkrnlpa.exe
[2012-05-14 16:02:04 | 003,913,072 |——| C] (Microsoft Corporation)—C:\Windows\System32\ntoskrnl.exe
[2012-05-14 16:02:04 | 002,343,424 |——| C] (Microsoft Corporation)—C:\Windows\System32\win32k.sys
[2012-05-14 16:01:57 | 001,077,248 |——| C] (Microsoft Corporation)—C:\Windows\System32\DWrite.dll
[2012-05-08 13:37:54 | 000,000,000 | R—D | C]—C:\Users\Longhorn\Documents\Scanned Documents
[2012-05-08 13:37:54 | 000,000,000 |—-D | C]—C:\Users\Longhorn\Documents\Fax
[2012-05-08 13:35:52 | 000,000,000 |—-D | C]—C:\Program Files\Common Files\Canon
[2012-05-07 22:13:19 | 000,000,000 |—-D | C]—C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opanda
[2012-05-07 22:13:18 | 000,000,000 |—-D | C]—C:\Program Files\Opanda
[2012-05-06 23:30:47 | 000,000,000 |—-D | C]—C:\Users\Longhorn\AppData\Local\Facebook
[2012-05-06 11:23:05 | 000,000,000 |—-D | C]—C:\Windows\Minidump
[2012-05-04 23:48:18 | 000,000,000 |—-D | C]—C:\Users\Longhorn\Documents\Faktura

========== Files - Modified Within 30 Days ==========

[2012-06-03 23:01:33 | 000,001,456 |——| M] ()—C:\Users\Longhorn\AppData\Local\Adobe Save for Web 12.0 Prefs
[2012-06-03 22:55:00 | 000,000,830 |——| M] ()—C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-06-03 22:28:00 | 000,000,954 |——| M] ()—C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-271018237-3272951753-4025275856-1000UA.job
[2012-06-03 22:12:08 | 000,615,810 |——| M] ()—C:\Windows\System32\perfh009.dat
[2012-06-03 22:12:08 | 000,470,086 |——| M] ()—C:\Windows\System32\perfh006.dat
[2012-06-03 22:12:08 | 000,106,190 |——| M] ()—C:\Windows\System32\perfc009.dat
[2012-06-03 22:12:08 | 000,079,720 |——| M] ()—C:\Windows\System32\perfc006.dat
[2012-06-03 21:17:42 | 000,067,584 |—S- | M] ()—C:\Windows\bootstat.dat
[2012-06-03 21:17:39 | 2146,295,807 | -HS- | M] ()—C:\hiberfil.sys
[2012-06-03 09:59:38 | 000,000,902 |——| M] ()—C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-271018237-3272951753-4025275856-1000Core.job
[2012-06-01 01:17:20 | 000,010,320 | -H—| M] ()—C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-06-01 01:17:20 | 000,010,320 | -H—| M] ()—C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-05-28 20:18:04 | 000,000,978 |——| M] ()—C:\Users\Longhorn\Documents\cc_20120528_201801.reg
[2012-05-28 13:44:24 | 000,000,027 |——| M] ()—C:\Windows\System32\drivers\etc\hosts
[2012-05-28 13:09:12 | 000,018,656 |——| M] ()—C:\Users\Longhorn\Documents\cc_20120528_130909.reg
[2012-05-27 23:43:19 | 000,017,408 |——| M] ()—C:\Users\Longhorn\AppData\Local\WebpageIcons.db
[2012-05-27 23:41:51 | 000,007,596 |——| M] ()—C:\Users\Longhorn\AppData\Local\Resmon.ResmonCfg
[2012-05-26 02:01:12 | 000,000,448 |——| M] ()—C:\Users\Longhorn\Documents\cc_20120526_020108.reg
[2012-05-24 09:30:17 | 000,002,374 |——| M] ()—C:\Users\Longhorn\Desktop\Google Chrome.lnk
[2012-05-17 21:48:14 | 000,001,078 |——| M] ()—C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-05-14 16:21:27 | 003,774,792 |——| M] ()—C:\Windows\System32\FNTCACHE.DAT
[2012-05-09 19:09:39 | 000,001,250 |——| M] ()—C:\Users\Longhorn\Desktop\Tøm klipboard.lnk
[2012-05-09 04:30:27 | 000,000,826 |——| M] ()—C:\Users\Longhorn\Documents\cc_20120509_043024.reg
[2012-05-07 22:13:19 | 000,001,957 |——| M] ()—C:\Users\Longhorn\Desktop\Opanda IExif 2.3.lnk
[2012-05-07 19:19:14 | 000,000,429 |——| M] ()—C:\Users\Longhorn\AppData\Roaming\DNGProfileManager
[2012-05-05 01:55:07 | 000,419,488 |——| M] (Adobe Systems Incorporated)—C:\Windows\System32\FlashPlayerApp.exe
[2012-05-05 01:55:07 | 000,070,304 |——| M] (Adobe Systems Incorporated)—C:\Windows\System32\FlashPlayerCPLApp.cpl

========== Files Created - No Company Name ==========

[2012-05-28 20:18:03 | 000,000,978 |——| C] ()—C:\Users\Longhorn\Documents\cc_20120528_201801.reg
[2012-05-28 13:24:53 | 000,256,000 |——| C] ()—C:\Windows\PEV.exe
[2012-05-28 13:24:53 | 000,208,896 |——| C] ()—C:\Windows\MBR.exe
[2012-05-28 13:24:53 | 000,098,816 |——| C] ()—C:\Windows\sed.exe
[2012-05-28 13:24:53 | 000,080,412 |——| C] ()—C:\Windows\grep.exe
[2012-05-28 13:24:53 | 000,068,096 |——| C] ()—C:\Windows\zip.exe
[2012-05-28 13:09:11 | 000,018,656 |——| C] ()—C:\Users\Longhorn\Documents\cc_20120528_130909.reg
[2012-05-28 09:49:46 | 000,389,120 |——| C] ()—C:\Windows\System32\actskn43.ocx
[2012-05-27 23:43:03 | 000,017,408 |——| C] ()—C:\Users\Longhorn\AppData\Local\WebpageIcons.db
[2012-05-26 02:01:10 | 000,000,448 |——| C] ()—C:\Users\Longhorn\Documents\cc_20120526_020108.reg
[2012-05-09 19:09:05 | 000,001,250 |——| C] ()—C:\Users\Longhorn\Desktop\Tøm klipboard.lnk
[2012-05-09 04:30:26 | 000,000,826 |——| C] ()—C:\Users\Longhorn\Documents\cc_20120509_043024.reg
[2012-05-07 22:13:19 | 000,001,957 |——| C] ()—C:\Users\Longhorn\Desktop\Opanda IExif 2.3.lnk
[2012-04-30 22:23:02 | 000,000,429 |——| C] ()—C:\Users\Longhorn\AppData\Roaming\DNGProfileManager
[2012-02-08 13:06:03 | 000,000,016 |——| C] ()—C:\Windows\msocreg32.dat
[2012-02-03 10:30:29 | 000,066,048 |——| C] ()—C:\Windows\System32\PrintBrmUi.exe
[2012-02-01 12:50:40 | 000,044,344 |——| C] ()—C:\Windows\System32\drivers\i1display.sys
[2012-02-01 03:46:48 | 000,001,456 |——| C] ()—C:\Users\Longhorn\AppData\Local\Adobe Save for Web 12.0 Prefs
[2012-02-01 01:19:13 | 000,010,752 |——| C] ()—C:\Windows\System32\BASSMOD.dll
[2012-01-31 23:23:51 | 000,007,596 |——| C] ()—C:\Users\Longhorn\AppData\Local\Resmon.ResmonCfg
[2010-08-05 19:06:28 | 000,679,936 |——| C] ()—C:\Windows\System32\pavedius6db.dat
[2010-06-25 19:03:12 | 000,053,299 |——| C] ()—C:\Windows\System32\pthreadVC.dll

========== LOP Check ==========

[2012-02-08 10:53:19 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Blue Cat Audio
[2012-03-26 20:44:01 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\BSplayer
[2012-02-01 00:42:43 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\BSplayer Pro
[2012-02-01 15:47:51 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Canopus
[2012-04-06 19:57:23 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012-04-30 13:08:26 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\com.adobe.bridge.PublishPanel
[2012-01-31 23:41:11 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012-06-03 21:18:53 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Dropbox
[2012-02-01 13:16:43 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\GretagMacbeth
[2012-04-09 23:51:32 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\HDRsoft
[2012-02-01 01:20:54 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Imagenomic
[2012-05-27 22:51:20 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\QuickScan
[2012-04-18 21:57:16 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Soundcraft Vi
[2012-03-25 00:21:24 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Spotify
[2012-02-01 14:28:44 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012-02-03 15:19:42 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Steinberg
[2012-05-28 13:09:18 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\uTorrent
[2012-02-03 15:19:42 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\VST3 Presets
[2012-02-08 10:54:08 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Waves
[2012-02-08 10:39:08 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Waves Audio
[2012-02-08 10:54:19 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\Waves Preferences
[2012-04-30 22:21:38 | 000,000,000 |—-D | M]—C:\Users\Longhorn\AppData\Roaming\X-Rite
[2009-07-14 06:53:46 | 000,019,518 |——| M] ()—C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========

< set /c >
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\Longhorn\AppData\Roaming
CLASSPATH=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=LONGHORN-PC2
ComSpec=C:\Windows\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\Longhorn
LOCALAPPDATA=C:\Users\Longhorn\AppData\Local
LOGONSERVER=\\LONGHORN-PC2
NUMBER_OF_PROCESSORS=4
OS=Windows_NT
Path=C:\Windows\system32;C:\Windows;C:\Windows\system32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files\QuickTime\QTSystem
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 16 Model 5 Stepping 3, AuthenticAMD
PROCESSOR_LEVEL=16
PROCESSOR_REVISION=0503
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
PROMPT=$P$G
PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
PUBLIC=C:\Users\Public
QTJAVA=C:\Program Files\QuickTime\QTSystem\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\Longhorn\AppData\Local\Temp
TMP=C:\Users\Longhorn\AppData\Local\Temp
USERDOMAIN=Longhorn-pc2
USERNAME=Longhorn
USERPROFILE=C:\Users\Longhorn
windir=C:\Windows

< MD5 for: AFD.SYS >
[2011-04-25 04:35:40 | 000,338,944 |——| M] (Microsoft Corporation) MD5=0DB7A48388D54D154EBEC120461A0FCD—C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16802_none_d81220b5bf827af7\afd.sys
[2010-11-20 10:40:03 | 000,338,944 |——| M] (Microsoft Corporation) MD5=1151FD4FB0216CFED887BFDE29EBD516—C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_d9efac7dbcaf385b\afd.sys
[2011-04-25 04:18:03 | 000,338,944 |——| M] (Microsoft Corporation) MD5=9EBBBA55060F786F0FCAA3893BFA2806—C:\Windows\System32\drivers\afd.sys
[2011-04-25 04:18:03 | 000,338,944 |——| M] (Microsoft Corporation) MD5=9EBBBA55060F786F0FCAA3893BFA2806—C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17603_none_d9f97e05bca8003a\afd.sys
[2011-04-25 04:27:23 | 000,338,944 |——| M] (Microsoft Corporation) MD5=C114AB7A1550D42EA1700FFD4179CF5A—C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.20951_none_d864ad9ad8c98d1f\afd.sys
[2011-04-25 05:24:09 | 000,338,944 |——| M] (Microsoft Corporation) MD5=C427F91A748CD342A2B3F9278D9FD6A5—C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21712_none_da774a9ad5cea29e\afd.sys
[2009-07-14 01:12:38 | 000,338,944 |——| M] (Microsoft Corporation) MD5=DDC040FDB01EF1712A6B13E52AFB104C—C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16385_none_d7be98b5bfc0b4c1\afd.sys

< MD5 for: ATAPI.SYS >
[2009-07-14 03:26:15 | 000,021,584 |——| M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E—C:\Windows\ERDNT\cache\atapi.sys
[2009-07-14 03:26:15 | 000,021,584 |——| M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E—C:\Windows\System32\drivers\atapi.sys
[2009-07-14 03:26:15 | 000,021,584 |——| M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E—C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009-07-14 03:26:15 | 000,021,584 |——| M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E—C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009-07-14 03:26:15 | 000,021,584 |——| M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E—C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: CDROM.SYS >
[2009-07-14 01:11:26 | 000,108,544 |——| M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77—C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
[2010-11-20 10:38:10 | 000,108,544 |——| M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9—C:\Windows\System32\drivers\cdrom.sys
[2010-11-20 10:38:10 | 000,108,544 |——| M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9—C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010-11-20 10:38:10 | 000,108,544 |——| M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9—C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011-02-26 07:19:21 | 002,616,320 |——| M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009-07-14 03:14:20 | 002,613,248 |——| M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011-02-26 07:51:13 | 002,614,784 |——| M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009-10-31 07:45:39 | 002,614,272 |——| M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011-02-26 07:33:07 | 002,614,784 |——| M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010-11-20 14:17:09 | 002,616,320 |——| M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011-02-25 07:30:54 | 002,616,320 |——| M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E—C:\Windows\ERDNT\cache\explorer.exe
[2011-02-25 07:30:54 | 002,616,320 |——| M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E—C:\Windows\explorer.exe
[2011-02-25 07:30:54 | 002,616,320 |——| M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009-08-03 07:49:47 | 002,613,248 |——| M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009-08-03 07:35:50 | 002,613,248 |——| M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009-10-31 08:00:51 | 002,614,272 |——| M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917—C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: I8042PRT.SYS >
[2009-07-14 01:11:24 | 000,080,896 |——| M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6—C:\Windows\System32\drivers\i8042prt.sys
[2009-07-14 01:11:24 | 000,080,896 |——| M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6—C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_x86_neutral_50ad659974198591\i8042prt.sys
[2009-07-14 01:11:24 | 000,080,896 |——| M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6—C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_x86_neutral_7a9084e0177406eb\i8042prt.sys
[2009-07-14 01:11:24 | 000,080,896 |——| M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6—C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.1.7600.16385_none_9724c3fc3a4c81ef\i8042prt.sys
[2009-07-14 01:11:24 | 000,080,896 |——| M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6—C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_9955d7c4373b0589\i8042prt.sys
[2009-07-14 01:11:24 | 000,080,896 |——| M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6—C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_4e0a61a033aec8c3\i8042prt.sys

< MD5 for: IEXPLORE.EXE >
[2012-04-04 15:56:38 | 000,199,240 |——| M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D—C:\Program Files\Malwarebytes’ Anti-Malware\Chameleon\iexplore.exe
[2009-07-14 03:17:29 | 000,673,048 |——| M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540—C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_b346f9b4861b55c2\iexplore.exe
[2011-11-05 06:38:00 | 000,673,048 |——| M] (Microsoft Corporation) MD5=8ED7C19AEFA3673AADB0D6864B03FBCE—C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16912_none_b38fb3ae85e53510\iexplore.exe
[2012-02-01 02:58:50 | 000,748,336 |——| M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639—C:\Program Files\Internet Explorer\iexplore.exe
[2012-02-01 02:58:50 | 000,748,336 |——| M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639—C:\Windows\ERDNT\cache\iexplore.exe
[2012-02-01 02:58:50 | 000,748,336 |——| M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639—C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_b135ff17c80c1949\iexplore.exe
[2011-11-05 06:39:45 | 000,673,048 |——| M] (Microsoft Corporation) MD5=A8A14CD0CB499B80412F75D53996AE29—C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21085_none_b3d0781f9f391a91\iexplore.exe
[2010-11-20 14:22:51 | 000,673,040 |——| M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024—C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_b5780d7c8309d95c\iexplore.exe

< MD5 for: MRXSMB.SYS >
[2011-04-27 04:15:30 | 000,123,904 |——| M] (Microsoft Corporation) MD5=39A8FF477B3F5D0EDFE814155841C735—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.21714_none_822275d1c87d251f\mrxsmb.sys
[2011-04-27 04:17:22 | 000,123,904 |——| M] (Microsoft Corporation) MD5=5D16C921E3671636C0EBA3BBAAC5FD25—C:\Windows\System32\drivers\mrxsmb.sys
[2011-04-27 04:17:22 | 000,123,904 |——| M] (Microsoft Corporation) MD5=5D16C921E3671636C0EBA3BBAAC5FD25—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.17605_none_81a4a93caf5682bb\mrxsmb.sys
[2011-02-23 05:37:32 | 000,123,904 |——| M] (Microsoft Corporation) MD5=5DC06CEB9AA4B65E724376766EB410AB—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7600.20907_none_8049e995cb4be947\mrxsmb.sys
[2011-05-04 04:23:56 | 000,123,904 |——| M] (Microsoft Corporation) MD5=AE6248D356C6C1DE1623F0610B7FB0A3—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7600.20959_none_8015da8dcb72a7aa\mrxsmb.sys
[2010-11-20 10:42:42 | 000,123,904 |——| M] (Microsoft Corporation) MD5=B272B4C3E085EA860C12F2E4FAF2FFA2—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.17514_none_8198d720af5f882e\mrxsmb.sys
[2011-02-23 07:05:31 | 000,123,392 |——| M] (Microsoft Corporation) MD5=B4C76EF46322A9711C7B0F4E21EF6EA5—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7600.16765_none_7f7d6ac8b260c14e\mrxsmb.sys
[2011-02-23 05:09:47 | 000,123,904 |——| M] (Microsoft Corporation) MD5=C76FD653DB8B90DA85EAD12B12FFFC9F—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.21666_none_81ee64e3c8a3e65b\mrxsmb.sys
[2011-05-04 04:43:41 | 000,123,392 |——| M] (Microsoft Corporation) MD5=CA7570E42522E24324A12161DB14EC02—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7600.16808_none_7fc14d14b22d62d4\mrxsmb.sys
[2011-02-23 06:47:36 | 000,123,904 |——| M] (Microsoft Corporation) MD5=ED3D3419B064F28D812995ED8CADC541—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7601.17565_none_8163c7ceaf872d3a\mrxsmb.sys
[2009-07-14 01:14:26 | 000,123,392 |——| M] (Microsoft Corporation) MD5=F4A054BE78AF7F410129C4B64B07DC9B—C:\Windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.1.7600.16385_none_7f67c358b2710494\mrxsmb.sys

< MD5 for: NETBT.SYS >
[2010-11-20 10:39:44 | 000,187,904 |——| M] (Microsoft Corporation) MD5=280122DDCF04B378EDD1AD54D71C1E54—C:\Windows\System32\drivers\netbt.sys
[2010-11-20 10:39:44 | 000,187,904 |——| M] (Microsoft Corporation) MD5=280122DDCF04B378EDD1AD54D71C1E54—C:\Windows\winsxs\x86_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_626c324d55864070\netbt.sys
[2009-07-14 01:12:21 | 000,187,904 |——| M] (Microsoft Corporation) MD5=DD52A733BF4CA5AF84562A5E2F963B91—C:\Windows\winsxs\x86_microsoft-windows-netbt_31bf3856ad364e35_6.1.7600.16385_none_603b1e855897bcd6\netbt.sys

< MD5 for: SERVICES.EXE >
[2009-07-14 03:14:36 | 000,259,072 |——| M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6—C:\Windows\ERDNT\cache\services.exe
[2009-07-14 03:14:36 | 000,259,072 |——| M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6—C:\Windows\System32\services.exe
[2009-07-14 03:14:36 | 000,259,072 |——| M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6—C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe

< MD5 for: SVCHOST.EXE >
[2012-04-04 15:56:38 | 000,199,240 |——| M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D—C:\Program Files\Malwarebytes’ Anti-Malware\Chameleon\svchost.exe
[2009-07-14 03:14:41 | 000,020,992 |——| M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866—C:\Windows\ERDNT\cache\svchost.exe
[2009-07-14 03:14:41 | 000,020,992 |——| M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866—C:\Windows\System32\svchost.exe
[2009-07-14 03:14:41 | 000,020,992 |——| M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866—C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TDX.SYS >
[2010-11-20 10:39:17 | 000,074,752 |——| M] (Microsoft Corporation) MD5=B459575348C20E8121D6039DA063C704—C:\Windows\ERDNT\cache\tdx.sys
[2010-11-20 10:39:17 | 000,074,752 |——| M] (Microsoft Corporation) MD5=B459575348C20E8121D6039DA063C704—C:\Windows\System32\drivers\tdx.sys
[2010-11-20 10:39:17 | 000,074,752 |——| M] (Microsoft Corporation) MD5=B459575348C20E8121D6039DA063C704—C:\Windows\winsxs\x86_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.17514_none_ec4532373a57c1c2\tdx.sys
[2009-07-14 01:12:11 | 000,074,240 |——| M] (Microsoft Corporation) MD5=CB39E896A2A83702D1737BFD402B3542—C:\Windows\winsxs\x86_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7600.16385_none_ea141e6f3d693e28\tdx.sys

< MD5 for: USERINIT.EXE >
[2010-11-20 14:17:48 | 000,026,624 |——| M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223—C:\Windows\ERDNT\cache\userinit.exe
[2010-11-20 14:17:48 | 000,026,624 |——| M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223—C:\Windows\System32\userinit.exe
[2010-11-20 14:17:48 | 000,026,624 |——| M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223—C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009-07-14 03:14:43 | 000,026,112 |——| M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175—C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: VOLSNAP.SYS >
[2009-07-14 03:19:10 | 000,245,328 |——| M] (Microsoft Corporation) MD5=58DF9D2481A56EDDE167E51B334D44FD—C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7600.16385_none_158d0da45d68903e\volsnap.sys
[2010-11-20 14:30:16 | 000,245,632 |——| M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7—C:\Windows\System32\drivers\volsnap.sys
[2010-11-20 14:30:16 | 000,245,632 |——| M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7—C:\Windows\System32\DriverStore\FileRepository\volume.inf_x86_neutral_6dee0205881d1a1d\volsnap.sys
[2010-11-20 14:30:16 | 000,245,632 |——| M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7—C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_17be216c5a5713d8\volsnap.sys

< MD5 for: WININIT.EXE >
[2009-07-14 03:14:45 | 000,096,256 |——| M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665—C:\Windows\ERDNT\cache\wininit.exe
[2009-07-14 03:14:45 | 000,096,256 |——| M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665—C:\Windows\System32\wininit.exe
[2009-07-14 03:14:45 | 000,096,256 |——| M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665—C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

< MD5 for: WINLOGON.EXE >
[2012-04-04 15:56:38 | 000,199,240 |——| M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D—C:\Program Files\Malwarebytes’ Anti-Malware\Chameleon\winlogon.exe
[2009-10-28 08:17:59 | 000,285,696 |——| M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD—C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009-10-28 07:52:08 | 000,285,696 |——| M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30—C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010-11-20 14:17:54 | 000,286,720 |——| M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560—C:\Windows\ERDNT\cache\winlogon.exe
[2010-11-20 14:17:54 | 000,286,720 |——| M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560—C:\Windows\System32\winlogon.exe
[2010-11-20 14:17:54 | 000,286,720 |——| M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560—C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009-07-14 03:14:45 | 000,285,696 |——| M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF—C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< %SYSTEMDRIVE%\*.* >
[2009-06-10 23:42:20 | 000,000,024 |——| M] ()—C:\autoexec.bat
[2012-05-28 13:45:42 | 000,019,801 |——| M] ()—C:\ComboFix.txt
[2009-06-10 23:42:20 | 000,000,010 |——| M] ()—C:\config.sys
[2012-06-03 21:17:39 | 2146,295,807 | -HS- | M] ()—C:\hiberfil.sys
[2012-03-17 05:21:25 | 000,002,178 |——| M] ()—C:\Setup Log.txt

< %systemroot%\system32\*.dll /lockedfiles >
[2009-07-14 03:15:21 | 000,462,848 |——| M] (Microsoft Corporation) Unable to obtain MD5—C:\Windows\system32\FirewallAPI.dll

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\*. /rp /s >

< %systemroot%\*. /mp /s >

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %systemroot%\System32\config\*.sav >

< %programfiles%\*. >
[2012-04-06 20:10:50 | 000,000,000 |—-D | M]—C:\Program Files\Adobe
[2012-01-31 23:41:09 | 000,000,000 |—-D | M]—C:\Program Files\Adobe Download Assistant
[2012-01-31 23:55:08 | 000,000,000 |—-D | M]—C:\Program Files\AMD
[2012-02-01 15:36:50 | 000,000,000 |—-D | M]—C:\Program Files\Apple Software Update
[2012-02-01 01:23:03 | 000,000,000 |—-D | M]—C:\Program Files\AVAST Software
[2012-02-08 10:46:54 | 000,000,000 |—-D | M]—C:\Program Files\Brainworx Music
[2012-04-26 11:57:26 | 000,000,000 |—-D | M]—C:\Program Files\CCleaner
[2012-02-01 15:37:51 | 000,000,000 |—-D | M]—C:\Program Files\CodecOption
[2012-05-28 13:40:16 | 000,000,000 |—-D | M]—C:\Program Files\Common Files
[2012-05-20 16:09:28 | 000,000,000 |—-D | M]—C:\Program Files\Conduit
[2012-02-15 15:01:19 | 000,000,000 |—-D | M]—C:\Program Files\CyberLink
[2012-02-03 11:19:22 | 000,000,000 |—-D | M]—C:\Program Files\DVD Maker
[2012-01-31 23:08:06 | 000,000,000 | -HSD | M]—C:\Program Files\Fælles filer
[2012-02-01 15:32:51 | 000,000,000 |—-D | M]—C:\Program Files\Grass Valley
[2012-02-01 12:50:05 | 000,000,000 |—-D | M]—C:\Program Files\GretagMacbeth
[2012-02-08 13:01:12 | 000,000,000 |—-D | M]—C:\Program Files\IK Multimedia
[2012-02-01 01:16:24 | 000,000,000 |—-D | M]—C:\Program Files\Imagenomic
[2012-02-15 15:04:39 | 000,000,000 | -H-D | M]—C:\Program Files\InstallShield Installation Information
[2012-04-12 15:04:19 | 000,000,000 |—-D | M]—C:\Program Files\Internet Explorer
[2012-03-13 13:53:22 | 000,000,000 |—-D | M]—C:\Program Files\Java
[2012-05-17 21:49:53 | 000,000,000 |—-D | M]—C:\Program Files\Malwarebytes’ Anti-Malware
[2012-04-05 11:24:01 | 000,000,000 |—-D | M]—C:\Program Files\Microsoft Office
[2012-03-26 20:25:03 | 000,000,000 |—-D | M]—C:\Program Files\Microsoft Silverlight
[2012-04-05 11:23:40 | 000,000,000 |—-D | M]—C:\Program Files\Microsoft Visual Studio
[2012-04-05 11:19:58 | 000,000,000 |—-D | M]—C:\Program Files\Microsoft Visual Studio 8
[2012-04-05 11:24:44 | 000,000,000 |—-D | M]—C:\Program Files\Microsoft Works
[2012-04-05 20:45:22 | 000,000,000 |—-D | M]—C:\Program Files\Microsoft.NET
[2012-04-05 11:24:14 | 000,000,000 |—-D | M]—C:\Program Files\MSBuild
[2012-05-30 08:39:48 | 000,000,000 |—-D | M]—C:\Program Files\NetCutDefender
[2012-05-07 22:13:18 | 000,000,000 |—-D | M]—C:\Program Files\Opanda
[2012-04-09 23:51:36 | 000,000,000 |—-D | M]—C:\Program Files\PhotomatixPro4
[2012-02-01 15:25:15 | 000,000,000 |—-D | M]—C:\Program Files\PowerISO
[2012-02-01 15:37:39 | 000,000,000 |—-D | M]—C:\Program Files\QuickTime
[2012-03-17 05:18:11 | 000,000,000 |—-D | M]—C:\Program Files\Real
[2009-07-14 06:52:30 | 000,000,000 |—-D | M]—C:\Program Files\Reference Assemblies
[2012-03-17 05:20:55 | 000,000,000 |—-D | M]—C:\Program Files\Replay Music 5
[2012-04-14 01:29:51 | 000,000,000 | R—D | M]—C:\Program Files\Skype
[2012-02-15 15:00:39 | 000,000,000 |—-D | M]—C:\Program Files\SmartSound Software
[2012-04-18 21:57:31 | 000,000,000 |—-D | M]—C:\Program Files\Soundcraft Virtual Vi
[2012-02-03 15:46:29 | 000,000,000 |—-D | M]—C:\Program Files\Steinberg
[2012-05-31 00:39:50 | 000,000,000 |—-D | M]—C:\Program Files\SUPERAntiSpyware
[2009-07-14 06:53:23 | 000,000,000 | -H-D | M]—C:\Program Files\Uninstall Information
[2012-02-08 10:38:50 | 000,000,000 |—-D | M]—C:\Program Files\Waves
[2012-02-01 00:42:43 | 000,000,000 |—-D | M]—C:\Program Files\Webteh
[2012-02-03 11:19:21 | 000,000,000 |—-D | M]—C:\Program Files\Windows Defender
[2012-05-14 16:19:20 | 000,000,000 |—-D | M]—C:\Program Files\Windows Journal
[2012-02-03 11:19:22 | 000,000,000 |—-D | M]—C:\Program Files\Windows Mail
[2012-02-03 11:19:22 | 000,000,000 |—-D | M]—C:\Program Files\Windows Media Player
[2012-01-31 23:08:06 | 000,000,000 |—-D | M]—C:\Program Files\Windows NT
[2012-02-03 11:19:22 | 000,000,000 |—-D | M]—C:\Program Files\Windows Photo Viewer
[2012-02-03 11:19:22 | 000,000,000 |—-D | M]—C:\Program Files\Windows Portable Devices
[2012-02-03 11:19:22 | 000,000,000 |—-D | M]—C:\Program Files\Windows Sidebar
[2012-05-28 09:51:13 | 000,000,000 |—-D | M]—C:\Program Files\WinPcap
[2010-01-01 02:19:11 | 000,000,000 |—-D | M]—C:\Program Files\WinRAR
[2012-04-30 22:10:26 | 000,000,000 |—-D | M]—C:\Program Files\X-Rite

[color=#A23BEC]< %systemroot%\assembly\tmp\*.* /S /MD5 >[/col

< %SystemRoot%\assembly\GAC_MSIL\*.* /S /MD5 >
[2009-06-10 23:22:40 | 000,010,752 |——| M] () MD5=7E8C840853FB6EBD5CC16D3C10C7C127—C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
[2009-07-14 10:47:49 | 000,311,296 |——| M] () MD5=A5BFB7DB8C40CE3AB448DEA6B7480466—C:\Windows\assembly\GAC_MSIL\AspNetMMCExt.resources\2.0.0.0_da_b03f5f7f11d50a3a\aspnetmmcext.resources.dll
[2009-06-10 23:22:47 | 000,507,904 |——| M] () MD5=11B30A8447A724C6E9FBF6261AC0DA6E—C:\Windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
[2010-11-05 03:52:35 | 000,165,720 |——| M] () MD5=501E961FEEBBDE040FB836CB5DE122C2—C:\Windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a\ComSvcConfig.exe
[2009-06-10 23:22:50 | 000,013,312 |——| M] () MD5=AAD128271C76C6596E69CFA81D765C2C—C:\Windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
[2009-06-10 23:22:50 | 000,005,120 |——| M] () MD5=BA86FDE9C3B5BD2FF5EA7A99BF648E82—C:\Windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe
[2010-11-20 14:32:20 | 000,094,208 |——| M] () MD5=3AC3967EB34A432332FF4E2D971397E8—C:\Windows\assembly\GAC_MSIL\ehCIR\6.1.0.0__31bf3856ad364e35\ehCIR.dll
[2010-11-20 14:32:20 | 000,143,360 |——| M] () MD5=7F404ED2BAD3365F1A6452DBE40024FD—C:\Windows\assembly\GAC_MSIL\ehexthost\6.1.0.0__31bf3856ad364e35\ehexthost.exe
[2009-07-13 23:04:37 | 000,002,274 |——| M] () MD5=C343B566A3B8DA7743C30796BE0A54D7—C:\Windows\assembly\GAC_MSIL\ehexthost\6.1.0.0__31bf3856ad364e35\ehexthost.exe.config
[2009-07-14 03:20:19 | 000,015,872 |——| M] () MD5=8C0473A82FF7D19D19B8F3E120B3BB3A—C:\Windows\assembly\GAC_MSIL\ehiActivScp\6.1.0.0__31bf3856ad364e35\ehiActivScp.dll
[2009-07-14 03:22:13 | 000,011,776 |——| M] () MD5=49D389CC7E7DC17C507F4B5AD6203AD3—C:\Windows\assembly\GAC_MSIL\ehiBmlDataCarousel\6.1.0.0__31bf3856ad364e35\ehiBmlDataCarousel.dll
[2009-07-14 03:20:15 | 000,077,824 |——| M] () MD5=598383C42098DF7D0FFD61F459B6CBAF—C:\Windows\assembly\GAC_MSIL\ehiExtens\6.1.0.0__31bf3856ad364e35\ehiExtens.dll
[2009-07-14 03:20:46 | 000,040,960 |——| M] () MD5=0DBF6B6DEBD8C1F3F810C17AF4A18CE5—C:\Windows\assembly\GAC_MSIL\ehiiTV\6.1.0.0__31bf3856ad364e35\ehiiTV.dll
[2010-11-20 14:32:20 | 000,172,032 |——| M] () MD5=3B813FB741DF5CD45EB4EA36AE0F83B3—C:\Windows\assembly\GAC_MSIL\ehiProxy\6.1.0.0__31bf3856ad364e35\ehiProxy.dll
[2009-07-14 03:20:56 | 000,086,016 |——| M] () MD5=2CC68F809DAF4D4FAC0E66B35A4EB9BE—C:\Windows\assembly\GAC_MSIL\ehiTVMSMusic\6.1.0.0__31bf3856ad364e35\ehiTVMSMusic.dll
[2009-07-14 03:20:37 | 000,006,144 |——| M] () MD5=A924F87D32D7D28D58D3CBDB8B103E6F—C:\Windows\assembly\GAC_MSIL\ehiUPnP\6.1.0.0__31bf3856ad364e35\ehiUPnP.dll
[2009-07-14 03:20:38 | 000,032,768 |——| M] () MD5=62F20E48B43B44D9C6E9B4CF08FB120D—C:\Windows\assembly\GAC_MSIL\ehiUserXp\6.1.0.0__31bf3856ad364e35\ehiUserXp.dll
[2009-07-14 03:20:51 | 000,335,872 |——| M] () MD5=DB2189BF0B4D192F70605F50EC30037B—C:\Windows\assembly\GAC_MSIL\ehiVidCtl\6.1.0.0__31bf3856ad364e35\ehiVidCtl.dll
[2009-07-14 03:21:00 | 000,143,360 |——| M] () MD5=391EF4FF1EF376B4408C0DEFE2041DBF—C:\Windows\assembly\GAC_MSIL\ehiwmp\6.1.0.0__31bf3856ad364e35\ehiwmp.dll
[2009-07-14 03:22:59 | 000,086,016 |——| M] () MD5=82A5798BD1A2FE8678A51CC9CE493F7F—C:\Windows\assembly\GAC_MSIL\ehiWUapi\6.1.0.0__31bf3856ad364e35\ehiWUapi.dll
[2010-11-20 14:32:21 | 000,196,608 |——| M] () MD5=641443B48D34539ED0F58C1FC3A379F0—C:\Windows\assembly\GAC_MSIL\ehRecObj\6.1.0.0__31bf3856ad364e35\ehRecObj.dll
[2010-11-20 14:32:21 | 006,307,840 |——| M] () MD5=89AFF2261ECF21647B126E596675E302—C:\Windows\assembly\GAC_MSIL\ehshell\6.1.0.0__31bf3856ad364e35\ehshell.dll
[2009-07-14 10:47:47 | 000,008,704 |——| M] () MD5=1A3830615313C3728A7B322316E9F6F7—C:\Windows\assembly\GAC_MSIL\EventViewer.Resources\6.1.0.0_da_31bf3856ad364e35\EventViewer.resources.dll
[2010-11-20 14:32:20 | 000,368,640 |——| M] () MD5=F046EB4BBFC631D178C6DF20819C1DE5—C:\Windows\assembly\GAC_MSIL\EventViewer\6.1.0.0__31bf3856ad364e35\EventViewer.dll
[2009-06-10 23:22:54 | 000,008,192 |——| M] () MD5=96D9E7E468D537443DE037A7E15CB804—C:\Windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
[2009-06-10 23:22:55 | 000,077,824 |——| M] () MD5=AF29AA7F2F613951A9E913B4290B2ECE—C:\Windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
[2009-06-10 23:22:55 | 000,006,656 |——| M] () MD5=D051642D0ED61E2886FD8917E8B6FAFD—C:\Windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
[2009-07-14 03:23:32 | 000,106,496 |——| M] () MD5=967047584598B8EA09A742328872C06D—C:\Windows\assembly\GAC_MSIL\loadmxf\6.1.0.0__31bf3856ad364e35\loadmxf.exe
[2010-11-20 14:32:22 | 000,942,080 |——| M] () MD5=95738FEDB3C23753C20CBCF7D772E259—C:\Windows\assembly\GAC_MSIL\mcepg\6.1.0.0__31bf3856ad364e35\mcepg.dll
[2009-07-14 03:19:48 | 000,053,248 |——| M] () MD5=F499B89A60548AF6B4E8EE715C6599B0—C:\Windows\assembly\GAC_MSIL\MCESidebarCtrl\6.1.0.0__31bf3856ad364e35\MCESidebarCtrl.dll
[2010-11-20 14:32:22 | 000,122,880 |——| M] () MD5=8E8ADA64942CF38625A557C026059AC3—C:\Windows\assembly\GAC_MSIL\mcglidhostobj\6.1.0.0__31bf3856ad364e35\mcglidhostobj.dll
[2010-11-20 14:32:22 | 000,171,520 |——| M] () MD5=C6FB5599850922CE6B440899C078A2CF—C:\Windows\assembly\GAC_MSIL\mcplayerinterop\6.1.0.0__31bf3856ad364e35\mcplayerinterop.dll
[2010-11-20 14:32:22 | 000,638,976 |——| M] () MD5=F338EC894AA0CE005156B4AB2FF77CCC—C:\Windows\assembly\GAC_MSIL\mcstore\6.1.0.0__31bf3856ad364e35\mcstore.dll
[2010-11-20 14:54:25 | 000,012,800 |——| M] () MD5=A850FBEE255595C3A7242F2CC4F0849D—C:\Windows\assembly\GAC_MSIL\Microsoft.ApplicationId.Framework.Resources\6.1.0.0_da_31bf3856ad364e35\Microsoft.ApplicationId.Framework.Resources.dll
[2010-11-20 14:32:22 | 000,126,976 |——| M] () MD5=FAFD132B02E237B578DC83DA5A413C4D—C:\Windows\assembly\GAC_MSIL\Microsoft.ApplicationId.Framework\6.1.0.0__31bf3856ad364e35\Microsoft.ApplicationId.Framework.dll
[2009-07-14 10:48:02 | 000,221,184 |——| M] () MD5=717AECB42279AEDDCC11D253F19B8014—C:\Windows\assembly\GAC_MSIL\Microsoft.ApplicationId.RuleWizard.Resources\6.1.0.0_da_31bf3856ad364e35\Microsoft.ApplicationId.RuleWizard.Resources.dll
[2010-11-20 14:32:22 | 000,339,968 |——| M] () MD5=6F13266F31A5D3F5178010FD5BB6E32A—C:\Windows\assembly\GAC_MSIL\Microsoft.ApplicationId.RuleWizard\6.1.0.0__31bf3856ad364e35\Microsoft.ApplicationId.RuleWizard.dll
[2009-07-14 10:47:57 | 000,007,168 |——| M] () MD5=FCA8AC8ABBCE37458663CCA33E7F71F7—C:\Windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.resources.dll
[2009-07-14 03:20:28 | 000,057,344 |——| M] () MD5=D16F569EB4264641241465BEFA107BD0—C:\Windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management\1.0.0.0__31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.dll
[2009-06-10 23:14:36 | 000,106,496 |——| M] () MD5=550E75434C424A17A1E06669D8335C26—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
[2012-04-05 11:24:31 | 000,106,496 |——| M] () MD5=4F1E7D370C91BB2325FE15861D5291B2—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Conversion\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.dll
[2009-07-14 10:47:50 | 000,053,248 |——| M] () MD5=3A7C50C6239BCC2425C1FF9009547C6A—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_da_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll
[2010-11-05 03:57:44 | 000,348,160 |——| M] () MD5=24FDCD95121E59D39DCB1585EC8C5901—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
[2010-11-05 03:53:30 | 000,733,184 |——| M] () MD5=DC6476726F4A15BF5BC8CF2C235B17C6—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
[2010-11-05 03:57:44 | 000,036,864 |——| M] () MD5=4B177641BEBC8965220EC474D65981A3—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
[2009-06-10 23:14:40 | 000,036,864 |——| M] () MD5=80F89EC03B39E5A6700C9CA5A5545230—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
[2009-07-14 10:47:49 | 000,135,168 |——| M] () MD5=A794E8FB1A7F85ED777C6771A5D0AA2B—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.resources\2.0.0.0_da_b03f5f7f11d50a3a\Microsoft.Build.Tasks.resources.dll
[2010-11-05 03:53:36 | 000,802,816 |——| M] () MD5=9EBE67131D1776B86410B56FFC95A5BF—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
[2010-11-05 03:57:45 | 000,655,360 |——| M] () MD5=5B5AEB3CEB1FC6D77E57821E6A42DE72—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
[2009-07-14 10:47:49 | 000,010,240 |——| M] () MD5=6539155934A7122476E07DD67C3EA03E—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.resources\2.0.0.0_da_b03f5f7f11d50a3a\Microsoft.Build.Utilities.Resources.dll
[2010-11-05 03:53:30 | 000,094,208 |——| M] () MD5=B6EF0B4C1898D03FC7814B890FCE9B72—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
[2010-11-05 03:57:45 | 000,077,824 |——| M] () MD5=D7A537839EAB83BAD8F3C053098198E8—C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
[2010-11-20 14:54:25 | 000,483,328 |——| M] () MD5=F310E8AFD5749C0C688CCC57E218855C—C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.Reporting.Resources\2.0.0.0_da_31bf3856ad364e35\Microsoft.GroupPolicy.Reporting.Resources.dll
[2010-11-20 14:35:58 | 001,851,392 |——| M] () MD5=C21EB170F553EAD23D02B519A338F03B—C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.Reporting\2.0.0.0__31bf3856ad364e35\Microsoft.GroupPolicy.Reporting.dll
[2009-07-14 10:47:57 | 000,040,960 |——| M] () MD5=FE432A039A86711FAE0A9AAD7BD33009—C:\Windows\assembly\GAC_MSIL\Microsoft.Ink.Resources\6.1.0.0_da_31bf3856ad364e35\Microsoft.Ink.Resources.dll
[2009-07-14 10:47:53 | 000,045,056 |——| M] () MD5=6104A4F60542DA375BCA1842972C8C67—C:\Windows\assembly\GAC_MSIL\Microsoft.Jscript.resources\8.0.0.0_da_b03f5f7f11d50a3a\Microsoft.JScript.resources.dll
[2009-06-10 23:23:03 | 000,749,568 |——| M] () MD5=3CF65928E67E362D5B25424EBCC27B12—C:\Windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
[2009-07-14 10:47:51 | 000,016,384 |——| M] () MD5=CA7025863C73BF492EC9011B6ABCAF5B—C:\Windows\assembly\GAC_MSIL\Microsoft.ManagementConsole.Resources\3.0.0.0_da_31bf3856ad364e35\Microsoft.ManagementConsole.Resources.dll
[2009-07-14 03:21:42 | 000,188,416 |——| M] () MD5=F8B72BFD1D8C36E1A2C98E25C9CF2504—C:\Windows\assembly\GAC_MSIL\Microsoft.ManagementConsole\3.0.0.0__31bf3856ad364e35\Microsoft.ManagementConsole.dll
[2009-07-14 03:22:44 | 001,159,168 |——| M] () MD5=2D994989944FA2E9D2AD7450953523A9—C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Bml\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.Bml.dll
[2009-07-14 03:22:09 | 000,024,576 |——| M] () MD5=97D4AC2BAD43C5D5C8C42EDB71B2E532—C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.iTv.Hosting\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.iTv.Hosting.dll
[2010-11-20 14:35:58 | 000,086,016 |——| M] () MD5=083B692697B5974B0A5ED59BF4D3147C—C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.iTV\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.iTV.dll
[2010-11-20 14:35:58 | 000,045,056 |——| M] () MD5=A9D673D4B371B9D918875386640113BA—C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.ITVVM\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.ITVVM.dll
[2010-11-20 14:35:58 | 001,572,864 |——| M] () MD5=0CFCDCFB9D28CE7AFC3F1823250ABE71—C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Shell\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.Shell.dll
[2010-11-20 14:35:58 | 000,241,664 |——| M] () MD5=3E1A7D201A38D73F14FFE90909B38A86—C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Sports\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.Sports.dll
[2010-11-20 14:35:59 | 002,596,864 |——| M] () MD5=732807787D6FA99791370D934360AE4C—C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.UI\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.UI.dll
[2010-11-20 14:35:59 | 000,385,024 |——| M] () MD5=2F4797433A371756FE937CE802C2F313—C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
[2012-04-05 11:24:36 | 000,069,632 |——| M] () MD5=BA7F254248637B611DE7090207DE1891—C:\Windows\assembly\GAC_MSIL\Microsoft.MSXML\8.0.0.0__b03f5f7f11d50a3a\microsoft.msxml.dll
[2012-04-05 11:24:14 | 000,609,104 |——| M] () MD5=1D58BB83FAA5D070A8525C9C6398E7A2—C:\Windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
[2012-04-05 11:24:14 | 000,043,840 |——| M] () MD5=0B8A9BB294B8CF79C99DD3486317285C—C:\Windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.FormControl\12.0.0.0__71e9bce111e9429c\microsoft.office.infopath.formcontrol.dll
[2012-04-05 11:24:14 | 000,039,728 |——| M] () MD5=A4DAC1328EB3271B7F18B56572BC6433—C:\Windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Vsta\12.0.0.0__71e9bce111e9429c\Microsoft.Office.InfoPath.Vsta.dll
[2012-04-05 11:24:14 | 000,060,200 |——| M] () MD5=F8B8E043A7CF09E811A9914BA4A6FE34—C:\Windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.dll
[2009-07-14 10:47:57 | 000,010,752 |——| M] () MD5=65B27C38DBD68EFEC636665FDBF4D1FF—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Diagnostics.resources.dll
[2010-11-20 14:35:58 | 000,102,400 |——| M] () MD5=2E86EDB34D366FCC9425B1A4654FC543—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Diagnostics.dll
[2009-07-14 10:47:57 | 000,036,864 |——| M] () MD5=10C9C4380C4B403B95D757C4517AFD5B—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.Resources.dll
[2010-11-20 14:35:58 | 000,290,816 |——| M] () MD5=33C0200ED261F9738AB90A58C97E2E52—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll
[2010-11-20 14:19:49 | 000,049,152 |——| M] () MD5=28AF2A12179398B90A6F18E451010209—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.Resources.dll
[2010-11-20 14:35:59 | 000,667,648 |——| M] () MD5=C23ACC08CB8049A8DDC7D8CD84280096—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll
[2010-11-20 14:19:49 | 000,040,960 |——| M] () MD5=42CDE70A57616C7D54694E881C5F84A9—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.Resources.dll
[2009-07-14 03:23:47 | 000,200,704 |——| M] () MD5=61408B3CF77B787A753B6F4F4A6840B1—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll
[2009-07-14 10:47:56 | 000,069,632 |——| M] () MD5=DF60F16CB3FA971EBD1CB6B1FA346AF6—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Editor.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Editor.Resources.dll
[2010-11-20 14:35:59 | 000,991,232 |——| M] () MD5=7E6557381C8CF162A4ED0D9A581F870B—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Editor\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Editor.dll
[2009-07-14 10:47:57 | 000,040,960 |——| M] () MD5=41888D6ED40E49C4DAED8E412BB18B90—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Gpowershell.resources.dll
[2009-07-14 03:22:04 | 000,651,264 |——| M] () MD5=E66B1EEE2AB24DE9F3D5189A1FC8D4BF—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.GPowerShell.dll
[2009-07-14 10:47:57 | 000,016,896 |——| M] () MD5=E848EEBF463086883E026AAD11C24F1A—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.GraphicalHost.Resources.dll
[2009-07-14 03:20:38 | 000,278,528 |——| M] () MD5=3EAB4DBDC290EDC4D53FE77F1FDB9E59—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.GraphicalHost.dll
[2009-07-14 10:47:57 | 000,009,216 |——| M] () MD5=462D0B841E939094840CFA61C990410F—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Security.Resources.dll
[2010-11-20 14:35:58 | 000,077,824 |——| M] () MD5=B1282FC909517D890C61F7F3313134EF—C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll
[2009-07-14 10:48:02 | 000,082,011 |——| M] () MD5=AF07B8B898E6D6E01EC6ECAD383C5CD0—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources\6.1.0.0_en_31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.dll-Help.xml
[2009-07-14 10:48:02 | 000,005,632 |——| M] () MD5=B6B1A93999D480F0892C96D11E4CAEF8—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources\6.1.0.0_en_31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources.dll
[2009-06-10 23:31:47 | 000,000,652 |——| M] () MD5=2B16AAD4E01313F505F21AF056730BFE—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets\6.1.0.0__31bf3856ad364e35\AppLocker.psd1
[2009-07-14 03:23:53 | 000,040,960 |——| M] () MD5=6AF8A638441BE7A62571166717B1CE0D—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets\6.1.0.0__31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.dll
[2009-07-14 10:48:02 | 000,006,656 |——| M] () MD5=64AD5414243FA4FAB5442E594BA7C39B—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.Resources\6.1.0.0_da_31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.Resources.dll
[2009-07-14 03:24:08 | 000,045,056 |——| M] () MD5=3A6C04FD597605557BD35FA3C5D4B9E8—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager\6.1.0.0__31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.dll
[2010-11-20 14:54:25 | 000,006,656 |——| M] () MD5=8EC8A51960B971FDBAEE69D081E252A5—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources\6.1.0.0_da_31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources.dll
[2009-07-14 03:24:16 | 000,061,440 |——| M] () MD5=E78A62A1A783212133C6B0618D9B72BF—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel\6.1.0.0__31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.dll
[2009-07-14 03:24:27 | 000,012,800 |——| M] () MD5=F2051076DF423BF3F29E47D4FFAB13D4—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper\6.1.0.0__31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.dll
[2009-07-14 10:48:02 | 000,159,744 |——| M] () MD5=683DE4D2ECB222859882068DDE2E6FDA—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.resources\6.1.0.0_da_31bf3856ad364e35\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.resources.dll
[2010-11-20 14:35:59 | 000,679,936 |——| M] () MD5=CCD2EDF7E01C9D037DC18B322FA33DD9—C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard\6.1.0.0__31bf3856ad364e35\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.dll
[2009-07-14 10:47:51 | 000,073,728 |——| M] () MD5=69D5D474B18C9E713877E38BE6CF969A—C:\Windows\assembly\GAC_MSIL\Microsoft.Tpm.Resources\6.1.0.0_da_31bf3856ad364e35\microsoft.tpm.resources.dll
[2009-07-14 03:24:19 | 000,192,512 |——| M] () MD5=466761E68D1AAED81DFD5E43B168D2F0—C:\Windows\assembly\GAC_MSIL\Microsoft.Tpm\6.1.0.0__31bf3856ad364e35\Microsoft.Tpm.dll
[2009-07-14 10:48:00 | 000,005,120 |——| M] () MD5=10173D7E447A94EAEFE8045FC66EB8BF—C:\Windows\assembly\GAC_MSIL\microsoft.transactions.bridge.dtc.resources\3.0.0.0_da_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.Resources.dll
[2009-07-14 10:48:00 | 000,028,672 |——| M] () MD5=A8D01E458538DA8A3662509948B755C8—C:\Windows\assembly\GAC_MSIL\microsoft.transactions.bridge.resources\3.0.0.0_da_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Resources.dll
[2009-06-10 23:14:03 | 000,397,312 |——| M] () MD5=130FF58B6245F78097E7619EFB61CDD2—C:\Windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
[2009-07-14 10:47:46 | 000,008,704 |——| M] () MD5=0153FC86AA5045F1BB14791A5DAB3007—C:\Windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.resources\8.0.0.0_da_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.resources.dll
[2009-06-10 23:23:03 | 000,110,592 |——| M] () MD5=A070FD9509392CEB84A3ED8F8A42A504—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
[2009-07-14 10:47:50 | 000,009,216 |——| M] () MD5=3A3AD3AB0D4A2F645E6DA84FCAD5C3D7—C:\Windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.resources\8.0.0.0_da_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.resources.dll
[2010-11-05 03:57:46 | 000,372,736 |——| M] () MD5=B424A0AF636B1D3DAE3A664285EF9795—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
[2009-07-14 10:47:48 | 000,057,344 |——| M] () MD5=07CB56C5A7F796D6D6F3869A71C4A950—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_da_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
[2009-06-10 23:23:04 | 000,028,672 |——| M] () MD5=A5B5F03020C0A01276801CF2C807FF8C—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
[2010-11-05 03:57:46 | 000,610,304 |——| M] () MD5=DF1F3AFE18D254F759BB1A000B811C15—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
[2009-06-10 23:14:40 | 000,041,984 |——| M] () MD5=DD26812B72AF01116F7A1DDD4FA21E49—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
[2009-06-10 23:23:04 | 000,005,632 |——| M] () MD5=BBAEF0C6E310A25D3BCCAA2ADC538F82—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
[2012-04-05 11:24:29 | 000,733,184 |——| M] () MD5=6EB73468B811FEA67F87367A28D181BB—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.CommonIDE\8.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.commonide.dll
[2012-04-05 11:24:30 | 000,106,496 |——| M] () MD5=D55A304702CC9F83A54F67FB4FA90549—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Configuration\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Configuration.dll
[2012-04-05 11:20:03 | 000,049,152 |——| M] () MD5=0204A4EFAC2AB1338FE398389103392B—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.DebuggerVisualizers\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.DebuggerVisualizers.dll
[2012-04-05 11:24:30 | 000,434,176 |——| M] () MD5=A3FE76ED7AB2DE1ED1CD58BFCA4C4308—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Design\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Design.dll
[2012-04-05 11:24:36 | 001,859,584 |——| M] () MD5=898EE60BEE554C509969149875DDE899—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Editors\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Editors.dll
[2012-04-05 11:24:37 | 000,024,576 |——| M] () MD5=3498FAA72B4643AC448913473ECAB5A6—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities.Sync\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.Sync.dll
[2012-04-05 11:24:38 | 000,049,152 |——| M] () MD5=0FEABE92B0B9BF5A12A2E052346750A9—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.dll
[2012-04-05 11:24:31 | 000,032,768 |——| M] () MD5=BCD01AA9DF13CA298DE8E5603810CF16—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.ManagedInterfaces\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.ManagedInterfaces.dll
[2012-04-05 11:24:30 | 000,344,064 |——| M] () MD5=E955D901EA021B4E89BAA07914070B11—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Package.LanguageService\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Package.LanguageService.dll
[2012-04-05 11:24:31 | 000,004,096 |——| M] () MD5=36C05C727EC46ABB326CC182A43E02E3—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.ProjectAggregator\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.ProjectAggregator.dll
[2012-04-05 11:24:42 | 000,806,912 |——| M] () MD5=C95AFA6E9733A5118C076A26CD1B2267—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Publish\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Publish.dll
[2012-04-05 11:24:30 | 000,249,856 |——| M] () MD5=D3D257A5140422A17ECB4D85A249EF36—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell.Design\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Design.dll
[2012-04-05 11:24:31 | 000,376,832 |——| M] () MD5=669D7717532331180C86E692EFC248AE—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.dll
[2012-04-05 11:24:30 | 000,015,872 |——| M] () MD5=E44AA3564E4C522C8FC9B51196488955—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.TemplateWizardInterface\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TemplateWizardInterface.dll
[2012-04-05 11:20:02 | 000,004,096 |——| M] () MD5=4B8A981978A545039857A022C514452E—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter.resources\8.0.0.0_da_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.resources.dll
[2012-04-05 11:24:24 | 000,211,736 |——| M] () MD5=2D273C8B22DA28704B4968E5197A793F—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.dll
[2012-04-05 11:20:02 | 000,005,632 |——| M] () MD5=C9A3659819721BEBBA4EEFDF4AC31695—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInManager.resources\8.0.0.0_da_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInManager.resources.dll
[2012-04-05 11:24:24 | 000,105,248 |——| M] () MD5=F05A0DC8BC23982813A4AD61EAA89E7D—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInManager\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll
[2012-04-05 11:24:24 | 000,330,520 |——| M] () MD5=7FBD0EDFBE1A28CD9FC392735699E749—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Blueprints\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Blueprints.dll
[2012-04-05 11:20:02 | 000,004,096 |——| M] () MD5=E0B04D6E4C2CAA7AA60DDCFFDDC6260C—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.resources\8.0.0.0_da_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.resources.dll
[2012-04-05 11:24:25 | 000,039,712 |——| M] () MD5=52FC5D2D66561348D3ECF4BB5F55145D—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll
[2012-04-05 11:24:25 | 000,039,704 |——| M] () MD5=3DAE657D730C6B4E50107831F7B334E8—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.dll
[2012-04-05 11:24:24 | 000,072,472 |——| M] () MD5=69A552F5D231C02F43F1E18ABC69B131—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.DesignTime\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll
[2012-04-05 11:24:29 | 000,016,384 |——| M] () MD5=4D064E04F3D498E49F545FBEFEFD39EF—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.VSContentInstaller\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.VSContentInstaller.dll
[2012-04-05 11:24:30 | 000,360,448 |——| M] () MD5=6197D7C45305377B8DC0B72DCCF7BC45—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Windows.Forms\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Windows.Forms.dll
[2012-04-05 11:24:30 | 000,073,728 |——| M] () MD5=8CAE0671D23233812E0C2F2AE9368FDC—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.WizardFramework\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.WizardFramework.Dll
[2012-04-05 11:19:50 | 000,053,248 |——| M] () MD5=5AEE74056A4EF4ADEB708D17BACFD5F3—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Zip\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Zip.dll
[2012-04-05 11:24:30 | 000,294,912 |——| M] () MD5=84C39155D5D6AEDBECB9E1C6C107E305—C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio\2.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.dll
[2009-06-10 23:23:04 | 000,012,800 |——| M] () MD5=71C2F1A0F8FFD6D017F039AC023DE81C—C:\Windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
[2009-06-10 23:23:04 | 000,032,768 |——| M] () MD5=45F2E4914DDCDA6F468D99FAA91911F2—C:\Windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
[2012-04-05 11:24:36 | 004,202,496 |——| M] () MD5=8980A73297251F71AE19E319A1413A5E—C:\Windows\assembly\GAC_MSIL\Microsoft.VSDesigner\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VSDesigner.dll
[2009-07-14 10:47:57 | 000,004,096 |——| M] () MD5=04D3E891B3256A1EBD36FA7B6F984920—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.resources.dll
[2009-07-14 03:25:15 | 000,009,728 |——| M] () MD5=96F718F03F4D8782D7EB11954AC0E914—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.GetDiagInput\6.1.0.0__31bf3856ad364e35\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.dll
[2009-07-14 10:47:57 | 000,004,096 |——| M] () MD5=ADD629AFA64864C8519B2485F6F61554—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.resources.dll
[2009-07-14 03:26:39 | 000,010,752 |——| M] () MD5=78EF40CE03E23CB6702391D919F95436—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport\6.1.0.0__31bf3856ad364e35\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.dll
[2009-07-14 10:47:57 | 000,004,096 |——| M] () MD5=84AA3A80B726C6DCCDAA38A879862D6D—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.resources.dll
[2009-07-14 03:25:40 | 000,009,216 |——| M] () MD5=EE5B0505F2E8E8305748DD270A7AD929—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause\6.1.0.0__31bf3856ad364e35\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.dll
[2009-07-14 10:47:57 | 000,004,096 |——| M] () MD5=BEBFDDCB2DB36E9302A4358878C8CFD4—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.resources.dll
[2009-07-14 03:25:32 | 000,008,192 |——| M] () MD5=7FBCA94271448B41DB000C98C9615312—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress\6.1.0.0__31bf3856ad364e35\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.dll
[2009-07-14 10:47:57 | 000,004,096 |——| M] () MD5=DA479676F97D804A65BA89B0AB01EBEB—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.SDHost.Resources\1.0.0.0_da_31bf3856ad364e35\Microsoft.Windows.Diagnosis.SDHost.resources.dll
[2009-07-14 03:25:35 | 000,024,576 |——| M] () MD5=915BBFA6BBF105C0C51398A3398D19CB—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.SDHost\6.1.0.0__31bf3856ad364e35\Microsoft.Windows.Diagnosis.SDHost.dll
[2009-07-14 10:47:57 | 000,006,656 |——| M] () MD5=FC66A5034B5B6A7C09FCE86C47BBF4ED—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.TroubleshootingPack.Resources\6.1.0.0_en_31bf3856ad364e35\Microsoft.Windows.Diagnosis.TroubleshootingPack.resources.dll
[2009-07-14 03:26:37 | 000,049,152 |——| M] () MD5=4BB0FF1D72803CC075D92CE2FBDCA2B3—C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.TroubleshootingPack\6.1.0.0__31bf3856ad364e35\Microsoft.Windows.Diagnosis.TroubleshootingPack.dll
[2010-11-20 14:19:49 | 000,013,824 |——| M] () MD5=C58C7003380F76221AB9B5BBB4AE4452—C:\Windows\assembly\GAC_MSIL\Microsoft.WSMan.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.WSMan.Management.resources.dll
[2010-11-20 14:36:00 | 000,286,720 |——| M] () MD5=64C192235DF8F704412F0D66BAF5C1B1—C:\Windows\assembly\GAC_MSIL\Microsoft.WSMan.Management\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Management.dll
[2009-07-14 03:22:00 | 000,007,168 |——| M] () MD5=D5F86545FAF811ED2CCF3C6117B0EC44—C:\Windows\assembly\GAC_MSIL\Microsoft.WSMan.Runtime\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Runtime.dll
[2009-06-10 23:23:04 | 000,007,168 |——| M] () MD5=E5640EF09DA87B03E78F18F850CFF728—C:\Windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
[2009-07-14 10:47:51 | 001,556,480 |——| M] () MD5=FB5A76620E88AF0C1260DE1C33A8B3D2—C:\Windows\assembly\GAC_MSIL\MiguiControls.Resources\1.0.0.0_da_31bf3856ad364e35\MIGUIControls.resources.dll
[2010-11-20 14:36:00 | 003,416,064 |——| M] () MD5=CD35B1936F50990D1FCEAE31E2D1553F—C:\Windows\assembly\GAC_MSIL\MiguiControls\1.0.0.0__31bf3856ad364e35\MIGUIControls.dll
[2009-07-14 10:47:49 | 000,036,864 |——| M] () MD5=71216C4974A358E91FC2B0C5DD5D9E56—C:\Windows\assembly\GAC_MSIL\MMCEx.Resources\3.0.0.0_da_31bf3856ad364e35\MMCEx.Resources.dll
[2009-07-14 03:26:50 | 000,421,888 |——| M] () MD5=A9D4275CE5EA165C267AE05A6821CB54—C:\Windows\assembly\GAC_MSIL\MMCEx\3.0.0.0__31bf3856ad364e35\MMCEx.dll
[2010-11-20 14:54:26 | 000,004,096 |——| M] () MD5=B94763A1FC4F66A83C2D2156C8A16557—C:\Windows\assembly\GAC_MSIL\MMCFxCommon.Resources\3.0.0.0_da_31bf3856ad364e35\MMCFxCommon.Resources.dll
[2009-07-14 03:26:07 | 000,110,592 |——| M] () MD5=E72BF459A519312B4FF7F3FA8A85BA13—C:\Windows\assembly\GAC_MSIL\MMCFxCommon\3.0.0.0__31bf3856ad364e35\MMCFxCommon.dll
[2010-11-13 04:03:29 | 000,299,008 |——| M] () MD5=DD839E6B66C87CAE9C8B38004583F93A—C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_da_b77a5c561934e089\mscorlib.resources.dll
[2009-07-14 10:47:48 | 000,049,152 |——| M] () MD5=A49B54AE2D2F1E408BB35AA09A6C2C41—C:\Windows\assembly\GAC_MSIL\napinit.resources\6.1.0.0_da_31bf3856ad364e35\napinit.Resources.dll
[2009-07-14 03:22:44 | 000,073,728 |——| M] () MD5=0E2E919A5255D305CF1B3AE9B9D452F1—C:\Windows\assembly\GAC_MSIL\napinit\6.1.0.0__31bf3856ad364e35\NAPINIT.DLL
[2009-07-14 10:47:49 | 000,237,568 |——| M] () MD5=128207431CBCB42B129EC60AD142D374—C:\Windows\assembly\GAC_MSIL\napsnap.resources\6.1.0.0_da_31bf3856ad364e35\napsnap.resources.dll
[2009-07-14 03:25:01 | 000,454,656 |——| M] () MD5=FC35785CC6FD225A4E504A23DE13D085—C:\Windows\assembly\GAC_MSIL\napsnap\6.1.0.0__31bf3856ad364e35\NAPSNAP.DLL
[2010-11-20 14:36:00 | 001,077,248 |——| M] () MD5=95DE3CF54E0A360EED766DBDDF152F0D—C:\Windows\assembly\GAC_MSIL\Narrator\6.1.0.0__31bf3856ad364e35\Narrator.exe
[2010-01-01 01:18:14 | 000,000,815 |——| M] () MD5=0A33273323603FCBD8DDD74758163161—C:\Windows\assembly\GAC_MSIL\Policy.6.0.ehRecObj\6.1.0.0__31bf3856ad364e35\Policy.6.0.ehRecObj.config
[2010-01-01 01:18:14 | 000,005,632 |——| M] () MD5=841736FAB112AC493646E4399E684D38—C:\Windows\assembly\GAC_MSIL\Policy.6.0.ehRecObj\6.1.0.0__31bf3856ad364e35\Policy.6.0.ehRecObj.dll
[2010-01-01 01:18:14 | 000,000,831 |——| M] () MD5=A9C1035129544B3867E06A8F02874FE4—C:\Windows\assembly\GAC_MSIL\Policy.6.0.Microsoft.MediaCenter.UI\6.1.0.0__31bf3856ad364e35\Policy.6.0.Microsoft.MediaCenter.UI.config
[2010-01-01 01:18:14 | 000,005,632 |——| M] () MD5=1A49D09BD80C023A771214DA826FF6B6—C:\Windows\assembly\GAC_MSIL\Policy.6.0.Microsoft.MediaCenter.UI\6.1.0.0__31bf3856ad364e35\Policy.6.0.Microsoft.MediaCenter.UI.dll
[2010-01-01 01:18:14 | 000,000,828 |——| M] () MD5=52B88C0916FAFF34E0174CD718980AC4—C:\Windows\assembly\GAC_MSIL\Policy.6.0.Microsoft.MediaCenter\6.1.0.0__31bf3856ad364e35\Policy.6.0.Microsoft.MediaCenter.config
[2010-01-01 01:18:14 | 000,005,632 |——| M] () MD5=0C8F794B0C057EB421569A4E5B8E98C5—C:\Windows\assembly\GAC_MSIL\Policy.6.0.Microsoft.MediaCenter\6.1.0.0__31bf3856ad364e35\Policy.6.0.Microsoft.MediaCenter.dll
[2009-07-14 10:48:00 | 000,049,152 |——| M] () MD5=4783B76CFAB246858E91167B285A9750—C:\Windows\assembly\GAC_MSIL\PresentationBuildTasks.resources\3.0.0.0_da_31bf3856ad364e35\PresentationBuildTasks.resources.dll
[2010-11-05 03:53:21 | 000,598,016 |——| M] () MD5=AEFD96A1A087027A7EDC21F83F1B4727—C:\Windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
[2009-06-10 23:14:50 | 000,032,768 |——| M] () MD5=24F02A6A94DC8AE6F2ACDA7950CBEEB3—C:\Windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
[2010-11-05 03:52:15 | 000,106,496 |——| M] () MD5=342EF5B25D0E48BAEE0245B0E979F130—C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_da_31bf3856ad364e35\PresentationCore.resources.dll
[2009-06-10 23:14:51 | 000,042,856 |——| M] () MD5=E56F39F6B7FDA0AC77A79B0FD3DE1A2F—C:\Windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
[2009-06-10 23:14:43 | 000,196,608 |——| M] () MD5=C9DF30B6F5D99C8147C528528B9CC498—C:\Windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
[2009-06-10 23:14:44 | 000,139,264 |——| M] () MD5=98F2493B40E00061B4A4369E63790293—C:\Windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
[2010-11-05 03:53:23 | 000,397,312 |——| M] () MD5=4E9FDA223530F931AC1F03ABB58E4DA5—C:\Windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
[2010-11-05 03:52:15 | 000,237,568 |——| M] () MD5=9BA3B694939185F8F01F9600C95F428A—C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_da_31bf3856ad364e35\PresentationFramework.resources.dll
[2009-06-10 23:14:44 | 000,163,840 |——| M] () MD5=13E8EC241CA1402C923DF3A1DA9CAF70—C:\Windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
[2012-02-11 01:31:41 | 005,283,840 |——| M] () MD5=530DFD580E4C341B267ED4E2A56B8233—C:\Windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
[2009-07-14 10:48:00 | 000,368,640 |——| M] () MD5=E72E617E58E15C3A9BE24365CE347FAB—C:\Windows\assembly\GAC_MSIL\PresentationUI.resources\3.0.0.0_da_31bf3856ad364e35\PresentationUI.resources.dll
[2009-06-10 23:14:52 | 000,864,256 |——| M] () MD5=0F8242348EBA698FF93193A6BDC55362—C:\Windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
[2009-07-14 10:48:00 | 000,040,960 |——| M] () MD5=4811F8B6FFE03F164EACF32D9507E3FC—C:\Windows\assembly\GAC_MSIL\ReachFramework.resources\3.0.0.0_da_31bf3856ad364e35\ReachFramework.resources.dll
[2012-02-11 01:31:41 | 000,532,480 |——| M] () MD5=93CF6C96CDBFC1834A28F835B769E8BA—C:\Windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
[2009-07-14 10:48:02 | 000,012,800 |——| M] () MD5=B6D86E1089AB25D7151AD912BC7D8755—C:\Windows\assembly\GAC_MSIL\SecurityAuditPoliciesSnapIn.resources\6.1.0.0_da_31bf3856ad364e35\SecurityAuditPoliciesSnapIn.resources.dll
[2010-11-20 14:36:00 | 000,167,936 |——| M] () MD5=5C8718A23AEAF5092AB84167FD829090—C:\Windows\assembly\GAC_MSIL\SecurityAuditPoliciesSnapIn\6.1.0.0__31bf3856ad364e35\SecurityAuditPoliciesSnapIn.dll
[2009-06-10 23:15:18 | 000,005,632 |——| M] () MD5=AA7004ABA8C37DDCA200E16F1570EF62—C:\Windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
[2009-07-14 10:48:00 | 000,005,120 |——| M] () MD5=8454592376073F8616359543746CFAE3—C:\Windows\assembly\GAC_MSIL\smdiagnostics.resources\3.0.0.0_da_b77a5c561934e089\SMDiagnostics.resources.dll
[2010-11-05 03:52:39 | 000,110,592 |——| M] () MD5=6F145DEF09821EB6614C501430CB838C—C:\Windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
[2010-11-05 03:52:39 | 000,128,848 |——| M] () MD5=F476EC40033CDB91EFBE73EB99B8362D—C:\Windows\assembly\GAC_MSIL\SMSvcHost\3.0.0.0__b03f5f7f11d50a3a\SMSvcHost.exe
[2009-07-14 03:25:09 | 000,086,016 |——| M] () MD5=46107610B0BDFA104BDF859664DB1654—C:\Windows\assembly\GAC_MSIL\SonicMCEBurnEngine\6.1.0.0__31bf3856ad364e35\SonicMCEBurnEngine.dll
[2010-11-20 14:54:26 | 000,200,704 |——| M] () MD5=D324F29CDBAD2C05DEC4B2CA4868DB2E—C:\Windows\assembly\GAC_MSIL\SrpUxSnapIn.resources\6.1.0.0_da_31bf3856ad364e35\SrpUxSnapIn.resources.dll
[2010-11-20 14:36:01 | 001,048,576 |——| M] () MD5=7C872B1C076B85D23A4AA7799BD53BF8—C:\Windows\assembly\GAC_MSIL\SrpUxSnapIn\6.1.0.0__31bf3856ad364e35\SrpUxSnapIn.dll
[2009-07-14 10:47:47 | 000,010,240 |——| M] () MD5=338999F494B84949E5F5FD84291CB0F3—C:\Windows\assembly\GAC_MSIL\sysglobl.resources\2.0.0.0_da_b03f5f7f11d50a3a\sysglobl.resources.dll
[2009-06-10 23:23:17 | 000,110,592 |——| M] () MD5=3C8AF820562CC8E3A1CF82650518F66C—C:\Windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
[2010-11-05 03:53:30 | 000,045,056 |——| M] () MD5=6D593E9AE74E39A62F8184515B27DF28—C:\Windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
[2012-04-05 11:24:25 | 000,039,624 |——| M] () MD5=80F57E4804E4BA1B203F8427C0475470—C:\Windows\assembly\GAC_MSIL\System.AddIn\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.dll
[2012-01-04 04:50:53 | 000,163,840 |——| M] () MD5=C2EC2AD05B97F9124399E1DA1D1386C2—C:\Windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
[2009-07-14 10:48:00 | 000,007,680 |——| M] () MD5=7A50EC2892EB6104E5032AF46FC63BAC—C:\Windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations.resources\3.5.0.0_da_31bf3856ad364e35\System.ComponentModel.DataAnnotations.Resources.dll
[2010-11-05 03:53:30 | 000,057,344 |——| M] () MD5=27E76A55FA5C3586297C2D42986304AC—C:\Windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
[2009-07-14 10:47:51 | 000,028,672 |——| M] () MD5=6C124FCA58F63253FCBC4EDB565C0F62—C:\Windows\assembly\GAC_MSIL\System.Configuration.Install.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Configuration.Install.resources.dll
[2010-11-05 03:58:04 | 000,081,920 |——| M] () MD5=ED2D3B032733BFC7A68FCE05BC7F93B4—C:\Windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
[2009-07-14 10:47:51 | 000,049,152 |——| M] () MD5=F129A5B1E51170E8EBC47410CCCC5D94—C:\Windows\assembly\GAC_MSIL\system.configuration.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Configuration.resources.dll
[2010-11-05 03:58:04 | 000,425,984 |——| M] () MD5=5A7A33F7F9DFC0C0A8B8E000F4D9D898—C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
[2009-07-14 10:48:00 | 000,057,344 |——| M] () MD5=1E73C7EF4402EC3732695CF53DF3E600—C:\Windows\assembly\GAC_MSIL\System.Core.resources\3.5.0.0_da_b77a5c561934e089\System.Core.Resources.dll
[2010-11-05 03:53:30 | 000,667,648 |——| M] () MD5=FC114C6C8AB34F1A357069AD3E4477F8—C:\Windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
[2010-11-05 03:53:31 | 000,053,248 |——| M] () MD5=82D34DEB3105E63981A0306B03C10A07—C:\Windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
[2010-11-05 03:52:07 | 000,015,360 |——| M] () MD5=5AF50D792824AF66E26CFAE1355A0594—C:\Windows\assembly\GAC_MSIL\System.Data.Entity.Design.resources\3.5.0.0_da_b77a5c561934e089\System.Data.Entity.Design.Resources.dll
[2010-11-05 03:53:31 | 000,229,376 |——| M] () MD5=02B81AAEB463E966372AF6A1C0B6038E—C:\Windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
[2009-07-14 10:48:00 | 000,389,120 |——| M] () MD5=C185E6FE831552BD4FE8505431A2BB92—C:\Windows\assembly\GAC_MSIL\System.Data.Entity.resources\3.5.0.0_da_b77a5c561934e089\System.Data.Entity.Resources.dll
[2010-11-05 03:53:31 | 002,879,488 |——| M] () MD5=EEDCBC7607D2852BBF74409B49A8D1C1—C:\Windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
[2009-07-14 10:48:00 | 000,053,248 |——| M] () MD5=52DA86AA21C6F85BA2D269058C8F2045—C:\Windows\assembly\GAC_MSIL\System.Data.Linq.resources\3.5.0.0_da_b77a5c561934e089\System.Data.Linq.Resources.dll
[2010-11-05 03:53:31 | 000,684,032 |——| M] () MD5=8AB40EB71BB5D5F4641AA5895712B981—C:\Windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
[2009-07-14 10:47:50 | 000,110,592 |——| M] () MD5=A40B7DF0E064100C7B9038BCF9B075AD—C:\Windows\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_da_b77a5c561934e089\System.Data.OracleClient.resources.dll
[2009-07-14 10:47:51 | 000,344,064 |——| M] () MD5=DBE5B5AB1EDE1BA1F792262E70A906FA—C:\Windows\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_da_b77a5c561934e089\System.Data.resources.dll
[2010-11-05 03:52:07 | 000,049,152 |——| M] () MD5=E3FB59C5C620163852A43EE3C6FA7BC7—C:\Windows\assembly\GAC_MSIL\System.Data.Services.Client.resources\3.5.0.0_da_b77a5c561934e089\System.Data.Services.Client.resources.dll
[2010-11-05 03:53:32 | 000,462,848 |——| M] () MD5=606ACF1553423BFDD3CABEBA3DF264B9—C:\Windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
[2010-11-05 03:52:07 | 000,011,264 |——| M] () MD5=7D96BD620821E4FC080860B3F372E526—C:\Windows\assembly\GAC_MSIL\System.Data.Services.Design.resources\3.5.0.0_da_b77a5c561934e089\System.Data.Services.Design.resources.dll
[2010-11-05 03:53:32 | 000,163,840 |——| M] () MD5=0ACA904F87E674CF3CB6746D9D3AB321—C:\Windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
[2010-11-05 03:52:07 | 000,090,112 |——| M] () MD5=4DF351F0F8D5D1FECE8FABBFF76CAF13—C:\Windows\assembly\GAC_MSIL\System.Data.Services.resources\3.5.0.0_da_b77a5c561934e089\System.Data.Services.resources.dll
[2010-11-05 03:53:32 | 000,692,224 |——| M] () MD5=4BA482E447D6096E8D4348AAE306CE1B—C:\Windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
[2009-07-14 10:47:46 | 000,036,864 |——| M] () MD5=F382CFE6FEA67C2DBE5824278B436E89—C:\Windows\assembly\GAC_MSIL\System.Data.SqlXml.resources\2.0.0.0_da_b77a5c561934e089\system.data.sqlxml.resources.dll
[2010-11-05 03:58:05 | 000,745,472 |——| M] () MD5=800484A3335EACDAA9600120385CCBDC—C:\Windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
[2009-07-14 10:47:53 | 000,393,216 |——| M] () MD5=69DF2D002C45A67D29B55D53367CA085—C:\Windows\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Deployment.resources.dll
[2010-11-05 03:58:05 | 000,970,752 |——| M] () MD5=418EC83A2FC441A3D40F3FDCDA851392—C:\Windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
[2009-07-14 10:47:50 | 000,536,576 |——| M] () MD5=808388FE5E83C758408396BC5B3DB337—C:\Windows\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Design.resources.dll
[2010-11-05 03:58:06 | 004,927,488 |——| M] () MD5=2D7D124DCC4E7643F2B8AB4592150950—C:\Windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
[2010-11-05 03:53:32 | 000,290,816 |——| M] () MD5=CD86BDCB5E115635E6AB7DFE77FC1D11—C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
[2009-07-14 10:47:48 | 000,016,896 |——| M] () MD5=99F43FE5B5BFCF56B73F19C2FD5D0AC9—C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.DirectoryServices.Protocols.resources.dll
[2009-06-10 23:23:18 | 000,188,416 |——| M] () MD5=EE1DCDAA3EA8F53DA56116875CD01653—C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
[2009-07-14 10:47:49 | 000,040,960 |——| M] () MD5=C7B974D3D841A3CAE37909E2D4DB7735—C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.DirectoryServices.resources.dll
[2010-11-05 03:58:06 | 000,401,408 |——| M] () MD5=AF1F47FBADABB9134002359970F5FD1C—C:\Windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
[2009-07-14 10:47:49 | 000,006,144 |——| M] () MD5=D733134118C4BC62861F3398E4B41437—C:\Windows\assembly\GAC_MSIL\System.Drawing.Design.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Drawing.Design.resources.dll
[2009-06-10 23:23:18 | 000,081,920 |——| M] () MD5=D195A195E3D16A867FD4382D786313B8—C:\Windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
[2010-11-13 03:13:49 | 000,024,576 |——| M] () MD5=6C23FC7EEBA9F44BBBC5DBA34C12A9ED—C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Drawing.resources.dll
[2012-01-27 01:33:25 | 000,630,784 |——| M] () MD5=25279D7FAF0F1BE97EA477EB939A1469—C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
[2009-07-14 10:47:51 | 000,032,768 |——| M] () MD5=5C3747FBE90F2658FD3529818DFAAB7B—C:\Windows\assembly\GAC_MSIL\System.EnterpriseServices.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.EnterpriseServices.resources.dll
[2009-07-14 10:48:00 | 000,061,440 |——| M] () MD5=9C3BC4984B7925DAF3631A6034FBB337—C:\Windows\assembly\GAC_MSIL\system.identitymodel.resources\3.0.0.0_da_b77a5c561934e089\System.IdentityModel.Resources.dll
[2009-07-14 10:48:00 | 000,053,248 |——| M] () MD5=0814091EAA1BC5BCD869F291F3A9A1E2—C:\Windows\assembly\GAC_MSIL\system.identitymodel.selectors.resources\3.0.0.0_da_b77a5c561934e089\System.IdentityModel.Selectors.Resources.dll
[2010-11-05 03:52:27 | 000,126,976 |——| M] () MD5=DF7FEE2563BF2D59926B786FBF636510—C:\Windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
[2010-11-05 03:52:27 | 000,442,368 |——| M] () MD5=9638C20A92962CAFC45E8F48AE6238F5—C:\Windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
[2009-07-14 10:48:00 | 000,020,480 |——| M] () MD5=3C5A12AAA724C36A81D538E264DE13A1—C:\Windows\assembly\GAC_MSIL\system.io.log.resources\3.0.0.0_da_b03f5f7f11d50a3a\System.IO.Log.Resources.dll
[2009-06-10 23:13:54 | 000,131,072 |——| M] () MD5=AC45DB17E166ECEBD320D4FA2820C1B6—C:\Windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
[2010-11-20 14:19:49 | 000,253,952 |——| M] () MD5=53998D919FABB0F5EF2BD7C38533D2B7—C:\Windows\assembly\GAC_MSIL\System.Management.Automation.Resources\1.0.0.0_en_31bf3856ad364e35\System.Management.Automation.Resources.dll
[2010-11-20 14:36:01 | 003,010,560 |——| M] () MD5=4214698AD147EA8E83CC0E7DCF883DB3—C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll
[2010-11-05 03:53:32 | 000,143,360 |——| M] () MD5=BCD4761D6E2290B490498126C67A35D0—C:\Windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
[2009-07-14 10:47:48 | 000,012,800 |——| M] () MD5=6550999BE3138C40F3378BD42FF65E62—C:\Windows\assembly\GAC_MSIL\system.management.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Management.resources.dll
[2010-11-05 03:58:09 | 000,385,024 |——| M] () MD5=52C875E8F96E4F9E69914A538C129C6E—C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
[2009-07-14 10:47:51 | 000,077,824 |——| M] () MD5=8EBE38A32863CDB0F5EBFA4604D241C0—C:\Windows\assembly\GAC_MSIL\System.Messaging.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Messaging.resources.dll
[2010-11-05 03:58:09 | 000,258,048 |——| M] () MD5=3035497DE3B9208633BC7F3604D781FB—C:\Windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
[2010-11-05 03:53:32 | 000,237,568 |——| M] () MD5=74446FB0C54CB43A279E735F9C335752—C:\Windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
[2009-07-14 10:48:00 | 000,028,672 |——| M] () MD5=90B49B5BE012BDD05117A93A09FD16D5—C:\Windows\assembly\GAC_MSIL\System.Printing.resources\3.0.0.0_da_31bf3856ad364e35\System.Printing.resources.dll
[2010-11-05 03:51:56 | 000,200,704 |——| M] () MD5=AFE22099CE5E515A703A41E9FEBD9509—C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_da_b77a5c561934e089\system.resources.dll
[2009-07-14 10:47:47 | 000,032,768 |——| M] () MD5=252FE57A9E4297304A021F5727B71358—C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_da_b77a5c561934e089\System.Runtime.Remoting.resources.dll
[2010-11-05 03:58:10 | 000,303,104 |——| M] () MD5=1D4DA021B0AD837B35AFB772CC7C636D—C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
[2009-07-14 10:47:53 | 000,011,264 |——| M] () MD5=BCC45076F71410D6DEA8F69F00C0C465—C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009-06-10 23:23:19 | 000,131,072 |——| M] () MD5=C9781DA4EE6A5BBAE271CC0AC4B25D7C—C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2009-07-14 10:48:00 | 000,094,208 |——| M] () MD5=FC03247FB69B9ADE9B4D48785277A073—C:\Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_da_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2010-11-05 03:52:27 | 000,970,752 |——| M] () MD5=01D4E1005C901889517EED7F438DB501—C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2009-07-14 10:47:46 | 000,028,672 |——| M] () MD5=82B6045274A6561FAFA53266508AFF8C—C:\Windows\assembly\GAC_MSIL\System.Security.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Security.resources.dll
[2010-11-05 03:58:10 | 000,258,048 |——| M] () MD5=A15491BE2D672FCDBFEB250E9594D7ED—C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
[2009-07-14 10:48:00 | 000,032,768 |——| M] () MD5=73B94945FEA566155980CD0E9F9FA006—C:\Windows\assembly\GAC_MSIL\system.servicemodel.install.resources\3.0.0.0_da_b77a5c561934e089\System.ServiceModel.Install.Resources.dll
[2010-11-05 03:52:40 | 000,073,728 |——| M] () MD5=4E0883AF9D5B4F2AAFD19F6663CBAF5F—C:\Windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
[2010-11-05 03:52:13 | 000,454,656 |——| M] () MD5=33EEDBDEE6D295753FA94447A2EB2A6C—C:\Windows\assembly\GAC_MSIL\system.servicemodel.resources\3.0.0.0_da_b77a5c561934e089\System.ServiceModel.Resources.dll
[2010-11-05 03:52:41 | 000,032,768 |——| M] () MD5=9A9827B4F896F40607DF8103B9C438C0—C:\Windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
[2010-11-05 03:52:01 | 000,069,632 |——| M] () MD5=79B3722533CF195152F6714FB75B08D7—C:\Windows\assembly\GAC_MSIL\System.ServiceModel.Web.resources\3.5.0.0_da_31bf3856ad364e35\System.ServiceModel.Web.resources.dll
[2010-11-05 03:52:44 | 000,569,344 |——| M] () MD5=EA5213E7090668C917EEB947FDC3CD46—C:\Windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
[2010-11-05 03:52:30 | 005,988,352 |——| M] () MD5=196D093057DE9D765FF8DDFA24215D3B—C:\Windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
[2009-07-14 10:47:47 | 000,040,960 |——| M] () MD5=F01388A53595AB017D9C7F09E47433A6—C:\Windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll
[2010-11-05 03:58:10 | 000,114,688 |——| M] () MD5=F68CAFF425A9F37E498193BDDC5CC652—C:\Windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
[2009-07-14 10:48:00 | 000,061,440 |——| M] () MD5=84950D8FE09A0AB2DC6EC2D45A2B478A—C:\Windows\assembly\GAC_MSIL\System.Speech.resources\3.0.0.0_da_31bf3856ad364e35\System.Speech.resources.dll
[2009-06-10 23:14:45 | 000,688,128 |——| M] () MD5=31588B867657A7DF046AC1908550D73C—C:\Windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
[2009-07-14 10:47:51 | 000,016,384 |——| M] () MD5=7E90AD45B9E86B3120BD98E2C5B35152—C:\Windows\assembly\GAC_MSIL\System.Transactions.resources\2.0.0.0_da_b77a5c561934e089\System.Transactions.resources.dll
[2009-07-14 10:48:00 | 000,003,584 |——| M] () MD5=569DAA8FFE428348B01DF7DFD0E220AC—C:\Windows\assembly\GAC_MSIL\System.Web.Abstractions.resources\3.5.0.0_da_31bf3856ad364e35\System.Web.Abstractions.Resources.dll
[2010-11-05 03:53:32 | 000,077,824 |——| M] () MD5=DE8831D65E92BC50304F37CC75EC31D5—C:\Windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
[2009-07-14 10:48:00 | 000,004,096 |——| M] () MD5=2A24D6853D2AF46BF8A796BB963D745C—C:\Windows\assembly\GAC_MSIL\System.Web.DynamicData.Design.resources\3.5.0.0_da_31bf3856ad364e35\System.Web.DynamicData.Design.Resources.dll
[2010-11-05 03:53:32 | 000,032,768 |——| M] () MD5=4A1EF32D7C394D8400870C73B40CA2A4—C:\Windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
[2009-07-14 10:48:00 | 000,015,872 |——| M] () MD5=4F583E7AE345ABA5ACD0495AC3C16811—C:\Windows\assembly\GAC_MSIL\System.Web.DynamicData.resources\3.5.0.0_da_31bf3856ad364e35\System.Web.DynamicData.Resources.dll
[2010-11-05 03:53:32 | 000,229,376 |——| M] () MD5=054F8B86C1258EDDB833A38B54155CF7—C:\Windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
[2009-07-14 10:48:00 | 000,020,480 |——| M] () MD5=78AB1309CF6E2322DBAA6C47C3EF9049—C:\Windows\assembly\GAC_MSIL\System.Web.Entity.Design.resources\3.5.0.0_da_b77a5c561934e089\System.Web.Entity.Design.Resources.dll
[2010-11-05 03:53:32 | 000,131,072 |——| M] () MD5=A282147F21B0DB24DB3B3566E828A8AE—C:\Windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
[2010-11-05 03:52:07 | 000,024,576 |——| M] () MD5=422548D6D0BC17530644AC44F50F1BED—C:\Windows\assembly\GAC_MSIL\System.Web.Entity.resources\3.5.0.0_da_b77a5c561934e089\System.Web.Entity.Resources.dll
[2010-11-05 03:53:33 | 000,139,264 |——| M] () MD5=A5722B31B8454EE1CC50753C93CFDB4E—C:\Windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
[2009-07-14 10:48:00 | 000,045,056 |——| M] () MD5=818979A751C656CC5933491961D26C84—C:\Windows\assembly\GAC_MSIL\System.Web.Extensions.Design.resources\3.5.0.0_da_31bf3856ad364e35\System.Web.Extensions.Design.Resources.dll
[2010-11-05 03:53:33 | 000,335,872 |——| M] () MD5=C935E89C6F71F188282632F35A04D0C1—C:\Windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
[2009-07-14 10:48:00 | 000,626,688 |——| M] () MD5=3B4F9B24FAEA8C21FB305241D0EF1867—C:\Windows\assembly\GAC_MSIL\System.Web.Extensions.resources\3.5.0.0_da_31bf3856ad364e35\System.Web.Extensions.Resources.dll
[2010-11-05 03:53:33 | 001,277,952 |——| M] () MD5=27607F0C3749F975F7835BE71BD85345—C:\Windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
[2010-11-05 03:51:56 | 000,036,864 |——| M] () MD5=2BEA87ABA751D878D6A6E102B570853E—C:\Windows\assembly\GAC_MSIL\System.Web.Mobile.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
[2010-11-05 03:58:11 | 000,835,584 |——| M] () MD5=18FDA35C607C486C0D5B91D7DD06CD17—C:\Windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
[2009-06-10 23:23:20 | 000,077,824 |——| M] () MD5=1CDB3B55F1330F85A674B0B5927399F4—C:\Windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
[2009-07-14 10:47:48 | 000,593,920 |——| M] () MD5=CA3D7E3ABD80F116CDD0E238ADE8D7F2—C:\Windows\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Web.resources.dll
[2009-07-14 10:48:00 | 000,007,168 |——| M] () MD5=6D00E1C0A18B12222C2B28D5F9C82636—C:\Windows\assembly\GAC_MSIL\System.Web.Routing.resources\3.5.0.0_da_31bf3856ad364e35\System.Web.Routing.Resources.dll
[2010-11-05 03:53:33 | 000,061,440 |——| M] () MD5=6D138BD2348457A5097F2772C78FE094—C:\Windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
[2009-07-14 10:47:49 | 000,081,920 |——| M] () MD5=DFBE8479B4166B7CF2760FD6FB52B7DE—C:\Windows\assembly\GAC_MSIL\System.Web.Services.resources\2.0.0.0_da_b03f5f7f11d50a3a\System.Web.Services.resources.dll
[2010-11-05 03:58:12 | 000,839,680 |——| M] () MD5=8C0B098B41A27B08D58CAE7A61A3BA19—C:\Windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
[2010-11-13 03:13:54 | 000,409,600 |——| M] () MD5=204EF2FA204EB0C03F7152595E9C18F2—C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_da_b77a5c561934e089\System.Windows.Forms.resources.dll
[2012-01-04 04:51:04 | 005,025,792 |——| M] () MD5=33994DFF03481DB13CA3E37DB920E1B2—C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
[2009-06-10 23:15:18 | 000,012,288 |——| M] () MD5=1CCEE8037C8EF9A08DD0ADB7E3E38D78—C:\Windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
[2009-07-14 10:48:00 | 000,180,224 |——| M] () MD5=5D8941338488DC5563EBB692860340C6—C:\Windows\assembly\GAC_MSIL\system.workflow.activities.resources\3.0.0.0_da_31bf3856ad364e35\System.Workflow.Activities.resources.dll
[2010-11-05 03:53:45 | 001,142,784 |——| M] () MD5=A422312AE61E44B166FAC615786296A1—C:\Windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
[2009-07-14 10:48:00 | 000,307,200 |——| M] () MD5=9299A3FA6CC36D0EC1E940CCBA7196C5—C:\Windows\assembly\GAC_MSIL\system.workflow.componentmodel.resources\3.0.0.0_da_31bf3856ad364e35\System.Workflow.ComponentModel.resources.dll
[2010-11-05 03:53:46 | 001,630,208 |——| M] () MD5=BD0B0F768E7E74C5CD7A34B8B4BCC81D—C:\Windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
[2010-11-05 03:52:16 | 000,036,864 |——| M] () MD5=A07F5903B4E5199EBE950BC33CFCFA18—C:\Windows\assembly\GAC_MSIL\system.workflow.runtime.resourc

OTL Extras logfile created on: 03-06-2012 23:10:55 - Run 1
OTL by OldTimer - Version 3.2.46.0   Folder = C:\Users\Longhorn\Downloads
Professional Service Pack 1 (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000406 | Country: Danmark | Language: DAN | Date Format: dd-MM-yyyy

8,00 Gb Total Physical Memory | 7,09 Gb Available Physical Memory | 88,68% Memory free
16,00 Gb Paging File | 14,82 Gb Available in Paging File | 92,66% Paging File free
Paging file location(s): e:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 195,21 Gb Total Space | 55,41 Gb Free Space | 28,38% Space Free | Partition Type: NTFS
Drive D: | 233,76 Gb Total Space | 199,19 Gb Free Space | 85,21% Space Free | Partition Type: NTFS
Drive E: | 38,45 Gb Total Space | 30,31 Gb Free Space | 78,84% Space Free | Partition Type: NTFS
Drive H: | 926,62 Gb Total Space | 109,94 Gb Free Space | 11,86% Space Free | Partition Type: NTFS
Drive J: | 4,88 Gb Total Space | 4,87 Gb Free Space | 99,77% Space Free | Partition Type: FAT32
Drive L: | 7,45 Gb Total Space | 6,68 Gb Free Space | 89,71% Space Free | Partition Type: FAT32

Computer Name: LONGHORN-PC2 | User Name: Longhorn | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile]—C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile]—C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open]—“%1” %*
cmdfile [open]—“%1” %*
comfile [open]—“%1” %*
cplfile [cplopen]—%SystemRoot%\System32\control.exe “%1”,%* (Microsoft Corporation)
exefile [open]—“%1” %*
helpfile [open]—Reg Error: Key error.
hlpfile [open]—%SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
piffile [open]—“%1” %*
regfile [merge]—Reg Error: Key error.
scrfile [config]—“%1”
scrfile [install]—rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open]—“%1” /S
txtfile [edit]—Reg Error: Key error.
Unknown [openas]—%SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge]—C:\Program Files\Adobe\Adobe Bridge CS5.1\Bridge.exe “%L” (Adobe Systems, Inc.)
Directory [cmd]—cmd.exe /s /k pushd “%V” (Microsoft Corporation)
Directory [find]—%SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open]—%SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore]—Reg Error: Value error.
Drive [find]—%SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
“cval” = 1
“FirewallDisableNotify” = 0
“AntiVirusDisableNotify” = 0
“UpdatesDisableNotify” = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
“VistaSp1” = Reg Error: Unknown registry data type—File not found
“AntiVirusOverride” = 0
“AntiSpywareOverride” = 0
“FirewallOverride” = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
“DisableSR” = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
“EnableFirewall” = 1
“DisableNotifications” = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
“EnableFirewall” = 1
“DisableNotifications” = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
“EnableFirewall” = 1
“DisableNotifications” = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
“{2AE44EB4-B0B0-4ACC-B161-DC590DC987EC}” = dir=in | app=c:\program files\skype\phone\skype.exe |
“TCP Query User{2C825CC0-E79C-4031-9818-CDBD45FE9C0F}C:\program files\skype\phone\skype.exe” = protocol=6 | dir=in | app=c:\program files\skype\phone\skype.exe |
“UDP Query User{19501BE9-2EC2-42E9-9BFD-9E3DE0925FA1}C:\program files\skype\phone\skype.exe” = protocol=17 | dir=in | app=c:\program files\skype\phone\skype.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
“{0176AC71-9EDE-48A0-AC3B-94FEB38B1FFE}” = Noiseware Professional Plug-in
“{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}” = Microsoft_VC90_ATL_x86
“{08D2E121-7F6A-43EB-97FD-629B44903403}” = Microsoft_VC90_CRT_x86
“{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}” = Microsoft_VC80_ATL_x86
“{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
“{26A24AE4-039D-4CA4-87B4-2F83216031FF}” = Java(TM) 6 Update 31
“{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}” = RealUpgrade 1.1
“{28C515CC-489B-4c02-898E-FE5B790E52FF}” = Canopus Codec Option 6.01
“{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}” = SmartSound Quicktracks 5
“{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}” = CyberLink WaveEditor
“{3521BDBD-D453-5D9F-AA55-44B75D214629}” = Adobe Community Help
“{375B0ACB-49BA-463E-96D0-E95F994DF594}” = AMD OverDrive Beta
“{3C3901C5-3455-3E0A-A214-0B093A5070A6}” = Microsoft .NET Framework 4 Client Profile
“{3D3D1E03-D506-4163-B600-82EE27FC5A89}” = Microsoft Camera Codec Pack
“{402ED4A1-8F5B-387A-8688-997ABF58B8F2}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
“{423C4130-EBC3-410A-B3A0-37BBF9D607D5}” = T-RackS 3 Deluxe
“{490BF87E-1F75-4453-BF55-9F540543A3CA}” = Steinberg Drum Loop Expansion 01
“{4A03706F-666A-4037-7777-5F2748764D10}” = Java Auto Updater
“{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}” = Steinberg Cubase 5
“{4D454CF8-12FD-464D-B57B-B46FE27B78BB}” = Steinberg LoopMash Content
“{532B917B-8235-4FA5-BE36-643A8BB053A5}” = Steinberg REVerence Content 01
“{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}” = Microsoft_VC90_MFC_x86
“{687E87C0-E4C2-414A-B8A2-E2B9B83670AA}” = RealGrain Plug-in
“{6956856F-B6B3-4BE0-BA0B-8F495BE32033}” = Apple Software Update
“{7299052b-02a4-4627-81f2-1818da5d550d}” = Microsoft Visual C++ 2005 Redistributable
“{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}” = RealNetworks - Microsoft Visual C++ 2008 Runtime
“{837b34e3-7c30-493c-8f6a-2b0f04e2912c}” = Microsoft Visual C++ 2005 Redistributable
“{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}” = Steinberg HALionOne Studio Drum Set
“{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}” = Microsoft Silverlight
“{90120000-0015-0406-0000-0000000FF1CE}” = Microsoft Office Access MUI (Danish) 2007
“{90120000-0016-0406-0000-0000000FF1CE}” = Microsoft Office Excel MUI (Danish) 2007
“{90120000-0018-0406-0000-0000000FF1CE}” = Microsoft Office PowerPoint MUI (Danish) 2007
“{90120000-0019-0406-0000-0000000FF1CE}” = Microsoft Office Publisher MUI (Danish) 2007
“{90120000-001A-0406-0000-0000000FF1CE}” = Microsoft Office Outlook MUI (Danish) 2007
“{90120000-001B-0406-0000-0000000FF1CE}” = Microsoft Office Word MUI (Danish) 2007
“{90120000-001F-0406-0000-0000000FF1CE}” = Microsoft Office Proof (Danish) 2007
“{90120000-001F-0407-0000-0000000FF1CE}” = Microsoft Office Proof (German) 2007
“{90120000-001F-0409-0000-0000000FF1CE}” = Microsoft Office Proof (English) 2007
“{90120000-002C-0406-0000-0000000FF1CE}” = Microsoft Office Proofing (Danish) 2007
“{90120000-0030-0000-0000-0000000FF1CE}” = Microsoft Office Enterprise 2007
“{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{926CC8AE-8414-43DF-8EB4-CF26D9C3C663}” =
“{90120000-0044-0406-0000-0000000FF1CE}” = Microsoft Office InfoPath MUI (Danish) 2007
“{90120000-006E-0406-0000-0000000FF1CE}” = Microsoft Office Shared MUI (Danish) 2007
“{90120000-00A1-0406-0000-0000000FF1CE}” = Microsoft Office OneNote MUI (Danish) 2007
“{90120000-00BA-0406-0000-0000000FF1CE}” = Microsoft Office Groove MUI (Danish) 2007
“{904CCF62-818D-4675-BC76-D37EB399F917}” = Windows Mobile-enheder
“{9158FF30-78D7-40EF-B83E-451AC5334640}” = Adobe Photoshop CS5.1
“{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}” = Microsoft_VC80_CRT_x86
“{969E11AA-8F3A-F162-1A5A-0965E216B6CE}” = Adobe Download Assistant
“{9A25302D-30C0-39D9-BD6F-21E6EC160475}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
“{A78FE97A-C0C8-49CE-89D0-EDD524A17392}” = PDF Settings CS5
“{AC76BA86-7AD7-1030-7B44-AA1000000001}” = Adobe Reader X (10.1.3) - Dansk
“{AC997F93-0757-4ED4-A701-F40C2D654D09}” = Steinberg HALionOne GM Drum Set
“{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}” = CyberLink PowerDirector 10
“{B6CF2967-C81E-40C0-9815-C05774FEF120}” = Skype Click to Call
“{B6D38690-755E-4F40-A35A-23F8BC2B86AC}” = Microsoft_VC90_MFCLOC_x86
“{B91A1230-C199-421e-8F63-7235731D925E}” = EDIUS 6.01
“{BD86F1AC-B594-46E4-85DC-1258AC9E2232}” = Steinberg Groove Agent ONE Content
“{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}” = SUPERAntiSpyware
“{D1A19B02-817E-4296-A45B-07853FD74D57}” = Microsoft_VC80_MFC_x86
“{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}” = Steinberg HALionOne Studio Set
“{D82CDA0D-C182-42C8-8FF2-5649C98D6003}” = Steinberg HALionOne Pro Set
“{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}” = Microsoft_VC80_MFCLOC_x86
“{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}” = Apple Application Support
“{E2019D64-E819-3B4F-9C85-95BE2688ABF9}” = Microsoft .NET Framework 4 Client Profile DAN Language Pack
“{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}” = Steinberg HALionOne Expression Set
“{E7004147-2CCA-431C-AA05-2AB166B9785D}” = QuickTime
“{E70E7159-93B1-470D-9FBD-D8E9EF34B538}” = Steinberg HALionOne
“{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}” = Skype™ 5.9
“{F057965A-D974-4C64-ADB1-4381CD4B8956}” = Steinberg HALionOne GM Set
“{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}” = Steinberg HALionOne Additional Content Set 01
“{FE23D063-934D-4829-A0D8-00634CE79B4A}” = Adobe AIR
“{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}” = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
“Adobe AIR” = Adobe AIR
“Adobe Flash Player ActiveX” = Adobe Flash Player 11 ActiveX
“avast” = avast! Free Antivirus
“Brainworx BX Digital VST_is1” = Brainworx BX Digital VST v1.09
“BSPlayerf” = BS.Player FREE
“CANONIJINBOXADDON100” = Canon Inkjet Printer Driver Add-On Module
“CCleaner” = CCleaner
“chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1” = Adobe Community Help
“ColorChecker Passport_is1” = ColorChecker Passport 1.0.2
“com.adobe.downloadassistant.AdobeDownloadAssistant” = Adobe Download Assistant
“Creative VF0690” = Creative Live! Cam Socialize HD AF / ZiiCam (VF0690) (1.00.12.00)
“DIGI96” = RME DIGI32, DIGI96 and Hammerfall Series
“DNG ProfileManager_is1” = DNG ProfileManager 1.0.3
“ENTERPRISE” = Microsoft Office Enterprise 2007
“Eye-One Match_is1” = Eye-One Match 3.6.2
“i1_driver_installer_utility_i1Match_is1” = i1_driver_installer_utility_i1Match version 1.0
“ImagenomicPortraiturePlugin” = Imagenomic Portraiture 2.3 Plug-in (build 2308)
“InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}” = SmartSound Quicktracks 5
“InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}” = CyberLink WaveEditor
“InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}” = CyberLink PowerDirector 10
“Malwarebytes’ Anti-Malware_is1” = Malwarebytes Anti-Malware version 1.61.0.1400
“Microsoft .NET Framework 4 Client Profile” = Microsoft .NET Framework 4 Client Profile
“Microsoft .NET Framework 4 Client Profile DAN Language Pack” = Microsoft .NET Framework 4 Client Profile DAN sprogpakke
“NewBlue Art Effects for PDR10” = Art Effects for PDR10
“Opanda IExif_is1” = Opanda IExif 2.3
“PhotomatixPro4.0x32_is1” = Photomatix Pro version 4.0
“PowerISO” = PowerISO
“RealPlayer 15.0” = RealPlayer
“ReplayMusic5.05” = Replay Music 5
“SoundcraftVirtualVi” = Soundcraft Virtual Vi 4.5.0
“WaveLabPro” = WaveLab 6
“Waves Mercury Complete VST DX RTAS_is1” = Waves Mercury Complete VST DX RTAS v1.01
“WinPcapInst” = WinPcap 4.1.2
“WinRAR archiver” = WinRAR 4.00 (32-bit)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-271018237-3272951753-4025275856-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
“Dropbox” = Dropbox
“Google Chrome” = Google Chrome
“Spotify” = Spotify

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 30-05-2012 19:30:47 | Computer Name = Longhorn-pc2 | Source = Software Protection Platform Service | ID = 8193
Description = License Activation Scheduler (sppuinotify.dll) mislykkedes med fejlkode:
  0x80070005

Error - 30-05-2012 19:55:48 | Computer Name = Longhorn-pc2 | Source = Software Protection Platform Service | ID = 8193
Description = License Activation Scheduler (sppuinotify.dll) mislykkedes med fejlkode:
  0x80070005

Error - 31-05-2012 04:45:54 | Computer Name = Longhorn-pc2 | Source = Software Protection Platform Service | ID = 8193
Description = License Activation Scheduler (sppuinotify.dll) mislykkedes med fejlkode:
  0x80070005

Error - 31-05-2012 17:52:21 | Computer Name = Longhorn-pc2 | Source = Software Protection Platform Service | ID = 8193
Description = License Activation Scheduler (sppuinotify.dll) mislykkedes med fejlkode:
  0x80070005

Error - 31-05-2012 18:17:21 | Computer Name = Longhorn-pc2 | Source = Software Protection Platform Service | ID = 8193
Description = License Activation Scheduler (sppuinotify.dll) mislykkedes med fejlkode:
  0x80070005

Error - 31-05-2012 18:28:59 | Computer Name = Longhorn-pc2 | Source = Application Error | ID = 1000
Description = Navn på program med fejl: Photoshop.exe, version: 12.1.0.0, tidsstempel:
0x4d90cf71 Navn på modul med fejl: Noiseware.8bf, version: 4.1.0.5, tidsstempel:
0x45494585 Undtagelseskode: 0xc0000005 Forskydning med fejl 0x0001901a Proces-id 0x1764
Programmets
starttidspunkt 0x01cd3f7ab2ccbf0c Programsti: C:\Program Files\Adobe\Adobe Photoshop
CS5.1\Photoshop.exe Modulsti: C:\Program Files\Adobe\Adobe Photoshop CS5.1\Plug-ins\Imagenomic\Noiseware.8bf
Rapport-id:
03801e0a-ab70-11e1-8410-6cf0497cd92c

Error - 31-05-2012 19:17:21 | Computer Name = Longhorn-pc2 | Source = Software Protection Platform Service | ID = 8193
Description = License Activation Scheduler (sppuinotify.dll) mislykkedes med fejlkode:
  0x80070005

Error - 01-06-2012 01:56:48 | Computer Name = Longhorn-pc2 | Source = Winlogon | ID = 4103
Description = Aktivering af Windows-licens mislykkedes. Fejl 0x80070005.

Error - 01-06-2012 05:24:33 | Computer Name = Longhorn-pc2 | Source = SideBySide | ID = 16842785
Description = Aktiveringskontekstgenereringen mislykkedes for “c:\program files\cyberlink\powerdirector10\muitransfer\MUIStartMenuX64.exe”.
Afhængig
samling Microsoft.Windows.Common-Controls,language=”*”,processorArchitecture=“amd64”,publicKeyToken=“6595b64144ccf1df”,type=“win32”,version=“6.0.0.0”
blev ikke fundet.  Anvend sxstrace.exe til detaljeret diagnose.

Error - 03-06-2012 15:17:51 | Computer Name = Longhorn-pc2 | Source = Winlogon | ID = 4103
Description = Aktivering af Windows-licens mislykkedes. Fejl 0x80070005.

[ System Events ]
Error - 28-05-2012 14:32:53 | Computer Name = Longhorn-pc2 | Source = Service Control Manager | ID = 7026
Description = Følgende boot-start- eller system-start-driver kunne ikke indlæses:
  cdrblock

Error - 28-05-2012 16:01:32 | Computer Name = Longhorn-pc2 | Source = DCOM | ID = 10001
Description =

Error - 29-05-2012 04:13:53 | Computer Name = Longhorn-pc2 | Source = DCOM | ID = 10001
Description =

Error - 29-05-2012 16:51:52 | Computer Name = Longhorn-pc2 | Source = DCOM | ID = 10001
Description =

Error - 30-05-2012 11:53:43 | Computer Name = Longhorn-pc2 | Source = DCOM | ID = 10001
Description =

Error - 30-05-2012 17:30:47 | Computer Name = Longhorn-pc2 | Source = DCOM | ID = 10001
Description =

Error - 31-05-2012 17:52:21 | Computer Name = Longhorn-pc2 | Source = DCOM | ID = 10001
Description =

Error - 01-06-2012 01:56:34 | Computer Name = Longhorn-pc2 | Source = EventLog | ID = 6008
Description = Den foregående systemlukning kl. 07:55:14 d. ?01-?06-?2012 var uventet.

Error - 01-06-2012 01:57:14 | Computer Name = Longhorn-pc2 | Source = Service Control Manager | ID = 7026
Description = Følgende boot-start- eller system-start-driver kunne ikke indlæses:
  cdrblock

Error - 01-06-2012 02:07:59 | Computer Name = Longhorn-pc2 | Source = DCOM | ID = 10001
Description =


< End of report >

Start OTL

Vista og Windows 7 - højreklik på filen - Kør som Administrator.

Kopier nedenstånde med fed skrift ind i feltet “Custom Scans/Fixes”

:OTL
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] “C:\Program Files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe” -launchedbylogin File not found

:Commands
[CREATERESTOREPOINT]
[emptytemp]
[Reboot]

Luk alle andre åbne vinduer og klik på “Run Fix”

Efter genstart åbnes en logfil, kopier den tekst herind i denne tråd.

Ellers ligger den her: C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log

PS Deaktiver dine Sikkerheds programmer, mens “Fixet” kører.

———

Hent og gem MiniToolBox af Farbar.

Start den og sæt flueben i følgende.

Flush DNS
List IP Configuration
List Winsock Entries
List last 10 Event Wiewer Errors
List Devices. (Only problems)

Klik så på GO. Den laver Result.txt, som du gerne må kopiere herind.

All processes killed
========== OTL ==========
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{687578B9-7132-4A7A-80E4-30EE31099E03} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{687578B9-7132-4A7A-80E4-30EE31099E03}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{687578B9-7132-4A7A-80E4-30EE31099E03} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{687578B9-7132-4A7A-80E4-30EE31099E03}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{687578B9-7132-4A7A-80E4-30EE31099E03} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{687578B9-7132-4A7A-80E4-30EE31099E03}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeCS5.5ServiceManager deleted successfully.
========== FILES ==========
C:\Users\Longhorn\AppData\Roaming\uTorrent\ie folder moved successfully.
C:\Users\Longhorn\AppData\Roaming\uTorrent\dlimagecache folder moved successfully.
C:\Users\Longhorn\AppData\Roaming\uTorrent\apps folder moved successfully.
C:\Users\Longhorn\AppData\Roaming\uTorrent folder moved successfully.
< ipconfig /flushdns /c >
Windows IP-konfiguration
DNS Resolver Cache blev t›mt.
C:\Users\Longhorn\Downloads\cmd.bat deleted successfully.
C:\Users\Longhorn\Downloads\cmd.txt deleted successfully.
========== COMMANDS ==========
Restore point Set: OTL Restore Point

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56475 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Longhorn
->Temp folder emptied: 25013332 bytes
->Temporary Internet Files folder emptied: 1068782 bytes
->Java cache emptied: 1995722 bytes
->Google Chrome cache emptied: 355482419 bytes
->Flash cache emptied: 58570 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 6296 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 366,00 mb


OTL by OldTimer - Version 3.2.46.0 log created on 06042012_223547

Files\Folders moved on Reboot…

Registry entries deleted on Reboot…

MiniToolBox by Farbar Version: 04-06-2012
Ran by Longhorn (administrator) on 04-06-2012 at 22:42:12
Microsoft Windows 7 Professional Service Pack 1 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP-konfiguration

DNS Resolver Cache blev t›mt.
========================= IP Configuration: ================================

Trådløse 802.11 USB LAN-kort = Trådløs netværksforbindelse (Connected)
Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC (NDIS 6.20) = LAN-forbindelse (Media disconnected)
Microsoft Virtual WiFi Miniport Adapter = Trådløs netværksforbindelse 2 (Media disconnected)

#—————————————————
# IPv4-konfiguration
#—————————————————
pushd interface ipv4

reset
set global

popd
# Slut p† IPv4-konfiguration.

Windows IP-konfiguration

  V‘rtsnavn. . . . . . . . . . . . . . . . . . : Longhorn-pc2
  Prim‘rt DNS-suffiks. . . . . . . . . . . . . :
  Nodetype . . . . . . . . . . . . . . . . . . : Hybrid
  IP-routing aktiveret . . . . . . . . . . . . : Nej
  WINS-proxy aktiveret . . . . . . . . . . . . : Nej

Tr†dl›st LAN-kort Tr†dl›s netv‘rksforbindelse 2:

  Medietilstand. . . . . . . . . . . . . . . . : Mediet afbrudt
  Forbindelsesspecifikt DNS-suffiks. . . . . . :
  Beskrivelse. . . . . . . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
  Fysisk adresse . . . . . . . . . . . . . . . : 00-11-6B-42-A9-4E
  DHCP aktiveret . . . . . . . . . . . . . . . : Ja
  Automatisk konfiguration aktiveret . . . . . : Ja

Tr†dl›st LAN-kort Tr†dl›s netv‘rksforbindelse:

  Forbindelsesspecifikt DNS-suffiks. . . . . . :
  Beskrivelse. . . . . . . . . . . . . . . . . : Tr†dl›se 802.11 USB LAN-kort
  Fysisk adresse . . . . . . . . . . . . . . . : 00-11-6B-42-A9-4F
  DHCP aktiveret . . . . . . . . . . . . . . . : Ja
  Automatisk konfiguration aktiveret . . . . . : Ja
  Link-local-IPv6-adresse . . . . . : fe80::d48d:58c:d9cd:4471(Foretrukken)
  IPv4-adresse . . . . . . . . . . . . . . . . : 192.168.1.101(Foretrukken)
  Undernetmaske. . . . . . . . . . . . . . . . : 255.255.255.0
  Rettigheden opn†et . . . . . . . . . . . . . : 4. juni 2012 22:38:23
  Rettigheden udl›ber. . . . . . . . . . . . . : 5. juni 2012 22:38:23
  Standardgateway. . . . . . . . . . . . . . . : 192.168.1.1
  DHCP-server. . . . . . . . . . . . . . . . . : 192.168.1.1
  DHCPv6 IAID . . . . . . . . . . . : 301994347
  DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-CE-E9-30-6C-F0-49-7C-D9-2C
  DNS-servere. . . . . . . . . . . . . . . . . : 208.67.222.222
                                  208.67.220.220
  NetBIOS over Tcpip . . . . . . . . . . . . . : Aktiveret

Ethernet-netv‘rkskort LAN-forbindelse:

  Medietilstand. . . . . . . . . . . . . . . . : Mediet afbrudt
  Forbindelsesspecifikt DNS-suffiks. . . . . . :
  Beskrivelse. . . . . . . . . . . . . . . . . : Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
  Fysisk adresse . . . . . . . . . . . . . . . : 6C-F0-49-7C-D9-2C
  DHCP aktiveret . . . . . . . . . . . . . . . : Ja
  Automatisk konfiguration aktiveret . . . . . : Ja

Tunnel-netv‘rkskort isatap.{3E6E6F16-8E88-432A-89FC-A5332F344D2F}:

  Medietilstand. . . . . . . . . . . . . . . . : Mediet afbrudt
  Forbindelsesspecifikt DNS-suffiks. . . . . . :
  Beskrivelse. . . . . . . . . . . . . . . . . : Microsoft ISATAP-netv‘rkskort
  Fysisk adresse . . . . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiveret . . . . . . . . . . . . . . . : Nej
  Automatisk konfiguration aktiveret . . . . . : Ja

Tunnel-netv‘rkskort isatap.{7E88E8B2-0E2C-456E-BAE6-62D38DAB5790}:

  Medietilstand. . . . . . . . . . . . . . . . : Mediet afbrudt
  Forbindelsesspecifikt DNS-suffiks. . . . . . :
  Beskrivelse. . . . . . . . . . . . . . . . . : Microsoft ISATAP-netv‘rkskort #2
  Fysisk adresse . . . . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiveret . . . . . . . . . . . . . . . : Nej
  Automatisk konfiguration aktiveret . . . . . : Ja

Tunnel-netv‘rkskort Teredo Tunneling Pseudo-Interface:

  Forbindelsesspecifikt DNS-suffiks. . . . . . :
  Beskrivelse. . . . . . . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
  Fysisk adresse . . . . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiveret . . . . . . . . . . . . . . . : Nej
  Automatisk konfiguration aktiveret . . . . . : Ja
  IPv6-adresse. . . . . . . . . . . : 2001:0:5ef5:79fd:38be:2fc3:3f57:fe9a(Foretrukken)
  Link-local-IPv6-adresse . . . . . : fe80::38be:2fc3:3f57:fe9a(Foretrukken)
  Standardgateway. . . . . . . . . . . . . . . : ::
  NetBIOS via TCP/IP . . . . . . . . . . . . . : Deaktiveret

Tunnel-netv‘rkskort isatap.{84F88342-2992-4DF0-ABE7-08E8F038D864}:

  Medietilstand. . . . . . . . . . . . . . . . : Mediet afbrudt
  Forbindelsesspecifikt DNS-suffiks. . . . . . :
  Beskrivelse. . . . . . . . . . . . . . . . . : Microsoft ISATAP-netv‘rkskort #3
  Fysisk adresse . . . . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP aktiveret . . . . . . . . . . . . . . . : Nej
  Automatisk konfiguration aktiveret . . . . . : Ja
Server:  resolver1.opendns.com
Address:  208.67.222.222

Navn:  google.com
Addresses:  173.194.69.138
    173.194.69.100
    173.194.69.113
    173.194.69.101
    173.194.69.139
    173.194.69.102

Pinger google.com [173.194.69.138] med 32 byte data:
Svar fra 173.194.69.138: byte=32 tid=53ms TTL=41
Svar fra 173.194.69.138: byte=32 tid=43ms TTL=41

Ping-statistikker for 173.194.69.138:
  Pakker: Sendt = 2, modtaget = 2, tabt = 0 (0% tab),
Beregnet tid for rundtur i millisekunder:
  Minimum = 43ms, Maksimum = 53ms, Gennemsnitlig = 48ms
Server:  resolver1.opendns.com
Address:  208.67.222.222

Navn:  yahoo.com
Addresses:  209.191.122.70
    72.30.38.140
    98.139.183.24

Pinger yahoo.com [98.139.183.24] med 32 byte data:
Svar fra 98.139.183.24: byte=32 tid=144ms TTL=47
Svar fra 98.139.183.24: byte=32 tid=187ms TTL=47

Ping-statistikker for 98.139.183.24:
  Pakker: Sendt = 2, modtaget = 2, tabt = 0 (0% tab),
Beregnet tid for rundtur i millisekunder:
  Minimum = 144ms, Maksimum = 187ms, Gennemsnitlig = 165ms
Server:  resolver1.opendns.com
Address:  208.67.222.222

Navn:  bleepingcomputer.com
Address:  208.43.87.2

Pinger bleepingcomputer.com [208.43.87.2] med 32 byte data:
Svar fra 208.43.87.2: Modtagerv‘rt ikke tilg‘ngelig.
Svar fra 208.43.87.2: Modtagerv‘rt ikke tilg‘ngelig.

Ping-statistikker for 208.43.87.2:
  Pakker: Sendt = 2, modtaget = 2, tabt = 0 (0% tab),

Pinger 127.0.0.1 med 32 byte data:
Svar fra 127.0.0.1: byte=32 tid<1ms TTL=128
Svar fra 127.0.0.1: byte=32 tid<1ms TTL=128

Ping-statistikker for 127.0.0.1:
  Pakker: Sendt = 2, modtaget = 2, tabt = 0 (0% tab),
Beregnet tid for rundtur i millisekunder:
  Minimum = 0ms, Maksimum = 0ms, Gennemsnitlig = 0ms
===========================================================================
Liste over gr‘nseflader
17…00 11 6b 42 a9 4e ......Microsoft Virtual WiFi Miniport Adapter
11…00 11 6b 42 a9 4f ......Tr†dl›se 802.11 USB LAN-kort
10…6c f0 49 7c d9 2c ......Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
  1…........................Software Loopback Interface 1
19…00 00 00 00 00 00 00 e0 Microsoft ISATAP-netv‘rkskort
32…00 00 00 00 00 00 00 e0 Microsoft ISATAP-netv‘rkskort #2
12…00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
18…00 00 00 00 00 00 00 e0 Microsoft ISATAP-netv‘rkskort #3
===========================================================================

IPv4 Rutetabel
===========================================================================
Aktive ruter:
Netv‘rksdestination   Netmaske     Gateway     Gr‘nseflade Metrikv‘rdi
      0.0.0.0       0.0.0.0     192.168.1.1   192.168.1.101   25
      127.0.0.0     255.0.0.0       On-link       127.0.0.1   306
      127.0.0.1 255.255.255.255       On-link       127.0.0.1   306
  127.255.255.255 255.255.255.255       On-link       127.0.0.1   306
    192.168.1.0   255.255.255.0       On-link   192.168.1.101   281
  192.168.1.101 255.255.255.255       On-link   192.168.1.101   281
  192.168.1.255 255.255.255.255       On-link   192.168.1.101   281
      224.0.0.0     240.0.0.0       On-link       127.0.0.1   306
      224.0.0.0     240.0.0.0       On-link   192.168.1.101   281
  255.255.255.255 255.255.255.255       On-link       127.0.0.1   306
  255.255.255.255 255.255.255.255       On-link   192.168.1.101   281
===========================================================================
Vedvarende ruter:
  Ingen

IPv6 Rutetabel
===========================================================================
Aktive ruter:
Hvis Metrik Netv‘rk Destination     Gateway
12   58 ::/0               On-link
  1   306 ::1/128             On-link
12   58 2001::/32           On-link
12   306 2001:0:5ef5:79fd:38be:2fc3:3f57:fe9a/128
                        On-link
11   281 fe80::/64           On-link
12   306 fe80::/64           On-link
12   306 fe80::38be:2fc3:3f57:fe9a/128
                        On-link
11   281 fe80::d48d:58c:d9cd:4471/128
                        On-link
  1   306 ff00::/8           On-link
12   306 ff00::/8           On-link
11   281 ff00::/8           On-link
===========================================================================
Vedvarende ruter:
  Ingen
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\system32\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\wshbth.dll [36352] (Microsoft Corporation)
Catalog5 06 C:\Windows\System32\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 07 C:\Windows\System32\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 23 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 24 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 25 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 26 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 27 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 28 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 29 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 30 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 31 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 32 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 33 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 34 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 35 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 36 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 37 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (06/04/2012 10:38:30 PM) (Source: Winlogon) (User: )
Description: Aktivering af Windows-licens mislykkedes. Fejl 0x80070005.

Error: (06/04/2012 10:36:03 PM) (Source: Wininit) (User: )
Description: En kritisk systemproces, C:\Windows\system32\lsm.exe, mislykkedes med statuskoden 255. Computeren skal genstartes.

Error: (06/04/2012 10:36:02 PM) (Source: Application Error) (User: )
Description: Navn på program med fejl: lsm.exe, version: 6.1.7601.17514, tidsstempel: 0x4ce7a1ba
Navn på modul med fejl: ntdll.dll, version: 6.1.7601.17725, tidsstempel: 0x4ec49b60
Undtagelseskode: 0xc0000005
Forskydning med fejl 0x000303a2
Proces-id 0x2b0
Programmets starttidspunkt 0xlsm.exe0
Programsti: lsm.exe1
Modulsti: lsm.exe2
Rapport-id: lsm.exe3

Error: (06/04/2012 10:20:58 PM) (Source: SideBySide) (User: )
Description: Aktiveringskontekstgenereringen mislykkedes for “Microsoft.Windows.Common-Controls,language=”*”,processorArchitecture=“amd64”,publicKeyToken=“6595b64144ccf1df”,type=“win32”,version=“6.0.0.0"1”.
Afhængig samling Microsoft.Windows.Common-Controls,language=”*”,processorArchitecture=“amd64”,publicKeyToken=“6595b64144ccf1df”,type=“win32”,version=“6.0.0.0” blev ikke fundet.
Anvend sxstrace.exe til detaljeret diagnose.

Error: (06/04/2012 07:57:21 PM) (Source: Application Error) (User: )
Description: Navn på program med fejl: Photoshop.exe, version: 12.1.0.0, tidsstempel: 0x4d90cf71
Navn på modul med fejl: Noiseware.8bf, version: 4.1.0.5, tidsstempel: 0x45494585
Undtagelseskode: 0xc0000005
Forskydning med fejl 0x0001901a
Proces-id 0x1638
Programmets starttidspunkt 0xPhotoshop.exe0
Programsti: Photoshop.exe1
Modulsti: Photoshop.exe2
Rapport-id: Photoshop.exe3

Error: (06/04/2012 07:52:29 PM) (Source: Application Error) (User: )
Description: Navn på program med fejl: Photoshop.exe, version: 12.1.0.0, tidsstempel: 0x4d90cf71
Navn på modul med fejl: Noiseware.8bf, version: 4.1.0.5, tidsstempel: 0x45494585
Undtagelseskode: 0xc0000005
Forskydning med fejl 0x0001901a
Proces-id 0x770
Programmets starttidspunkt 0xPhotoshop.exe0
Programsti: Photoshop.exe1
Modulsti: Photoshop.exe2
Rapport-id: Photoshop.exe3

Error: (06/04/2012 07:44:59 PM) (Source: Application Error) (User: )
Description: Navn på program med fejl: Photoshop.exe, version: 12.1.0.0, tidsstempel: 0x4d90cf71
Navn på modul med fejl: Noiseware.8bf, version: 4.1.0.5, tidsstempel: 0x45494585
Undtagelseskode: 0xc0000005
Forskydning med fejl 0x0001901a
Proces-id 0xa8c
Programmets starttidspunkt 0xPhotoshop.exe0
Programsti: Photoshop.exe1
Modulsti: Photoshop.exe2
Rapport-id: Photoshop.exe3

Error: (06/04/2012 07:28:41 PM) (Source: Application Error) (User: )
Description: Navn på program med fejl: Photoshop.exe, version: 12.1.0.0, tidsstempel: 0x4d90cf71
Navn på modul med fejl: Noiseware.8bf, version: 4.1.0.5, tidsstempel: 0x45494585
Undtagelseskode: 0xc0000005
Forskydning med fejl 0x0001901a
Proces-id 0x400
Programmets starttidspunkt 0xPhotoshop.exe0
Programsti: Photoshop.exe1
Modulsti: Photoshop.exe2
Rapport-id: Photoshop.exe3

Error: (06/04/2012 07:23:27 PM) (Source: Application Error) (User: )
Description: Navn på program med fejl: Photoshop.exe, version: 12.1.0.0, tidsstempel: 0x4d90cf71
Navn på modul med fejl: Noiseware.8bf, version: 4.1.0.5, tidsstempel: 0x45494585
Undtagelseskode: 0xc0000005
Forskydning med fejl 0x00037509
Proces-id 0x13c8
Programmets starttidspunkt 0xPhotoshop.exe0
Programsti: Photoshop.exe1
Modulsti: Photoshop.exe2
Rapport-id: Photoshop.exe3

Error: (06/04/2012 07:22:19 PM) (Source: Application Error) (User: )
Description: Navn på program med fejl: Photoshop.exe, version: 12.1.0.0, tidsstempel: 0x4d90cf71
Navn på modul med fejl: Noiseware.8bf, version: 4.1.0.5, tidsstempel: 0x45494585
Undtagelseskode: 0xc0000005
Forskydning med fejl 0x00037509
Proces-id 0x12d8
Programmets starttidspunkt 0xPhotoshop.exe0
Programsti: Photoshop.exe1
Modulsti: Photoshop.exe2
Rapport-id: Photoshop.exe3

System errors:
=============
Error: (06/04/2012 10:38:47 PM) (Source: Service Control Manager) (User: )
Description: Følgende boot-start- eller system-start-driver kunne ikke indlæses:
cdrblock

Error: (06/04/2012 10:38:17 PM) (Source: EventLog) (User: )
Description: Den foregående systemlukning kl. 22:36:26 d. ?04-?06-?2012 var uventet.

Error: (06/04/2012 10:35:47 PM) (Source: Service Control Manager) (User: )
Description: Tjenesten Arp Intelligent Protection Service afsluttede uventet. Dette er sket 1 gang(e).

Error: (06/04/2012 05:16:37 PM) (Source: DCOM) (User: )
Description: C:\Windows\System32\slui.exe -Embedding5{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}

Error: (06/04/2012 05:13:48 PM) (Source: Service Control Manager) (User: )
Description: Følgende boot-start- eller system-start-driver kunne ikke indlæses:
cdrblock

Error: (06/03/2012 09:18:27 PM) (Source: Disk) (User: )
Description: Driveren detekterede en controllerfejl på \Device\Harddisk4\DR4.

Error: (06/03/2012 09:18:26 PM) (Source: Disk) (User: )
Description: Driveren detekterede en controllerfejl på \Device\Harddisk4\DR4.

Error: (06/03/2012 09:18:14 PM) (Source: Service Control Manager) (User: )
Description: Følgende boot-start- eller system-start-driver kunne ikke indlæses:
cdrblock

Error: (06/03/2012 09:46:33 AM) (Source: DCOM) (User: )
Description: C:\Windows\System32\slui.exe -Embedding5{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}

Error: (06/03/2012 09:39:53 AM) (Source: Service Control Manager) (User: )
Description: Der opstod en timeout (30000 millisekunder), mens der ventedes på et transaktionssvar fra tjenesten WMPNetworkSvc.

Microsoft Office Sessions:
=========================

========================= Devices: ================================

Name: USB-controller (Universal Serial Bus)
Description: USB-controller (Universal Serial Bus)
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click “Update Driver”, which starts the Hardware Update wizard.

Name: Marvell 91xx Config ATA Device
Description: Marvell 91xx Config ATA Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click “Update Driver”, which starts the Hardware Update wizard.

**** End of log ****

Det virker ikke malware relateret, men Aktivering af Windows-licens mislykkedes

Er du stadig med, eller har du opgivet  
Denne tråd kan blive lukket om tre dage.

Sorry.. Det går bedre med systemet nu men er nød til at opgradere til 64bit, da jeg har brug for mere ram til mit arbejde.

Tak for hjælpen.