[code]
OTS logfile created on: 07-10-2009 16:51:25 - Run 1
OTS by OldTimer - Version 3.0.20.3 Folder = C:\Users\Trung Dinh\Desktop
64bit-Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18813)
Locale: 00000406 | Country: Danmark | Language: DAN | Date Format: dd-MM-yyyy
4,00 Gb Total Physical Memory | 1,60 Gb Available Physical Memory | 39,98% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298,09 Gb Total Space | 53,15 Gb Free Space | 17,83% Space Free | Partition Type: NTFS
Drive D: | 15,98 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: TRUNGDINH-PC
Current User Name: Trung Dinh
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Quick Scan
[Processes - Safe List]
acrotray.exe -> C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe -> [2008-06-11 22:43:26 | 00,640,376 | ---- | M] (Adobe Systems Inc.)
adskscsrv.exe -> C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -> [2009-01-28 14:00:57 | 00,079,360 | ---- | M] (Autodesk)
avgtray.exe -> C:\Program Files (x86)\AVG\AVG8\avgtray.exe -> [2009-10-06 09:06:49 | 02,023,704 | ---- | M] (AVG Technologies CZ, s.r.o.)
avgwdsvc.exe -> C:\Program Files (x86)\AVG\AVG8\avgwdsvc.exe -> [2009-08-28 09:36:42 | 00,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.)
firefox.exe -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe -> [2009-09-10 14:48:40 | 00,908,280 | ---- | M] (Mozilla Corporation)
flashutil10b.exe -> C:\Windows\SysWow64\Macromed\Flash\FlashUtil10b.exe -> [2009-02-03 04:07:18 | 00,240,544 | R--- | M] (Adobe Systems, Inc.)
googletoolbarnotifier.exe -> C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe -> [2009-01-08 13:51:09 | 00,039,408 | ---- | M] (Google Inc.)
googletoolbarnotifier.exe -> C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe -> [2009-01-08 13:51:09 | 00,039,408 | ---- | M] (Google Inc.)
googletoolbaruser_32.exe -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe -> [2009-07-26 20:49:56 | 00,277,104 | ---- | M] (Google Inc.)
ielowutil.exe -> C:\Program Files (x86)\Internet Explorer\IELowutil.exe -> [2009-03-08 13:34:00 | 00,115,712 | ---- | M] (Microsoft Corporation)
iexplore.exe -> C:\Program Files (x86)\Internet Explorer\iexplore.exe -> [2009-07-21 23:53:43 | 00,638,216 | ---- | M] (Microsoft Corporation)
iexplore.exe -> C:\Program Files (x86)\Internet Explorer\iexplore.exe -> [2009-07-21 23:53:43 | 00,638,216 | ---- | M] (Microsoft Corporation)
iexplore.exe -> C:\Program Files (x86)\Internet Explorer\iexplore.exe -> [2009-07-21 23:53:43 | 00,638,216 | ---- | M] (Microsoft Corporation)
iexplore.exe -> C:\Program Files (x86)\Internet Explorer\iexplore.exe -> [2009-07-21 23:53:43 | 00,638,216 | ---- | M] (Microsoft Corporation)
iexplore.exe -> C:\Program Files (x86)\Internet Explorer\iexplore.exe -> [2009-07-21 23:53:43 | 00,638,216 | ---- | M] (Microsoft Corporation)
jusched.exe -> C:\Program Files (x86)\Java\jre6\bin\jusched.exe -> [2009-07-25 05:23:12 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.)
mdnsresponder.exe -> C:\Program Files (x86)\Bonjour\mDNSResponder.exe -> [2006-02-28 12:42:38 | 00,229,376 | ---- | M] (Apple Computer, Inc.)
mdnsresponder.exe -> C:\Program Files (x86)\Bonjour\mDNSResponder.exe -> [2006-02-28 12:42:38 | 00,229,376 | ---- | M] (Apple Computer, Inc.)
mscorsvw.exe -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2008-07-27 20:03:13 | 00,069,632 | ---- | M] (Microsoft Corporation)
msnmsgr.exe -> C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe -> [2009-07-26 16:44:14 | 03,883,856 | ---- | M] (Microsoft Corporation)
nmbgmonitor.exe -> C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe -> [2007-06-01 11:21:08 | 00,153,136 | ---- | M] (Nero AG)
nmbgmonitor.exe -> C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe -> [2007-06-01 11:21:08 | 00,153,136 | ---- | M] (Nero AG)
nmindexingservice.exe -> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe -> [2007-06-01 11:21:30 | 00,271,920 | ---- | M] (Nero AG)
nmindexstoresvr.exe -> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe -> [2007-06-01 11:21:30 | 01,209,904 | ---- | M] (Nero AG)
ots.exe -> C:\Users\Trung Dinh\Desktop\OTS.exe -> [2009-10-07 16:50:55 | 00,519,168 | ---- | M] (OldTimer Tools)
pnkbstra.exe -> C:\Windows\SysWOW64\PnkBstrA.exe -> [2009-03-20 16:45:10 | 00,066,872 | ---- | M] ()
pnkbstra.exe -> C:\Windows\SysWOW64\PnkBstrA.exe -> [2009-03-20 16:45:10 | 00,066,872 | ---- | M] ()
pnkbstra.exe -> C:\Windows\SysWOW64\PnkBstrA.exe -> [2009-03-20 16:45:10 | 00,066,872 | ---- | M] ()
qlbutton.exe -> C:\Program Files (x86)\Quick Launch Button\QLButton.exe -> [2005-01-06 14:53:34 | 00,106,496 | ---- | M] (INVENTEC)
rainlendar2.exe -> C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe -> [2007-12-30 12:23:34 | 01,365,504 | ---- | M] ()
raysat_3dsmax2009_64server.exe -> C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_64server.exe -> [2008-03-10 01:08:42 | 00,065,536 | ---- | M] ()
raysat_3dsmax2009_64server.exe -> C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_64server.exe -> [2008-03-10 01:08:42 | 00,065,536 | ---- | M] ()
raysat_3dsmax2009_64server.exe -> C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_64server.exe -> [2008-03-10 01:08:42 | 00,065,536 | ---- | M] ()
seaport.exe -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -> [2009-05-19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation)
seaport.exe -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -> [2009-05-19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation)
seaport.exe -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -> [2009-05-19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation)
seaport.exe -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -> [2009-05-19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation)
seaport.exe -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -> [2009-05-19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation)
seaport.exe -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -> [2009-05-19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation)
setpoint32.exe -> C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe -> [2008-05-02 05:00:00 | 00,077,824 | ---- | M] ()
setpoint32.exe -> C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe -> [2008-05-02 05:00:00 | 00,077,824 | ---- | M] ()
setpoint32.exe -> C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe -> [2008-05-02 05:00:00 | 00,077,824 | ---- | M] ()
setpoint32.exe -> C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe -> [2008-05-02 05:00:00 | 00,077,824 | ---- | M] ()
setpoint32.exe -> C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe -> [2008-05-02 05:00:00 | 00,077,824 | ---- | M] ()
setpoint32.exe -> C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe -> [2008-05-02 05:00:00 | 00,077,824 | ---- | M] ()
tbtray.exe -> C:\Program Files (x86)\Thunderbird-Tray\TBTray.exe -> [2005-11-08 22:02:44 | 00,038,912 | ---- | M] (Felix 'SniperBeamer' Geyer)
tbtray.exe -> C:\Program Files (x86)\Thunderbird-Tray\TBTray.exe -> [2005-11-08 22:02:44 | 00,038,912 | ---- | M] (Felix 'SniperBeamer' Geyer)
tbtray.exe -> C:\Program Files (x86)\Thunderbird-Tray\TBTray.exe -> [2005-11-08 22:02:44 | 00,038,912 | ---- | M] (Felix 'SniperBeamer' Geyer)
tsnpstd3.exe -> C:\Windows\tsnpstd3.exe -> [2007-04-21 09:32:04 | 00,270,336 | ---- | M] ()
ventrilo 2.1.4.exe -> C:\Program Files\VentriloMIX\Ventrilo 2.1.4.exe -> [2003-12-22 17:36:14 | 00,581,632 | ---- | M] ()
ventrilo 2.1.4.exe -> C:\Program Files\VentriloMIX\Ventrilo 2.1.4.exe -> [2003-12-22 17:36:14 | 00,581,632 | ---- | M] ()
ventrilo 2.1.4.exe -> C:\Program Files\VentriloMIX\Ventrilo 2.1.4.exe -> [2003-12-22 17:36:14 | 00,581,632 | ---- | M] ()
ventrilo 2.1.4.exe -> C:\Program Files\VentriloMIX\Ventrilo 2.1.4.exe -> [2003-12-22 17:36:14 | 00,581,632 | ---- | M] ()
vsnpstd3.exe -> C:\Windows\vsnpstd3.exe -> [2006-09-19 09:07:28 | 00,827,392 | ---- | M] ()
wlcomm.exe -> C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe -> [2009-02-06 18:07:48 | 00,027,512 | ---- | M] (Microsoft Corporation)
wltuser.exe -> C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe -> [2009-02-06 19:21:00 | 00,224,632 | ---- | M] (Microsoft Corporation)
wltuser.exe -> C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe -> [2009-02-06 19:21:00 | 00,224,632 | ---- | M] (Microsoft Corporation)
aawservice.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -> [2009-09-27 15:26:18 | 01,028,432 | ---- | M] (Lavasoft)
aawservice.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -> [2009-09-27 15:26:18 | 01,028,432 | ---- | M] (Lavasoft)
aawservice.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -> [2009-09-27 15:26:18 | 01,028,432 | ---- | M] (Lavasoft)
aawservice.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -> [2009-09-27 15:26:18 | 01,028,432 | ---- | M] (Lavasoft)
aawservice.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -> [2009-09-27 15:26:18 | 01,028,432 | ---- | M] (Lavasoft)
aawservice.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -> [2009-09-27 15:26:18 | 01,028,432 | ---- | M] (Lavasoft)
aawservice.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -> [2009-09-27 15:26:18 | 01,028,432 | ---- | M] (Lavasoft)
aawservice.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -> [2009-09-27 15:26:18 | 01,028,432 | ---- | M] (Lavasoft)
aawtray.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe -> [2009-09-27 15:26:20 | 00,520,024 | ---- | M] (Lavasoft)
aawtray.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe -> [2009-09-27 15:26:20 | 00,520,024 | ---- | M] (Lavasoft)
aawtray.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe -> [2009-09-27 15:26:20 | 00,520,024 | ---- | M] (Lavasoft)
aawtray.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe -> [2009-09-27 15:26:20 | 00,520,024 | ---- | M] (Lavasoft)
aawtray.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe -> [2009-09-27 15:26:20 | 00,520,024 | ---- | M] (Lavasoft)
aawtray.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe -> [2009-09-27 15:26:20 | 00,520,024 | ---- | M] (Lavasoft)
aawtray.exe -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe -> [2009-09-27 15:26:20 | 00,520,024 | ---- | M] (Lavasoft)
[Win32 Services - Safe List]
64bit-(AppMgmt) Application Management [Win32_Shared | On_Demand | Stopped] -> C:\Windows\SysNative\appmgmts.dll -> [2008-01-19 10:00:52 | 00,195,584 | ---- | M] ()
64bit-(CscService) Offline Files [Win32_Shared | Auto | Running] -> C:\Windows\SysNative\cscsvc.dll -> [2008-01-19 10:01:11 | 00,598,016 | ---- | M] ()
64bit-(EvtEng) Intel(R) PROSet/Wireless Event Log [Win32_Own | Auto | Running] -> C:\Program Files\Intel\Wireless\Bin\EvtEng.exe -> [2007-02-21 12:49:30 | 00,568,320 | ---- | M] (Intel Corporation)
64bit-(Fax) Fax [Win32_Own | On_Demand | Stopped] -> C:\Windows\SysNative\fxssvc.exe -> [2008-01-19 10:00:17 | 00,689,152 | ---- | M] ()
64bit-(FLEXnet Licensing Service 64) FLEXnet Licensing Service 64 [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -> [2009-09-08 16:26:22 | 01,038,088 | ---- | M] (Acresso Software Inc.)
64bit-(Irmon) Infrared monitor service [Win32_Shared | Auto | Running] -> C:\Windows\SysNative\irmon.dll -> [2006-11-02 13:17:42 | 00,022,016 | ---- | M] ()
64bit-(LBTServ) Logitech Bluetooth Service [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe -> [2008-05-02 03:49:54 | 00,160,272 | ---- | M] (Logitech, Inc.)
64bit-(mi-raysat_3dsMax2009_64) mental ray 3.6 Satellite for Autodesk 3ds Max 2009 64-bit 64-bit [Win32_Own | Auto | Running] -> C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_64server.exe -> [2008-03-10 01:08:42 | 00,065,536 | ---- | M] ()
64bit-(RegSrvc) Intel(R) PROSet/Wireless Registry Service [Win32_Own | Auto | Running] -> C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe -> [2007-02-21 12:29:54 | 00,367,104 | ---- | M] (Intel Corporation)
64bit-(UmRdpService) Terminal Services UserMode Port Redirector [Win32_Shared | On_Demand | Stopped] -> C:\Windows\SysNative\umrdp.dll -> [2008-01-19 10:04:21 | 00,252,928 | ---- | M] ()
64bit-(usprserv) User Privilege Service [Win32_Own | On_Demand | Stopped] -> C:\Windows\SysNative\svchost.exe -> [2008-01-19 10:00:40 | 00,027,648 | ---- | M] ()
64bit-(wbengine) Block Level Backup Engine Service [Win32_Own | On_Demand | Stopped] -> C:\Windows\SysNative\wbengine.exe -> [2008-01-19 10:00:43 | 01,147,904 | ---- | M] ()
64bit-(WinDefend) Windows Defender [Win32_Shared | Auto | Running] -> C:\Program Files\Windows Defender\mpsvc.dll -> [2008-01-19 10:06:50 | 00,383,544 | ---- | M] (Microsoft Corporation)
64bit-(WMPNetworkSvc) Windows Media Player Network Sharing Service [Win32_Own | On_Demand | Running] -> C:\Program Files\Windows Media Player\wmpnetwk.exe -> [2008-01-19 10:00:47 | 01,216,000 | ---- | M] (Microsoft Corporation)
(Adobe Version Cue CS4) Adobe Version Cue CS4 [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe -> [2008-08-15 05:46:20 | 00,284,016 | ---- | M] (Adobe Systems Incorporated)
(Autodesk Licensing Service) Autodesk Licensing Service [Win32_Own | Auto | Running] -> C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -> [2009-01-28 14:00:57 | 00,079,360 | ---- | M] (Autodesk)
(avg8wd) AVG8 WatchDog [Win32_Own | Auto | Running] -> C:\Program Files (x86)\AVG\AVG8\avgwdsvc.exe -> [2009-08-28 09:36:42 | 00,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.)
(Bonjour Service) ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## [Win32_Own | Auto | Running] -> C:\Program Files (x86)\Bonjour\mDNSResponder.exe -> [2006-02-28 12:42:38 | 00,229,376 | ---- | M] (Apple Computer, Inc.)
(clr_optimization_v2.0.50727_32) Microsoft .NET Framework NGEN v2.0.50727_X86 [Win32_Own | Auto | Running] -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2008-07-27 20:03:13 | 00,069,632 | ---- | M] (Microsoft Corporation)
(clr_optimization_v2.0.50727_64) Microsoft .NET Framework NGEN v2.0.50727_X64 [Win32_Own | On_Demand | Stopped] -> C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -> [2008-07-27 20:01:49 | 00,093,184 | ---- | M] (Microsoft Corporation)
(ehRecvr) Windows Media Center Receiver Service [Win32_Own | On_Demand | Stopped] -> C:\Windows\ehome\ehRecvr.exe -> [2008-01-19 10:00:14 | 00,344,064 | ---- | M] (Microsoft Corporation)
(ehSched) Windows Media Center Scheduler Service [Win32_Own | On_Demand | Stopped] -> C:\Windows\ehome\ehsched.exe -> [2008-01-19 10:00:14 | 00,153,600 | ---- | M] (Microsoft Corporation)
(ehstart) Windows Media Center Service Launcher [Win32_Shared | Auto | Stopped] -> C:\Windows\ehome\ehstart.dll -> [2006-11-02 17:03:44 | 00,015,360 | ---- | M] (Microsoft Corporation)
(FirebirdServerMAGIXInstance) Firebird Server - MAGIX Instance [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe -> [2005-11-17 15:18:52 | 01,527,900 | ---- | M] (MAGIX®)
(FLEXnet Licensing Service) FLEXnet Licensing Service [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -> [2009-06-04 14:36:24 | 00,655,624 | ---- | M] (Acresso Software Inc.)
(FontCache3.0.0.0) Windows Presentation Foundation Font Cache 3.0.0.0 [Win32_Own | On_Demand | Stopped] -> C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe -> [2008-06-20 03:17:12 | 00,046,104 | ---- | M] (Microsoft Corporation)
(fsssvc) Windows Live-tjenesten Family Safety [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe -> [2009-08-05 22:48:42 | 00,704,864 | ---- | M] (Microsoft Corporation)
(gupdate1c9fcd78abdc07d) Tjenesten Google Update (gupdate1c9fcd78abdc07d) [Win32_Own | Auto | Stopped] -> C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -> [2009-07-04 20:44:50 | 00,133,104 | ---- | M] (Google Inc.)
(gusvc) Google Software Updater [Win32_Own | Auto | Stopped] -> C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe -> [2009-07-04 20:43:58 | 00,190,448 | ---- | M] (Google)
(hpqcxs08) hpqcxs08 [Win32_Shared | On_Demand | Running] -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll -> [2007-03-11 21:24:50 | 00,217,088 | ---- | M] (Hewlett-Packard Co.)
(hpqddsvc) HP CUE DeviceDiscovery Service [Win32_Shared | Auto | Running] -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll -> [2007-03-11 22:02:52 | 00,131,072 | ---- | M] (Hewlett-Packard Co.)
(IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -> [2005-04-04 01:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation)
(idsvc) Windows CardSpace [Win32_Shared | Unknown | Stopped] -> C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -> [2008-06-20 03:16:53 | 00,859,648 | ---- | M] (Microsoft Corporation)
(iPod Service) iPod-tjeneste [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\iPod\bin\iPodService.exe -> [2007-09-14 10:59:56 | 00,503,608 | ---- | M] (Apple Inc.)
(KeyIso) CNG Key Isolation [Win32_Shared | On_Demand | Running] -> C:\Windows\SysWow64\keyiso.dll -> [2006-11-02 11:46:05 | 00,018,944 | ---- | M] (Microsoft Corporation)
(Lavasoft Ad-Aware Service) Lavasoft Ad-Aware Service [Win32_Own | Auto | Running] -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -> [2009-09-27 15:26:18 | 01,028,432 | ---- | M] (Lavasoft)
(mi-raysat_3dsmax9_32) mental ray 3.5 Satellite (32-bit) [Win32_Own | Auto | Stopped] -> C:\Program Files (x86)\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe -> [2006-09-29 12:48:06 | 00,065,536 | ---- | M] ()
(Microsoft Office Groove Audit Service) Microsoft Office Groove Audit Service [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -> [2008-10-25 11:44:08 | 00,065,888 | ---- | M] (Microsoft Corporation)
(MSDTC) Distributed Transaction Coordinator [Win32_Own | Unknown | Stopped] -> C:\Windows\SysWow64\Msdtc -> [2006-11-02 15:34:14 | 00,000,000 | ---D | M]
(NBService) NBService [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe -> [2007-04-13 22:09:56 | 00,792,112 | ---- | M] (Nero AG)
(Netlogon) Netlogon [Win32_Shared | On_Demand | Stopped] -> C:\Windows\SysWow64\netlogon.dll -> [2008-01-19 09:35:36 | 00,592,384 | ---- | M] (Microsoft Corporation)
(NMIndexingService) NMIndexingService [Win32_Own | On_Demand | Running] -> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe -> [2007-06-01 11:21:30 | 00,271,920 | ---- | M] (Nero AG)
(odserv) Microsoft Office Diagnostics Service [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -> [2008-11-04 01:06:28 | 00,441,712 | ---- | M] (Microsoft Corporation)
(ose) Office Source Engine [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE -> [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation)
(PnkBstrA) PnkBstrA [Win32_Own | Auto | Running] -> C:\Windows\SysWow64\PnkBstrA.exe -> [2009-03-20 16:45:10 | 00,066,872 | ---- | M] ()
(SeaPort) SeaPort [Win32_Own | Auto | Running] -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -> [2009-05-19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation)
(ServiceLayer) ServiceLayer [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -> [2008-11-11 10:38:06 | 00,620,544 | ---- | M] (Nokia.)
(Start BT in service) Start BT in service [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe -> [2007-03-14 15:57:42 | 00,047,984 | ---- | M] ()
(Steam Client Service) Steam Client Service [Win32_Own | On_Demand | Stopped] -> C:\Program Files (x86)\Common Files\Steam\SteamService.exe -> [2009-06-22 19:17:14 | 00,322,032 | ---- | M] (Valve Corporation)
(vds) Virtual Disk [Win32_Own | On_Demand | Stopped] -> C:\Windows\SysWow64\Wbem\vds.mof -> [2006-11-02 08:35:15 | 00,060,994 | ---- | M] ()
(VSS) Volume Shadow Copy [Win32_Own | On_Demand | Stopped] -> C:\Windows\SysWow64\Wbem\vss.mof -> [2006-11-02 08:35:15 | 00,055,846 | ---- | M] ()
[Registry - Safe List]
< 64bit-Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> ->
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" ->
http://go.microsoft.com/fwlink/?LinkId=69157 ->
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" ->
http://go.microsoft.com/fwlink/?LinkId=54896 ->
HKEY_LOCAL_MACHINE\: Main\\"Default_Secondary_Page_URL" -> [binary data] ->
HKEY_LOCAL_MACHINE\: Main\\"Extensions Off Page" -> about:NoAdd-ons ->
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> C:\Windows\System32\blank.htm ->
HKEY_LOCAL_MACHINE\: Main\\"Search Page" ->
http://go.microsoft.com/fwlink/?LinkId=54896 ->
HKEY_LOCAL_MACHINE\: Main\\"Security Risk Page" -> about:SecurityRisk ->
HKEY_LOCAL_MACHINE\: Main\\"Start Page" ->
http://go.microsoft.com/fwlink/?LinkId=69157 ->
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> ->
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" ->
http://www.yahoo.com/ ->
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" ->
http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com ->
HKEY_LOCAL_MACHINE\: Main\\"Default_Secondary_Page_URL" -> [binary data] ->
HKEY_LOCAL_MACHINE\: Main\\"Extensions Off Page" -> about:NoAdd-ons ->
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> C:\Windows\SysWOW64\blank.htm ->
HKEY_LOCAL_MACHINE\: Main\\"Search Page" ->
http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com ->
HKEY_LOCAL_MACHINE\: Main\\"Security Risk Page" -> about:SecurityRisk ->
HKEY_LOCAL_MACHINE\: Main\\"Start Page" ->
http://www.yahoo.com/ ->
HKEY_LOCAL_MACHINE\: Search\\"CustomSearch" ->
http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr9/*http://www.yahoo.com/ext/search/search.html ->
< Internet Explorer Settings [HKEY_CURRENT_USER\] > -> ->
HKEY_CURRENT_USER\: Main\\"Local Page" -> C:\Windows\system32\blank.htm ->
HKEY_CURRENT_USER\: Main\\"Page_Transitions" -> 1 ->
HKEY_CURRENT_USER\: Main\\"Search Page" ->
http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com ->
HKEY_CURRENT_USER\: Main\\"Start Page" ->
http://www.google.dk/ ->
HKEY_CURRENT_USER\: Main\\"StartPageCache" -> 1 ->
HKEY_CURRENT_USER\: SearchURL\\"" ->
http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com ->
HKEY_CURRENT_USER\: URLSearchHooks\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
HKEY_CURRENT_USER\: "ProxyEnable" -> 0 ->
HKEY_CURRENT_USER\: "ProxyOverride" -> *.local ->
< FireFox Settings [Prefs.js] > -> C:\Users\Trung Dinh\AppData\Roaming\Mozilla\FireFox\Profiles\mzrxxlg0.default\prefs.js ->
browser.startup.homepage -> "
http://www.google.com" ->
extensions.enabledItems -> {3f963a5b-e555-4543-90e2-c3908898db71}:8.5 ->
extensions.enabledItems -> {c50ca3c4-5656-43c2-a061-13e717f73fc8}:2.03 ->
extensions.enabledItems -> firebug@software.joehewitt.com:1.4.3 ->
extensions.enabledItems -> {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20090920.2 ->
extensions.enabledItems -> {77b819fa-95ad-4f2c-ac7c-486b356188a9}:1.5.20090525 ->
extensions.enabledItems -> {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 ->
extensions.enabledItems -> {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 ->
extensions.enabledItems -> {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 ->
extensions.enabledItems -> {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15 ->
extensions.enabledItems -> {20a82645-c095-46ed-80e3-08825760534b}:1.1 ->
extensions.enabledItems -> {e3f6c2cc-d8db-498c-af6c-499fb211db97}:1.2 ->
extensions.enabledItems -> {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.6 ->
extensions.enabledItems -> {85E85FF9-E50C-42DE-8A3D-61485FD6C8DB}:1.4 ->
extensions.enabledItems -> {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.3 ->
< FireFox Settings [User.js] > -> C:\Users\Trung Dinh\AppData\Roaming\Mozilla\FireFox\Profiles\mzrxxlg0.default\user.js ->
< FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
HKLM\software\mozilla\Firefox\Extensions -> ->
HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71} -> C:\PROGRAM FILES (X86)\AVG\AVG8\FIREFOX [C:\PROGRAM FILES (X86)\AVG\AVG8\FIREFOX] -> [2009-06-26 10:09:16 | 00,000,000 | ---D | M]
HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} -> C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\] -> [2009-08-09 10:10:29 | 00,000,000 | ---D | M]
HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions -> ->
HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\COMPONENTS [C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\COMPONENTS] -> [2009-09-10 14:48:42 | 00,000,000 | ---D | M]
HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\PLUGINS [C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\PLUGINS] -> [2009-09-25 16:32:22 | 00,000,000 | ---D | M]
HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.23\extensions -> ->
HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.23\extensions\\Components -> C:\PROGRAM FILES (X86)\MOZILLA THUNDERBIRD\COMPONENTS [C:\PROGRAM FILES (X86)\MOZILLA THUNDERBIRD\COMPONENTS] -> [2009-10-07 13:19:09 | 00,000,000 | ---D | M]
HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.23\extensions\\Plugins -> C:\PROGRAM FILES (X86)\MOZILLA THUNDERBIRD\PLUGINS [C:\PROGRAM FILES (X86)\MOZILLA THUNDERBIRD\PLUGINS] -> [2009-09-08 16:37:45 | 00,000,000 | ---D | M]
< FireFox Extensions [User Folders] > ->
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Extensions -> [2009-02-15 17:48:05 | 00,000,335 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} -> [2009-02-15 17:48:05 | 00,000,335 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org -> [2009-02-15 17:48:05 | 00,000,335 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Firefox\Profiles\mzrxxlg0.default\extensions -> [2009-10-05 13:05:02 | 00,104,862 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Firefox\Profiles\mzrxxlg0.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} -> [2009-10-05 13:05:02 | 00,104,862 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Firefox\Profiles\mzrxxlg0.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} -> [2009-10-05 13:05:02 | 00,104,862 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Firefox\Profiles\mzrxxlg0.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9} -> [2009-10-05 13:05:02 | 00,104,862 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Firefox\Profiles\mzrxxlg0.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8} -> [2009-10-05 13:05:02 | 00,104,862 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Firefox\Profiles\mzrxxlg0.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97} -> [2009-10-05 13:05:02 | 00,104,862 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Firefox\Profiles\mzrxxlg0.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}-trash -> [2009-10-05 13:05:02 | 00,104,862 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Firefox\Profiles\mzrxxlg0.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} -> [2009-10-05 13:05:02 | 00,104,862 | ---- | M] ()
-> C:\Users\Trung Dinh\AppData\Roaming\mozilla\Firefox\Profiles\mzrxxlg0.default\extensions\firebug@software.joehewitt.com -> [2009-10-05 13:05:02 | 00,104,862 | ---- | M] ()
< FireFox Extensions [Program Folders] > ->
-> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions -> [2009-09-10 14:48:42 | 10,776,568 | ---- | M] (Mozilla Foundation)
-> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{85E85FF9-E50C-42DE-8A3D-61485FD6C8DB} -> [2009-09-10 14:48:42 | 10,776,568 | ---- | M] (Mozilla Foundation)
-> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} -> [2009-09-10 14:48:42 | 10,776,568 | ---- | M] (Mozilla Foundation)
-> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} -> [2009-09-10 14:48:42 | 10,776,568 | ---- | M] (Mozilla Foundation)
-> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} -> [2009-09-10 14:48:42 | 10,776,568 | ---- | M] (Mozilla Foundation)
-> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} -> [2009-09-10 14:48:42 | 10,776,568 | ---- | M] (Mozilla Foundation)
-> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} -> [2009-09-10 14:48:42 | 10,776,568 | ---- | M] (Mozilla Foundation)
< FireFox Components [Program Folders] > ->
C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\components\ -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\components -> [2009-09-10 14:48:42 | 00,000,000 | ---D | M]
browserdirprovider.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\components\browserdirprovider.dll -> [2009-09-10 14:48:40 | 00,023,544 | ---- | M] (Mozilla Foundation)
brwsrcmp.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\components\brwsrcmp.dll -> [2009-09-10 14:48:40 | 00,137,208 | ---- | M] (Mozilla Foundation)
< FireFox Plugins [Program Folders] > ->
C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\ -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins -> [2009-09-25 16:32:22 | 00,000,000 | ---D | M]
libdivx.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\libdivx.dll -> [2009-05-01 23:02:48 | 01,044,480 | ---- | M] (The OpenSSL Project,
http://www.openssl.org/)
np-mswmp.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\np-mswmp.dll -> [2007-04-10 17:21:08 | 00,163,256 | ---- | M] (Microsoft Corporation)
npdeploytk.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npdeploytk.dll -> [2009-07-25 05:23:01 | 00,411,368 | ---- | M] (Sun Microsystems, Inc.)
npdivx32.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npdivx32.dll -> [2009-05-12 20:46:20 | 01,650,992 | ---- | M] (DivX,Inc.)
npdivx32.xpt -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npdivx32.xpt -> [2009-05-01 23:02:24 | 00,001,691 | ---- | M] ()
npDivxPlayerPlugin.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npDivxPlayerPlugin.dll -> [2009-05-19 00:41:32 | 00,098,304 | ---- | M] (DivX, Inc)
npnul32.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npnul32.dll -> [2009-09-10 14:48:40 | 00,065,016 | ---- | M] (mozilla.org)
NPOFF12.DLL -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\NPOFF12.DLL -> [2006-10-26 20:12:16 | 00,016,192 | ---- | M] (Microsoft Corporation)
NPOFFICE.DLL -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\NPOFFICE.DLL -> [2007-03-22 20:23:30 | 00,017,248 | ---- | M] (Microsoft Corporation)
nppdf32.DEU -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\nppdf32.DEU -> [2008-06-12 02:24:00 | 00,006,144 | ---- | M] ()
nppdf32.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\nppdf32.dll -> [2008-06-11 22:45:28 | 00,103,792 | ---- | M] (Adobe Systems Inc.)
nppdf32.FRA -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\nppdf32.FRA -> [2008-06-12 02:15:50 | 00,006,144 | ---- | M] ()
nppl3260.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\nppl3260.dll -> [2006-10-07 05:18:48 | 00,144,984 | ---- | M] (RealNetworks, Inc.)
npqtplugin.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npqtplugin.dll -> [2009-02-27 14:53:40 | 00,143,360 | ---- | M] (Apple Inc.)
npqtplugin2.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npqtplugin2.dll -> [2009-02-27 14:53:40 | 00,143,360 | ---- | M] (Apple Inc.)
npqtplugin3.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npqtplugin3.dll -> [2009-02-27 14:53:40 | 00,143,360 | ---- | M] (Apple Inc.)
npqtplugin4.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npqtplugin4.dll -> [2009-02-27 14:53:40 | 00,143,360 | ---- | M] (Apple Inc.)
npqtplugin5.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npqtplugin5.dll -> [2009-02-27 14:53:41 | 00,143,360 | ---- | M] (Apple Inc.)
npqtplugin6.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npqtplugin6.dll -> [2009-02-27 14:53:41 | 00,143,360 | ---- | M] (Apple Inc.)
npqtplugin7.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\npqtplugin7.dll -> [2009-02-27 14:53:41 | 00,143,360 | ---- | M] (Apple Inc.)
nprpjplug.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\nprpjplug.dll -> [2006-10-07 05:01:00 | 00,081,920 | ---- | M] (RealNetworks, Inc.)
nsIDivxPlayerPlugin.xpt -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\nsIDivxPlayerPlugin.xpt -> [2009-05-01 23:02:32 | 00,000,297 | ---- | M] ()
QuickTimePlugin.class -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\QuickTimePlugin.cla -> [2009-02-27 14:53:40 | 00,004,208 | ---- | M] ()
ssldivx.dll -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\ssldivx.dll -> [2009-05-01 23:02:48 | 00,200,704 | ---- | M] (The OpenSSL Project,
http://www.openssl.org/)
WMP Firefox Plugin License.rtf -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\WMP Firefox Plugin License.rtf -> [2007-03-30 10:43:58 | 00,149,569 | ---- | M] ()
WMP Firefox Plugin RelNotes.txt -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\plugins\WMP Firefox Plugin RelNotes.txt -> [2007-03-30 10:43:58 | 00,003,352 | ---- | M] ()
< FireFox SearchPlugins [Program Folders] > ->
C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\ -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins -> [2009-07-01 01:28:51 | 00,000,000 | ---D | M]
amazon-co-uk.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\amazon-co-uk.xml -> [2009-06-24 14:39:30 | 00,001,525 | ---- | M] ()
answers.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\answers.xml -> [2009-06-24 14:39:30 | 00,002,193 | ---- | M] ()
creativecommons.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\creativecommons.xml -> [2009-06-24 14:39:30 | 00,001,534 | ---- | M] ()
eBay.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\eBay.xml -> [2009-06-24 14:39:30 | 00,002,344 | ---- | M] ()
google.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\google.xml -> [2009-06-24 14:39:30 | 00,002,371 | ---- | M] ()
wikipedia-da.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\wikipedia-da.xml -> [2009-06-24 14:39:30 | 00,001,178 | ---- | M] ()
yahoo-dk.xml -> C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\searchplugins\yahoo-dk.xml -> [2009-06-24 14:39:30 | 00,000,799 | ---- | M] ()
< HOSTS File > (3458 bytes and 98 lines) -> C:\Windows\SysNative\Drivers\etc\hosts ->
First 25 entries...
Reset Hosts
::1 localhost
127.0.0.1 activate.adobe.com127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
< 64bit-BHO's [HKEY_LOCAL_MACHINE] > -> 64bit-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->
{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} [HKLM] -> C:\Program Files\Windows Live\Family Safety\fssbho.dll [Windows Live Family Safety Browser Helper Class] -> [2009-08-05 23:24:16 | 00,132,448 | ---- | M] (Microsoft Corporation)
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [HKLM] -> C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [Google Toolbar Notifier BHO] -> [2009-07-26 20:51:41 | 00,318,960 | ---- | M] (Google Inc.)
{AA58ED58-01DD-4d91-8333-CF10577473F7} [HKLM] -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [Google Toolbar Helper] -> [2009-07-26 20:49:45 | 00,346,736 | ---- | M] (Google Inc.)
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->
{02478D38-C3F9-4efb-9B51-7695ECA05670} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
{053F9267-DC04-4294-A72C-58F732D338C0} [HKLM] -> C:\Program Files (x86)\HP\Smart Web Printing\hpswp_framework.dll [HP Print Clips] -> [2007-03-02 16:52:08 | 00,177,768 | R--- | M] (Hewlett-Packard Co.)
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> [2008-06-11 22:33:22 | 00,061,816 | ---- | M] (Adobe Systems Incorporated)
{074C1DC5-9320-4A9A-947D-C042949C6216} [HKLM] -> C:\Program Files (x86)\Adobe\Adobe Contribute CS4\contributeieplugin.dll [ContributeBHO Class] -> [2008-09-10 01:07:52 | 00,136,560 | ---- | M] (Adobe Systems Incorporated.)
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} [HKLM] -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [Adobe PDF Link Helper] -> [2008-06-11 22:33:16 | 00,075,128 | ---- | M] (Adobe Systems Incorporated)
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} [HKLM] -> C:\Program Files (x86)\AVG\AVG8\avgssie.dll [AVG Safe Search] -> [2009-08-28 09:36:54 | 01,111,320 | ---- | M] (AVG Technologies CZ, s.r.o.)
{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} [HKLM] -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [Search Helper] -> [2009-05-19 11:36:18 | 00,137,600 | ---- | M] (Microsoft Corporation)
{72853161-30C5-4D22-B7F9-0BBC1D38A37E} [HKLM] -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [Groove GFS Browser Helper] -> [2009-02-12 15:19:32 | 02,217,848 | ---- | M] (Microsoft Corporation)
{9030D464-4C02-4ABF-8ECC-5164760863C6} [HKLM] -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [Hjælp til tilmelding til Windows Live] -> [2009-01-22 16:41:30 | 00,408,448 | ---- | M] (Microsoft Corporation)
{AE7CD045-E861-484f-8273-0445EE161910} [HKLM] -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [Adobe PDF Conversion Toolbar Helper] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [HKLM] -> C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [Google Toolbar Notifier BHO] -> [2009-07-26 20:51:41 | 00,761,840 | ---- | M] (Google Inc.)
{C84D72FE-E17D-4195-BB24-76C02E2E7C4E} [HKLM] -> C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [Google Dictionary Compression sdch] -> [2009-07-26 20:49:39 | 00,458,736 | ---- | M] (Google Inc.)
{DBC80044-A445-435b-BC74-9C25C1C588A9} [HKLM] -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [Java(tm) Plug-In 2 SSV Helper] -> [2009-07-25 05:23:03 | 00,041,760 | ---- | M] (Sun Microsystems, Inc.)
{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} [HKLM] -> C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [Windows Live Toolbar Helper] -> [2009-02-06 19:17:46 | 01,068,904 | ---- | M] (Microsoft Corporation)
{F4971EE7-DAA0-4053-9964-665D8EE6A077} [HKLM] -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [SmartSelect Class] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
{AA58ED58-01DD-4d91-8333-CF10577473F7} [HKLM] -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [Google Toolbar Helper] -> [2009-07-26 20:49:44 | 00,256,112 | ---- | M] (Google Inc.)
< 64bit-Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" [HKLM] -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [Google Toolbar] -> [2009-07-26 20:49:45 | 00,346,736 | ---- | M] (Google Inc.)
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->
"{21FA44EF-376D-4D53-9B0F-8A89D3229068}" [HKLM] -> C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [&Windows Live Toolbar] -> [2009-02-06 19:17:46 | 01,068,904 | ---- | M] (Microsoft Corporation)
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" [HKLM] -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [Google Toolbar] -> [2009-07-26 20:49:44 | 00,256,112 | ---- | M] (Google Inc.)
"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [Adobe PDF] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
"{517BDDE4-E3A7-4570-B21E-2B52B6139FC7}" [HKLM] -> C:\Program Files (x86)\Adobe\Adobe Contribute CS4\contributeieplugin.dll [Contribute Toolbar] -> [2008-09-10 01:07:52 | 00,136,560 | ---- | M] (Adobe Systems Incorporated.)
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
< Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ ->
64bit-WebBrowser\\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" [HKLM] -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [Google Toolbar] -> [2009-07-26 20:49:45 | 00,346,736 | ---- | M] (Google Inc.)
WebBrowser\\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" [HKLM] -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [Google Toolbar] -> [2009-07-26 20:49:44 | 00,256,112 | ---- | M] (Google Inc.)
WebBrowser\\"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [Adobe PDF] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
WebBrowser\\"{C55BBCD6-41AD-48AD-9953-3609C48EACC7}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found
< 64bit-Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"Kernel and Hardware Abstraction Layer" -> C:\Windows\KHALMNPR.Exe [KHALMNPR.EXE] -> [2008-02-29 04:16:12 | 00,242,192 | ---- | M] (Logitech, Inc.)
"LifeChat" -> C:\Program Files\Microsoft LifeChat\LifeChat.exe ["C:\Program Files\Microsoft LifeChat\LifeChat.exe"] -> [2008-08-21 12:17:24 | 00,380,448 | ---- | M] (Microsoft Corporation)
"Logitech Hardware Abstraction Layer" -> C:\Windows\KHALMNPR.Exe [KHALMNPR.EXE] -> [2008-02-29 04:16:12 | 00,242,192 | ---- | M] (Logitech, Inc.)
"NvCplDaemon" -> C:\Windows\SysNative\NvCpl.DLL [RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup] -> [2008-03-18 13:51:15 | 10,824,224 | ---- | M] ()
"NvMediaCenter" -> C:\Windows\SysNative\NvMcTray.DLL [RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit] -> [2008-03-18 13:51:29 | 00,081,440 | ---- | M] ()
"NvSvc" -> C:\Windows\SysNative\nvsvc64.DLL [RUNDLL32.EXE C:\Windows\system32\nvsvc64.dll,nvsvcStart] -> [2008-03-18 13:51:35 | 00,095,776 | ---- | M] ()
"RtHDVCpl" -> C:\Windows\RAVCpl64.exe [RAVCpl64.exe] -> [2008-02-26 17:23:08 | 05,723,648 | ---- | M] (Realtek Semiconductor)
"Skytel" -> C:\Windows\SkyTel.exe [Skytel.exe] -> [2007-11-20 19:15:58 | 01,826,816 | ---- | M] (Realtek Semiconductor Corp.)
"SMSERIAL" -> C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe] -> [2006-11-22 18:38:34 | 00,830,976 | ---- | M] (Motorola Inc.)
"snpstd3" -> C:\Windows\vsnpstd3.exe [C:\Windows\vsnpstd3.exe] -> [2006-09-19 09:07:28 | 00,827,392 | ---- | M] ()
"SynTPEnh" -> C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] -> [2007-12-06 18:12:50 | 01,216,808 | ---- | M] (Synaptics, Inc.)
"Windows Defender" -> C:\Program Files\Windows Defender\MSASCui.exe [%ProgramFiles%\Windows Defender\MSASCui.exe -hide] -> [2008-01-19 10:07:02 | 01,584,184 | ---- | M] (Microsoft Corporation)
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"" -> [] -> File not found
"Acrobat Assistant 8.0" -> C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe ["C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"] -> [2008-06-11 22:43:26 | 00,640,376 | ---- | M] (Adobe Systems Inc.)
"Adobe Acrobat Speed Launcher" -> C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe ["C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"] -> [2008-06-12 02:25:18 | 00,037,232 | ---- | M] (Adobe Systems Incorporated)
"Adobe Reader Speed Launcher" -> C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe ["C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"] -> [2008-10-15 02:04:34 | 00,039,792 | ---- | M] (Adobe Systems Incorporated)
"Adobe_ID0ENQBO" -> C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE] -> [2008-08-15 05:46:20 | 00,378,224 | ---- | M] (Adobe Systems Incorporated)
"AdobeCS4ServiceManager" -> C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe ["C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin] -> [2008-08-14 07:58:34 | 00,611,712 | ---- | M] (Adobe Systems Incorporated)
"Ad-Watch" -> C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe ["C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe"] -> [2009-09-27 15:26:20 | 00,520,024 | ---- | M] (Lavasoft)
"AVG8_TRAY" -> C:\Program Files (x86)\AVG\AVG8\avgtray.exe [C:\PROGRA~2\AVG\AVG8\avgtray.exe] -> [2009-10-06 09:06:49 | 02,023,704 | ---- | M] (AVG Technologies CZ, s.r.o.)
"GrooveMonitor" -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe ["C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"] -> [2008-10-25 11:44:34 | 00,031,072 | ---- | M] (Microsoft Corporation)
"Malwarebytes Anti-Malware (reboot)" -> C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe ["C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript] -> [2009-09-10 14:53:56 | 01,312,080 | ---- | M] (Malwarebytes Corporation)
"QLButton" -> C:\Program Files (x86)\Quick Launch Button\QLButton.exe ["C:\Program Files (x86)\Quick Launch Button\QLButton.exe"] -> [2005-01-06 14:53:34 | 00,106,496 | ---- | M] (INVENTEC)
"SunJavaUpdateSched" -> C:\Program Files (x86)\Java\jre6\bin\jusched.exe ["C:\Program Files (x86)\Java\jre6\bin\jusched.exe"] -> [2009-07-25 05:23:12 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.)
"tsnpstd3" -> C:\Windows\tsnpstd3.exe [C:\Windows\tsnpstd3.exe] -> [2007-04-21 09:32:04 | 00,270,336 | ---- | M] ()
"WindowsLivePhone" -> C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe [C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe /AutoRun] -> [2008-12-22 15:59:20 | 00,787,816 | ---- | M] (Microsoft Corporation)
< Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"AdobeBridge" -> [] -> File not found
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}" -> C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe ["C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"] -> [2007-06-01 11:21:08 | 00,153,136 | ---- | M] (Nero AG)
"ehTray.exe" -> C:\Windows\ehome\ehTray.exe [C:\Windows\ehome\ehTray.exe] -> [2008-01-19 10:00:14 | 00,138,240 | ---- | M] (Microsoft Corporation)
"kwlrxndv" -> [rundll32.exe "C:\Users\Trung Dinh\AppData\Roaming\japwamd.dll",pefotvng] -> File not found
"Rainlendar2" -> C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe] -> [2007-12-30 12:23:34 | 01,365,504 | ---- | M] ()
"swg" -> C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe ["C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"] -> [2009-01-08 13:51:09 | 00,039,408 | ---- | M] (Google Inc.)
"WindowsLivePhone" -> C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe ["C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun] -> [2008-12-22 15:59:20 | 00,787,816 | ---- | M] (Microsoft Corporation)
"WMPNSCFG" -> C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe [C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe] -> File not found
< RunOnce [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce ->
"Shockwave Updater" -> C:\Windows\SysWOW64\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1100458 -Mozilla\4.0 ( [C:\Windows\SysWOW64\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1100458 -Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; WOW64; GTB5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; InfoPath.2; .NET CLR 1.1.4322; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618)] -> File not found
< CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoActiveDesktop" -> [1] -> File not found
\\"ForceActiveDesktopOn" -> [0] -> File not found
\\"NoActiveDesktopChanges" -> [0] -> File not found
< CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
\\"ConsentPromptBehaviorAdmin" -> [2] -> File not found
\\"ConsentPromptBehaviorUser" -> [1] -> File not found
\\"EnableInstallerDetection" -> [1] -> File not found
\\"EnableLUA" -> [1] -> File not found
\\"EnableSecureUIAPaths" -> [1] -> File not found
\\"EnableVirtualization" -> [1] -> File not found
\\"PromptOnSecureDesktop" -> [1] -> File not found
\\"ValidateAdminCodeSignatures" -> [0] -> File not found
\\"dontdisplaylastusername" -> [0] -> File not found
\\"legalnoticecaption" -> [] -> File not found
\\"legalnoticetext" -> [] -> File not found
\\"scforceoption" -> [0] -> File not found
\\"shutdownwithoutlogon" -> [1] -> File not found
\\"undockwithoutlogon" -> [1] -> File not found
\\"FilterAdministratorToken" -> [0] -> File not found
\\"EnableUIADesktopToggle" -> [0] -> File not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats
\UIPI\Clipboard\ExceptionFormats\\"CF_TEXT" -> [1] -> File not found
\UIPI\Clipboard\ExceptionFormats\\"CF_BITMAP" -> [2] -> File not found
\UIPI\Clipboard\ExceptionFormats\\"CF_OEMTEXT" -> [7] -> File not found
\UIPI\Clipboard\ExceptionFormats\\"CF_DIB" -> [8] -> File not found
\UIPI\Clipboard\ExceptionFormats\\"CF_PALETTE" -> [9] -> File not found
\UIPI\Clipboard\ExceptionFormats\\"CF_UNICODETEXT" -> [13] -> File not found
\UIPI\Clipboard\ExceptionFormats\\"CF_DIBV5" -> [17] -> File not found
< 64bit-Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ ->
Append Link Target to Existing PDF -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [
res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
Append to Existing PDF -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [
res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
Convert Link Target to Adobe PDF -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [
res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
Convert to Adobe PDF -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [
res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
E&ksporter til Microsoft Excel -> C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE [
res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000] -> [2009-05-04 08:40:04 | 18,333,536 | ---- | M] (Microsoft Corporation)
< Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ ->
Append Link Target to Existing PDF -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [
res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
Append to Existing PDF -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [
res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
Convert Link Target to Adobe PDF -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [
res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
Convert to Adobe PDF -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [
res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html] -> [2008-06-11 22:42:44 | 00,345,480 | ---- | M] (Adobe Systems Incorporated)
E&ksporter til Microsoft Excel -> C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE [
res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000] -> [2009-05-04 08:40:04 | 18,333,536 | ---- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->
{219C3416-8CB2-491a-A3C7-D9FCDDC9D600}:{5F7B1267-94A9-47F5-98DB-E99415F33AEC} [HKLM] -> C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll [Button: Blog det] -> [2009-07-26 20:17:14 | 00,186,192 | ---- | M] (Microsoft Corporation)
{219C3416-8CB2-491a-A3C7-D9FCDDC9D600}:{5F7B1267-94A9-47F5-98DB-E99415F33AEC} [HKLM] -> C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll [Menu: &Blog det i Windows Live Writer] -> [2009-07-26 20:17:14 | 00,186,192 | ---- | M] (Microsoft Corporation)
{2670000A-7350-4f3c-8081-5663EE0C6C49}:{48E73304-E1D6-4330-914C-F5F514E3486C} [HKLM] -> C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll [Button: Send til OneNote] -> [2008-10-25 07:52:00 | 00,604,056 | ---- | M] (Microsoft Corporation)
{2670000A-7350-4f3c-8081-5663EE0C6C49}:{48E73304-E1D6-4330-914C-F5F514E3486C} [HKLM] -> C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll [Menu: S&end til OneNote] -> [2008-10-25 07:52:00 | 00,604,056 | ---- | M] (Microsoft Corporation)
{58ECB495-38F0-49cb-A538-10282ABF65E7}:{E763472E-A716-4CD9-89BD-DBDA6122F741} [HKLM] -> C:\Program Files (x86)\HP\Smart Web Printing\hpswp_extensions.dll [Button: HP Klipsamling] -> [2007-03-02 16:53:20 | 00,153,192 | R--- | M] (Hewlett-Packard Co.)
{700259D7-1666-479a-93B1-3250410481E8}:{A93C41D8-01F8-4F8B-B14C-DE20B117E636} [HKLM] -> C:\Program Files (x86)\HP\Smart Web Printing\hpswp_extensions.dll [Button: HP Smart markering] -> [2007-03-02 16:53:20 | 00,153,192 | R--- | M] (Hewlett-Packard Co.)
{88CFA58B-A63F-4A94-9C54-0C7A58E3333E}:{17A84966-F1E9-4645-AA9E-5E771EE1C859} [HKLM] -> C:\Program Files (x86)\Nuclear Coffee\VideoGet\Plugins\VideoGet_IE.dll [Button: Add to VideoGet] -> [2008-04-07 16:06:14 | 00,449,536 | ---- | M] (Nuclear Coffee Software)
{88CFA58B-A63F-4A94-9C54-0C7A58E3333E}:{17A84966-F1E9-4645-AA9E-5E771EE1C859} [HKLM] -> C:\Program Files (x86)\Nuclear Coffee\VideoGet\Plugins\VideoGet_IE.dll [Menu: Add to &VideoGet] -> [2008-04-07 16:06:14 | 00,449,536 | ---- | M] (Nuclear Coffee Software)
{92780B25-18CC-41C8-B9BE-3C9C571A8263}:{FF059E31-CC5A-4E2E-BF3B-96E929D65503} [HKLM] -> C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL [Button: Research] -> [2009-03-06 04:04:56 | 00,039,464 | ---- | M] (Microsoft Corporation)
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ ->
Extension\.spop -> C:\Program Files (x86)\Internet Explorer\Plugins\NPDocBox.dll [Reg Error: Value error.] -> [2001-08-01 18:05:42 | 00,270,336 | ---- | M] (Intertrust Technologies, Inc.)
< 64bit-Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< 64bit-Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< 64bit-Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 2 domain(s) found. ->
danskebank.dk .
-> Trusted sites -> hansenberg.dk .
-> Local intranet -> < Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->
{0CCA191D-13A6-4E29-B746-314DEE697D83} [HKLM] ->
http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab [Facebook Photo Uploader 5 Control] ->
{166B1BCA-3F9C-11CF-8075-444553540000} [HKLM] ->
http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab [Shockwave ActiveX Control] ->
{20A60F0D-9AFA-4515-A0FD-83BD84642501} [HKLM] ->
http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab [Checkers Class] ->
{233C1507-6A77-46A4-9443-F871F945D258} [HKLM] ->
http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab [Shockwave ActiveX Control] ->
{5C051655-FCD5-4969-9182-770EA5AA5565} [HKLM] ->
http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab [Solitaire Showdown Class] ->
{5D6F45B3-9043-443D-A792-115447494D24} [HKLM] ->
http://messenger.zone.msn.com/DA-DK/a-UNO1/GAME_UNO1.cab [UnoCtrl Class] ->
{67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} [HKLM] ->
http://www.systemrequirementslab.com/sysreqlab2.cab [System Requirements Lab Class] ->
{69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} [HKLM] ->
http://www.acclaim.com/cabs/acclaim_v4.cab [GameLauncher Control] ->
{8AD9C840-044E-11D1-B3E9-00805F499D93} [HKLM] ->
http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab [Java Plug-in 1.6.0_15] ->
{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} [HKLM] ->
http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab [Reg Error: Key error.] ->
{A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} [HKLM] ->
http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab [BatchDownloader Class] ->
{C3F79A2B-B9B4-4A66-B012-3EE46475B072} [HKLM] ->
http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab [MessengerStatsClient Class] ->
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} [HKLM] ->
http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab [Java Plug-in 1.6.0_05] ->
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [HKLM] ->
http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab [Java Plug-in 1.6.0_07] ->
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} [HKLM] ->
http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab [Java Plug-in 1.6.0_15] ->
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [HKLM] ->
http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab [Java Plug-in 1.6.0_15] ->
{D27CDB6E-AE6D-11CF-96B8-444553540000} [HKLM] ->
http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab [Shockwave Flash Object] ->
{D8575CE3-3432-4540-88A9-85A1325D3375} [HKLM] ->
https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab [e-Safekey] ->
{F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} [HKLM] ->
http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab [Minesweeper Flags Class] ->
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ ->
DhcpNameServer -> 212.242.40.3 212.242.40.51 ->
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->
{0FAC619E-E2A4-4944-B5BF-6D1F73A1D9A8}\\DhcpNameServer -> 10.0.16.101 10.0.16.102 (Intel(R) Wireless WiFi Link 4965AGN) ->
{632462B3-CCF2-4E4D-AF46-0E04569E75F7}\\DhcpNameServer -> 212.242.40.3 212.242.40.51 (Broadcom NetLink (TM) Gigabit Ethernet) ->
< 64bit-AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs ->
64bit-*AppInit_DLLs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls ->
avgrssta.dll -> C:\Windows\SysNative\avgrssta.dll -> [2009-08-28 09:37:10 | 00,012,464 | ---- | M] ()
*MultiFile Done* -> ->
< 64bit-Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
64bit-*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell ->
explorer.exe -> C:\Windows\explorer.exe -> [2009-02-13 16:02:18 | 03,080,704 | ---- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
< Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell ->
explorer.exe -> C:\Windows\SysWow64\explorer.exe -> [2009-02-13 16:02:18 | 02,927,104 | ---- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
< 64bit-SharedTaskScheduler [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\S