OTL logfile created on: 16-09-2011 17:41:23 - Run 2 OTL by OldTimer - Version 3.2.28.0 Folder = C:\Users\Jesper\Desktop 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000406 | Country: Denmark | Language: DAN | Date Format: dd-MM-yyyy 7,98 Gb Total Physical Memory | 4,42 Gb Available Physical Memory | 55,41% Memory free 15,97 Gb Paging File | 11,64 Gb Available in Paging File | 72,88% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 279,46 Gb Total Space | 91,83 Gb Free Space | 32,86% Space Free | Partition Type: NTFS Drive D: | 465,76 Gb Total Space | 60,83 Gb Free Space | 13,06% Space Free | Partition Type: NTFS Computer Name: STATIO | User Name: Jesper | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-09-16 16:17:56 | 000,581,632 | ---- | M] (OldTimer Tools) -- C:\Users\Jesper\Desktop\OTL.exe PRC - [2011-09-09 13:49:57 | 000,411,432 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe PRC - [2011-08-31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011-08-18 08:24:21 | 000,243,360 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10v_ActiveX.exe PRC - [2011-08-02 15:40:15 | 001,242,448 | ---- | M] (Valve Corporation) -- D:\Games\Steam\Steam.exe PRC - [2011-04-22 14:21:10 | 000,092,592 | ---- | M] (TomTom) -- D:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe PRC - [2011-01-18 23:39:04 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2010-11-17 03:53:16 | 000,113,288 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2010-03-11 15:06:06 | 000,193,824 | ---- | M] (Protexis Inc.) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe PRC - [2009-07-27 12:13:28 | 000,061,440 | ---- | M] () -- C:\Windows\SysWOW64\ASDR.exe PRC - [2009-02-23 11:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe PRC - [2002-08-21 00:05:54 | 001,290,240 | ---- | M] (ASUSTeK Inc.) -- C:\Program Files (x86)\ASUS\SmartDoctor\SmartDoctor.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-09-09 13:49:54 | 014,407,976 | ---- | M] () -- D:\Games\Steam\bin\libcef.dll MOD - [2011-09-09 13:49:52 | 000,190,248 | ---- | M] () -- D:\Games\Steam\bin\chromehtml.dll MOD - [2011-09-09 13:49:50 | 000,091,432 | ---- | M] () -- D:\Games\Steam\bin\avutil-50.dll MOD - [2011-09-09 13:49:48 | 000,155,432 | ---- | M] () -- D:\Games\Steam\bin\avformat-52.dll MOD - [2011-09-09 13:49:46 | 000,914,216 | ---- | M] () -- D:\Games\Steam\bin\avcodec-52.dll MOD - [2007-03-13 17:46:50 | 000,007,168 | ---- | M] () -- C:\Program Files (x86)\ASUS\SmartDoctor\VOV32.dll MOD - [2007-02-28 19:34:04 | 000,643,142 | ---- | M] () -- C:\Program Files (x86)\ASUS\SmartDoctor\aticlocklib.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2011-08-05 12:53:12 | 000,467,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Zune\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc) SRV:[b]64bit:[/b] - [2011-08-05 12:53:12 | 000,306,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Zune\WMZuneComm.exe -- (WMZuneComm) SRV:[b]64bit:[/b] - [2011-08-05 12:53:06 | 008,277,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc) SRV:[b]64bit:[/b] - [2011-07-28 23:35:34 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2011-06-13 22:21:14 | 000,343,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Fix it Center\Matsvc.exe -- (MatSvc) SRV:[b]64bit:[/b] - [2011-04-27 17:21:18 | 000,288,272 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv) SRV:[b]64bit:[/b] - [2011-04-27 17:21:18 | 000,012,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc) SRV:[b]64bit:[/b] - [2011-03-15 15:18:32 | 002,610,952 | ---- | M] (Raxco Software, Inc.) [Auto | Running] -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent) SRV:[b]64bit:[/b] - [2011-03-15 15:18:22 | 002,266,376 | ---- | M] (Raxco Software, Inc.) [On_Demand | Running] -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine) SRV:[b]64bit:[/b] - [2010-12-13 15:37:16 | 000,194,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc) SRV:[b]64bit:[/b] - [2010-11-20 15:24:49 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\inetsrv\inetinfo.exe -- (IISADMIN) SRV:[b]64bit:[/b] - [2010-09-22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2009-07-14 03:39:56 | 000,010,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\inetsrv\WMSvc.exe -- (WMSVC) SRV - [2011-09-09 13:49:57 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011-08-31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-05-03 16:05:34 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2011-04-22 14:21:10 | 000,092,592 | ---- | M] (TomTom) [Auto | Running] -- D:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService) SRV - [2011-01-18 23:39:04 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2010-11-20 14:19:20 | 000,397,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS) SRV - [2010-11-20 14:19:20 | 000,397,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC) SRV - [2010-11-20 14:18:03 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-03-11 15:06:06 | 000,193,824 | ---- | M] (Protexis Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2009-07-27 12:13:28 | 000,061,440 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\ASDR.exe -- (ASDR) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-02-23 11:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2007-05-31 18:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 18:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011-08-31 17:00:50 | 000,025,416 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2011-08-01 15:59:06 | 000,045,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64) DRV:[b]64bit:[/b] - [2011-07-29 00:23:16 | 009,980,416 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2011-07-29 00:23:16 | 009,980,416 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2011-07-28 22:54:10 | 000,309,248 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2011-06-09 11:14:26 | 000,295,272 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VMM.sys -- (vmm) DRV:[b]64bit:[/b] - [2011-06-07 00:07:00 | 000,231,440 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2011-05-10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:[b]64bit:[/b] - [2011-04-27 15:25:24 | 000,084,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011-02-08 17:02:44 | 000,066,160 | ---- | M] (Giga-Byte Technology CO., LTD.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\VirtDiskBus64.sys -- (VirtDiskBus) DRV:[b]64bit:[/b] - [2011-01-23 00:10:45 | 000,016,384 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EIO64.sys -- (EIO64) DRV:[b]64bit:[/b] - [2011-01-19 18:47:18 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135) DRV:[b]64bit:[/b] - [2011-01-13 13:58:00 | 000,413,800 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2010-11-20 15:34:04 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm) DRV:[b]64bit:[/b] - [2010-11-20 15:34:04 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus) DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-20 13:35:34 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb) DRV:[b]64bit:[/b] - [2010-11-20 13:35:26 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcuxd.sys -- (vpcuxd) DRV:[b]64bit:[/b] - [2010-11-20 13:35:22 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr) DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010-11-19 04:34:26 | 000,181,248 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:[b]64bit:[/b] - [2010-11-19 04:34:26 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:[b]64bit:[/b] - [2010-09-21 10:59:38 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R) DRV:[b]64bit:[/b] - [2010-09-15 15:14:40 | 000,021,504 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ICTDrv.sys -- (ICTDrv) DRV:[b]64bit:[/b] - [2010-08-18 01:28:32 | 000,026,136 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ICCWDT.sys -- (ICCWDT) Intel(R) Watchdog Timer Driver (Intel(R) WDT) DRV:[b]64bit:[/b] - [2010-06-09 11:00:14 | 000,028,544 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\intelsmb.sys -- (smbusp) Intel(R) DRV:[b]64bit:[/b] - [2010-05-06 11:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2010-05-05 22:30:52 | 001,561,688 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ha20x2k.sys -- (ha20x2k) DRV:[b]64bit:[/b] - [2010-05-05 22:30:42 | 000,118,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia) DRV:[b]64bit:[/b] - [2010-05-05 22:30:34 | 000,213,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k) DRV:[b]64bit:[/b] - [2010-05-05 22:30:26 | 000,015,960 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k) DRV:[b]64bit:[/b] - [2010-05-05 22:30:18 | 000,179,288 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv) DRV:[b]64bit:[/b] - [2010-05-05 22:30:10 | 000,684,376 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV:[b]64bit:[/b] - [2010-05-05 22:30:02 | 000,580,696 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k) DRV:[b]64bit:[/b] - [2010-05-05 22:29:52 | 001,417,304 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX.SYS) DRV:[b]64bit:[/b] - [2010-05-05 22:29:52 | 001,417,304 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX) DRV:[b]64bit:[/b] - [2010-05-05 22:29:42 | 000,094,808 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT.SYS) DRV:[b]64bit:[/b] - [2010-05-05 22:29:42 | 000,094,808 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT) DRV:[b]64bit:[/b] - [2010-05-05 22:29:34 | 000,202,840 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT.SYS) DRV:[b]64bit:[/b] - [2010-05-05 22:29:34 | 000,202,840 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT) DRV:[b]64bit:[/b] - [2010-03-30 23:35:04 | 000,020,968 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz133_x64.sys -- (cpuz133) DRV:[b]64bit:[/b] - [2010-02-23 00:39:37 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin) DRV:[b]64bit:[/b] - [2010-02-22 15:46:36 | 000,023,680 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IOMap64.sys -- (IOMap) DRV:[b]64bit:[/b] - [2009-12-29 09:51:00 | 000,138,256 | ---- | M] (Raxco Software, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\DefragFs.sys -- (DefragFS) DRV:[b]64bit:[/b] - [2009-12-18 00:25:17 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO) DRV:[b]64bit:[/b] - [2009-10-22 16:10:30 | 000,069,320 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ftdibus.sys -- (FTDIBUS) DRV:[b]64bit:[/b] - [2009-10-22 16:09:12 | 000,084,808 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ftser2k.sys -- (FTSER2K) DRV:[b]64bit:[/b] - [2009-08-09 23:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2009-02-17 18:22:22 | 000,017,792 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\asusgsb.sys -- (asusgsb) DRV:[b]64bit:[/b] - [2007-09-06 21:53:00 | 000,016,384 | ---- | M] (Silicon Laboratories) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\DSI_SiUSBXp_3_1.sys -- (DSI_SiUSBXp_3_1) DRV - [2011-03-21 14:12:25 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2011-01-18 19:49:06 | 000,068,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- D:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys -- (VSPerfDrv100) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/ IE - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://dk.msn.com/?ocid=iehp IE - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = da IE - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E9 31 4E 12 0D B4 CA 01 [binary data] IE - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: MapShare-status@tomtom.com:1.7.1 FF - prefs.js..extensions.enabledItems: baseTheme@tomtom.com:1.0.2 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) [2010-09-01 20:13:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jesper\AppData\Roaming\Mozilla\Extensions [2010-09-01 20:13:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jesper\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com [2011-07-08 09:45:42 | 000,000,000 | ---D | M] (Map status indicator) -- D:\PROGRAM FILES (X86)\TOMTOM HOME 2\XUL\EXTENSIONS\MAPSHARE-STATUS@TOMTOM.COM O1 HOSTS File: ([2011-09-14 16:17:44 | 000,001,180 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 date.dk O1 - Hosts: 78.47.251.150 easyanticheat.se # misleading site O1 - Hosts: 78.47.251.150 www.easyanticheat.se # misleading site O1 - Hosts: 78.47.251.150 easyanticheat.com # misleading site O1 - Hosts: 78.47.251.150 www.easyanticheat.com # misleading site O1 - Hosts: 78.47.251.150 easyanticheat.org # misleading site O1 - Hosts: 78.47.251.150 www.easyanticheat.org # misleading site O2 - BHO: (Microsoft Web Test Recorder 10.0 Helper) - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - D:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) O3:[b]64bit:[/b] - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001\..\Toolbar\WebBrowser - No CLSID value found. O3: - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001\..\Toolbar\WebBrowser - No CLSID value found. O3 - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Zune Launcher] c:\Program Files\Zune\ZuneLauncher.exe (Microsoft Corporation) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-2802764958-1188859540-3516169876-1001..\Run: [Steam] d:\games\steam\steam.exe (Valve Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {07D09E9E-C667-45DD-B035-217BC2A61A3B} https://www.sparnord.dk/package/sdc/external/activex/ActiveXSikkerhedssoftware-prod-1.30.cab (ActiveX sikkerhedssoftware Control) O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlcdnet.asus.com/pub/ASUS/misc/dlm-activex-2.2.5.0.cab (DLM Control) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.) O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control) O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab (DLC Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2) O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab (e-Safekey) O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cab (SysInfo Class) O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab (Minesweeper Flags Class) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/15116/CTPID.cab (Creative Software AutoUpdate Support Package 1) O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/2.9.2.0/GarminAxControl.CAB (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{85E57B48-5F23-4902-8631-C098471101EF}: DhcpNameServer = 192.168.1.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C26C8992-6E07-4D39-91CB-1B74B836E878}: DhcpNameServer = 192.168.1.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C26C8992-6E07-4D39-91CB-1B74B836E878}: NameServer = 8.8.8.8,8.8.4.4 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (PDBoot.exe) O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-09-16 16:59:18 | 001,916,416 | ---- | C] (AVAST Software) -- C:\Users\Jesper\Desktop\aswMBR.exe [2011-09-16 16:42:52 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Roaming\Malwarebytes [2011-09-16 16:42:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011-09-16 16:42:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011-09-16 16:42:45 | 000,025,416 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2011-09-16 16:42:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2011-09-16 16:42:17 | 009,852,544 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Jesper\Desktop\mbam-setup-1.51.2.1300.exe [2011-09-16 16:41:12 | 000,050,688 | ---- | C] (Atribune.org) -- C:\Users\Jesper\Desktop\ATF_Cleaner.exe [2011-09-16 16:17:56 | 000,581,632 | ---- | C] (OldTimer Tools) -- C:\Users\Jesper\Desktop\OTL.exe [2011-09-16 16:04:06 | 000,000,000 | ---D | C] -- C:\Users\Jesper\Desktop\New folder [2011-09-16 15:57:29 | 001,137,360 | ---- | C] (F-Secure Corporation) -- C:\Users\Jesper\Desktop\fsbl.exe [2011-09-16 12:51:17 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{7335014B-DC57-4677-B1AC-12E45C3F5B62} [2011-09-16 12:51:01 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{938BE819-A064-4D69-A14C-F96ACDFB2D9A} [2011-09-15 14:53:53 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{D4802A51-53B0-467A-B211-042A8C6480F1} [2011-09-15 14:53:42 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{4AA74A25-3D27-4A9E-92BF-8CA08C48EFBC} [2011-09-14 16:17:24 | 002,346,248 | ---- | C] (EasyAntiCheat Solutions) -- C:\Users\Jesper\Desktop\EasyAntiCheat.exe [2011-09-14 14:37:59 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{9573EC07-248E-40C4-B1F0-0C56DF17EDA2} [2011-09-14 14:37:47 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{BDD45872-E3D3-422A-9552-1F4BA9631C69} [2011-09-12 22:19:38 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{F90516F0-9AF3-46E5-81B5-DEA4AA44261F} [2011-09-12 22:19:27 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{2674ED42-CEB3-4906-B498-F6DCFB59BC8A} [2011-09-12 10:19:14 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{B1F3834E-9447-4AD4-A5AC-5DD37931E80A} [2011-09-12 10:19:03 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{B7F87040-05FD-4271-A326-476F2A1DEB5F} [2011-09-11 14:55:10 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{CDC99345-8770-4C1D-8A05-FD340DEC131E} [2011-09-11 14:54:59 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{FC6DB4F9-FE75-4BE2-9592-246F565200A8} [2011-09-10 15:22:55 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{7C78F8AF-4ECD-4885-BA40-199B5CC0F429} [2011-09-10 15:22:44 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{2FCD9C29-81B4-4A4A-B991-8A9AAED0952D} [2011-09-09 10:13:57 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{62E24663-1170-4353-9F62-BF5C38CB4122} [2011-09-09 10:13:46 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{E0E281F0-4FF7-4331-94EF-138184A1AE7B} [2011-09-07 15:06:49 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{3E1D9AE8-D885-4993-8366-95EE3BD203D7} [2011-09-07 15:06:38 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{A4297A14-1560-4D11-8D90-64D375BEAC75} [2011-09-07 01:36:34 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{B20F2637-8818-4D8D-BEFD-32EF6AA19E59} [2011-09-07 01:36:22 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{C10C9F30-2B0C-42AD-A87B-AD7B5D15520A} [2011-09-06 13:35:57 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{BB4698B4-9EE9-4A71-90AC-6639559AAF4C} [2011-09-06 13:35:46 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{F14A506A-E96C-4AED-BB33-3E660F700EAD} [2011-09-06 01:35:22 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{986A9EE3-A946-4FF5-951A-8017FD740F00} [2011-09-06 01:35:11 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{AECBE729-FC7A-4AF6-AAB5-EC8DD62D7A3C} [2011-09-05 13:34:56 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{7DF7A3E4-A186-4F25-885F-29BEFF117B99} [2011-09-05 13:34:45 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{23044B0E-1B70-4317-91DF-B865430B0F8C} [2011-09-04 11:53:02 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{190778B4-3D9A-49B3-B3C8-E71BD86E893F} [2011-09-04 11:52:51 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{C9328AF4-883D-4C1D-B839-4523E204CC2B} [2011-09-02 14:06:45 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{0CCA2E86-215F-4380-9D1C-819D03335013} [2011-09-02 14:06:34 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{8048D301-9380-40CA-9661-9B6C7378AFCF} [2011-09-01 15:34:18 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{4DD2F12A-3A12-46F9-9B9C-ECF3A7788C5A} [2011-09-01 15:34:07 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{FDE499A6-A65D-4123-9BE5-651BD5DC97EB} [2011-08-31 14:05:59 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{F7F6B1A8-7F90-4B5D-A332-3787C612FF49} [2011-08-31 14:05:48 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{D2ADF71D-C892-4D71-99BC-2537EA371BFC} [2011-08-29 22:18:30 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{28673ACB-0C81-48A3-B35D-3788A5CE8315} [2011-08-29 22:18:19 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{7D4E5D97-CA8E-471E-9378-1BCA3EC0A594} [2011-08-29 10:18:06 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{00851EBA-C2CC-431F-95AE-25ADE30BA727} [2011-08-29 10:17:55 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{9DF38BD4-7EA1-4C15-8F41-903814AC22DE} [2011-08-25 17:05:01 | 000,000,000 | ---D | C] -- D:\Data\Documents\Command and Conquer 4 [2011-08-25 16:23:15 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Roaming\Command and Conquer 4 [2011-08-25 16:23:14 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\Electronic_Arts_Inc [2011-08-25 11:55:26 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{EC481276-6210-4809-B29C-1E8675D0D17D} [2011-08-25 11:55:15 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{19A6F7D2-FAB1-43F4-BFEE-F6AF8485C4C4} [2011-08-24 22:01:02 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{49B568DB-D698-426E-A2F9-742F9127C14A} [2011-08-24 10:06:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse [2011-08-24 10:06:07 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliPoint [2011-08-24 10:04:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zune [2011-08-24 10:00:37 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{F7915469-A643-4D14-AFFE-5F2DB6E90438} [2011-08-24 10:00:25 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{75D73672-DBE1-4A12-AC2B-D8A0F4D4FC04} [2011-08-22 18:26:23 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2011-08-22 18:03:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP [2011-08-22 18:03:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center [2011-08-22 17:07:03 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{F01985FA-491A-4D3E-BC0E-C7F34C360B1F} [2011-08-22 17:06:47 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{EC4A8BB3-F761-484D-BD2F-0272C5C0ABBC} [2011-08-19 15:29:01 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{DDE3EB57-5535-4D69-B7B4-A294B923625A} [2011-08-19 15:28:50 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{8C13EB8B-EACF-4362-92FB-A1C20AF9C4A6} [2011-08-18 22:25:55 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{56959171-43A5-4F82-9714-5C3BFAA6F722} [2011-08-18 22:25:44 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{B383EF31-4192-433C-B5E0-229D8A834E9D} [2011-08-18 10:25:31 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{C8652F67-44AC-4C38-8586-997D6E888550} [2011-08-18 10:25:20 | 000,000,000 | ---D | C] -- C:\Users\Jesper\AppData\Local\{D5E25BC7-966F-438E-814A-2A606417850E} [2010-12-14 12:34:27 | 000,463,520 | ---- | C] (Corel) -- C:\Program Files (x86)\Common Files\AppFramework.dll [2010-12-14 12:34:27 | 000,330,400 | ---- | C] (Corel) -- C:\Program Files (x86)\Common Files\MediaOrganizer.dll [2010-12-14 12:34:27 | 000,031,392 | ---- | C] (Corel-V1E) -- C:\Program Files (x86)\Common Files\FlickrProvider.dll [2010-05-05 20:59:10 | 000,060,928 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll [2010-05-05 20:38:18 | 000,012,800 | ---- | C] ( ) -- C:\Windows\SysWow64\killapps.exe [2010-02-23 00:39:37 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Jesper\AppData\Roaming\pcouffin.sys [2009-05-07 16:32:42 | 010,282,042 | ---- | C] (http://www.ojosoft.com ) -- C:\Users\Jesper\AppData\Roaming\total-video-converter.exe [2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-09-16 17:41:00 | 000,000,512 | ---- | M] () -- C:\Users\Jesper\Desktop\MBR.dat [2011-09-16 17:36:00 | 000,000,932 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-09-16 16:59:23 | 001,916,416 | ---- | M] (AVAST Software) -- C:\Users\Jesper\Desktop\aswMBR.exe [2011-09-16 16:55:15 | 000,014,832 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-09-16 16:55:15 | 000,014,832 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-09-16 16:48:35 | 000,000,928 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-09-16 16:47:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-09-16 16:47:51 | 2134,302,719 | -HS- | M] () -- C:\hiberfil.sys [2011-09-16 16:47:18 | 000,061,160 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000005-00000000-00000001-00001102-00000005-002C1102}.rfx [2011-09-16 16:47:18 | 000,061,160 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000005-00000000-00000001-00001102-00000005-002C1102}.rfx [2011-09-16 16:47:18 | 000,000,788 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000005-00000000-00000001-00001102-00000005-002C1102}.rfx [2011-09-16 16:42:49 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011-09-16 16:42:28 | 009,852,544 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Jesper\Desktop\mbam-setup-1.51.2.1300.exe [2011-09-16 16:41:15 | 000,050,688 | ---- | M] (Atribune.org) -- C:\Users\Jesper\Desktop\ATF_Cleaner.exe [2011-09-16 16:17:56 | 000,581,632 | ---- | M] (OldTimer Tools) -- C:\Users\Jesper\Desktop\OTL.exe [2011-09-16 15:57:29 | 001,137,360 | ---- | M] (F-Secure Corporation) -- C:\Users\Jesper\Desktop\fsbl.exe [2011-09-14 22:27:48 | 000,002,012 | -H-- | M] () -- D:\Data\Documents\Default.rdp [2011-09-14 16:17:40 | 002,346,248 | ---- | M] (EasyAntiCheat Solutions) -- C:\Users\Jesper\Desktop\EasyAntiCheat.exe [2011-09-11 22:31:44 | 000,274,329 | ---- | M] () -- C:\Users\Jesper\Desktop\45.jpg [2011-09-11 22:30:33 | 000,039,909 | ---- | M] () -- C:\Users\Jesper\Desktop\18.jpg [2011-09-11 20:24:56 | 000,100,446 | ---- | M] () -- C:\Users\Jesper\Desktop\23529_384060602594_554772594_4392187_1598836_n.jpg [2011-09-11 20:24:40 | 000,061,837 | ---- | M] () -- C:\Users\Jesper\Desktop\23529_384064262594_554772594_4392498_7194536_n.jpg [2011-09-01 22:45:15 | 000,007,654 | ---- | M] () -- C:\Users\Jesper\AppData\Local\Resmon.ResmonCfg [2011-08-31 17:00:50 | 000,025,416 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2011-08-25 23:19:38 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2011-08-25 23:19:38 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011-08-25 23:17:08 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2011-08-24 10:46:18 | 000,327,640 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011-08-24 10:20:09 | 000,006,214 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys [2011-08-24 10:04:05 | 000,000,927 | ---- | M] () -- C:\Users\Public\Desktop\Zune.lnk [2011-08-24 09:51:56 | 736,608,906 | ---- | M] () -- C:\Windows\MEMORY.DMP [2011-08-22 21:11:42 | 000,978,810 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-08-22 21:11:42 | 000,789,660 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-08-22 21:11:42 | 000,172,336 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-08-22 21:10:53 | 000,958,656 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-08-18 08:24:21 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-09-16 17:41:00 | 000,000,512 | ---- | C] () -- C:\Users\Jesper\Desktop\MBR.dat [2011-09-16 16:42:49 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011-09-11 22:30:30 | 000,274,329 | ---- | C] () -- C:\Users\Jesper\Desktop\45.jpg [2011-09-11 22:30:20 | 000,039,909 | ---- | C] () -- C:\Users\Jesper\Desktop\18.jpg [2011-09-11 20:25:04 | 000,100,446 | ---- | C] () -- C:\Users\Jesper\Desktop\23529_384060602594_554772594_4392187_1598836_n.jpg [2011-09-11 20:24:45 | 000,061,837 | ---- | C] () -- C:\Users\Jesper\Desktop\23529_384064262594_554772594_4392498_7194536_n.jpg [2011-09-07 19:49:02 | 000,131,072 | ---- | C] () -- C:\Users\Jesper\Desktop\RemoteDll.exe [2011-09-07 19:49:02 | 000,019,456 | ---- | C] () -- C:\Users\Jesper\Desktop\CoHMH.dll [2011-09-07 19:04:16 | 000,013,312 | ---- | C] () -- C:\Users\Jesper\Desktop\Patcher.exe [2011-08-24 15:49:30 | 004,700,160 | ---- | C] () -- C:\Users\Jesper\Desktop\cd110511.iso [2011-08-24 10:04:05 | 000,000,927 | ---- | C] () -- C:\Users\Public\Desktop\Zune.lnk [2011-08-22 18:30:36 | 004,194,304 | ---- | C] () -- C:\p67aud43.f5 [2011-07-17 23:54:02 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll [2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011-03-18 22:50:54 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll [2011-03-17 19:51:44 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2010-12-14 12:34:27 | 000,401,056 | ---- | C] () -- C:\Program Files (x86)\Common Files\facebook.dll [2010-12-14 12:34:27 | 000,128,672 | ---- | C] () -- C:\Program Files (x86)\Common Files\PluginCommon.dll [2010-12-14 11:59:46 | 000,148,195 | ---- | C] () -- C:\Program Files (x86)\Common Files\BookViewer.xap [2010-10-05 14:17:12 | 002,601,752 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_moh.exe [2010-09-28 23:59:45 | 000,000,012 | ---- | C] () -- C:\Users\Jesper\AppData\Roaming\yopgrf.dat [2010-07-13 19:53:24 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2010-07-08 21:05:50 | 000,007,654 | ---- | C] () -- C:\Users\Jesper\AppData\Local\Resmon.ResmonCfg [2010-06-18 17:34:25 | 000,006,214 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2010-06-18 17:34:25 | 000,000,008 | RHS- | C] () -- C:\ProgramData\D6BAE88FA6.sys [2010-05-05 21:37:52 | 000,021,204 | ---- | C] () -- C:\Windows\SysWow64\instwdm.ini [2010-05-05 20:56:46 | 000,002,560 | ---- | C] () -- C:\Windows\SysWow64\CtxfiRes.dll [2010-05-05 20:46:30 | 000,321,512 | ---- | C] () -- C:\Windows\SysWow64\ctdlang.dat [2010-05-05 20:46:30 | 000,056,509 | ---- | C] () -- C:\Windows\SysWow64\ctdnlstr.dat [2010-05-05 20:38:22 | 000,007,680 | ---- | C] () -- C:\Windows\SysWow64\enlocstr.exe [2010-03-19 17:37:47 | 000,215,128 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010-03-19 17:37:47 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010-03-19 17:37:46 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe [2010-02-23 20:09:19 | 000,000,262 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini [2010-02-23 10:25:54 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-02-23 01:14:05 | 000,958,656 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-02-23 01:09:19 | 000,041,984 | ---- | C] () -- C:\Users\Jesper\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-02-23 00:56:27 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL [2010-02-23 00:56:27 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL [2010-02-23 00:40:01 | 000,001,173 | ---- | C] () -- C:\Users\Jesper\AppData\Roaming\vso_ts_preview.xml [2010-02-23 00:39:37 | 000,099,384 | ---- | C] () -- C:\Users\Jesper\AppData\Roaming\inst.exe [2010-02-23 00:39:37 | 000,007,859 | ---- | C] () -- C:\Users\Jesper\AppData\Roaming\pcouffin.cat [2010-02-23 00:39:37 | 000,001,167 | ---- | C] () -- C:\Users\Jesper\AppData\Roaming\pcouffin.inf [2010-02-23 00:12:02 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2009-07-27 12:13:28 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\ASDR.exe [2009-07-14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009-07-14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009-07-14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-06-19 21:06:22 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2009-06-19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2009-06-10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2009-06-04 02:37:06 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini [2009-05-27 10:49:00 | 000,000,285 | ---- | C] () -- C:\Windows\SysWow64\kill.ini [color=#E56717]========== LOP Check ==========[/color] [2011-08-25 17:04:45 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\Command and Conquer 4 [2010-04-05 14:54:28 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\Digiarty [2010-05-02 19:55:18 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\GARMIN [2010-06-17 01:03:40 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\ImgBurn [2010-04-06 12:53:19 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\Moyea [2010-08-22 12:33:45 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\Peter Souza IV [2011-03-24 13:54:28 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\Telerik [2010-09-01 20:13:55 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\TomTom [2011-02-20 20:15:29 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\Vso [2011-03-31 13:03:46 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\wargaming.net [2010-11-11 23:52:04 | 000,000,000 | ---D | M] -- C:\Users\Jesper\AppData\Roaming\WNR [2011-08-22 18:07:56 | 000,032,620 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >