øøh der mangler vist også noget af ewido loggen, det kan åbenbart ikke være der altsammen men her kommer det: ewido
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147704757.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147704818.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147704879.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147704940.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705001.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705062.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705123.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705184.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705245.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705306.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705367.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705428.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705489.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705550.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705611.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705672.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705733.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705794.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705855.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705916.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147705977.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147706038.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147706099.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147706698.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147706759.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147706820.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147706881.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147706942.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707003.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707064.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707125.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707186.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707247.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707308.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707369.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707430.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707491.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707552.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707613.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707674.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147707963.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147708025.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147708085.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147708146.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147708207.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147708268.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147708329.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147708390.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147708903.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710182.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710243.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710304.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710365.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710426.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710487.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710548.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710609.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710670.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710731.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710792.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710853.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710914.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147710975.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147711036.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147711097.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147711158.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147711219.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147711280.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147711341.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147711402.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147711463.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713042.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713103.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713164.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713225.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713286.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713347.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713408.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713469.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713530.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713591.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713652.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713713.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713774.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713835.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713896.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147713957.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147714018.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147714079.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147714140.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147714201.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147714449.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147714510.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147714571.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Application Data\ShopperReports\shprrprt_1147714632.log -> Adware.HotBar : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@112.2o7[2].txt -> TrackingCookie.2o7 : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@2o7[2].txt -> TrackingCookie.2o7 : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@advertising[1].txt -> TrackingCookie.Advertising : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@atdmt[2].txt -> TrackingCookie.Atdmt : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@b.casalemedia[1].txt -> TrackingCookie.Casalemedia : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@com[1].txt -> TrackingCookie.Com : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@doubleclick[2].txt -> TrackingCookie.Doubleclick : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@hertz.122.2o7[2].txt -> TrackingCookie.2o7 : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@ivwbox[1].txt -> TrackingCookie.Ivwbox : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@mediaplex[1].txt -> TrackingCookie.Mediaplex : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@questionmarket[1].txt -> TrackingCookie.Questionmarket : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@statcounter[2].txt -> TrackingCookie.Statcounter : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@tacoda[1].txt -> TrackingCookie.Tacoda : Renset med backup
C:\Documents and Settings\Mor og Far\Cookies\mor og far@valueclick[2].txt -> TrackingCookie.Valueclick : Renset med backup
C:\Documents and Settings\Nielzz\Skrivebord\PurePinball2Setup-dm.#xe -> Adware.Trymedia : Renset med backup
C:\Programmer\ShopperReports -> Adware.HotBar : Renset med backup
C:\Programmer\ShopperReports\cs -> Adware.HotBar : Renset med backup
C:\Programmer\ShopperReports\cs\persist.dbs -> Adware.HotBar : Renset med backup
::Rapport slut
----------------
----------------
----------------
----------------
og hijack this:
Logfile of HijackThis v1.99.1
Scan saved at 20:47:51, on 22-08-2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\hijackthis\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmer\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [LXCECATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCEtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [lxcemon.exe] "C:\Programmer\Lexmark 4300 Series\lxcemon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Programmer\Lexmark 4300 Series\ezprint.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Programmer\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Programmer\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Programmer\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programmer\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\MSMSGS.EXE
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) -
http://downol.dr.dk/download/netradio/Rawflow.cabO16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cabO16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) -
https://support.microsoft.com/OAS/ActiveX/odc.cabO16 - DPF: {358DFA15-D48C-4296-8D16-7405F918333B} (Fronter Open-Edit-Save Control (VersionControl)) -
http://fronter.com/sva/links/Fronter_oes_prj.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://spaces.msn.com//PhotoUpload/MsnPUpld.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1137199688078O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IP-Uploader Control) -
http://asp09.photoprintit.de/microsite/10021/defaults/activex/ImageUploader3.cabO18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BullGuard LiveUpdate (BGLiveSvc) - BullGuard Software - C:\Programmer\BullGuard Software\BullGuard\BullGuardUpdate.exe
O23 - Service: ewido security suite control - ewido networks - C:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Programmer\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: lxce_device - Lexmark International, Inc. - C:\WINDOWS\System32\lxcecoms.exe