info.txt logfile of random's system information tool 1.06 2009-05-10 21:38:23
======Uninstall list======
-->C:\WINDOWS\System32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
AccessDirect-->RunDll32 C:\PROGRA~1\FÆLLES~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{417B79C9-CDB4-477F-952D-840CEFC57A6C}\setup.exe" -l0x9
Ad-Aware-->"C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}\Ad-AwareAE.exe" REMOVE=TRUE MODIFY=FALSE
Ad-Aware-->C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}\Ad-AwareAE.exe
Adobe Atmosphere Player for Acrobat and Adobe Reader-->C:\WINDOWS\atmoUn.exe
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Photoshop Album 2.0 Starter Edition-->MsiExec.exe /I{11B569C2-4BF6-4ED0-9D17-A4273943CB24}
Adobe Reader 7.0.8-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
BCM V.92 56K Modem-->C:\WINDOWS\BCMSMU.exe quiet
Broadcom Management Programs-->C:\Programmer\Fælles filer\InstallShield\Driver\8\Intel 32\IDriver.exe /M{2A6282FF-B75B-463F-90F5-0A43732F690D} /l1030
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0406-0000-0000000FF1CE}
Dell Media Experience-->RunDll32 C:\PROGRA~1\FÆLLES~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
Dell Solution Center-->MsiExec.exe /X{11F1920A-56A2-4642-B6E0-3B31A12C9288}
EWE TEL-Installationsdateien entfernen-->C:\WINDOWS\ISW\ewetel\iswdel.exe
G Data AntiVirus-->MsiExec.exe /I{0FDB2D25-D880-4E10-868F-8C64EFE155F1}
HijackThis 2.0.2-->"C:\hijackthis\HijackThis.exe" /uninstall
Hotfix til Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Hotfix til Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
HP Image Zone 4.2-->C:\Programmer\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP PSC & OfficeJet 4.2-->"C:\Programmer\HP\Digital Imaging\{A1062847-0846-427A-92A1-BB8251A91E91}\setup\hpzscr01.exe" -datfile hposcr04.dat
HP Software Update-->MsiExec.exe /X{457791C5-D702-4143-A7B2-2744BE9573F2}
Java 2 Runtime Environment, SE v1.4.2_03-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Logitech iTouch-program-->RunDll32 C:\PROGRA~1\FÆLLES~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{036AA4D4-6D32-11D4-9875-00105ACE7734}\setup.exe" -l0x6 UNINSTALL
Logitech MouseWare 9.79 -->RunDll32 C:\PROGRA~1\FÆLLES~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{5809E7CF-4DCF-11D4-9875-00105ACE7734}\setup.exe" -l0x6 -l0006 UNINSTALL
Malwarebytes' Anti-Malware-->"C:\Programmer\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Danish Language Pack-->MsiExec.exe /X{973F8409-F8DA-4A40-ACB4-12B02F3399D7}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2003 Proofing Tools-->MsiExec.exe /I{901F0409-6000-11D3-8CFE-0150048383C9}
Microsoft Office Standard Edition 2003-->MsiExec.exe /I{91120406-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Modem Helper-->RunDll32 C:\PROGRA~1\FÆLLES~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x6 ControlPanel
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
OmniPage SE-->MsiExec.exe /I{6249C22D-E6A8-407B-BA8B-40298848ED94}
Opdatering til Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Opdatering til Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Opdatering til Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
PowerDVD 5.1-->RunDll32 C:\PROGRA~1\FÆLLES~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Media Player 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Media Player 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows Media Player 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Sikkerhedsopdatering til Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Sikkerhedsopdatering til Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Sonic DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
Spelling Dictionaries For Adobe Reader Package-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-7E8A450000A7}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Programmer\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Media Format Runtime-->"C:\Programmer\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player 10-->"C:\Programmer\Windows Media Player\Setup_wm.exe" /Uninstall
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
======Hosts File======
127.0.0.1 localhost
::1 localhost
======Security center information======
AV: G Data AntiVirus 2010
======System event log======
Computer Name: HP
Event Code: 7036
Message: Tjenesten Pml Driver HPZ12 skiftede tilstand til stoppet.
Record Number: 39756
Source Name: Service Control Manager
Time Written: 20090224150210.000000+060
Event Type: oplysninger
User:
Computer Name: HP
Event Code: 7035
Message: Tjenesten Pml Driver HPZ12 modtog en start-kontrol.
Record Number: 39755
Source Name: Service Control Manager
Time Written: 20090224142527.000000+060
Event Type: oplysninger
User: HP\Heribert
Computer Name: HP
Event Code: 7036
Message: Tjenesten Pml Driver HPZ12 skiftede tilstand til kører.
Record Number: 39754
Source Name: Service Control Manager
Time Written: 20090224142527.000000+060
Event Type: oplysninger
User:
Computer Name: HP
Event Code: 7036
Message: Tjenesten Pml Driver HPZ12 skiftede tilstand til stoppet.
Record Number: 39753
Source Name: Service Control Manager
Time Written: 20090224142524.000000+060
Event Type: oplysninger
User:
Computer Name: HP
Event Code: 7036
Message: Tjenesten Pml Driver HPZ12 skiftede tilstand til kører.
Record Number: 39752
Source Name: Service Control Manager
Time Written: 20090224142523.000000+060
Event Type: oplysninger
User:
=====Application event log=====
Computer Name: HP
Event Code: 5028
Message:
Record Number: 1975
Source Name: McLogEvent
Time Written: 20051224145157.000000+060
Event Type: advarsel
User: NT AUTHORITY\SYSTEM
Computer Name: HP
Event Code: 5000
Message:
Record Number: 1974
Source Name: McLogEvent
Time Written: 20051224144619.000000+060
Event Type: oplysninger
User: NT AUTHORITY\SYSTEM
Computer Name: HP
Event Code: 5000
Message:
Record Number: 1973
Source Name: McLogEvent
Time Written: 20051224101744.000000+060
Event Type: oplysninger
User: NT AUTHORITY\SYSTEM
Computer Name: HP
Event Code: 5028
Message:
Record Number: 1972
Source Name: McLogEvent
Time Written: 20051223142454.000000+060
Event Type: advarsel
User: NT AUTHORITY\SYSTEM
Computer Name: HP
Event Code: 5000
Message:
Record Number: 1971
Source Name: McLogEvent
Time Written: 20051223141519.000000+060
Event Type: oplysninger
User: NT AUTHORITY\SYSTEM
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
-----------------EOF-----------------
Logfile of random's system information tool 1.06 (written by random/random)
Run by Heribert at 2009-05-10 21:37:44
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 20 GB (59%) free of 34 GB
Total RAM: 511 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:38:15, on 10-05-2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\Programmer\Dell\AccessDirect\dadapp.exe
C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Programmer\Dell\Media Experience\PCMService.exe
C:\Programmer\r\CyberLink\PowerDVD\DVDLauncher.exe
C:\Programmer\Logitech\iTouch\iTouch.exe
C:\Programmer\HP\HP Software Update\HPWuSchd2.exe
C:\Programmer\HP\hpcoretech\hpcmpmgr.exe
C:\Programmer\ScanSoft\OmniPageSE\opware32.exe
C:\Programmer\Logitech\MouseWare\system\em_exec.exe
C:\Programmer\G Data\AntiVirus\AVKTray\AVKTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\HP\Digital Imaging\bin\hpqtra08.exe
C:\Programmer\HP\Digital Imaging\bin\hpqgalry.exe
C:\Programmer\Fælles filer\G DATA\AVKProxy\AVKProxy.exe
C:\Programmer\G Data\AntiVirus\AVK\AVKService.exe
C:\Programmer\G Data\AntiVirus\AVK\AVKWCtl.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Heribert\temp\TeamViewer\Version4\TeamViewer_Service.exe
C:\Documents and Settings\Heribert\temp\TeamViewer\Version4\TeamViewer.exe
C:\Programmer\Fælles filer\G DATA\GDScan\GDScan.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Programmer\G Data\AntiVirus\GUI\GDSC.exe
C:\Programmer\Java\jre6\bin\jusched.exe
C:\Programmer\Java\jre6\bin\jqs.exe
C:\WINDOWS\SYSTEM32\notepad.exe
C:\WINDOWS\system32\wuauclt.exe
C:\hijackthis\RSIT.exe
C:\Programmer\trend micro\Heribert.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.euro.dell.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://www.gurredam.dk/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O1 - Hosts: ::1 localhost
O2 - BHO: G Data WebFilter Class - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Programmer\G Data\AntiVirus\Webfilter\AvkWebIE.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmer\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmer\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Programmer\G Data\AntiVirus\Webfilter\AvkWebIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [DadApp] C:\Programmer\Dell\AccessDirect\dadapp.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Programmer\Fælles filer\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "C:\Programmer\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Programmer\r\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmer\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Programmer\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Programmer\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Omnipage] C:\Programmer\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Programmer\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Programmer\G Data\AntiVirus\AVKTray\AVKTray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Programmer\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programmer\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Hurtig start.lnk = C:\Programmer\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: E&ksporter til Microsoft Excel -
res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000O9 - Extra button: Opslag - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {3D2CB570-D425-11D5-ABD0-00008369C46F} (CSMenu Class) -
https://netbank.danskebank.dk/html/activex/DB/Menu.cabO16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1150058542093O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabO16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) -
https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cabO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O23 - Service: G Data AntiVirus Proxy (AVKProxy) - G Data Software AG - C:\Programmer\Fælles filer\G DATA\AVKProxy\AVKProxy.exe
O23 - Service: G Data Scheduler (AVKService) - G Data Software AG - C:\Programmer\G Data\AntiVirus\AVK\AVKService.exe
O23 - Service: G Data Filesystem Monitor (AVKWCtl) - G Data Software AG - C:\Programmer\G Data\AntiVirus\AVK\AVKWCtl.exe
O23 - Service: G Data Scanner (GDScan) - G DATA Software AG - C:\Programmer\Fælles filer\G DATA\GDScan\GDScan.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmer\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programmer\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Documents and Settings\Heribert\temp\TeamViewer\Version4\TeamViewer_Service.exe
--
End of file - 8556 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0124123D-61B4-456f-AF86-78C53A0790C5}]
G Data WebFilter - C:\Programmer\G Data\AntiVirus\Webfilter\AvkWebIE.dll [2009-04-09 590920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-01-12 63128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2004-03-15 118836]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programmer\Java\jre6\bin\jp2ssv.dll [2009-05-10 35840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programmer\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-10 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0124123D-61B4-456f-AF86-78C53A0790C5} - G Data WebFilter - C:\Programmer\G Data\AntiVirus\Webfilter\AvkWebIE.dll [2009-04-09 590920]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2004-08-19 4554752]
"nwiz"=nwiz.exe /installquiet []
"BCMSMMSG"=C:\WINDOWS\BCMSMMSG.exe [2003-08-29 122880]
"SunJavaUpdateSched"=C:\Programmer\Java\jre6\bin\jusched.exe [2009-05-10 148888]
""= []
"DadApp"=C:\Programmer\Dell\AccessDirect\dadapp.exe [2004-03-04 211828]
"SynTPLpr"=C:\Programmer\Synaptics\SynTP\SynTPLpr.exe [2004-05-13 98304]
"SynTPEnh"=C:\Programmer\Synaptics\SynTP\SynTPEnh.exe [2004-05-14 536576]
"dla"=C:\WINDOWS\system32\dla\tfswctrl.exe [2004-03-15 122933]
"UpdateManager"=C:\Programmer\Fælles filer\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]
"PCMService"=C:\Programmer\Dell\Media Experience\PCMService.exe [2004-04-11 290816]
"DVDLauncher"=C:\Programmer\r\CyberLink\PowerDVD\DVDLauncher.exe [2004-04-11 53248]
"zBrowser Launcher"=C:\Programmer\Logitech\iTouch\iTouch.exe [2003-12-01 892928]
"Logitech Utility"=C:\WINDOWS\Logi_MwX.Exe [2003-11-07 19968]
"HP Software Update"=C:\Programmer\HP\HP Software Update\HPWuSchd2.exe [2004-02-12 49152]
"HP Component Manager"=C:\Programmer\HP\hpcoretech\hpcmpmgr.exe [2004-05-12 241664]
"Omnipage"=C:\Programmer\ScanSoft\OmniPageSE\opware32.exe [2002-02-20 49152]
"Ad-Watch"=C:\Programmer\Lavasoft\Ad-Aware\AAWTray.exe [2009-05-09 516440]
"G DATA AntiVirus Trayapplication"=C:\Programmer\G Data\AntiVirus\AVKTray\AVKTray.exe [2009-04-09 918600]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Sonic RecordNow!"= []
"updateMgr"=C:\Programmer\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]
C:\Documents and Settings\All Users\Menuen Start\Programmer\Start
Adobe Reader Speed Launch.lnk - C:\Programmer\Adobe\Acrobat 7.0\Reader\reader_sl.exe
HP Digital Imaging Monitor.lnk - C:\Programmer\HP\Digital Imaging\bin\hpqtra08.exe
HP Image Zone Hurtig start.lnk - C:\Programmer\HP\Digital Imaging\bin\hpqthb08.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
avgrsstx.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programmer\AGFEO\Tk-Suite-Basic-2\tkserver\tksock.exe"="C:\Programmer\AGFEO\Tk-Suite-Basic-2\tkserver\tksock.exe:*:Enabled:tksock"
"C:\Programmer\AGFEO\Tk-Suite-Basic-2\tkserver\tkmedia.exe"="C:\Programmer\AGFEO\Tk-Suite-Basic-2\tkserver\tkmedia.exe:*:Enabled:tkmedia"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programmer\Grisoft\AVG7\avginet.exe"="C:\Programmer\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe"
"C:\Programmer\Grisoft\AVG7\avgamsvr.exe"="C:\Programmer\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe"
"C:\Programmer\Grisoft\AVG7\avgcc.exe"="C:\Programmer\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe"
"C:\Programmer\AVG\AVG8\avgupd.exe"="C:\Programmer\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Documents and Settings\Heribert\temp\TeamViewer\Version4\TeamViewer.exe"="C:\Documents and Settings\Heribert\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer fjernstyringsprogram"
"C:\Programmer\RealVNC\VNC4\winvnc4.exe"="C:\Programmer\RealVNC\VNC4\winvnc4.exe:*:Disabled:VNC Server Free Edition for Win32"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
shell\AutoRun\command - E:\LaunchU3.exe -a
======List of files/folders created in the last 1 months======
2009-05-10 21:37:49 ----D---- C:\Programmer\trend micro
2009-05-10 21:37:44 ----D---- C:\rsit
2009-05-10 01:00:47 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-05-10 01:00:46 ----A---- C:\WINDOWS\system32\javaws.exe
2009-05-10 01:00:46 ----A---- C:\WINDOWS\system32\javaw.exe
2009-05-10 01:00:46 ----A---- C:\WINDOWS\system32\java.exe
2009-05-09 14:33:31 ----A---- C:\WINDOWS\system32\lsdelete.exe
2009-05-09 01:48:04 ----D---- C:\Documents and Settings\All Users\Application Data\G DATA
2009-05-09 01:46:56 ----D---- C:\Programmer\G Data
2009-05-09 01:46:56 ----D---- C:\Programmer\Fælles filer\G DATA
2009-05-09 01:16:27 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-05-09 01:13:39 ----HDC---- C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-05-09 01:13:17 ----D---- C:\Programmer\Lavasoft
2009-05-09 01:13:17 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2009-05-08 21:53:08 ----D---- C:\Documents and Settings\Heribert\Application Data\Malwarebytes
2009-05-08 20:03:31 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-05-08 19:48:24 ----D---- C:\Qoobox
2009-05-08 19:48:13 ----A---- C:\Bug.txt
2009-05-08 19:47:58 ----D---- C:\32788R22FWJFW.0.tmp
2009-05-08 17:02:35 ----A---- C:\lopR.txt
2009-05-08 17:01:56 ----D---- C:\Lop SD
2009-05-08 16:52:04 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-05-08 16:27:10 ----D---- C:\hijackthis
2009-05-08 16:23:35 ----D---- C:\WINDOWS\Prefetch
2009-05-08 14:09:57 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-05-08 14:09:45 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-05-08 14:09:38 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-05-08 14:09:28 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-05-08 14:09:21 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-05-08 14:09:12 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-05-08 14:09:04 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-05-08 14:08:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-05-08 14:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-05-08 14:08:43 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2009-05-08 14:08:37 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2009-05-08 14:08:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-05-08 14:08:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-05-08 14:08:02 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-05-08 14:07:50 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-05-08 14:07:43 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-05-08 14:07:35 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2009-05-08 14:07:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-05-08 14:07:18 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-05-08 14:07:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-05-08 14:07:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-05-08 14:06:53 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2009-05-08 14:06:46 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-05-08 14:06:39 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2009-05-08 14:06:30 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-05-08 14:06:23 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-05-08 14:06:15 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-05-08 14:06:06 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-05-08 14:05:59 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2009-05-08 14:05:51 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-05-08 14:01:27 ----D---- C:\WINDOWS\system32\da
2009-05-08 14:01:27 ----D---- C:\WINDOWS\l2schemas
2009-05-08 14:01:26 ----D---- C:\WINDOWS\system32\bits
2009-05-08 13:22:14 ----D---- C:\Programmer\Malwarebytes' Anti-Malware
2009-05-08 12:40:16 ----A---- C:\avgrep.txt
2009-05-08 11:45:51 ----A---- C:\WINDOWS\ntbtlog.txt
2009-05-08 11:35:57 ----A---- C:\tool.exe
2009-05-04 13:03:44 ----D---- C:\Documents and Settings\Heribert\Application Data\TeamViewer
2009-04-29 17:38:49 ----D---- C:\WINDOWS\system32\456131
2009-04-29 17:08:36 ----A---- C:\WINDOWS\system32\stu2.exe
2009-04-17 13:08:09 ----A---- C:\WINDOWS\system32\ptpusb.dll
2009-04-17 13:08:08 ----A---- C:\WINDOWS\system32\ptpusd.dll
2009-04-15 16:21:08 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2009-04-15 16:21:00 ----HDC---- C:\WINDOWS\$NtUninstallKB961373_0$
2009-04-15 16:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2009-04-15 16:18:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2009-04-15 16:17:44 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2009-04-15 16:16:07 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
======List of files/folders modified in the last 1 months======
2009-05-10 21:37:49 ----RD---- C:\Programmer
2009-05-10 20:49:16 ----D---- C:\WINDOWS\Temp
2009-05-10 14:00:05 ----D---- C:\WINDOWS\system32\DRIVERS
2009-05-10 01:02:34 ----SHD---- C:\WINDOWS\Installer
2009-05-10 01:00:47 ----D---- C:\WINDOWS\SYSTEM32
2009-05-10 01:00:28 ----D---- C:\WINDOWS\system32\CatRoot2
2009-05-10 00:58:56 ----D---- C:\Programmer\Java
2009-05-10 00:21:19 ----A---- C:\WINDOWS\iTouch.ini
2009-05-10 00:21:18 ----D---- C:\WINDOWS
2009-05-10 00:20:11 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-05-09 05:04:14 ----D---- C:\WINDOWS\system32\CatRoot
2009-05-09 05:02:46 ----HD---- C:\WINDOWS\INF
2009-05-09 05:02:34 ----HD---- C:\WINDOWS\$hf_mig$
2009-05-09 01:47:53 ----D---- C:\WINDOWS\WinSxS
2009-05-09 01:46:56 ----D---- C:\Programmer\Fælles filer
2009-05-09 01:35:10 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2009-05-09 01:16:49 ----SD---- C:\WINDOWS\Tasks
2009-05-09 00:09:02 ----A---- C:\WINDOWS\wininit.ini
2009-05-09 00:04:17 ----D---- C:\WINDOWS\SYSTEM
2009-05-09 00:04:16 ----AD---- C:\Programmer\AGFEO
2009-05-09 00:03:21 ----D---- C:\Documents and Settings\Heribert\Application Data\Lavasoft
2009-05-08 23:23:04 ----HD---- C:\$AVG8.VAULT$
2009-05-08 22:41:55 ----SHD---- C:\System Volume Information
2009-05-08 22:41:55 ----D---- C:\WINDOWS\system32\Restore
2009-05-08 20:06:44 ----D---- C:\WINDOWS\network diagnostic
2009-05-08 16:26:17 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-05-08 16:24:16 ----A---- C:\WINDOWS\OEWABLog.txt
2009-05-08 14:14:10 ----A---- C:\WINDOWS\SETUPLOG.TXT
2009-05-08 14:13:41 ----D---- C:\WINDOWS\system32\Setup
2009-05-08 14:13:41 ----D---- C:\WINDOWS\AppPatch
2009-05-08 14:13:40 ----RSD---- C:\WINDOWS\Fonts
2009-05-08 14:13:40 ----D---- C:\WINDOWS\system32\WBEM
2009-05-08 14:12:48 ----D---- C:\WINDOWS\SECURITY
2009-05-08 14:10:08 ----A---- C:\WINDOWS\imsins.BAK
2009-05-08 14:10:04 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2009-05-08 14:06:07 ----D---- C:\Programmer\Messenger
2009-05-08 14:01:41 ----D---- C:\WINDOWS\ServicePackFiles
2009-05-08 14:01:40 ----D---- C:\WINDOWS\IME
2009-05-08 14:01:40 ----D---- C:\WINDOWS\Help
2009-05-08 14:01:28 ----D---- C:\WINDOWS\system32\USMT
2009-05-08 14:01:28 ----D---- C:\WINDOWS\system32\da-dk
2009-05-08 14:01:26 ----D---- C:\WINDOWS\peernet
2009-05-08 14:01:26 ----D---- C:\Programmer\Movie Maker
2009-05-08 13:59:13 ----D---- C:\WINDOWS\system32\NPP
2009-05-08 13:59:12 ----D---- C:\WINDOWS\MSAGENT
2009-05-08 13:59:11 ----D---- C:\WINDOWS\SRCHASST
2009-05-08 13:59:11 ----D---- C:\Programmer\NetMeeting
2009-05-08 13:59:09 ----D---- C:\WINDOWS\system32\Com
2009-05-08 13:59:07 ----D---- C:\Programmer\Windows NT
2009-05-08 13:59:07 ----D---- C:\Programmer\Windows Media Player
2009-05-08 13:59:06 ----D---- C:\Programmer\Outlook Express
2009-05-08 13:59:03 ----D---- C:\Programmer\Fælles filer\System
2009-05-08 13:58:50 ----D---- C:\WINDOWS\system32\OOBE
2009-05-08 13:56:13 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-05-08 13:55:57 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-05-08 13:51:27 ----D---- C:\WINDOWS\EHome
2009-04-29 18:26:50 ----A---- C:\itouch_crash_info.txt
2009-04-15 16:20:47 ----D---- C:\Programmer\Internet Explorer
2009-04-15 16:17:16 ----A---- C:\WINDOWS\WIN.INI
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 GRD;G Data Rootkit Detector Driver; \??\C:\WINDOWS\system32\drivers\GRD.sys []
R1 intelppm;Driver til Intel-processor; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;HID-tastaturdriver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 omci;OMCI WDM Device Driver; C:\WINDOWS\System32\DRIVERS\omci.sys [2004-02-13 17153]
R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2004-01-14 5621]
R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2004-01-14 23219]
R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2004-02-27 40480]
R2 GDTdiInterceptor;GDTdiInterceptor; \??\C:\WINDOWS\system32\drivers\GDTdiIcpt.sys []
R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2004-03-15 25685]
R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2004-03-15 34837]
R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2004-03-15 4117]
R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2004-03-15 2233]
R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2004-03-15 85972]
R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2004-03-15 14229]
R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2004-03-15 6357]
R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2004-03-15 98580]
R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2004-03-15 100597]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys [2004-04-23 44032]
R3 BCMModem;BCM V.92 56K Modem; C:\WINDOWS\System32\DRIVERS\BCMSM.sys [2003-08-29 1101696]
R3 CmBatt;Microsoft ACPI Control Method-batteri; C:\WINDOWS\System32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 GDMnIcpt;GDMnIcpt; \??\C:\WINDOWS\system32\drivers\MiniIcpt.sys []
R3 GearAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\drivers\GEARAspiWDM.sys [2008-02-22 16168]
R3 HookCentre;HookCentre; \??\C:\WINDOWS\system32\drivers\HookCentre.sys []
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-06-21 51088]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-06-21 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-06-21 21744]
R3 itchfltr;iTouch Keyboard Filter; C:\WINDOWS\system32\DRIVERS\itchfltr.sys [2003-11-09 12953]
R3 LCcfltr;Logitech USB Filter Driver; C:\WINDOWS\System32\Drivers\LCcFltr.Sys [2003-11-07 14092]
R3 LHidFlt2;Logitech HID/USB Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFlt2.Sys [2003-11-07 25502]
R3 LHidUsb;Logitech USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsb.Sys [2003-11-07 37884]
R3 LMouFlt2;Logitech Mouse Class Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFlt2.Sys [2003-11-07 70798]
R3 mouhid;HID-driver til mus; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-04 12160]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-19 2973568]
R3 STAC97;Audio Driver (WDM) - SigmaTel CODEC; C:\WINDOWS\system32\drivers\stac97.sys [2004-07-20 258160]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\System32\DRIVERS\SynTP.sys [2004-05-13 182688]
R3 usbccgp;Overordnet Microsoft USB-standarddriver; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Miniportdriver til Microsoft USB 2.0-udvidet værtscontroller; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Driver til Microsoft USB-standardhub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Microsoft USB PRINTER-klasse; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;USB-scannerdriver; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Driver til USB-lagerenhed; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB-universel værtscontroller miniportdriver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 P3;Driver til Intel PentiumIII-processor; C:\WINDOWS\System32\DRIVERS\p3.sys [2008-04-14 46592]
S3 Arp1394;1394 ARP-klientprotokol; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys [2002-05-13 4272]
S3 EL90XBC;Driver til 3Com EtherLink XL 90XB/C-netværkskort; C:\WINDOWS\System32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 HidUsb;Microsoft HID-klassedriver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 NIC1394;1394-netværksdriver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
S4 agpCPQ;Compaq AGP-busfilter; C:\WINDOWS\System32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;ALI AGP-busfilter; C:\WINDOWS\System32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;Filterdriver til AMD AGP-bus; C:\WINDOWS\System32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\System32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\System32\DRIVERS\intelide.sys [2008-04-14 5504]
S4 sisagp;SIS AGP-busfilter; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 sr;Filterdriver til Systemgendannelse; C:\WINDOWS\System32\DRIVERS\sr.sys [2008-04-14 73344]
S4 viaagp;VIA AGP-busfilter; C:\WINDOWS\System32\DRIVERS\viaagp.sys [2008-04-13 42240]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AVKProxy;G Data AntiVirus Proxy; C:\Programmer\Fælles filer\G DATA\AVKProxy\AVKProxy.exe [2009-04-09 1043528]
R2 AVKService;G Data Scheduler; C:\Programmer\G Data\AntiVirus\AVK\AVKService.exe [2009-04-09 388168]
R2 AVKWCtl;G Data Filesystem Monitor; C:\Programmer\G Data\AntiVirus\AVK\AVKWCtl.exe [2009-02-25 1206096]
R2 JavaQuickStarterService;Java Quick Starter; C:\Programmer\Java\jre6\bin\jqs.exe [2009-05-10 152984]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2004-08-19 127042]
R2 TeamViewer4;TeamViewer 4; C:\Documents and Settings\Heribert\temp\TeamViewer\Version4\TeamViewer_Service.exe [2009-04-29 185640]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912]
R3 GDScan;G Data Scanner; C:\Programmer\Fælles filer\G DATA\GDScan\GDScan.exe [2009-03-10 298568]
R3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-03-18 65536]
S3 aspnet_state;ASP.NET-tilstandstjeneste; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Programmer\Lavasoft\Ad-Aware\AAWService.exe [2009-05-09 953168]
S3 ose;Office Source Engine; C:\Programmer\Fælles filer\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
-----------------EOF-----------------
