Getting redirected from facebook page to alloutblackhat.com...

Hey

I have the following browsing problem with facebook (which, as I read here, is not so uncommon):
When I'm surfing on facebook using firefox, every once in a while it opens a new browser window and visits the address alloutblackhat.com/redirect.php (or something like this). Then this new window closes automatically and I'm returned to facebook with the cursor in the address bar and the address selected. No other harm is done at my PC, everything else works fine. I have avast running continuously at the background but it hasn't discovered anything suspicious. Ran even spybot s&d;, it discovered just 2 tracking cookies which I deleted.

Thanks for your help in advance

Below follow scan results from OTL:

OTL.txt:

OTL logfile created on: 4/12-10 09:41:40 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\jon\Desktop\f0lder
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18975)
Locale: 0000041d | Country: Sverige | Language: SVE | Date Format: d/M-yy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 62,00% Memory free
7,00 Gb Paging File | 6,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): c:\pagefile.sys 4603 4603 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298,09 Gb Total Space | 29,61 Gb Free Space | 9,93% Space Free | Partition Type: NTFS

Computer Name: ZOPIKLON | User Name: jon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\jon\Desktop\f0lder\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Users\jon\AppData\Roaming\fbx.exe (noOrg)
PRC - C:\Windows\System32\dgdersvc.exe (Devguru Co., Ltd.)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\afwServ.exe (AVAST Software)
PRC - C:\Windows\System32\FsUsbExService.Exe (Teruten)
PRC - C:\Program Files\Lexmark 4900 Series\lxdrmsdmon.exe ()
PRC - C:\Program Files\Lexmark 4900 Series\lxdrmon.exe ()
PRC - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe (ABBYY)
PRC - C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DigitalPersona, Inc.)
PRC - C:\Program Files\DigitalPersona\Bin\DpAgent.exe (DigitalPersona, Inc.)
PRC - C:\Windows\System32\lxdrcoms.exe ( )
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Windows\System32\oodag.exe (O&O; Software GmbH)
PRC - C:\Windows\System32\oodtray.exe (O&O; Software GmbH)
PRC - C:\Program Files\Net iD\iid.exe (SecMaker AB)
PRC - C:\Windows\System32\vfsFPService.exe (Validity Sensors, Inc.)
PRC - C:\Program Files\Winamp\winamp.exe (Nullsoft)
PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\stacsv.exe (IDT, Inc.)
PRC - C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\AEstSrv.exe (Andrea Electronics Corporation)
PRC - C:\Windows\System32\nisvcloc.exe (National Instruments Corp.)
PRC - C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation)
PRC - C:\Windows\System32\lktsrv.exe (National Instruments Corporation)
PRC - C:\Windows\System32\lkads.exe (National Instruments Corporation)
PRC - C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
PRC - C:\Windows\System32\lkcitdl.exe (National Instruments, Inc.)


========== Modules (SafeList) ==========

MOD - C:\Users\jon\Desktop\f0lder\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\DigitalPersona\Bin\DpOFeedb.dll (DigitalPersona, Inc.)
MOD - C:\Program Files\DigitalPersona\Bin\DpOSet.dll (DigitalPersona, Inc.)


========== Win32 Services (SafeList) ==========

SRV - (dgdersvc) – C:\Windows\System32\dgdersvc.exe (Devguru Co., Ltd.)
SRV - (avast! Web Scanner) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Mail Scanner) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Firewall) – C:\Program Files\Alwil Software\Avast5\afwServ.exe (AVAST Software)
SRV - (WinVNC4) – C:\Program Files\RealVNC\VNC4\WinVNC4.exe (RealVNC Ltd.)
SRV - (FsUsbExService) – C:\Windows\System32\FsUsbExService.Exe (Teruten)
SRV - (OS Selector) – C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe ()
SRV - (WPFFontCache_v0400) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ABBYY.Licensing.FineReader.Professional.10.0) – C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe (ABBYY)
SRV - (DpHost) – C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DigitalPersona, Inc.)
SRV - (lxdrCATSCustConnectService) – C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxdrserv.exe ()
SRV - (lxdr_device) – C:\Windows\System32\lxdrcoms.exe ( )
SRV - (FontCache) – C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (O&O; Defrag) – C:\Windows\System32\oodag.exe (O&O; Software GmbH)
SRV - (RoxMediaDB11) – C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxMediaDB11.exe (Sonic Solutions)
SRV - (vfsFPService) – C:\Windows\System32\vfsFPService.exe (Validity Sensors, Inc.)
SRV - (STacSV) – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\stacsv.exe (IDT, Inc.)
SRV - (Roxio Upnp Server 11) – C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUpnpService11.exe (Sonic Solutions)
SRV - (Roxio UPnP Renderer 11) – C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUPnPRenderer11.exe (Sonic Solutions)
SRV - (RoxLiveShare11) – C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxLiveShare11.exe (Sonic Solutions)
SRV - (RoxWatch11) – C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxWatch11.exe (Sonic Solutions)
SRV - (9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269) – C:\Program Files\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe ()
SRV - (AESTFilters) – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\AEstSrv.exe (Andrea Electronics Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (niSvcLoc) – C:\Windows\System32\nisvcloc.exe (National Instruments Corp.)
SRV - (NIDomainService) – C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation)
SRV - (lkTimeSync) – C:\Windows\System32\lktsrv.exe (National Instruments Corporation)
SRV - (lkClassAds) – C:\Windows\System32\lkads.exe (National Instruments Corporation)
SRV - (WcesComm) – C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) – C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (LkCitadelServer) – C:\Windows\System32\lkcitdl.exe (National Instruments, Inc.)
SRV - (OpcEnum) – C:\Windows\System32\Opcenum.exe (OPC Foundation)


========== Driver Services (SafeList) ==========

DRV - (pccsmcfd) – C:\Windows\System32\DRIVERS\pccsmcfd.sys File not found
DRV - (NwlnkFwd) – C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) – C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) – C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (dgderdrv) – C:\Windows\System32\drivers\dgderdrv.sys (Devguru Co., Ltd)
DRV - (FsUsbExDisk) – C:\Windows\System32\FsUsbExDisk.Sys ()
DRV - (aswFW) – C:\Windows\System32\drivers\aswFW.sys (AVAST Software)
DRV - (aswSnx) – C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswNdis2) – C:\Windows\System32\drivers\aswNdis2.sys (AVAST Software)
DRV - (aswTdi) – C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswSP) – C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRdr) – C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMonFlt) – C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) – C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (snapman) – C:\Windows\system32\DRIVERS\snapman.sys (Acronis)
DRV - (ssadmdm) – C:\Windows\System32\drivers\ssadmdm.sys (MCCI Corporation)
DRV - (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) – C:\Windows\System32\drivers\ssadbus.sys (MCCI Corporation)
DRV - (androidusb) – C:\Windows\System32\drivers\ssadadb.sys (Google Inc)
DRV - (ssadmdfl) SAMSUNG Android USB Modem (Filter) – C:\Windows\System32\drivers\ssadmdfl.sys (MCCI Corporation)
DRV - (aswNdis) – C:\Windows\system32\DRIVERS\aswNdis.sys (ALWIL Software)
DRV - (hpdskflt) – C:\Windows\system32\DRIVERS\hpdskflt.sys (Hewlett-Packard Company)
DRV - (Accelerometer) – C:\Windows\System32\drivers\Accelerometer.sys (Hewlett-Packard Company)
DRV - (vncmirror) – C:\Windows\System32\drivers\vncmirror.sys (RealVNC Ltd.)
DRV - (SynTP) – C:\Windows\System32\drivers\SynTP.sys (Synaptics Incorporated)
DRV - (sscdmdm) – C:\Windows\System32\drivers\sscdmdm.sys (MCCI Corporation)
DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) – C:\Windows\System32\drivers\sscdbus.sys (MCCI Corporation)
DRV - (sscdmdfl) – C:\Windows\System32\drivers\sscdmdfl.sys (MCCI Corporation)
DRV - (RTL8169) – C:\Windows\System32\drivers\Rtlh86.sys (Realtek )
DRV - (GemCCID) – C:\Windows\System32\drivers\GemCCID.sys (Gemalto)
DRV - (WINUSB) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (USBCCID) – C:\Windows\System32\drivers\usbccid.sys (Microsoft Corporation)
DRV - (LMouFilt) – C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (Tdsshbecr) – C:\Windows\System32\drivers\shbecr.sys (Todos Data System AB)
DRV - (vfs101x) – C:\Windows\System32\drivers\vfs101x.sys (Validity Sensors, Inc.)
DRV - (STHDA) – C:\Windows\System32\drivers\stwrt.sys (IDT, Inc.)
DRV - (enecir) – C:\Windows\System32\drivers\enecir.sys (ENE TECHNOLOGY INC.)
DRV - (RxFilter) – C:\Windows\System32\drivers\RxFilter.sys (Sonic Solutions)
DRV - (JMCR) – C:\Windows\System32\drivers\jmcr.sys (JMicron Technology Corporation)
DRV - (SaibVd32) – C:\Windows\System32\drivers\SaibVd32.sys (Sonic Solutions)
DRV - (SahdIa32) – C:\Windows\System32\Drivers\SahdIa32.sys (Sonic Solutions)
DRV - (SaibIa32) – C:\Windows\System32\Drivers\SaibIa32.sys (Sonic Solutions)
DRV - (mcdbus) – C:\Windows\System32\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (silabser) – C:\Windows\System32\drivers\silabser.sys (Silicon Laboratories)
DRV - (silabenm) – C:\Windows\System32\drivers\silabenm.sys (Silicon Laboratories, Inc.)
DRV - (usbfilter) – C:\Windows\System32\drivers\usbfilter.sys (Advanced Micro Devices Inc.)
DRV - (AtiPcie) ATI PCI Express (3GIO) – C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV - (athr) – C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (ahcix86s) – C:\Windows\system32\DRIVERS\ahcix86s.sys (AMD Technologies Inc.)
DRV - (btwavdt) – C:\Windows\System32\drivers\btwavdt.sys (Broadcom Corporation.)
DRV - (btwaudio) – C:\Windows\System32\drivers\btwaudio.sys (Broadcom Corporation.)
DRV - (btwrchid) – C:\Windows\System32\drivers\btwrchid.sys (Broadcom Corporation.)
DRV - (MegaSR) – C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)
DRV - (adpu320) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (megasas) – C:\Windows\system32\drivers\megasas.sys (LSI Corporation)
DRV - (adpu160m) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (SiSRaid4) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (HpCISSs) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (ql2300) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adpahci) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (E1G60) Intel® – C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (LSI_SAS) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (vsmraid) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (arcsas) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (arc) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iaStorV) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (ulsata2) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (LSI_SCSI) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (LSI_FC) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (elxstor) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adp94xx) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (nvraid) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvstor) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (uliahci) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (viaide) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (Amddfltr) – C:\Windows\system32\DRIVERS\Amddfltr.sys (Advanced Micro Devices)
DRV - (NiViPxiK) – C:\Windows\System32\drivers\NiViPxiKl.sys (National Instruments Corporation)
DRV - (NiViPciK) – C:\Windows\System32\drivers\NiViPciKl.sys (National Instruments Corporation)
DRV - (NiViFWK) – C:\Windows\System32\drivers\NiViFWKl.sys (National Instruments Corporation)
DRV - (nipalusbedl) – C:\Windows\System32\drivers\nipalusbedl.sys (National Instruments Corporation)
DRV - (NIPALK) – C:\Windows\System32\drivers\nipalk.sys (National Instruments Corporation)
DRV - (nipalfwedl) – C:\Windows\System32\drivers\nipalfwedl.sys (National Instruments Corporation)
DRV - (nidimk) – C:\Windows\System32\drivers\nidimkl.sys (National Instruments Corporation)
DRV - (niorbk) – C:\Windows\System32\drivers\niorbkl.sys (National Instruments Corporation)
DRV - (nipbcfk) – C:\Windows\System32\drivers\nipbcfk.sys (National Instruments Corporation)
DRV - (cvintdrv) – C:\Windows\System32\drivers\cvintdrv.sys ()
DRV - (TodosAgmII) – C:\Windows\System32\drivers\AgmIIusb.sys (Todos Data System AB)
DRV - (ql40xx) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (nfrd960) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (aic78xx) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (iteraid) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (Symc8xx) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_u3) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) – C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://flvtubesearch.co/?tmp=toolbar_FLVTu…p;subid=88_NEWR
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = http://flvtubesearch.co/?tmp=toolbar_FLVTu…p;subid=88_NEWR
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://flvtubesearch.co/?tmp=toolbar_FLVTu…p;subid=88_NEWR

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = http://flvtubesearch.co/?tmp=toolbar_FLVTu…p;subid=88_NEWR
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://flvtubesearch.co/?tmp=toolbar_FlvTu…703d0e927df6d5d
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Yahoo-FlvTube"
FF - prefs.js..browser.search.defaultenginename: "Yahoo-FlvTube"
FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie;=UTF-8&oe;=UTF-8&q;="
FF - prefs.js..browser.search.order.1: "Yahoo-FlvTube"
FF - prefs.js..browser.search.selectedEngine: "Yahoo-FlvTube"
FF - prefs.js..browser.search.selectedEngineURL: "http://flvtubesearch.co/?tmp=toolbar_FLVTube_results&prt;=flvtubetb01ff&clid;=bea6540b9e824a93a703d0e927df6d5d&subid;=5735_generic&Keywords;={searchTerms}"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.se"
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.10
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..keyword.URL: "http://flvtubesearch.co/?prt=02ff&clid;=&subid;=&Keywords;="

FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\DigitalPersona\Bin\FirefoxExt\ [2010/08/21 03:13:09 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/28 18:17:58 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/11/19 17:06:02 | 000,000,000 | —D | M]

[2008/12/24 18:42:36 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Mozilla\Extensions
[2010/12/04 08:30:13 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions
[2010/04/29 15:48:08 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/09/09 21:09:15 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010/07/25 17:07:35 | 000,000,000 | —D | M] (No name found) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010/10/09 08:57:19 | 000,000,000 | —D | M] (Download Statusbar) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2010/05/29 16:15:55 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/10/18 01:03:45 | 000,001,635 | —- | M] () – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\searchplugins\firefox-add-ons.xml
[2010/10/18 01:04:46 | 000,001,504 | —- | M] () – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\searchplugins\imdb.xml
[2010/10/18 01:07:21 | 000,001,115 | —- | M] () – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\searchplugins\rapidshare-filefinder.xml
[2010/10/18 01:03:35 | 000,004,140 | —- | M] () – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\searchplugins\youtube.xml
[2010/12/04 08:30:13 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2010/06/19 18:00:40 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/04/17 23:46:54 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/06 12:21:06 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/11/13 11:46:07 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010/09/15 04:50:38 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009/01/09 09:57:10 | 000,111,856 | —- | M] (SecMaker AB) – C:\Program Files\Mozilla Firefox\plugins\npiidplg.dll
[2007/02/08 10:48:16 | 000,028,448 | —- | M] (National Instruments) – C:\Program Files\Mozilla Firefox\plugins\NPLV82Win32.dll
[2010/10/22 18:50:25 | 000,004,980 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\flvtube.xml

O1 HOSTS File: ([2006/09/18 22:41:30 | 000,000,761 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Lexmark Verktygsfält) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O2 - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
O3 - HKLM\..\Toolbar: (Lexmark Verktygsfält) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Verktygsfält) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Lexmark Verktygsfält) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\DpAgent.exe (DigitalPersona, Inc.)
O4 - HKLM..\Run: [KeePass 2 PreLoad] C:\Program Files\KeePass Password Safe 2\KeePass.exe (Dominik Reichl)
O4 - HKLM..\Run: [lxdramon] C:\Program Files\Lexmark 4900 Series\lxdramon.exe ()
O4 - HKLM..\Run: [lxdrmon.exe] C:\Program Files\Lexmark 4900 Series\lxdrmon.exe ()
O4 - HKLM..\Run: [Net iD] C:\Program Files\Net iD\iid.exe (SecMaker AB)
O4 - HKLM..\Run: [OODefragTray] C:\Windows\System32\oodtray.exe (O&O; Software GmbH)
O4 - HKLM..\Run: [StartCCC] c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKCU..\Run: [InstallMon] C:\Users\jon\AppData\Roaming\fbx.exe (noOrg)
O4 - HKCU..\Run: [ISUSPM] C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
O4 - HKCU..\Run: [KiesTrayAgent] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8 - Extra context menu item: Free YouTube Download - C:\Users\jon\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\jon\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8 - Extra context menu item: Send image to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {E008A543-CEFB-4559-912F-C27C2B89F13B} http://mia.vgregion.se/dwa7W.cab (Domino Web Access 7 Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{b0cfe7c2-a608-11df-8e3c-002186ac18f4}\Shell\AutoRun\command - "" = E:\2bbi1ax.exe – File not found
O33 - MountPoints2\{b0cfe7c2-a608-11df-8e3c-002186ac18f4}\Shell\open\Command - "" = E:\2bbi1ax.exe – File not found
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LaunchU3.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (OODBS) - C:\Windows\System32\OODBS.exe (O&O; Software GmbH)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.VP60 - C:\Windows\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.xvid - C:\Windows\System32\xvidvfw.dll ()

CREATERESTOREPOINT
Error creating restore point.

========== Files/Folders - Created Within 30 Days ==========

[2010/12/04 08:43:16 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2010/12/04 08:43:16 | 000,000,000 | —D | C] – C:\Program Files\Spybot - Search & Destroy
[2010/11/15 17:21:17 | 000,000,000 | —D | C] – C:\Windows\Minidump
[2010/11/13 13:42:27 | 000,000,000 | —D | C] – C:\Program Files\7-Zip
[2010/11/11 20:53:31 | 000,000,000 | —D | C] – C:\Windows\temp
[2010/09/25 01:24:46 | 000,081,920 | —- | C] (noOrg) – C:\Users\jon\AppData\Roaming\fbx.exe
[2009/12/27 21:51:57 | 000,651,264 | —- | C] ( ) – C:\Windows\System32\lxdrpmui.dll
[2009/12/27 21:51:56 | 000,376,832 | —- | C] ( ) – C:\Windows\System32\lxdrcomm.dll
[2009/12/03 10:48:00 | 000,446,464 | —- | C] ( ) – C:\Windows\System32\LXDRhcp.dll
[2009/12/03 10:48:00 | 000,364,544 | —- | C] ( ) – C:\Windows\System32\lxdrinpa.dll
[2009/12/03 10:47:59 | 001,069,056 | —- | C] ( ) – C:\Windows\System32\lxdrserv.dll
[2009/12/03 10:47:59 | 000,860,160 | —- | C] ( ) – C:\Windows\System32\lxdrusb1.dll
[2009/12/03 10:47:59 | 000,339,968 | —- | C] ( ) – C:\Windows\System32\lxdriesc.dll
[2009/12/03 10:47:58 | 000,577,536 | —- | C] ( ) – C:\Windows\System32\lxdrlmpm.dll
[2009/12/03 10:47:57 | 000,684,032 | —- | C] ( ) – C:\Windows\System32\lxdrhbn3.dll
[2009/12/03 10:47:56 | 000,761,856 | —- | C] ( ) – C:\Windows\System32\lxdrcomc.dll
[2009/10/15 21:32:46 | 000,409,600 | —- | C] ( ) – C:\Windows\System32\lxdrcoin.dll

========== Files - Modified Within 30 Days ==========

[2010/12/04 09:36:56 | 000,040,910 | —- | M] () – C:\Users\jon\Documents\nya_nycklar-2.kdbx
[2010/12/04 09:34:00 | 000,000,938 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/12/04 08:43:21 | 000,001,055 | —- | M] () – C:\Users\jon\Desktop\Spybot - Search & Destroy.lnk
[2010/12/04 08:25:02 | 000,598,900 | —- | M] () – C:\Windows\System32\perfh009.dat
[2010/12/04 08:25:02 | 000,104,914 | —- | M] () – C:\Windows\System32\perfc009.dat
[2010/12/04 08:21:58 | 000,000,414 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{65D0B269-1D85-454E-937B-A90B786FB2B9}.job
[2010/12/04 08:18:42 | 000,000,934 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/12/04 08:18:38 | 000,003,760 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/12/04 08:18:38 | 000,003,760 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/12/04 08:18:26 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/12/04 08:18:21 | 3218,956,288 | -HS- | M] () – C:\hiberfil.sys
[2010/12/04 08:18:19 | 000,755,984 | —- | M] () – C:\Windows\System32\oodbs.lor
[2010/12/03 23:55:59 | 000,001,159 | —- | M] () – C:\Windows\bthservsdp.dat
[2010/12/03 20:47:13 | 000,000,749 | —- | M] () – C:\Users\Public\Desktop\World of Warcraft.lnk
[2010/12/03 10:36:41 | 000,134,303 | —- | M] () – C:\Users\jon\Desktop\tidtabell.pdf
[2010/12/01 20:36:01 | 000,002,073 | —- | M] () – C:\Users\Public\Desktop\Google Earth.lnk
[2010/11/30 18:36:48 | 000,030,188 | —- | M] () – C:\Users\jon\AppData\Roaming\mainhst.zgh
[2010/11/29 11:30:03 | 000,159,744 | —- | M] () – C:\Users\jon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/26 09:37:45 | 153,673,459 | —- | M] () – C:\Windows\MEMORY.DMP
[2010/11/16 12:37:37 | 000,001,356 | —- | M] () – C:\Users\jon\AppData\Local\d3d9caps.dat
[2010/11/13 13:46:31 | 000,001,024 | —- | M] () – C:\.rnd

========== Files Created - No Company Name ==========

[2010/12/04 08:43:21 | 000,001,055 | —- | C] () – C:\Users\jon\Desktop\Spybot - Search & Destroy.lnk
[2010/12/03 10:36:39 | 000,134,303 | —- | C] () – C:\Users\jon\Desktop\tidtabell.pdf
[2010/12/01 20:36:01 | 000,002,073 | —- | C] () – C:\Users\Public\Desktop\Google Earth.lnk
[2010/11/26 09:37:45 | 153,673,459 | —- | C] () – C:\Windows\MEMORY.DMP
[2010/11/13 13:46:30 | 000,001,024 | —- | C] () – C:\.rnd
[2010/10/16 13:22:35 | 000,040,344 | —- | C] () – C:\Users\jon\AppData\Roaming\FbxU.exe
[2010/09/15 09:41:54 | 000,974,848 | —- | C] () – C:\Windows\System32\cis-2.4.dll
[2010/09/15 09:41:54 | 000,081,920 | —- | C] () – C:\Windows\System32\issacapi_bs-2.3.dll
[2010/09/15 09:41:54 | 000,065,536 | —- | C] () – C:\Windows\System32\issacapi_pe-2.3.dll
[2010/09/15 09:41:54 | 000,057,344 | —- | C] () – C:\Windows\System32\issacapi_se-2.3.dll
[2010/08/27 23:18:36 | 000,026,624 | —- | C] () – C:\Windows\System32\VNCpm.dll
[2010/08/21 03:03:42 | 000,014,574 | —- | C] () – C:\Users\jon\AppData\Roaming\UserTile.png
[2010/07/31 14:28:42 | 000,110,592 | —- | C] () – C:\Windows\System32\FsUsbExDevice.Dll
[2010/07/31 14:28:42 | 000,036,640 | —- | C] () – C:\Windows\System32\FsUsbExDisk.Sys
[2009/12/29 19:21:34 | 000,006,236 | —- | C] () – C:\ProgramData\lxdrJSW.log
[2009/12/27 21:51:54 | 000,208,896 | —- | C] () – C:\Windows\System32\lxdrgrd.dll
[2009/12/03 11:07:29 | 000,000,431 | —- | C] () – C:\ProgramData\lxdrDiagnostics.log
[2009/12/03 10:51:39 | 000,040,960 | —- | C] () – C:\Windows\System32\lxdrvs.dll
[2009/12/03 10:50:59 | 000,081,920 | —- | C] () – C:\Windows\System32\lxdrcaps.dll
[2009/12/03 10:50:59 | 000,069,632 | —- | C] () – C:\Windows\System32\lxdrcnv4.dll
[2009/12/03 10:50:58 | 001,036,288 | —- | C] () – C:\Windows\System32\lxdrdrs.dll
[2009/12/03 10:49:26 | 000,000,044 | —- | C] () – C:\Windows\System32\lxdrrwrd.ini
[2009/12/03 10:48:00 | 000,389,120 | —- | C] () – C:\Windows\System32\LXDRinst.dll
[2009/12/03 10:43:17 | 000,000,000 | —- | C] () – C:\ProgramData\UpdaterLog.txt
[2009/11/01 13:33:51 | 000,000,031 | —- | C] () – C:\Windows\QUICKEN.INI
[2009/10/07 18:21:43 | 000,002,108 | —- | C] () – C:\Users\jon\AppData\Local\rx_audio.Cache
[2009/08/03 14:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2009/07/23 17:44:11 | 000,000,000 | —- | C] () – C:\Users\jon\AppData\Local\rx_image32.Cache
[2009/06/07 15:24:04 | 000,180,224 | —- | C] () – C:\Windows\System32\xvidvfw.dll
[2009/06/07 15:16:12 | 000,819,200 | —- | C] () – C:\Windows\System32\xvidcore.dll
[2009/05/28 19:36:47 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/03/05 05:54:58 | 000,073,728 | —- | C] () – C:\Windows\System32\RtNicProp32.dll
[2009/01/28 19:50:44 | 000,153,088 | —- | C] () – C:\Windows\System32\unrar.dll
[2009/01/08 18:42:35 | 000,030,188 | —- | C] () – C:\Users\jon\AppData\Roaming\mainhst.zgh
[2009/01/03 14:14:57 | 000,000,171 | —- | C] () – C:\Users\jon\AppData\Local\RAExpertHistory.xml
[2008/12/24 17:11:19 | 000,159,744 | —- | C] () – C:\Users\jon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/12/24 15:53:09 | 000,001,356 | —- | C] () – C:\Users\jon\AppData\Local\d3d9caps.dat
[2008/12/10 00:05:52 | 000,159,744 | —- | C] () – C:\Windows\System32\atitmmxx.dll
[2008/01/21 03:23:41 | 000,081,158 | —- | C] () – C:\Windows\System32\manage-bde.ini.en
[2007/11/14 16:17:34 | 000,204,800 | —- | C] () – C:\Windows\System32\CogentBioSDK.dll
[2007/07/19 09:25:34 | 000,000,244 | —- | C] () – C:\Windows\System32\nirpc.ini
[2007/07/18 21:12:26 | 000,003,520 | —- | C] () – C:\Windows\System32\nipalpg.dll
[2007/02/21 10:00:00 | 000,004,096 | —- | C] () – C:\Windows\System32\drivers\cvintdrv.sys
[2006/11/02 13:34:20 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 08:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/03/09 15:58:00 | 001,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll
[2001/11/14 12:56:00 | 001,802,240 | —- | C] () – C:\Windows\System32\lcppn21.dll

========== LOP Check ==========

[2009/01/03 23:53:31 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Auslogics
[2010/05/31 20:56:55 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\AVI ReComp
[2010/08/31 08:19:35 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\BSplayer PRO
[2010/04/05 16:21:39 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2008/12/24 18:18:20 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\DigitalPersona
[2010/09/11 12:59:21 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Dropbox
[2010/07/25 17:07:34 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\DVDVideoSoftIEHelpers
[2009/11/12 18:28:01 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\eTeks
[2010/08/22 11:16:22 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\gtk-2.0
[2009/12/01 14:02:38 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\iid
[2009/04/27 17:47:58 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\ImgBurn
[2009/11/06 21:05:35 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\IrfanView
[2010/12/04 09:40:10 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\KeePass
[2010/10/28 17:53:17 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Lexmark Productivity Studio
[2009/07/27 20:01:38 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Mobipocket
[2010/12/03 23:51:08 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\MyPhoneExplorer
[2009/12/17 21:15:04 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\NewzToolz-EZ
[2009/03/10 17:00:59 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Nokia
[2009/06/08 15:35:25 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Notepad++
[2009/03/10 16:59:38 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\PC Suite
[2010/08/21 03:03:42 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\PeerNetworking
[2009/10/10 13:27:33 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Personal
[2010/09/06 18:48:33 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Samsung
[2009/01/19 18:58:15 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\streamripper
[2009/12/17 21:15:53 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\SuperNZB
[2009/01/02 23:11:21 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\URSoft
[2010/12/03 20:46:52 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\uTorrent
[2009/07/26 10:12:29 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Xilisoft Corporation
[2009/01/08 18:42:35 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\ZipGenius
[2010/12/03 23:55:58 | 000,032,530 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2010/12/04 08:21:58 | 000,000,414 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{65D0B269-1D85-454E-937B-A90B786FB2B9}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/11/13 13:46:31 | 000,001,024 | —- | M] () – C:\.rnd
[2010/10/18 03:45:36 | 000,002,006 | —- | M] () – C:\aqua_bitmap.cpp
[2006/09/18 22:43:36 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2009/04/11 07:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2008/12/25 00:38:53 | 000,008,192 | R-S- | M] () – C:\BOOTSECT.BAK
[2006/09/18 22:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2008/04/14 19:51:45 | 000,171,136 | RHS- | M] () – C:\grldr
[2010/12/04 08:18:21 | 3218,956,288 | -HS- | M] () – C:\hiberfil.sys
[2010/07/16 20:26:38 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/07/16 20:26:38 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2010/12/04 08:18:19 | 531,628,031 | -HS- | M] () – C:\pagefile.sys

< %systemroot%\Fonts\*.com >
[2006/11/02 13:35:26 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 13:35:26 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 13:35:26 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/05/28 20:04:15 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 22:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2009/10/16 16:02:20 | 000,155,648 | —- | M] () – C:\Windows\System32\spool\prtprocs\w32x86\lxdrdrpp.dll
[2006/10/26 18:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/09/07 16:12:17 | 000,038,848 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/01/21 03:41:56 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2008/01/21 04:16:46 | 017,956,864 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2008/01/21 04:16:31 | 000,106,496 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2008/01/21 04:16:46 | 000,020,480 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 11:34:08 | 010,133,504 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 11:34:08 | 001,826,816 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2009/05/02 11:30:21 | 000,000,444 | -HS- | M] () – C:\Users\jon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-11-24 16:05:41

========== Alternate Data Streams ==========

@Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:B3D74A13

< End of report >


and Extras.txt:

OTL Extras logfile created on: 4/12-10 09:41:40 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\jon\Desktop\f0lder
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18975)
Locale: 0000041d | Country: Sverige | Language: SVE | Date Format: d/M-yy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 62,00% Memory free
7,00 Gb Paging File | 6,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): c:\pagefile.sys 4603 4603 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298,09 Gb Total Space | 29,61 Gb Free Space | 9,93% Space Free | Partition Type: NTFS

Computer Name: ZOPIKLON | User Name: jon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [Browse with &IrfanView;] – "C:\Program Files\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] – "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] – "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] – "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-3908724669-2988153523-623888385-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01D676B0-12E8-4506-8A19-AEB376E02A72}" = lport=4000 | protocol=6 | dir=in | name=blizzard downloader: 4000 |
"{02D77570-6293-4709-A302-98CDB9FC7D01}" = rport=445 | protocol=6 | dir=out | app=system |
"{110516DB-98B4-43DE-8E70-AF884BB98CD5}" = lport=6112 | protocol=6 | dir=in | name=blizzard downloader: 6112 |
"{115DA6C0-2E03-4F5E-93F0-8A734C257E79}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{12464A89-B37B-41B9-BC6A-AFC27DB3762F}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{16426F93-61FA-4192-8C0D-BA041F17F96E}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{1D2FE16E-F59E-456E-89B9-2C0C64DFD458}" = lport=1120 | protocol=6 | dir=in | name=blizzard downloader: 1120 |
"{22ABA0D3-3453-4041-9C37-620CE8A52FF8}" = lport=6113 | protocol=6 | dir=in | name=blizzard downloader: 6113 |
"{30EE7800-7744-49A5-A8B3-D527A7392AF4}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{3B76E6AC-06F7-4AD6-93D6-B123728B2624}" = lport=445 | protocol=6 | dir=in | app=system |
"{3E2B4B27-F910-4F76-98F7-55588A56F486}" = rport=139 | protocol=6 | dir=out | app=system |
"{48B38CFF-4AFB-4C8D-9CC9-CA2CCD36DA25}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{544A3E69-008E-45AD-A89A-664A1E72A28E}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{66B81C5F-140E-4ABA-A2EB-35E23610E800}" = lport=1119 | protocol=6 | dir=in | name=blizzard downloader: 1119 |
"{696091E9-57B6-4C2F-80F7-8E94828EED50}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{75F0B86F-3C1C-4FA1-8014-5E1C4BE00DD1}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{84725544-D9CE-45EA-BF88-0694799AB71C}" = rport=138 | protocol=17 | dir=out | app=system |
"{87C7017F-C069-457D-8D66-E2A8E8BCC945}" = lport=137 | protocol=17 | dir=in | app=system |
"{9FBF4ED4-F5F3-4A69-960F-74AF5B716099}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{A23F40C5-D997-4E9D-B1D2-4C3E6A88C194}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{B7FE7F33-FB8B-4749-94B2-9D9747ECA90F}" = lport=139 | protocol=6 | dir=in | app=system |
"{BE315DC5-8F93-44AF-95EF-2447286D0971}" = rport=137 | protocol=17 | dir=out | app=system |
"{C18C024E-8D0E-479F-B20C-FA23AC15A985}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{C2CED046-B9DE-42D8-8403-BF1A01244F43}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{C52618A7-2B62-4202-B1B0-E775477CF5DC}" = lport=138 | protocol=17 | dir=in | app=system |
"{E41B3116-850A-4122-B69E-2EDC81C0FC59}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 |
"{E87728E8-E8C0-40C9-9FDF-801CE57CC2ED}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{EA295321-641E-4C0E-BB93-BF65F81C1586}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{EFF318DF-0C30-4DB0-A6BC-29896DB666F8}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{F42BBB27-31CE-4EB2-A0A6-ED33CBD0E377}" = lport=6114 | protocol=6 | dir=in | name=blizzard downloader: 6114 |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02759D4C-FD2E-4AC3-B9B5-6AB5D881B875}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{0407E3DF-E235-4F55-B88C-ACE13FD78EB7}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{0A549379-03BD-4B69-94DB-58F25D498629}" = protocol=6 | dir=in | app=c:\program files\lexmark 4900 series\lxdramon.exe |
"{0A71B317-5C5B-4626-87D3-55FCDFB56287}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.0.9767-to-3.1.1.9806-engb-downloader.exe |
"{0A8E8D1E-E086-4014-BC7E-4BB14AD05053}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{0CA9B6FF-D65F-411A-BD1A-F3F4BABD7454}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{0DB41748-9A0D-481C-B151-C37954E34223}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |
"{0DE5875C-E629-4C35-BC31-D7CA5FF28E65}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{0DEFFCC0-17EE-4A73-AC5D-C08F04BAC83F}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe |
"{12D57E0B-A3EB-4A79-B1C7-285D0A968F51}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe |
"{136157DB-698D-4893-BBE4-9B95B6803B77}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{196C19B6-2C07-4809-8CF1-D828B4A98F1F}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.1.9835-to-3.1.2.9901-engb-downloader.exe |
"{22BC6631-2B97-4CAA-A681-0AD36217C6AF}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.1.9806-to-3.1.1.9835-engb-downloader.exe |
"{23252D04-3909-4B88-BA61-A2F3075DE056}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{24CF2B56-AF8C-4305-9303-E8FCAE13C668}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{28BC1C2A-20A5-4C12-9D04-50B38EBB1218}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2AA80D03-5C81-46A0-8AC1-A3B9EF6729BB}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{2E9ABF6E-D902-4157-89A8-855C393BCE0E}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe |
"{2EB8D5D3-FD19-44BD-BCEF-EB68788AA812}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{332022AD-7165-4758-BA55-632735DCC9BB}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe |
"{3412B8BE-4036-4ABA-A058-C4A569F1B18F}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.3.9947-to-3.2.0.10192-engb-downloader.exe |
"{35E4294A-D348-425D-AE1A-CCE862B3C7EC}" = protocol=17 | dir=in | app=c:\program files\lexmark 4900 series\lxdramon.exe |
"{3FF1FAF2-0CC6-43C4-BDD4-014C33CDF850}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe |
"{4461B482-754B-4636-BB48-87E935FC5D3D}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{4638C349-E556-45A7-975B-8071AE72527D}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{46D8D7C7-9F43-432F-ACAC-784A1F4830B8}" = protocol=6 | dir=in | app=c:\program files\lexmark 4900 series\frun.exe |
"{4A687836-630E-4FE9-860D-591E7B07BC7A}" = protocol=17 | dir=in | app=c:\program files\realvnc\vnc4\winvnc4.exe |
"{506EE4F2-8734-4737-8C68-5901A64D4A56}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{5181B3D8-F24E-4D35-8C83-3B3FD72018B9}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{555AE2D5-8494-4EDC-AD43-238DF7F4AD3F}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{59AC62BC-9D25-48C9-9687-7B10E1EDB8A9}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{5E0CE903-2194-40A3-AAC0-CD1C4CA4D5A0}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{6439DA1D-2339-4EA9-A152-53B9B45ED23B}" = protocol=17 | dir=in | app=c:\program files\lexmark 4900 series\frun.exe |
"{698D3DA7-1FE5-41B9-9236-F89B5FAB4D96}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{6D1A2081-3592-4CCD-AF9D-3689CDD36CF1}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |
"{6D4EBC58-F13F-4B8A-98FC-F52870AA34B7}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.2.9901-to-3.1.3.9947-engb-downloader.exe |
"{702C58D6-B578-45B9-AE98-7E7A5A3C734A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{719E5BE6-1100-476C-A3FE-1F4586DCB6E3}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7B5CC6D7-6F8F-4218-AC62-F9C6387956B5}" = protocol=17 | dir=in | app=c:\windows\system32\lxdrcoms.exe |
"{8408E820-06DE-4F7A-AAC3-AF3C9FC47612}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe |
"{84B28325-0AF7-486A-94EB-EAB67A45D17C}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{87CB44BD-B514-48FC-8FBA-E607BCE4004F}" = protocol=6 | dir=in | app=c:\program files\realvnc\vnc4\winvnc4.exe |
"{8ABD9409-0701-4946-993F-B9FCB2DCCCBE}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{8BBBFB31-80CC-422D-B05B-5B0CE811BA77}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxdrpswx.exe |
"{8D0EB68B-417B-4A20-8ED8-8F7DA60CA98D}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{8F2A2C94-0077-44F0-9CD2-B5EE00528355}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.0.9767-to-3.1.1.9806-engb-downloader.exe |
"{9036F1E3-5B65-47F1-989B-B34109F74CB4}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.1.9835-to-3.1.2.9901-engb-downloader.exe |
"{93C153C9-F691-465F-A3F5-4D7E5F2135A2}" = protocol=6 | dir=in | app=c:\users\jon\appdata\local\apps\2.0\cnc0rza5.03o\g6xd1vrl.xv6\curs..tion_eee711038731a406_0004.0000_1829574f2226d088\curseclient.exe |
"{974141C1-C20B-4553-9CEF-575D9F432CE5}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{A8118354-EE81-4DA5-B64E-A698A9E6C0BA}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{AF9748C2-CFFB-45BB-B8AC-2E35C63E08D4}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\blizzard downloader.exe |
"{B2EEC957-51E9-471E-A063-5C40402C0785}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B65F1F26-180F-4453-87DD-8BB082034CA3}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.3.9947-to-3.2.0.10192-engb-downloader.exe |
"{B6A42F54-39D6-44A0-BF3C-C158FED5A64B}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |
"{B9047392-B120-4827-9B3C-DAFC181BEAAF}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe |
"{BA141FC6-8C0A-4AE9-85E0-608A2F338D22}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\blizzard downloader.exe |
"{BD7A1531-2D89-490F-8A6D-2E39459AB65C}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{BD8C8762-4831-44F9-91D8-F37B50906B02}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.1.9806-to-3.1.1.9835-engb-downloader.exe |
"{C5C20025-FEFD-4180-B9F5-54FD99B59518}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{C9DC98B5-0A22-4E36-9D07-28F8440A33BF}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{CAC3F8E4-45A7-4748-B4DD-AA148C59F61F}" = protocol=17 | dir=in | app=c:\users\jon\appdata\local\apps\2.0\cnc0rza5.03o\g6xd1vrl.xv6\curs..tion_eee711038731a406_0004.0000_1829574f2226d088\curseclient.exe |
"{D0596E44-1E45-46F5-B2C0-FD777EBA31D0}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D0F7E503-8AFE-4669-AA15-CF0C8922AC94}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D33FBDFD-F9C3-40D1-A98C-0B4CDCCCF4A6}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe |
"{D57391FD-A944-47D1-9B6B-F4E2DF59994C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D740CEFE-55BB-4AAD-AD01-B6A300F0D1D1}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{D8A5BA44-D00B-42FF-996D-390D980FEDE0}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{D8BAB074-3EA6-499C-B530-757AB8FB9411}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{DE7B0FE8-2E24-447B-896A-5C0CA9D9E22E}" = protocol=6 | dir=in | app=c:\windows\system32\lxdrcoms.exe |
"{E7B12A31-0919-4E56-AE1E-4E79EDC1AA62}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{E9508DF7-1454-43FA-ABF4-7D7078AFB42E}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |
"{EC3BB697-B17B-4896-B16C-A78C0EAAA5BE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{EDC74C3E-CB26-47E7-836D-7A7FDF824A80}" = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{EEA08F1A-811D-4632-AE1B-AC7126CF68B4}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{F19E84E5-E8B7-4D04-A032-692DCAFFE82B}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{F3664E0C-5F90-4E7A-BBC8-F9FA8903C06C}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxdrpswx.exe |
"{F38ACBF0-7CA7-46C9-91C6-46BDED35FA3C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F3D3584F-8E71-425D-A386-1866BC4833CF}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.2.9901-to-3.1.3.9947-engb-downloader.exe |
"{F7083D13-A42C-4752-94DB-430369C97DE0}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{F887D00B-0079-4AE4-BDB8-7B4117C6FC0B}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{FD521AB3-B23D-4146-82E4-5A93E8DDD7CB}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{FED1CF8B-F690-402A-A864-1C89E6E1663E}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"TCP Query User{023B2267-18D3-486E-901C-A979B8C63716}C:\program files\mytv\mytv.exe" = protocol=6 | dir=in | app=c:\program files\mytv\mytv.exe |
"TCP Query User{112AE59B-120C-4CD3-B28E-FB13F4E95C3B}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=6 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe |
"TCP Query User{24913D08-33DA-4D43-A2E9-4A8056191AFA}C:\program files\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"TCP Query User{460E9D70-773C-4CA9-877B-58933025FFC0}C:\program files\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files\mirc\mirc.exe |
"TCP Query User{617E1333-C361-498F-A1F5-541DDB306DBE}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=6 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe |
"TCP Query User{7E6BEC2F-4BD9-41AF-AF32-0333191E6547}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"TCP Query User{854FE16D-2B28-4D0A-A583-664A52BD5AD9}C:\program files\belkin storage manager\storagemanager.exe" = protocol=6 | dir=in | app=c:\program files\belkin storage manager\storagemanager.exe |
"TCP Query User{9DEE812A-5F3B-48F5-A3FD-64090AA6D705}C:\program files\webteh\bsplayerpro\bsplayer.exe" = protocol=6 | dir=in | app=c:\program files\webteh\bsplayerpro\bsplayer.exe |
"TCP Query User{9F4DC2A6-1703-44A3-B272-E17014500588}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{B8415612-D492-4820-8E80-E207B7D2691A}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{C981EE8D-F9ED-4042-973B-8ECDF5B202F7}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"TCP Query User{DF782DAC-9DF1-4716-90A3-81A2C610CF5F}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{183178D5-9257-49E2-832B-88B7F286C43D}C:\program files\mytv\mytv.exe" = protocol=17 | dir=in | app=c:\program files\mytv\mytv.exe |
"UDP Query User{22D7273C-A6EF-4C1C-9FCC-3AC654927AE4}C:\program files\belkin storage manager\storagemanager.exe" = protocol=17 | dir=in | app=c:\program files\belkin storage manager\storagemanager.exe |
"UDP Query User{5329CBC1-006F-4D0C-9A01-D88650033303}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{6904F5E2-13D5-48FD-A375-E481E1910E3C}C:\program files\webteh\bsplayerpro\bsplayer.exe" = protocol=17 | dir=in | app=c:\program files\webteh\bsplayerpro\bsplayer.exe |
"UDP Query User{6E6FB479-074A-466F-8794-07B35DDE7CE6}C:\program files\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files\mirc\mirc.exe |
"UDP Query User{799600A5-B198-4363-8478-2E7EEF8F6CDF}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{7AD23115-4DFE-4787-AA17-75D98CB95307}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{7CE925A6-B49E-4CA8-9F74-2462D74A9ED3}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=17 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe |
"UDP Query User{9D803A43-42D9-441B-B9BE-96C304BDB043}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=17 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe |
"UDP Query User{A4046C1B-458B-4B59-BF8F-71F4589DCD82}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{D8B46083-5B30-41A4-B861-B9E234F58437}C:\program files\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"UDP Query User{DFFBA3B5-3DA8-4346-B1B8-59924400677D}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{0054A0F6-00C9-4498-B821-B5C9578F433E}" = HP Help and Support
"{005A00DD-F955-CAF8-8DB4-C15C3A1E715F}" = Catalyst Control Center Graphics Previews Vista
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{03D1988F-469F-4843-8E6E-E5FE9D17889D}" = HP Integrated Module with Bluetooth wireless technology 6.0.1.6200
"{0699C67B-F5B5-4CA3-A3A9-B976406FA4DA}" = NI Service Locator
"{09EA3E66-F60C-45EF-9C16-6CA2262E21C4}" = Roxio Creator 2009 Ultimate
"{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}" = LightScribe System Software 1.14.17.1
"{1017A80C-6F09-4548-A84D-EDD6AC9525F0}" = Lexmark Verktygsfält
"{10812DE7-2E57-4740-B226-6B3BE34AF9D7}" = Lexmark Tools for Office
"{150586B4-E85A-4B8B-4C60-CADA9121FA08}" = Catalyst Control Center Graphics Previews Common
"{15D5755D-3795-45FE-9ED6-BC0DAFA3B333}" = NI-RPC 3.4.0f1
"{1829DACB-46DE-4624-808B-7802AC528DDF}" = NI EULA Depot
"{187817E2-6407-461C-B59B-56CE73363D34}" = Catalyst Control Center - Branding
"{1A710265-096B-46CB-8849-53A209D9A8CF}" = NI Certificates Deployment Support
"{1D53B6F9-E66E-42D8-A221-4FF8AC134FD7}" = Roxio Activation Module
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{25049BA9-E395-283F-8B6A-F2D78BC96BB5}" = Skins
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron JMB38X Flash Media Controller
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}" = Java™ 6 Update 22
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{300FB2C5-1328-A7F1-DBB3-925452E7D763}" = Catalyst Control Center Graphics Light
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{30DAA715-5032-40F9-A0AE-95C9AEBB3E3F}" = HP QuickTouch 1.00 D2
"{3383136B-4F86-4F05-8612-DD4BB16A1EAE}" = Roxio Central
"{36A998F0-C15C-4AFD-BCAE-1C0577CCA29A}" = NI DataSocket 4.4.0
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module
"{4262645A-40CC-47C7-8934-903FB7E9DC09}" = NI-PAL 2.1.0f1
"{45FA54F6-8574-49D2-9E2D-0BDDE6237822}" = NI LabVIEW Run-Time Engine 8.2.1
"{47F3EDF5-C821-49E6-B9B3-D00BF0A9BAB8}" = DigitalPersona Personal 4.11
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"{4BFA6EEB-AAED-4334-8E98-A907DE4DD5CF}" = AMD Driver Support for HP 3D DriverGuard
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{53753510-7620-4D2B-9C0B-111F871615D9}" = LEGO MINDSTORMS NXT - English Language Pack
"{567E8236-C414-4888-8211-3D61608D57AE}" = Validity Sensors software
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{58CAA96F-E8EC-539E-6C62-3E5519BCFA52}" = ccc-utility
"{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack
"{5B4383F2-37EE-4E97-AD81-F5FF76F286DA}" = OutlookAddInNet3Setup
"{5DBDA3D6-7D16-419C-8434-219011CF652B}" = NI-VISA Runtime 4.2
"{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup
"{65F878A3-0032-6276-7909-3FE5B451C966}" = Catalyst Control Center Graphics Full New
"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module
"{671A5B67-1A00-424A-A902-49BC020FB3D1}" = NI VC2005MSMs x86
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6BFE5BAC-323E-41CC-9867-2F5D0287FCBD}" = myTV
"{6C1D47CC-682C-4673-8CA8-DEE659628599}" = LEGO MINDSTORMS NXT Migration Package
"{6DB7AD00-F781-11DF-9EEF-001279CD8240}" = Google Earth
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72B3CE56-A403-4FF8-9335-C2C2B39E62A4}" = aXbo up2date
"{73935D21-6136-4FF6-8069-33D767E61429}" = NI-DIM 1.7.0f0
"{74CB3747-1685-46C1-8F02-FCDA36ADDBA9}" = NI TDMS
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7919D8D9-69FB-4E94-B330-04C4AF251867}" = Roxio Creator 2009 Ultimate
"{7E3668CB-1228-416E-B721-C2FA3247B985}" = NI LabVIEW Real-Time FIFO for Runtime
"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module
"{87A83C6F-F53C-448A-B078-FF00E3EAEB29}" = Roxio Disaster Recovery
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A702909-3A7D-4ABD-846B-1869A49D850B}" = NI MDF Support
"{8C7D7ED8-2854-4ABA-9A89-CFB7857B9084}" = Vista Battery Saver
"{8C8D1F1E-DC31-44F2-97F5-0D84CE49BB56}" = NI Uninstaller
"{8FB53850-246A-3507-8ADE-0060093FFEA6}" = Visual Studio Tools for the Office system 3.0 Runtime
"{90120000-0015-041D-0000-0000000FF1CE}" = Microsoft Office Access MUI (Swedish) 2007
"{90120000-0015-041D-0000-0000000FF1CE}_ENTERPRISE_{1AEE207F-E4DC-4A6C-9ACD-D1218F08B442}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-041D-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Swedish) 2007
"{90120000-0016-041D-0000-0000000FF1CE}_ENTERPRISE_{1AEE207F-E4DC-4A6C-9ACD-D1218F08B442}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-041D-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Swedish) 2007
"{90120000-0018-041D-0000-0000000FF1CE}_ENTERPRISE_{1AEE207F-E4DC-4A6C-9ACD-D1218F08B442}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-041D-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Swedish) 2007
"{90120000-0019-041D-0000-0000000FF1CE}_ENTERPRISE_{1AEE207F-E4DC-4A6C-9ACD-D1218F08B442}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-041D-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Swedish) 2007
"{90120000-001A-041D-0000-0000000FF1CE}_ENTERPRISE_{1AEE207F-E4DC-4A6C-9ACD-D1218F08B442}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-041D-0000-0000000FF1CE}" = Microsoft Office Word MUI (Swedish) 2007
"{90120000-001B-041D-0000-0000000FF1CE}_ENTERPRISE_{1AEE207F-E4DC-4A6C-9ACD-D1218F08B442}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040B-0000-0000000FF1CE}" = Microsoft Office Proof (Finnish) 2007
"{90120000-001F-040B-0000-0000000FF1CE}_ENTERPRISE_{8C00DF3E-E8BD-4C6A-B86F-0135E11DAF1C}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041D-0000-0000000FF1CE}" = Microsoft Office Proof (Swedish) 2007
"{90120000-001F-041D-0000-0000000FF1CE}_ENTERPRISE_{43722AA8-ACEA-4F54-9B83-2467D376EF8A}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-041D-0000-0000000FF1CE}" = Microsoft Office Proofing (Swedish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-041D-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Swedish) 2007
"{90120000-0044-041D-0000-0000000FF1CE}_ENTERPRISE_{1AEE207F-E4DC-4A6C-9ACD-D1218F08B442}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-041D-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Swedish) 2007
"{90120000-006E-041D-0000-0000000FF1CE}_ENTERPRISE_{8C2A0B2D-382B-428C-9E8D-247D31B22201}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-041D-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Swedish) 2007
"{90120000-00A1-041D-0000-0000000FF1CE}_ENTERPRISE_{1AEE207F-E4DC-4A6C-9ACD-D1218F08B442}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-041D-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Swedish) 2007
"{90120000-00BA-041D-0000-0000000FF1CE}_ENTERPRISE_{1AEE207F-E4DC-4A6C-9ACD-D1218F08B442}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile Device Center
"{92228315-BA53-4061-A404-0F05A72E946B}" = NI Logos XT Support
"{95F1D58C-3A9C-4505-A554-A10322E4766B}" = NI-ORB 1.7.0f0
"{96BC4472-AB51-50BD-93D9-37B5CE88D3A2}" = Catalyst Control Center Core Implementation
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9CCC78EF-027E-40E0-9B61-39932C65E3FE}" = Acronis Disk Director Home
"{A2EC5B79-BB40-4B37-A702-8BAC5D1BE128}" = Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista
"{A3AB35FA-943E-4799-99DC-46EFD59E998F}" = AMD USB Audio Driver Filter
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A7D837CD-C485-B501-6033-993FC68335FC}" = CCC Help English
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA749D64-3741-4D5F-B804-B0BC05D179D1}" = Roxio CinePlayer
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.1
"{AF862EC3-CA8A-EC26-4F05-1FFA5241E520}" = ATI Catalyst Install Manager
"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime
"{AFD9E698-03C2-4E88-80A6-1496562D4304}" = Google SketchUp 7.1
"{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update
"{B05599F2-55E3-47D2-9047-AE171F35A90B}" = NI Logos 4.9
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B39B02E2-F711-BE47-E2D3-76F458F14CF6}" = Catalyst Control Center Graphics Full Existing
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{C0FE37FA-0886-4B66-B01B-76CF70FB77AB}" = Roxio CinePlayer Decoder Pack
"{C12D7D54-7DE8-4DF7-AB2D-8A5ECFB2F89B}" = Belkin Storage Manager
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
"{C54184D0-D281-4523-B357-0606209DB56C}" = myTV
"{C78EAC6F-7A73-452E-8134-DBB2165C5A68}" = QuickTime
"{CB263F8D-EF2D-4EB5-A368-A27056EE92D4}" = LEGO MINDSTORMS NXT Software v2.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D286752E-1AE7-3FA1-1306-E6DC0C4F13BA}" = ccc-core-static
"{D2C5E510-BE6D-42CC-9F61-E4F939078474}" = Lexmark
"{D62FD787-E963-43CA-9B84-555D08971CC1}" = Kies-OutlookAddIn
"{D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}" = Kies
"{DB2C5648-700D-4AEF-83E1-70C72F0C34FA}" = NI Math Kernel Libraries
"{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}" = AnswerWorks 5.0 English Runtime
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E7044E25-3038-4A76-9064-344AC038043E}" = Windows Mobile Device Center Driver Update
"{EC3B598C-1151-4191-B5B4-A9072ADE6259}_is1" = ZipGenius 6 (6.0.3.1150)
"{F1000000-0001-0000-0000-074957833700}" = ABBYY FineReader 10 Professional Edition
"{F3FEFB23-4626-44F8-BA67-CE67D04D0C54}" = LEGO MINDSTORMS NXT Driver
"{F530581E-12FE-43B4-A28D-E5257AAD63E6}" = O&O; Defrag Professional
"{F5E7EE36-10F8-40C0-83A7-AE3E0F8B4E31}" = ProtectSmart Hard Drive Protection
"{FE250486-0A4C-9689-FDCD-D8C82EDE989E}" = Catalyst Control Center InstallProxy
"3914-4662-2767-1873" = aXbo research 2.0.18
"7DE39862CC26DCE2446838AAF7CD5C163F835A57" = Windows Driver Package - ENE (enecir) HIDClass (09/04/2008 2.6.0.0)
"7-Zip" = 7-Zip 4.65
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast5" = avast! Internet Security
"AVI ReComp" = AVI ReComp 1.5.0
"Avisynth" = AviSynth 2.5
"BSPlayerp" = BS.Player PRO
"Bus Simulator_is1" = Bus Simulator
"CCleaner" = CCleaner
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Digital Editions" = Adobe Digital Editions
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free Studio_is1" = Free Studio version 4.8
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2
"iid" = Net iD 5.0
"ImgBurn" = ImgBurn
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"InstallShield_{D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}" = Kies
"IrfanView" = IrfanView (remove only)
"KeePassPasswordSafe2_is1" = KeePass Password Safe 2.12
"Lexmark 4900 Series" = Lexmark 4900 Series
"Machinarium" = Machinarium
"MagicDisc 2.7.105" = MagicDisc 2.7.105
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"mIRC" = mIRC
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"MPE" = MyPhoneExplorer
"MyFreeCodec" = MyFreeCodec
"NI Uninstaller" = National Instruments Software
"Notepad++" = Notepad++
"PlusCalc" = PlusCalc
"RealVNC_is1" = VNC Enterprise Edition E4.5.4
"ReNamer_is1" = ReNamer
"Revo Uninstaller" = Revo Uninstaller 1.90
"SLABCOMM&10C4&EA60;" = Silicon Laboratories CP210x USB to UART Bridge (Driver Removal)
"Streamripper" = Streamripper (Remove only)
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TCPMP" = TCPMP
"TPTEST5_is1" = TPTEST 5.0.1
"UltSounds" = Windows Sound Schemes
"UltSounds2" = Ultimate Extras sounds from Microsoft® Tinker™
"Uninstall_is1" = Uninstall 1.0.0.1
"Winamp" = Winamp
"Windows Mobile Device Handbook" = Windows Mobile Resources
"WinGimp-2.0_is1" = GIMP 2.6.7
"Visual Studio Tools for the Office system 3.0 Runtime" = Visual Studio Tools for the Office system 3.0 Runtime
"VLC media player" = VLC media player 1.1.0
"VNCMirror_is1" = VNC Mirror Driver 1.8.0
"VNCPrinter_is1" = VNC Printer Driver 1.6.0
"VobSub" = VobSub 2.23
"World of Warcraft" = World of Warcraft
"Xilisoft Video Converter Ultimate" = Xilisoft Video Converter Ultimate
"Xvid_is1" = Xvid 1.2.2

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"MyFreeCodec" = MyFreeCodec
"Sweet Home 3D" = Sweet Home 3D
"uTorrent" = µTorrent

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

Ok, ran the OTL-procedure, here 's the log:

OTL logfile created on: 4/12-10 21:09:57 - Run 2
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\jon\Desktop\f0lder
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18975)
Locale: 0000041d | Country: Sverige | Language: SVE | Date Format: d/M-yy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 68,00% Memory free
7,00 Gb Paging File | 7,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): c:\pagefile.sys 4603 4603 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298,09 Gb Total Space | 29,97 Gb Free Space | 10,05% Space Free | Partition Type: NTFS

Computer Name: ZOPIKLON | User Name: jon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\jon\Desktop\f0lder\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\System32\dgdersvc.exe (Devguru Co., Ltd.)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\afwServ.exe (AVAST Software)
PRC - C:\Windows\System32\FsUsbExService.Exe (Teruten)
PRC - C:\Program Files\Lexmark 4900 Series\lxdrmsdmon.exe ()
PRC - C:\Program Files\Lexmark 4900 Series\lxdrmon.exe ()
PRC - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe (ABBYY)
PRC - C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DigitalPersona, Inc.)
PRC - C:\Program Files\DigitalPersona\Bin\DpAgent.exe (DigitalPersona, Inc.)
PRC - C:\Windows\System32\lxdrcoms.exe ( )
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\oodag.exe (O&O; Software GmbH)
PRC - C:\Windows\System32\oodtray.exe (O&O; Software GmbH)
PRC - C:\Program Files\Net iD\iid.exe (SecMaker AB)
PRC - C:\Windows\System32\vfsFPService.exe (Validity Sensors, Inc.)
PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\stacsv.exe (IDT, Inc.)
PRC - C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\AEstSrv.exe (Andrea Electronics Corporation)
PRC - C:\Windows\System32\nisvcloc.exe (National Instruments Corp.)
PRC - C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation)
PRC - C:\Windows\System32\lktsrv.exe (National Instruments Corporation)
PRC - C:\Windows\System32\lkads.exe (National Instruments Corporation)
PRC - C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
PRC - C:\Windows\System32\lkcitdl.exe (National Instruments, Inc.)


========== Modules (SafeList) ==========

MOD - C:\Users\jon\Desktop\f0lder\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\DigitalPersona\Bin\DpOFeedb.dll (DigitalPersona, Inc.)
MOD - C:\Program Files\DigitalPersona\Bin\DpOSet.dll (DigitalPersona, Inc.)


========== Win32 Services (SafeList) ==========

SRV - (dgdersvc) – C:\Windows\System32\dgdersvc.exe (Devguru Co., Ltd.)
SRV - (avast! Web Scanner) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Mail Scanner) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Firewall) – C:\Program Files\Alwil Software\Avast5\afwServ.exe (AVAST Software)
SRV - (WinVNC4) – C:\Program Files\RealVNC\VNC4\WinVNC4.exe (RealVNC Ltd.)
SRV - (FsUsbExService) – C:\Windows\System32\FsUsbExService.Exe (Teruten)
SRV - (OS Selector) – C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe ()
SRV - (WPFFontCache_v0400) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ABBYY.Licensing.FineReader.Professional.10.0) – C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe (ABBYY)
SRV - (DpHost) – C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DigitalPersona, Inc.)
SRV - (lxdrCATSCustConnectService) – C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxdrserv.exe ()
SRV - (lxdr_device) – C:\Windows\System32\lxdrcoms.exe ( )
SRV - (FontCache) – C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (O&O; Defrag) – C:\Windows\System32\oodag.exe (O&O; Software GmbH)
SRV - (RoxMediaDB11) – C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxMediaDB11.exe (Sonic Solutions)
SRV - (vfsFPService) – C:\Windows\System32\vfsFPService.exe (Validity Sensors, Inc.)
SRV - (STacSV) – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\stacsv.exe (IDT, Inc.)
SRV - (Roxio Upnp Server 11) – C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUpnpService11.exe (Sonic Solutions)
SRV - (Roxio UPnP Renderer 11) – C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUPnPRenderer11.exe (Sonic Solutions)
SRV - (RoxLiveShare11) – C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxLiveShare11.exe (Sonic Solutions)
SRV - (RoxWatch11) – C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxWatch11.exe (Sonic Solutions)
SRV - (9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269) – C:\Program Files\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe ()
SRV - (AESTFilters) – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\AEstSrv.exe (Andrea Electronics Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (niSvcLoc) – C:\Windows\System32\nisvcloc.exe (National Instruments Corp.)
SRV - (NIDomainService) – C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation)
SRV - (lkTimeSync) – C:\Windows\System32\lktsrv.exe (National Instruments Corporation)
SRV - (lkClassAds) – C:\Windows\System32\lkads.exe (National Instruments Corporation)
SRV - (WcesComm) – C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) – C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (LkCitadelServer) – C:\Windows\System32\lkcitdl.exe (National Instruments, Inc.)
SRV - (OpcEnum) – C:\Windows\System32\Opcenum.exe (OPC Foundation)


========== Driver Services (SafeList) ==========

DRV - (pccsmcfd) – C:\Windows\System32\DRIVERS\pccsmcfd.sys File not found
DRV - (NwlnkFwd) – C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) – C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) – C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (dgderdrv) – C:\Windows\System32\drivers\dgderdrv.sys (Devguru Co., Ltd)
DRV - (FsUsbExDisk) – C:\Windows\System32\FsUsbExDisk.Sys ()
DRV - (aswFW) – C:\Windows\System32\drivers\aswFW.sys (AVAST Software)
DRV - (aswSnx) – C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswNdis2) – C:\Windows\System32\drivers\aswNdis2.sys (AVAST Software)
DRV - (aswTdi) – C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswSP) – C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRdr) – C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMonFlt) – C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) – C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (snapman) – C:\Windows\system32\DRIVERS\snapman.sys (Acronis)
DRV - (ssadmdm) – C:\Windows\System32\drivers\ssadmdm.sys (MCCI Corporation)
DRV - (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) – C:\Windows\System32\drivers\ssadbus.sys (MCCI Corporation)
DRV - (androidusb) – C:\Windows\System32\drivers\ssadadb.sys (Google Inc)
DRV - (ssadmdfl) SAMSUNG Android USB Modem (Filter) – C:\Windows\System32\drivers\ssadmdfl.sys (MCCI Corporation)
DRV - (aswNdis) – C:\Windows\system32\DRIVERS\aswNdis.sys (ALWIL Software)
DRV - (hpdskflt) – C:\Windows\system32\DRIVERS\hpdskflt.sys (Hewlett-Packard Company)
DRV - (Accelerometer) – C:\Windows\System32\drivers\Accelerometer.sys (Hewlett-Packard Company)
DRV - (vncmirror) – C:\Windows\System32\drivers\vncmirror.sys (RealVNC Ltd.)
DRV - (SynTP) – C:\Windows\System32\drivers\SynTP.sys (Synaptics Incorporated)
DRV - (sscdmdm) – C:\Windows\System32\drivers\sscdmdm.sys (MCCI Corporation)
DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) – C:\Windows\System32\drivers\sscdbus.sys (MCCI Corporation)
DRV - (sscdmdfl) – C:\Windows\System32\drivers\sscdmdfl.sys (MCCI Corporation)
DRV - (RTL8169) – C:\Windows\System32\drivers\Rtlh86.sys (Realtek )
DRV - (GemCCID) – C:\Windows\System32\drivers\GemCCID.sys (Gemalto)
DRV - (WINUSB) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (USBCCID) – C:\Windows\System32\drivers\usbccid.sys (Microsoft Corporation)
DRV - (LMouFilt) – C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (Tdsshbecr) – C:\Windows\System32\drivers\shbecr.sys (Todos Data System AB)
DRV - (vfs101x) – C:\Windows\System32\drivers\vfs101x.sys (Validity Sensors, Inc.)
DRV - (STHDA) – C:\Windows\System32\drivers\stwrt.sys (IDT, Inc.)
DRV - (enecir) – C:\Windows\System32\drivers\enecir.sys (ENE TECHNOLOGY INC.)
DRV - (RxFilter) – C:\Windows\System32\drivers\RxFilter.sys (Sonic Solutions)
DRV - (JMCR) – C:\Windows\System32\drivers\jmcr.sys (JMicron Technology Corporation)
DRV - (SaibVd32) – C:\Windows\System32\drivers\SaibVd32.sys (Sonic Solutions)
DRV - (SahdIa32) – C:\Windows\System32\Drivers\SahdIa32.sys (Sonic Solutions)
DRV - (SaibIa32) – C:\Windows\System32\Drivers\SaibIa32.sys (Sonic Solutions)
DRV - (mcdbus) – C:\Windows\System32\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (silabser) – C:\Windows\System32\drivers\silabser.sys (Silicon Laboratories)
DRV - (silabenm) – C:\Windows\System32\drivers\silabenm.sys (Silicon Laboratories, Inc.)
DRV - (usbfilter) – C:\Windows\System32\drivers\usbfilter.sys (Advanced Micro Devices Inc.)
DRV - (AtiPcie) ATI PCI Express (3GIO) – C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV - (athr) – C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (ahcix86s) – C:\Windows\system32\DRIVERS\ahcix86s.sys (AMD Technologies Inc.)
DRV - (btwavdt) – C:\Windows\System32\drivers\btwavdt.sys (Broadcom Corporation.)
DRV - (btwaudio) – C:\Windows\System32\drivers\btwaudio.sys (Broadcom Corporation.)
DRV - (btwrchid) – C:\Windows\System32\drivers\btwrchid.sys (Broadcom Corporation.)
DRV - (MegaSR) – C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)
DRV - (adpu320) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (megasas) – C:\Windows\system32\drivers\megasas.sys (LSI Corporation)
DRV - (adpu160m) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (SiSRaid4) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (HpCISSs) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (ql2300) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adpahci) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (E1G60) Intel® – C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (LSI_SAS) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (vsmraid) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (arcsas) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (arc) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iaStorV) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (ulsata2) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (LSI_SCSI) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (LSI_FC) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (elxstor) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adp94xx) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (nvraid) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvstor) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (uliahci) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (viaide) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (Amddfltr) – C:\Windows\system32\DRIVERS\Amddfltr.sys (Advanced Micro Devices)
DRV - (NiViPxiK) – C:\Windows\System32\drivers\NiViPxiKl.sys (National Instruments Corporation)
DRV - (NiViPciK) – C:\Windows\System32\drivers\NiViPciKl.sys (National Instruments Corporation)
DRV - (NiViFWK) – C:\Windows\System32\drivers\NiViFWKl.sys (National Instruments Corporation)
DRV - (nipalusbedl) – C:\Windows\System32\drivers\nipalusbedl.sys (National Instruments Corporation)
DRV - (NIPALK) – C:\Windows\System32\drivers\nipalk.sys (National Instruments Corporation)
DRV - (nipalfwedl) – C:\Windows\System32\drivers\nipalfwedl.sys (National Instruments Corporation)
DRV - (nidimk) – C:\Windows\System32\drivers\nidimkl.sys (National Instruments Corporation)
DRV - (niorbk) – C:\Windows\System32\drivers\niorbkl.sys (National Instruments Corporation)
DRV - (nipbcfk) – C:\Windows\System32\drivers\nipbcfk.sys (National Instruments Corporation)
DRV - (cvintdrv) – C:\Windows\System32\drivers\cvintdrv.sys ()
DRV - (TodosAgmII) – C:\Windows\System32\drivers\AgmIIusb.sys (Todos Data System AB)
DRV - (ql40xx) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (nfrd960) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (aic78xx) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (iteraid) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (Symc8xx) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_u3) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) – C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://flvtubesearch.co/?tmp=toolbar_FLVTu…p;subid=88_NEWR
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = http://flvtubesearch.co/?tmp=toolbar_FLVTu…p;subid=88_NEWR
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://flvtubesearch.co/?tmp=toolbar_FLVTu…p;subid=88_NEWR

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = http://flvtubesearch.co/?tmp=toolbar_FLVTu…p;subid=88_NEWR
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://flvtubesearch.co/?tmp=toolbar_FlvTu…703d0e927df6d5d
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Yahoo-FlvTube"
FF - prefs.js..browser.search.defaultenginename: "Yahoo-FlvTube"
FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie;=UTF-8&oe;=UTF-8&q;="
FF - prefs.js..browser.search.order.1: "Yahoo-FlvTube"
FF - prefs.js..browser.search.selectedEngine: "Wikipedia (en)"
FF - prefs.js..browser.search.selectedEngineURL: "http://flvtubesearch.co/?tmp=toolbar_FLVTube_results&prt;=flvtubetb01ff&clid;=bea6540b9e824a93a703d0e927df6d5d&subid;=5735_generic&Keywords;={searchTerms}"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.se"
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.10
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..keyword.URL: "http://flvtubesearch.co/?prt=02ff&clid;=&subid;=&Keywords;="

FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\DigitalPersona\Bin\FirefoxExt\ [2010/08/21 03:13:09 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/28 18:17:58 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/11/19 17:06:02 | 000,000,000 | —D | M]

[2008/12/24 18:42:36 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Mozilla\Extensions
[2010/12/04 08:30:13 | 000,000,000 | —D | M] – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions
[2010/04/29 15:48:08 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/09/09 21:09:15 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010/07/25 17:07:35 | 000,000,000 | —D | M] (No name found) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010/10/09 08:57:19 | 000,000,000 | —D | M] (Download Statusbar) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2010/05/29 16:15:55 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/10/18 01:03:45 | 000,001,635 | —- | M] () – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\searchplugins\firefox-add-ons.xml
[2010/10/18 01:04:46 | 000,001,504 | —- | M] () – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\searchplugins\imdb.xml
[2010/10/18 01:07:21 | 000,001,115 | —- | M] () – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\searchplugins\rapidshare-filefinder.xml
[2010/10/18 01:03:35 | 000,004,140 | —- | M] () – C:\Users\jon\AppData\Roaming\Mozilla\Firefox\Profiles\egel6t09.default\searchplugins\youtube.xml
[2010/12/04 08:30:13 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2010/06/19 18:00:40 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/04/17 23:46:54 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/06 12:21:06 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/11/13 11:46:07 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010/09/15 04:50:38 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009/01/09 09:57:10 | 000,111,856 | —- | M] (SecMaker AB) – C:\Program Files\Mozilla Firefox\plugins\npiidplg.dll
[2007/02/08 10:48:16 | 000,028,448 | —- | M] (National Instruments) – C:\Program Files\Mozilla Firefox\plugins\NPLV82Win32.dll
[2010/10/22 18:50:25 | 000,004,980 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\flvtube.xml

O1 HOSTS File: ([2006/09/18 22:41:30 | 000,000,761 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Lexmark Verktygsfält) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O2 - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
O3 - HKLM\..\Toolbar: (Lexmark Verktygsfält) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Verktygsfält) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Lexmark Verktygsfält) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\DpAgent.exe (DigitalPersona, Inc.)
O4 - HKLM..\Run: [KeePass 2 PreLoad] C:\Program Files\KeePass Password Safe 2\KeePass.exe (Dominik Reichl)
O4 - HKLM..\Run: [lxdramon] C:\Program Files\Lexmark 4900 Series\lxdramon.exe ()
O4 - HKLM..\Run: [lxdrmon.exe] C:\Program Files\Lexmark 4900 Series\lxdrmon.exe ()
O4 - HKLM..\Run: [Net iD] C:\Program Files\Net iD\iid.exe (SecMaker AB)
O4 - HKLM..\Run: [OODefragTray] C:\Windows\System32\oodtray.exe (O&O; Software GmbH)
O4 - HKLM..\Run: [StartCCC] c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKCU..\Run: [ISUSPM] C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8 - Extra context menu item: Free YouTube Download - C:\Users\jon\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\jon\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8 - Extra context menu item: Send image to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {E008A543-CEFB-4559-912F-C27C2B89F13B} http://mia.vgregion.se/dwa7W.cab (Domino Web Access 7 Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (OODBS) - C:\Windows\System32\OODBS.exe (O&O; Software GmbH)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/12/04 21:04:22 | 000,000,000 | —D | C] – C:\_OTL
[2010/12/04 11:22:37 | 000,000,000 | —D | C] – C:\Users\jon\AppData\Roaming\Malwarebytes
[2010/12/04 11:22:32 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/12/04 11:22:31 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2010/12/04 11:22:28 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2010/12/04 11:22:28 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2010/12/04 08:43:16 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2010/11/15 17:21:17 | 000,000,000 | —D | C] – C:\Windows\Minidump
[2010/11/13 13:42:27 | 000,000,000 | —D | C] – C:\Program Files\7-Zip
[2010/11/11 20:53:31 | 000,000,000 | —D | C] – C:\Windows\temp
[2009/12/27 21:51:57 | 000,651,264 | —- | C] ( ) – C:\Windows\System32\lxdrpmui.dll
[2009/12/27 21:51:56 | 000,376,832 | —- | C] ( ) – C:\Windows\System32\lxdrcomm.dll
[2009/12/03 10:48:00 | 000,446,464 | —- | C] ( ) – C:\Windows\System32\LXDRhcp.dll
[2009/12/03 10:48:00 | 000,364,544 | —- | C] ( ) – C:\Windows\System32\lxdrinpa.dll
[2009/12/03 10:47:59 | 001,069,056 | —- | C] ( ) – C:\Windows\System32\lxdrserv.dll
[2009/12/03 10:47:59 | 000,860,160 | —- | C] ( ) – C:\Windows\System32\lxdrusb1.dll
[2009/12/03 10:47:59 | 000,339,968 | —- | C] ( ) – C:\Windows\System32\lxdriesc.dll
[2009/12/03 10:47:58 | 000,577,536 | —- | C] ( ) – C:\Windows\System32\lxdrlmpm.dll
[2009/12/03 10:47:57 | 000,684,032 | —- | C] ( ) – C:\Windows\System32\lxdrhbn3.dll
[2009/12/03 10:47:56 | 000,761,856 | —- | C] ( ) – C:\Windows\System32\lxdrcomc.dll
[2009/10/15 21:32:46 | 000,409,600 | —- | C] ( ) – C:\Windows\System32\lxdrcoin.dll

========== Files - Modified Within 30 Days ==========

[2010/12/04 21:07:37 | 000,000,934 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/12/04 21:07:29 | 000,003,760 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/12/04 21:07:29 | 000,003,760 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/12/04 21:07:16 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/12/04 21:07:12 | 3218,956,288 | -HS- | M] () – C:\hiberfil.sys
[2010/12/04 21:07:10 | 000,758,538 | —- | M] () – C:\Windows\System32\oodbs.lor
[2010/12/04 21:04:56 | 000,001,159 | —- | M] () – C:\Windows\bthservsdp.dat
[2010/12/04 20:34:00 | 000,000,938 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/12/04 20:22:36 | 000,000,414 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{65D0B269-1D85-454E-937B-A90B786FB2B9}.job
[2010/12/04 17:42:33 | 000,000,749 | —- | M] () – C:\Users\Public\Desktop\World of Warcraft.lnk
[2010/12/04 11:39:10 | 000,598,900 | —- | M] () – C:\Windows\System32\perfh009.dat
[2010/12/04 11:39:10 | 000,104,914 | —- | M] () – C:\Windows\System32\perfc009.dat
[2010/12/04 11:22:32 | 000,000,906 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/12/04 09:36:56 | 000,040,910 | —- | M] () – C:\Users\jon\Documents\nya_nycklar-2.kdbx
[2010/12/03 10:36:41 | 000,134,303 | —- | M] () – C:\Users\jon\Desktop\tidtabell.pdf
[2010/12/01 20:36:01 | 000,002,073 | —- | M] () – C:\Users\Public\Desktop\Google Earth.lnk
[2010/11/30 18:36:48 | 000,030,188 | —- | M] () – C:\Users\jon\AppData\Roaming\mainhst.zgh
[2010/11/29 17:42:18 | 000,038,224 | —- | M] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/11/29 17:42:06 | 000,020,952 | —- | M] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2010/11/29 11:30:03 | 000,159,744 | —- | M] () – C:\Users\jon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/26 09:37:45 | 153,673,459 | —- | M] () – C:\Windows\MEMORY.DMP
[2010/11/16 12:37:37 | 000,001,356 | —- | M] () – C:\Users\jon\AppData\Local\d3d9caps.dat
[2010/11/13 13:46:31 | 000,001,024 | —- | M] () – C:\.rnd

========== Files Created - No Company Name ==========

[2010/12/04 11:22:32 | 000,000,906 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/12/03 10:36:39 | 000,134,303 | —- | C] () – C:\Users\jon\Desktop\tidtabell.pdf
[2010/12/01 20:36:01 | 000,002,073 | —- | C] () – C:\Users\Public\Desktop\Google Earth.lnk
[2010/11/26 09:37:45 | 153,673,459 | —- | C] () – C:\Windows\MEMORY.DMP
[2010/11/13 13:46:30 | 000,001,024 | —- | C] () – C:\.rnd
[2010/09/15 09:41:54 | 000,974,848 | —- | C] () – C:\Windows\System32\cis-2.4.dll
[2010/09/15 09:41:54 | 000,081,920 | —- | C] () – C:\Windows\System32\issacapi_bs-2.3.dll
[2010/09/15 09:41:54 | 000,065,536 | —- | C] () – C:\Windows\System32\issacapi_pe-2.3.dll
[2010/09/15 09:41:54 | 000,057,344 | —- | C] () – C:\Windows\System32\issacapi_se-2.3.dll
[2010/08/27 23:18:36 | 000,026,624 | —- | C] () – C:\Windows\System32\VNCpm.dll
[2010/08/21 03:03:42 | 000,014,574 | —- | C] () – C:\Users\jon\AppData\Roaming\UserTile.png
[2010/07/31 14:28:42 | 000,110,592 | —- | C] () – C:\Windows\System32\FsUsbExDevice.Dll
[2010/07/31 14:28:42 | 000,036,640 | —- | C] () – C:\Windows\System32\FsUsbExDisk.Sys
[2009/12/29 19:21:34 | 000,006,236 | —- | C] () – C:\ProgramData\lxdrJSW.log
[2009/12/27 21:51:54 | 000,208,896 | —- | C] () – C:\Windows\System32\lxdrgrd.dll
[2009/12/03 11:07:29 | 000,000,431 | —- | C] () – C:\ProgramData\lxdrDiagnostics.log
[2009/12/03 10:51:39 | 000,040,960 | —- | C] () – C:\Windows\System32\lxdrvs.dll
[2009/12/03 10:50:59 | 000,081,920 | —- | C] () – C:\Windows\System32\lxdrcaps.dll
[2009/12/03 10:50:59 | 000,069,632 | —- | C] () – C:\Windows\System32\lxdrcnv4.dll
[2009/12/03 10:50:58 | 001,036,288 | —- | C] () – C:\Windows\System32\lxdrdrs.dll
[2009/12/03 10:49:26 | 000,000,044 | —- | C] () – C:\Windows\System32\lxdrrwrd.ini
[2009/12/03 10:48:00 | 000,389,120 | —- | C] () – C:\Windows\System32\LXDRinst.dll
[2009/12/03 10:43:17 | 000,000,000 | —- | C] () – C:\ProgramData\UpdaterLog.txt
[2009/11/01 13:33:51 | 000,000,031 | —- | C] () – C:\Windows\QUICKEN.INI
[2009/10/07 18:21:43 | 000,002,108 | —- | C] () – C:\Users\jon\AppData\Local\rx_audio.Cache
[2009/08/03 14:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2009/07/23 17:44:11 | 000,000,000 | —- | C] () – C:\Users\jon\AppData\Local\rx_image32.Cache
[2009/06/07 15:24:04 | 000,180,224 | —- | C] () – C:\Windows\System32\xvidvfw.dll
[2009/06/07 15:16:12 | 000,819,200 | —- | C] () – C:\Windows\System32\xvidcore.dll
[2009/05/28 19:36:47 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/03/05 05:54:58 | 000,073,728 | —- | C] () – C:\Windows\System32\RtNicProp32.dll
[2009/01/28 19:50:44 | 000,153,088 | —- | C] () – C:\Windows\System32\unrar.dll
[2009/01/08 18:42:35 | 000,030,188 | —- | C] () – C:\Users\jon\AppData\Roaming\mainhst.zgh
[2009/01/03 14:14:57 | 000,000,171 | —- | C] () – C:\Users\jon\AppData\Local\RAExpertHistory.xml
[2008/12/24 17:11:19 | 000,159,744 | —- | C] () – C:\Users\jon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/12/24 15:53:09 | 000,001,356 | —- | C] () – C:\Users\jon\AppData\Local\d3d9caps.dat
[2008/12/10 00:05:52 | 000,159,744 | —- | C] () – C:\Windows\System32\atitmmxx.dll
[2008/01/21 03:23:41 | 000,081,158 | —- | C] () – C:\Windows\System32\manage-bde.ini.en
[2007/11/14 16:17:34 | 000,204,800 | —- | C] () – C:\Windows\System32\CogentBioSDK.dll
[2007/07/19 09:25:34 | 000,000,244 | —- | C] () – C:\Windows\System32\nirpc.ini
[2007/07/18 21:12:26 | 000,003,520 | —- | C] () – C:\Windows\System32\nipalpg.dll
[2007/02/21 10:00:00 | 000,004,096 | —- | C] () – C:\Windows\System32\drivers\cvintdrv.sys
[2006/11/02 13:34:20 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 08:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/03/09 15:58:00 | 001,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll
[2001/11/14 12:56:00 | 001,802,240 | —- | C] () – C:\Windows\System32\lcppn21.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:B3D74A13

< End of report >