Takes hours to do anything - even type!

Hi LDTate,

Here we go and I hope your Swedish is good - lol - extras.txt:

OTL Extras logfile created on: 2011-01-03 00:38:37 - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Annelie\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18999)
Locale: 0000041D | Country: Sverige | Language: SVE | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 45,00% Memory free
6,00 Gb Paging File | 4,00 Gb Available in Paging File | 71,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 225,53 Gb Total Space | 93,69 Gb Free Space | 41,54% Space Free | Partition Type: NTFS
Drive D: | 7,36 Gb Total Space | 1,20 Gb Free Space | 16,31% Space Free | Partition Type: NTFS
Drive E: | 232,88 Gb Total Space | 226,65 Gb Free Space | 97,32% Space Free | Partition Type: NTFS

Computer Name: KONTOR | User Name: Annelie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
https [open] – "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Porta.MakeAlbum] – "C:\Program Files\Porta\Porta.exe" "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-20667866-41827632-2920184442-1000]
"EnableNotificationsRef" = 3
"EnableNotifications" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04FD5580-24BD-4AC6-8CAA-CD3CCFC2ECE9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{1D9AC748-A62C-47F5-8FDF-F6B6C46894D0}" = lport=2869 | protocol=6 | dir=in | app=system |
"{23FB837D-6534-44D2-B85E-39BD32E47557}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2D95CFBD-A824-47F0-9754-0A0E97F264F8}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=c:\windows\system32\svchost.exe |
"{401A945A-567A-4AF3-B0A2-A8DD79FE729D}" = lport=2869 | protocol=6 | dir=in | app=system |
"{442CA1DB-B3E4-4662-AE77-6CB8AA5081C4}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=c:\windows\system32\svchost.exe |
"{4A8D8E68-40CF-4693-9061-48F08545F0A8}" = rport=1723 | protocol=6 | dir=out | app=system |
"{569F97D7-29E3-466C-8EBA-4044059CBA57}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5C1DF4E8-6B4C-4CD1-8D7F-F723788A09AE}" = rport=10243 | protocol=6 | dir=out | app=system |
"{732FB33A-2533-4DA1-8DAC-86B400CCE8E4}" = lport=10243 | protocol=6 | dir=in | app=system |
"{75DC3642-BD98-464D-95D3-07CC7A40088D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7E481082-CDB1-40DE-BF1C-33B12A73F838}" = lport=1701 | protocol=17 | dir=in | app=system |
"{A0C7B6E4-2423-449D-B778-68E63A9A1833}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=c:\windows\system32\svchost.exe |
"{A16C67B7-91A7-460C-8191-3EA76C44E2E2}" = rport=1701 | protocol=17 | dir=out | app=system |
"{A38E4E72-D4FE-46E5-A9A3-32EDCC14336A}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=c:\windows\system32\svchost.exe |
"{A6385AF3-FB3C-4199-B964-408A91F410A3}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{ACCE0823-295F-424D-AE89-20817F579C5D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{B56E4227-EF44-4C58-B826-C3350268FC30}" = lport=1723 | protocol=6 | dir=in | app=system |
"{BEDCBFE3-487C-4ED3-80FB-4399AE74EBE6}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{C733383E-2927-4762-9E97-0B30F4C0EEE6}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{CD2A7750-AB96-460F-876E-B16235AB6412}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{D7F60FD2-8238-4392-8590-EC65F936A32F}" = lport=2869 | protocol=6 | dir=in | app=system |
"{DF9FCE3B-0C3B-4D39-9B0D-C6B0000171BE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E88AD5FA-69D1-4B3F-A39E-8D1C9DFBE1F4}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=c:\windows\system32\svchost.exe |
"{EB743AAC-F4F9-44AE-907A-461DD583EDB5}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{EFAD8B33-FEA5-4805-BA5A-FE07D56560F9}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{FA4D211D-2EB7-40CD-9B49-D3DC058E268F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=c:\windows\system32\svchost.exe |
"{FD74BC27-93EA-4441-ADC0-ED92E26FC450}" = lport=3 | protocol=6 | dir=in | name=virtuell skrivarport för laserjet |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{033430EC-CECB-44A0-96A2-9E0CBA4CE352}" = protocol=17 | dir=in | app=c:\program files\enigma software group\spyhunter\spyhunter3.exe |
"{071BF2C6-EB04-4976-ABA3-B4D7EF633D3C}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpsapp.exe |
"{0B9B6437-8942-4967-99CD-7C982C996B1E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{183D6FB4-61EF-4E68-9E55-EBDC1A7FE475}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{187B57AE-B314-47BC-8D75-4C33F40A28A4}" = protocol=17 | dir=in | app=c:\users\annelie\desktop\sweetimsetup.exe |
"{1E65E4DB-8157-40FA-885F-ACE16C146F4B}" = protocol=17 | dir=in | app=c:\program files\dap\dap.exe |
"{257BEE6F-7C1F-4983-9F27-462650F22F2B}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"{2587C7CD-408D-44A6-9B99-A8805E07F5C4}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 11\programs\rm.exe |
"{266DBB43-D8E7-4DAA-9DF6-E33A4AF4132E}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe |
"{2F04CA95-B5E0-4A93-9FB9-020C266BD68D}" = protocol=17 | dir=in | app=c:\program files\incredimail\bin\impcnt.exe |
"{30822FFD-4DFD-4593-8AAA-9DBE895A5F42}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{332E8E72-C990-4A68-B649-D9E01123B610}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 11\programs\studio.exe |
"{358D7F83-9F7A-442E-8FDB-F070811CF21F}" = protocol=6 | dir=in | app=c:\users\annelie\desktop\sweetimsetup.exe |
"{40789936-09B9-41B2-AB4A-1FCB24F93DC5}" = protocol=17 | dir=in | app=c:\program files\logitech\vid hd\vid.exe |
"{48AFFD82-1B46-4C86-B917-90EB363043F0}" = protocol=6 | dir=in | app=c:\users\annelie\documents\incredimail transferred data\kopiaim\incredimail\bin\incmail.exe |
"{4AD32DE8-5DC7-4298-8C3F-C1C25502C310}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{4C910AA9-C900-4905-B6E1-944FCC30AF84}" = protocol=6 | dir=out | app=system |
"{4F5E437C-AC0E-457D-96CF-A47059840DF2}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 11\programs\umi.exe |
"{5338830E-5FEA-450C-9EC4-6256E052579E}" = protocol=6 | dir=in | app=c:\program files\incredimail\bin\impcnt.exe |
"{595B2A70-2991-4FC8-8308-14EE0EC5BB9F}" = protocol=6 | dir=in | app=c:\program files\dap\dap.exe |
"{5AFD3E6D-6707-4937-B37E-90EE62FC63F6}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"{5F78588D-14EE-433C-8F8E-A2217A84F501}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"{61EEF040-FE69-46EA-9D74-14E9A83BFB11}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 11\programs\studio.exe |
"{641CC9AB-5F20-4BAE-87AD-7D58A12541D8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6581DBA7-B85B-4B3C-B6C0-D4FD516DF76F}" = protocol=6 | dir=in | app=c:\program files\logitech\vid hd\vid.exe |
"{65D5B45B-0029-4BC8-BE16-2ED08DCFDE6B}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 11\programs\rm.exe |
"{6D16D171-B3E6-4836-A2DB-975EB0C8A896}" = protocol=17 | dir=in | app=c:\program files\magentic\bin\magentic.exe |
"{6F64C04E-F4AD-4B6F-BD16-BE3ADEB1684B}" = protocol=6 | dir=out | app=c:\windows\system32\wudfhost.exe |
"{6F908D50-93A7-4CA5-AAF7-28BDD0DFF17E}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqsudi.exe |
"{71120939-9B68-4B4A-8F09-C246665DBF89}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpse.exe |
"{774A870D-EE11-46EC-A17E-735575ECB84A}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 11\programs\pmsregisterfile.exe |
"{7AD7369F-4F4D-41C1-B7C5-4631EBCCB49B}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{80FA2A32-DBFD-4507-AF7D-40BC63DB19DE}" = protocol=17 | dir=in | app=c:\program files\smileypad\smileypad.exe |
"{84D47C88-604C-4F63-A56D-259D56376F6A}" = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{84F7F895-E0E0-4386-8C46-72D1DC867612}" = protocol=17 | dir=in | app=c:\program files\dap\dap.exe |
"{87D07B89-A91B-459A-BFEE-35A077898431}" = protocol=6 | dir=in | app=d:\program files\spotify\spotify.exe |
"{8B8FE781-51F6-4E32-B20B-4DE40991FB86}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{8EC953DC-1B7C-4A67-B829-DD6AE7C4A834}" = protocol=6 | dir=in | app=c:\users\annelie\appdata\local\microsoft\windows\temporary internet files\content.ie5\8g7u0wap\incredimail_install[1].exe |
"{8F5A1EBE-D0A9-44FF-BA40-900FC519112C}" = protocol=17 | dir=in | app=d:\program files\spotify\spotify.exe |
"{903C024C-8443-49BD-B595-A02A722593EC}" = protocol=17 | dir=in | app=c:\program files\magentic\bin\magentic.exe |
"{9D741745-C1EB-4E0F-9350-248F9B047523}" = protocol=6 | dir=in | app=c:\program files\skype\phone\skype.exe |
"{A1FFD58F-241C-4D20-BD74-DAB1AC09FD3C}" = dir=in | app=c:\program files\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{A7E69356-DA9B-4E2B-B6B2-39F8AD4E8DAA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B207B25C-8A8F-4F54-9113-F46419DB7BAE}" = protocol=6 | dir=in | app=c:\program files\dap\dap.exe |
"{B276E15E-40DC-4A6D-8391-53449E2098F9}" = protocol=6 | dir=in | app=c:\program files\enigma software group\spyhunter\spyhunter3.exe |
"{B886ADA3-7A33-4548-9579-025A55B7D916}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B8A40DEB-A3A7-48FC-A456-53D8D95CA811}" = protocol=6 | dir=in | app=c:\program files\magentic\bin\magentic.exe |
"{B9B128AE-71BB-4DF5-B9D1-9E861B15244A}" = protocol=6 | dir=in | app=c:\users\annelie\appdata\roaming\dropbox\bin\dropbox.exe |
"{BD53B193-C840-43D9-9D45-B93D26E72CFE}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe |
"{C086B4BE-9AA4-4972-A5F6-193294B39DD6}" = protocol=17 | dir=in | app=c:\program files\canon\canon ij network tool\cnmnput.exe |
"{C1B611BA-32A6-4C19-9AD7-23148FA916E3}" = protocol=17 | dir=in | app=c:\users\annelie\appdata\local\microsoft\windows\temporary internet files\content.ie5\8g7u0wap\incredimail_install[1].exe |
"{CB5E0704-8E9F-4F0B-B0E7-D0F4AE4CCC12}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D0475081-2522-41A7-AFA1-92CDDA890C78}" = protocol=17 | dir=in | app=c:\program files\skype\phone\skype.exe |
"{D3570280-A22F-4DFE-BF34-005FDE173859}" = protocol=6 | dir=out | app=system |
"{D38CEFE2-FD0F-4ACF-A6CF-FED2CA75CE43}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D53122CC-47AD-4673-90FE-08E975F15B64}" = protocol=17 | dir=in | app=c:\users\annelie\appdata\roaming\dropbox\bin\dropbox.exe |
"{D5BEDFD8-FDCE-4814-903B-845C43BE112E}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"{D83AA111-F157-49BA-BD38-B32FBB6130F0}" = protocol=17 | dir=in | app=d:\program files\spotify\spotify.exe |
"{DE337B1E-54B9-4CD1-BB62-0A8073221A37}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 11\programs\umi.exe |
"{DF8D1B7F-73BC-4B24-93B1-10E94FFAEEDC}" = protocol=6 | dir=in | app=d:\program files\spotify\spotify.exe |
"{E5F6D9DC-5743-451E-8A32-05411EEB4E5A}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe |
"{E8E8C8CE-9CE4-4ED0-9219-7F7449868826}" = protocol=6 | dir=in | app=c:\program files\canon\canon ij network tool\cnmnput.exe |
"{ECF4F2D6-7961-49A4-805A-C5F5DD91EC3D}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{ED94EF2C-0AAD-45E7-B1BA-AB922DAAEE57}" = protocol=6 | dir=in | app=c:\program files\magentic\bin\magentic.exe |
"{EE520D65-0B9F-4379-816B-6F769486A32B}" = protocol=17 | dir=in | app=c:\users\annelie\documents\incredimail transferred data\kopiaim\incredimail\bin\incmail.exe |
"{F461BD80-31B3-454B-8C4B-36FD2EDA252B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F52DB15E-52D7-4F77-9500-E2BC4AE7ECDE}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 11\programs\pmsregisterfile.exe |
"{F70D8FB9-26A8-474F-859E-9CFA9F03675E}" = protocol=6 | dir=in | app=c:\program files\smileypad\smileypad.exe |
"{F9531467-5EAD-45E9-A677-CD421D6CB5B3}" = protocol=6 | dir=out | app=system |
"{FC0D1481-2EC1-4E38-8BFA-1EB77FAD3789}" = dir=in | app=c:\program files\itunes\itunes.exe |
"TCP Query User{02977BDC-0101-42AD-992D-0B14F964427F}C:\program files\windows sidebar\sidebar.exe" = protocol=6 | dir=in | app=c:\program files\windows sidebar\sidebar.exe |
"TCP Query User{03D33AEF-9C7A-4CAF-A772-B9A1BC78E269}C:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"TCP Query User{08D9777B-7BE5-4F03-853C-27BF398BDE1B}C:\program files\bittorrent\btdownloadgui.exe" = protocol=6 | dir=in | app=c:\program files\bittorrent\btdownloadgui.exe |
"TCP Query User{3909C15D-8D7F-4BA3-A2AB-D1BBB0F4E2B5}C:\windows\lmid400.tmp\lmi_rescue.exe" = protocol=6 | dir=in | app=c:\windows\lmid400.tmp\lmi_rescue.exe |
"TCP Query User{601DC029-2534-4BFE-9F51-DD27F49272AF}C:\program files\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files\skype\phone\skype.exe |
"TCP Query User{75AD1443-EC78-4D62-B327-3066F1E4936A}C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe |
"TCP Query User{76AD78B9-FD7B-42F9-9C17-5DC66E73B894}C:\program files\bitdownload\bitdownload.exe" = protocol=6 | dir=in | app=c:\program files\bitdownload\bitdownload.exe |
"TCP Query User{8DC7F5D1-AA05-4D1E-B9A5-A3D4299D2837}C:\program files\easy web cam\easywebcam.exe" = protocol=6 | dir=in | app=c:\program files\easy web cam\easywebcam.exe |
"TCP Query User{AF95DC4B-3B1B-4B37-B15C-072117DD5F2D}C:\users\annelie\program\dreambox control center\dcc.exe" = protocol=6 | dir=in | app=c:\users\annelie\program\dreambox control center\dcc.exe |
"TCP Query User{B962BFE5-F9B5-4F51-A007-C477B8B9A6B9}C:\users\annelie\program\dreambox control center\dcc.exe" = protocol=6 | dir=in | app=c:\users\annelie\program\dreambox control center\dcc.exe |
"TCP Query User{DE754233-4EE8-459A-ADD6-E2958475C9E7}C:\program files\bitdownload\bitdownload.exe" = protocol=6 | dir=in | app=c:\program files\bitdownload\bitdownload.exe |
"TCP Query User{E912DDFB-064E-44C0-9A14-4E26AB6DBADD}C:\windows\lmid400.tmp\lmi_rescue.exe" = protocol=6 | dir=in | app=c:\windows\lmid400.tmp\lmi_rescue.exe |
"UDP Query User{00D2C444-D821-478C-BD26-BFC9C4D651D0}C:\program files\bittorrent\btdownloadgui.exe" = protocol=17 | dir=in | app=c:\program files\bittorrent\btdownloadgui.exe |
"UDP Query User{11A9E240-5316-472A-B75C-D454DB2B103C}C:\program files\bitdownload\bitdownload.exe" = protocol=17 | dir=in | app=c:\program files\bitdownload\bitdownload.exe |
"UDP Query User{1958AF74-34FD-4BDC-ACD1-B7894D60E6B1}C:\program files\easy web cam\easywebcam.exe" = protocol=17 | dir=in | app=c:\program files\easy web cam\easywebcam.exe |
"UDP Query User{25BBECFE-4512-4FB5-95A9-CD3001D41D68}C:\windows\lmid400.tmp\lmi_rescue.exe" = protocol=17 | dir=in | app=c:\windows\lmid400.tmp\lmi_rescue.exe |
"UDP Query User{642DA0EE-A94A-43A4-8E33-750F8A0A5923}C:\program files\bitdownload\bitdownload.exe" = protocol=17 | dir=in | app=c:\program files\bitdownload\bitdownload.exe |
"UDP Query User{7087742C-B6D1-4BE6-B137-B8F6CEFEA471}C:\users\annelie\program\dreambox control center\dcc.exe" = protocol=17 | dir=in | app=c:\users\annelie\program\dreambox control center\dcc.exe |
"UDP Query User{9ECB589C-2262-4D18-8122-7F70D36D3413}C:\users\annelie\program\dreambox control center\dcc.exe" = protocol=17 | dir=in | app=c:\users\annelie\program\dreambox control center\dcc.exe |
"UDP Query User{A11D15E8-C8B1-499A-A2A8-9C9B3C69C302}C:\windows\lmid400.tmp\lmi_rescue.exe" = protocol=17 | dir=in | app=c:\windows\lmid400.tmp\lmi_rescue.exe |
"UDP Query User{A811DE39-64D6-4FD4-BC2F-0749342E885B}C:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\backweb-8876480.exe |
"UDP Query User{BA51B35B-5E44-4170-BB54-B748FC42E5D4}C:\program files\windows sidebar\sidebar.exe" = protocol=17 | dir=in | app=c:\program files\windows sidebar\sidebar.exe |
"UDP Query User{CF1DBFF1-5738-441D-8271-A27D3C00874A}C:\program files\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files\skype\phone\skype.exe |
"UDP Query User{F6268BED-50AF-4423-9104-BE7C60469E90}C:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0012041D-78E1-11D2-B60F-006097C998E7}" = Microsoft FrontPage 2000
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{03D2B71D-BB42-4F4A-B25A-DAAC7247E98E}" = MinSläkt V3.5
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series" = Canon MP640 series MP Drivers
"{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}" = Roxio Creator EasyArchive
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{230B9098-A165-491F-B499-8F41AA7139F6}" = WorldWinner Games
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{23970E31-948B-466E-8376-1224D32FDF0C}" = Convert
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java™ 6 Update 22
"{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}" = Logitech SetPoint
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Roxio Activation Module
"{363188E4-1A27-4DE6-BA48-823D2E205385}" = ArcSoft Scan-n-Stitch Deluxe
"{37530151-56A6-4CE4-9F9F-CE1F5A1356C6}" = ArcSoft Panorama Maker 4
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40DA94AF-34B7-4BA7-A37F-26F899C031FF}" = ArcSoft PhotoStudio Darkroom 2
"{40F7AED3-0C7D-4582-99F6-484A515C73F2}" = HP Easy Setup - Frontend
"{451CFEDB-C832-42CB-97E0-C74A0A385B7D}" = Simply Calenders v5.2
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{56918C0C-0D87-4CA6-92BF-4975A43AC719}" = KhalInstallWrapper
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}" = Safari
"{71310D9B-7555-44FE-914C-A1B55CB7BC5D}" = Scrapbook
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{75AE8014-1184-4BC0-B279-C879540719EE}" = PhotoMail Maker
"{75E71ADD-042C-4F30-BFAC-A9EC42351313}" = Python 2.4.3
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{771F0F26-3798-46F3-9278-91361210D80C}" = Simply Calenders v5.1
"{7B312BFD-6C04-4409-AB6F-DD41CCD67463}" = muvee autoProducer 6.1
"{7D7152AF-581B-316F-8CA4-15342C3EFA4B}" = Microsoft .NET Framework 3.5 Language Pack SP1 - sve
"{82FAC25D-D0E1-4D60-9268-F3DD958BF052}" = ArcSoft RAW Thumbnail Viewer
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{886EA322-81B7-4DB8-BA8E-5300243A3CFD}" = muvee Kids stylePack
"{8A29BF7A-6C8B-4557-96C1-84C2FE15FDF8}" = Jalbum
"{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}" = MP3 Player Utilities 4.18
"{8C6027FD-53DC-446D-BB75-CACD7028A134}" = HP Update
"{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}" = CDDRV_Installer
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90190409-6000-11D3-8CFE-0050048383C9}" = Microsoft Publisher 2002
"{9112041D-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Standard
"{92518780-C904-409C-B674-528822FEA6E2}" = muvee coolStyles 1
"{938B1CD7-7C60-491E-AA90-1F1888168240}" = Roxio MyDVD Basic v9
"{9A1686DD-E593-4556-8BD1-426A3F28A263}" = muvee Pro Modern stylePack
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9DBA770F-BF73-4D39-B1DF-6035D95268FC}" = HP Customer Feedback
"{A17EABB6-D0C6-44E5-820C-72DC7F495064}" = PaperPort
"{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel
"{AB5E289E-76BF-4251-9F3F-9B763F681AE0}" = HP Customer Experience Enhancements
"{AC76BA86-7AD7-1053-7B44-A94000000001}" = Adobe Reader 9.4.1 - Svenska
"{B0D64B63-E5D3-43E8-8E70-07E4103C2692}" = DesignPro 5
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B26B00DA-2E5D-4CF2-83C5-911198C0F009}" = GoodSync
"{B4E96960-5F6B-48B9-A5BD-6A5A9BB4F027}" = Avery Wizard 3.1
"{BAA81B01-7B27-4E49-89FA-D1C331E000A7}" = IncrediMail
"{BAC84156-BB11-436C-8752-24357F6BAD02}" = XOR Compact 5
"{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}" = Logitech Webcam Software
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C60AAF4C-A72C-36E0-8CA4-41FF753D74F6}" = Microsoft .NET Framework 4 Client Profile SVE Language Pack
"{C60BA916-9E44-4DA4-B11A-9E27B7624EF5}" = Sony Ericsson Drivers
"{C867F57B-39C1-4341-A164-F569839BCCBF}" = Cards
"{C86EDD05-3B5A-4145-96A2-E36C6C501480}" = Photo Notifier and Animation Creator
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator Basic v9
"{C8B44566-839A-459C-A73D-49764CE216CC}" = ArcSoft Video Downloader
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Picture Package Music Transfer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{D6DE02C7-1F47-11D4-9515-00105AE4B89A}" = Paint Shop Pro 7
"{DBEA1034-5882-4A88-8033-81C4EF0CFA29}" = Google Toolbar for Internet Explorer
"{DE114695-AE58-4B66-8E0F-2505188602FB}_is1" = Uninstall Startup Inspector
"{E2EE273D-E111-4FFD-ACD4-78E1D35E01D2}" = ArcSoft Photo Book Screen Saver
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2EC3CA2-1136-45C1-B5AE-AB03DED6E98C}" = Logitech QuickCapture Gadget
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4AD1D69-B6AF-48C3-AF65-CB39C2BFFEC3}" = muvee Pro Classic StylePack
"{F5AEB5A7-D4EA-49A5-89F2-A799F1C620B9}" = TViXiE
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"Acoustica CD/DVD Label Maker" = Acoustica CD/DVD Label Maker
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Age Of Japan_is1" = Age Of Japan
"AI RoboForm" = AI RoboForm (All Users)
"alohasolitaire" = Aloha Solitaire
"AU9_is1" = Advanced Uninstaller PRO - Version 9
"avast5" = avast! Free Antivirus
"AVS Antispam_is1" = AVS Antispam
"AVS Audio Converter 6.2_is1" = AVS Audio Converter version 6.2
"AVS Audio Editor_is1" = AVS Audio Editor version 6.1
"AVS Audio Recorder 3.9_is1" = AVS Audio Recorder version 3.9
"AVS Disc Creator_is1" = AVS Disc Creator version 4.1
"AVS DVD Authoring_is1" = AVS DVD Authoring
"AVS DVD Copy_is1" = AVS DVD Copy version 4.1.1
"AVS Image Converter_is1" = AVS Image Converter [removed]
"AVS Media Player_is1" = AVS Media Player [removed]
"AVS Photo Editor_is1" = AVS Photo Editor
"AVS Ringtone Maker 1.6_is1" = AVS Ringtone Maker version 1.6
"AVS Screen Capture_is1" = AVS Screen Capture version 1.1.2
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS Video Editor_is1" = AVS Video Editor 5
"AVS Video Recorder_is1" = AVS Video Recorder 2.4
"AVS Video ReMaker_is1" = AVS Video ReMaker [removed]
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"AVS4YOU Video Converter 7_is1" = AVS Video Converter 7
"AVSCoverEditor2_is1" = AVS Cover Editor [removed]
"AVSRegistryCleaner_is1" = AVS Registry Cleaner version 2.1
"Belltech Greeting Card Designer - Extra Templates_is1" = Belltech Greeting Card Designer - Extra Templates
"Belltech Greeting Card Designer 5.0_is1" = Belltech Greeting Card Designer 5.0
"Browser Defender_is1" = Browser Defender 2.0.6.15
"BulletProof FTP Client_is1" = BulletProof FTP Client (remove only)
"Canon MP640 series användarregistrering" = Canon MP640 series användarregistrering
"Canon_IJ_Network_Scan_UTILITY" = Canon IJ Network Scan Utility
"Canon_IJ_Network_UTILITY" = Canon IJ Network Tool
"CANONIJPLM100" = Canon Inkjet Printer/Scanner/Fax Extended Survey Program
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"CCleaner" = CCleaner
"CutePDF Writer Installation" = CutePDF Writer 2.7
"DMX5_is1" = DriverMax 5
"Download Accelerator Plus (DAP)" = Download Accelerator Plus (DAP)
"DreamBoxEdit" = DreamBoxEdit – The one and only settings editor for your Dreambox
"DVD Cover Searcher3.3.1" = DVD Cover Searcher
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"FontExpert 2010" = FontExpert 2010
"IncrediMail" = IncrediMail 2.0
"Incredimail Backup Pro_is1" = Incredimail Backup Pro V3.1
"InstallShield_{B0D64B63-E5D3-43E8-8E70-07E4103C2692}" = DesignPro 5
"king.com" = king.com (remove only)
"legacyqcam_11.10" = Logitech Legacy USB Camera drivrutinspaket
"LIVE TV_is1" = Live TV
"Logitech Vid" = Logitech Vid HD
"lvdrivers_12.10" = Logitech Webcam Software drivrutinspaket
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 Language Pack SP1 - sve" = Språkpaket för Microsoft .NET Framework 3.5 SP 1 - sve
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile SVE Language Pack" = Microsoft .NET Framework 4 Client Profile Language Pack - SVE
"MozBackup" = MozBackup 1.4.9
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"MP Navigator EX 3.0" = Canon MP Navigator EX 3.0
"NVIDIA Drivers" = NVIDIA Drivers
"OsdMaestro" = HP On-Screen Cap/Num/Scroll Lock Indicator
"Personal" = Personal 4.10.3
"Photo Notifier and Animation Creator" = Photo Notifier and Animation Creator
"PhotoJam 3" = PhotoJam 3
"PhotoMail" = PhotoMail Maker
"Picasa 3" = Picasa 3
"Porta" = Porta
"proDAD-Heroglyph-2.5" = proDAD Heroglyph 2.5
"proDAD-Vitascene-1.0" = proDAD Vitascene 1.0
"QuickMenuBuilder" = Quick Menu Builder 1.2
"Rainlendar2" = Rainlendar2 (remove only)
"RealArcade" = RealArcade
"ShapeCollage" = Shape Collage
"Shockwave.com JigsawMaker" = Shockwave.com JigsawMaker
"SmileyPad_is1" = SmileyPad v2.28
"SpeedBit Toolbar" = SpeedBit Toolbar
"SpeedBit Video Downloader" = SpeedBit Video Downloader
"Spotify" = Spotify
"Spyware Doctor" = Spyware Doctor 7.0
"Super Collapse! from GameHouse" = Super Collapse! from GameHouse
"Supportassistenten_is1" = Supportassistenten
"SystemRequirementsLab" = System Requirements Lab
"Wacom Tablet Driver" = Wacom Tablet
"WinAce Archiver" = WinAce Archiver
"WinUndelete" = WinUndelete
"WinZip" = WinZip
"Zylom puzzles Deluxe" = Zylom puzzles Deluxe

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Facebook Plug-In" = Facebook Plug-In
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error - 2009-05-11 18:09:25 | Computer Name = Kontor | Source = avast! | ID = 33554522
Description =

Error - 2009-07-22 16:04:09 | Computer Name = Kontor | Source = avast! | ID = 33554522
Description =

Error - 2009-08-07 17:04:02 | Computer Name = Kontor | Source = avast! | ID = 33554522
Description =

Error - 2010-02-07 03:22:23 | Computer Name = Kontor | Source = avast! | ID = 33554522
Description =

[ Application Events ]
Error - 2010-12-29 20:29:39 | Computer Name = Kontor | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2371

Error - 2010-12-30 12:28:27 | Computer Name = Kontor | Source = Bonjour Service | ID = 100
Description = 440: ERROR: read_msg errno 10054 (En befintlig anslutning tvingades
att stänga av fjärrvärddatorn.)

Error - 2011-01-02 13:03:13 | Computer Name = Kontor | Source = Windows Search Service | ID = 3100
Description =

Error - 2011-01-02 13:05:23 | Computer Name = Kontor | Source = Windows Search Service | ID = 3083
Description =

Error - 2011-01-02 13:05:23 | Computer Name = Kontor | Source = Windows Search Service | ID = 3083
Description =

Error - 2011-01-02 13:05:23 | Computer Name = Kontor | Source = Windows Search Service | ID = 3083
Description =

Error - 2011-01-02 13:05:23 | Computer Name = Kontor | Source = Windows Search Service | ID = 3083
Description =

Error - 2011-01-02 13:05:23 | Computer Name = Kontor | Source = Windows Search Service | ID = 3083
Description =

Error - 2011-01-02 13:05:25 | Computer Name = Kontor | Source = Windows Search Service | ID = 3100
Description =

Error - 2011-01-02 13:09:45 | Computer Name = Kontor | Source = Windows Search Service | ID = 3100
Description =

[ Media Center Events ]
Error - 2008-08-29 09:53:18 | Computer Name = Kontor | Source = ehSched | ID = 5
Description = CResourceMgr::GetEhepgdat Error GetEhepgdatDispatcher 0x80131534

Error - 2008-08-29 09:53:18 | Computer Name = Kontor | Source = Media Center Guide | ID = 0
Description = Händelseinformation: Error reprocessing guide: System.TypeInitializationException:
Ett undantagsfel inträffade för typkonstruktorn. vid ehiProxy.ResourceMgrClass.GetEhepgdat(IEhepgdat&
ppEhepgdatDisp) vid Microsoft.Ehome.Epg.Helper.EhepgdatHelper.GetEhepgdat()
vid Microsoft.Ehome.Epg.Helper.EhepgdatBase.Retry(EhepgdatCall action) vid Microsoft.Ehome.Epg.Guide.ReprocessGuideImp()
Process: DefaultDomain Objektnamn: Media Center Guide

Error - 2008-08-29 09:53:18 | Computer Name = Kontor | Source = Media Center Guide | ID = 0
Description = Händelseinformation: Error: Failed to reprocess guide! Process: DefaultDomain
Objektnamn:
Media Center Guide

Error - 2008-08-29 09:53:25 | Computer Name = Kontor | Source = ehSched | ID = 5
Description = CResourceMgr::GetEhepgdat Error GetEhepgdatDispatcher 0x80040154

Error - 2008-12-31 20:02:45 | Computer Name = Kontor | Source = ehSched | ID = 5
Description = CResourceMgr::GetEhepgdat Error GetEhepgdatDispatcher 0x80131534

Error - 2008-12-31 20:02:45 | Computer Name = Kontor | Source = ehSched | ID = 5
Description = CResourceMgr::GetEhepgdat Error GetEhepgdatDispatcher 0x80040154

Error - 2008-12-31 20:02:47 | Computer Name = Kontor | Source = Media Center Guide | ID = 0
Description = Händelseinformation: COMException trying to call ehepgdat. Process:
DefaultDomain Objektnamn: Microsoft.Ehome.Epg.Helper.EhepgdatHelper

Error - 2008-12-31 20:02:47 | Computer Name = Kontor | Source = ehSched | ID = 5
Description = CResourceMgr::GetEhepgdat Error GetEhepgdatDispatcher 0x80131534

Error - 2008-12-31 20:02:47 | Computer Name = Kontor | Source = Media Center Guide | ID = 0
Description = Händelseinformation: Error reprocessing guide: System.TypeInitializationException:
Ett undantagsfel inträffade för typkonstruktorn. vid ehiProxy.ResourceMgrClass.GetEhepgdat(IEhepgdat&
ppEhepgdatDisp) vid Microsoft.Ehome.Epg.Helper.EhepgdatHelper.GetEhepgdat()
vid Microsoft.Ehome.Epg.Helper.EhepgdatBase.Retry(EhepgdatCall action) vid Microsoft.Ehome.Epg.Guide.ReprocessGuideImp()
Process: DefaultDomain Objektnamn: Media Center Guide

Error - 2008-12-31 20:02:47 | Computer Name = Kontor | Source = Media Center Guide | ID = 0
Description = Händelseinformation: Error: Failed to reprocess guide! Process: DefaultDomain
Objektnamn:
Media Center Guide

[ System Events ]
Error - 2011-01-02 15:08:09 | Computer Name = Kontor | Source = srv | ID = 2020
Description = Servern kunde inte allokera växlingsbart systemminne på grund av minnesbrist.

Error - 2011-01-02 15:16:55 | Computer Name = Kontor | Source = netbt | ID = 4300
Description = Det gick inte att skapa drivrutinen.

Error - 2011-01-02 15:16:55 | Computer Name = Kontor | Source = netbt | ID = 4300
Description = Det gick inte att skapa drivrutinen.

Error - 2011-01-02 15:28:33 | Computer Name = Kontor | Source = netbt | ID = 4307
Description = Initiering misslyckades eftersom transporten inte kunde öppna de ursprungliga
adresserna.

Error - 2011-01-02 15:28:33 | Computer Name = Kontor | Source = netbt | ID = 4307
Description = Initiering misslyckades eftersom transporten inte kunde öppna de ursprungliga
adresserna.

Error - 2011-01-02 19:02:35 | Computer Name = Kontor | Source = EventLog | ID = 6008
Description = Den senaste avstängningen av datorn vid 23:49:07 den 2011-01-02 skedde
oväntat.

Error - 2011-01-02 19:03:10 | Computer Name = Kontor | Source = Service Control Manager | ID = 7000
Description =

Error - 2011-01-02 19:04:51 | Computer Name = Kontor | Source = netbt | ID = 4319
Description = Dubblettnamn har upptäckts på TCP-nätverket. IP-adressen för datorn
som skickade meddelandet finns i datan. Använd nbtstat -n i ett kommandofönster
för att se vilka namn som står i konflikt.

Error - 2011-01-02 19:05:47 | Computer Name = Kontor | Source = WMPNetworkSvc | ID = 866312
Description =

Error - 2011-01-02 19:05:48 | Computer Name = Kontor | Source = WMPNetworkSvc | ID = 866312
Description =


< End of report >

and - OTL.txt:

OTL logfile created on: 2011-01-03 00:38:37 - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Annelie\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18999)
Locale: 0000041D | Country: Sverige | Language: SVE | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 45,00% Memory free
6,00 Gb Paging File | 4,00 Gb Available in Paging File | 71,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 225,53 Gb Total Space | 93,69 Gb Free Space | 41,54% Space Free | Partition Type: NTFS
Drive D: | 7,36 Gb Total Space | 1,20 Gb Free Space | 16,31% Space Free | Partition Type: NTFS
Drive E: | 232,88 Gb Total Space | 226,65 Gb Free Space | 97,32% Space Free | Partition Type: NTFS

Computer Name: KONTOR | User Name: Annelie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Annelie\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\MyCube Vault\launcherwindows.exe ()
PRC - C:\Program Files\MyCube Vault\server.exe ()
PRC - C:\Program Files\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.)
PRC - C:\Program Files\IncrediMail\bin\ImApp.exe (IncrediMail, Ltd.)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
PRC - C:\Users\Annelie\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\RoboForm\robotaskbaricon.exe (Siber Systems)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\DAP\DAP.exe (SpeedBit Ltd.)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac (ArcSoft Inc.)
PRC - C:\Program Files\Telia\Supportassistenten\bin\tgsrvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Telia\Supportassistenten\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Telia\Supportassistenten\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Users\Annelie\AppData\Roaming\Dropbox\bin\Dropbox.exe ()
PRC - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe (Threat Expert Ltd.)
PRC - C:\Program Files\Storegate\Autostore\AutoStoreSvc.exe (Storegate AB)
PRC - C:\Program Files\Storegate\Autostore\AutoStore.exe (Storegate AB)
PRC - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)
PRC - C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
PRC - C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
PRC - C:\Program Files\Rainlendar2\Rainlendar2.exe ()
PRC - C:\Program Files\Personal\bin\Personal.exe (Technology Nexus AB)
PRC - C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.)
PRC - C:\WINDOWS\System32\wisptis.exe (Microsoft Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (CANON INC.)
PRC - C:\Program Files\Canon\IJPLM\ijplmsvc.exe ()
PRC - C:\Program Files\Ad-Aware\aawservice.exe (Lavasoft)
PRC - C:\WINDOWS\System32\WTablet\Wacom_TabletUser.exe (Wacom Technology, Corp.)
PRC - C:\WINDOWS\System32\Wacom_Tablet.exe (Wacom Technology, Corp.)
PRC - C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech Inc.)
PRC - C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.exe (Logitech Inc.)
PRC - C:\WINDOWS\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\WINDOWS\System32\PSIService.exe ()
PRC - C:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
PRC - C:\WINDOWS\System32\brss01a.exe (brother Industries Ltd)
PRC - C:\WINDOWS\System32\brsvc01a.exe (brother Industries Ltd)


========== Modules (SafeList) ==========

MOD - C:\Users\Annelie\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985
d\msvcr80.dll (Microsoft Corporation)
MOD - C:\WINDOWS\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985
d\msvcp80.dll (Microsoft Corporation)
MOD - C:\WINDOWS\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\Telia\Supportassistenten\bin\sprthook.dll (SupportSoft, Inc.)
MOD - C:\Program Files\Logitech\SetPoint\lgscroll.dll (Logitech Inc.)


========== Win32 Services (SafeList) ==========

SRV - (Apple Mobile Device) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (avast! Web Scanner) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Mail Scanner) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (tgsrvc_teliada) SupportSoft Repair Service (teliada) – C:\Program Files\Telia\Supportassistenten\bin\tgsrvc.exe (SupportSoft, Inc.)
SRV - (sprtsvc_teliada) SupportSoft Sprocket Service (teliada) – C:\Program Files\Telia\Supportassistenten\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (WPFFontCache_v0400) – C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ACDaemon) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (Browser Defender Update Service) – C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe (Threat Expert Ltd.)
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (AutoStore) – C:\Program Files\Storegate\Autostore\AutoStoreSvc.exe (Storegate AB)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (FontCache) – C:\WINDOWS\System32\FntCache.dll (Microsoft Corporation)
SRV - (sdCoreService) – C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)
SRV - (sdAuxService) – C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
SRV - (IJPLMSVC) – C:\Program Files\Canon\IJPLM\ijplmsvc.exe ()
SRV - (SupportSoft RemoteAssist) – C:\Program Files\Common Files\supportsoft\bin\ssrc.exe (SupportSoft, Inc.)
SRV - (aawservice) – C:\Program Files\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (TabletServiceWacom) – C:\WINDOWS\System32\Wacom_Tablet.exe (Wacom Technology, Corp.)
SRV - (ProtexisLicensing) – C:\WINDOWS\System32\PSIService.exe ()
SRV - (PCLEPCI) – C:\WINDOWS\System32\drivers\Pclepci.sys (Pinnacle Systems GmbH)
SRV - (Brother XP spl Service) – C:\WINDOWS\System32\brsvc01a.exe (brother Industries Ltd)


========== Driver Services (SafeList) ==========

DRV - (NwlnkFwd) – C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) – C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (NTIDrvr) – C:\Program Files\muvee6.1\mvBurnerDll\NTIDrvr.sys File not found
DRV - (IpInIp) – C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (hwdatacard) – C:\Windows\System32\DRIVERS\ewusbmdm.sys File not found
DRV - (blbdrive) – C:\Windows\System32\drivers\blbdrive.sys File not found
DRV - (aswTdi) – C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswSP) – C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRdr) – C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMonFlt) – C:\WINDOWS\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) – C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (Netaapl) – C:\WINDOWS\System32\drivers\netaapl.sys (Apple Inc.)
DRV - (LVPr2Mon) – C:\WINDOWS\System32\drivers\LVPr2Mon.sys ()
DRV - (PCTCore) – C:\Windows\system32\drivers\PCTCore.sys (PC Tools)
DRV - (LVRS) – C:\WINDOWS\System32\drivers\lvrs.sys (Logitech Inc.)
DRV - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) – C:\WINDOWS\System32\drivers\LV302V32.SYS (Logitech Inc.)
DRV - (pepifilter) – C:\WINDOWS\System32\drivers\lv302af.sys (Logitech Inc.)
DRV - (WSDScan) – C:\WINDOWS\System32\drivers\WSDScan.sys (Microsoft Corporation)
DRV - (usbaudio) USB-ljuddrivrutiner (WDM) – C:\WINDOWS\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (RTSTOR) – C:\WINDOWS\System32\drivers\RTSTOR.sys (Realtek Semiconductor Corp.)
DRV - (athr) – C:\WINDOWS\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (LVUSBSta) – C:\WINDOWS\System32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (WSDPrintDevice) – C:\WINDOWS\System32\drivers\WSDPrint.sys (Microsoft Corporation)
DRV - (61883) – C:\WINDOWS\System32\drivers\61883.sys (Microsoft Corporation)
DRV - (Avc) – C:\WINDOWS\System32\drivers\avc.sys (Microsoft Corporation)
DRV - (MSDV) – C:\WINDOWS\System32\drivers\msdv.sys (Microsoft Corporation)
DRV - (nvlddmkm) – C:\WINDOWS\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (nvstor32) – C:\Windows\system32\drivers\nvstor32.sys (NVIDIA Corporation)
DRV - (NVENETFD) – C:\WINDOWS\System32\drivers\nvmfdx32.sys (NVIDIA Corporation)
DRV - (LMouKE) – C:\WINDOWS\System32\drivers\LMouKE.Sys (Logitech Inc.)
DRV - (L8042mou) – C:\WINDOWS\System32\drivers\L8042mou.Sys (Logitech Inc.)
DRV - (L8042Kbd) – C:\WINDOWS\System32\drivers\L8042Kbd.sys (Logitech Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (wacommousefilter) – C:\WINDOWS\System32\drivers\wacommousefilter.sys (Wacom Technology)
DRV - (wacomvhid) – C:\WINDOWS\System32\drivers\wacomvhid.sys (Wacom Technology)
DRV - (WacomVKHid) – C:\WINDOWS\System32\drivers\WacomVKHid.sys (Wacom Technology)
DRV - (MarvinBus) – C:\WINDOWS\System32\drivers\MarvinBus.sys (Pinnacle Systems GmbH)
DRV - (Afc) – C:\WINDOWS\System32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (ql2300) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (SiSRaid4) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) – C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) – C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (viaide) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) – C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (E1G60) Intel® – C:\WINDOWS\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (Ps2) – C:\WINDOWS\System32\drivers\PS2.sys (Hewlett-Packard Company)
DRV - (Ser2pl) – C:\WINDOWS\System32\drivers\ser2pl.sys (Prolific Technology Inc.)
DRV - (PenClass) – C:\Windows\System32\Drivers\PenClass.sys (Wacom Technology Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost;*.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.selectedEngine: "MyStart Search"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://google.se"
FF - prefs.js..extensions.enabledItems: {22119944-ED35-4ab1-910B-E619EA06A115}:6.10.1
FF - prefs.js..extensions.enabledItems: {F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}:[removed]
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1
FF - prefs.js..extensions.enabledItems: [removed]:1.2.2
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.071101000055
FF - prefs.js..extensions.enabledItems: [removed]:2.0.0.11
FF - prefs.js..extensions.enabledItems: {EBFCD017-BCAD-42C3-9ED5-89DBDFC59171}:1.0.0
FF - prefs.js..extensions.enabledItems: {0329E7D6-6F54-462D-93F6-F5C3118BADF2}:2.2.8
FF - prefs.js..extensions.enabledItems: {d37dc5d0-431d-44e5-8c91-49419370caa1}:2.6.18
FF - prefs.js..extensions.enabledItems: [removed]:1.12.0.36949
FF - prefs.js..extensions.enabledItems: [removed]:4.1.8
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {340c2bbc-ce74-4362-90b5-7c26312808ef}:1.6.1
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: [removed]:2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..keyword.URL: "http://search.sweetim.com/search.asp?src=2&q;="
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://mystart.incredimail.com/?loc=ff_address_bar&search;="

FF - user.js..keyword.enabled: true

FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\ArcSoft\RAW Thumbnail Viewer\FireFox Extension [2010-02-17 15:31:50 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2010-02-17 15:33:21 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}: C:\Program Files\SpeedBit Video Downloader\SPFireFox [2010-08-29 19:44:11 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{22119944-ED35-4ab1-910B-E619EA06A115}: C:\Program Files\RoboForm\Firefox [2007-10-29 11:18:30 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-29 10:17:30 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-12-29 10:17:30 | 000,000,000 | —D | M]

[2009-11-18 17:37:37 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\Extensions
[2009-11-18 17:37:37 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
[2011-01-03 00:31:40 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions
[2010-08-30 10:25:35 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}
[2010-04-27 17:01:19 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-01-28 17:09:55 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{2832ABCD-4444-1012-2D45-132D5447C445}
[2010-01-28 17:09:55 | 000,000,000 | —D | M] (Rapidlibrary Search ToolBar) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{2832ABCD-4444-1012-2D45-132D5447C445}-trash
[2010-12-30 18:09:19 | 000,000,000 | —D | M] (Firefox Sync) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}
[2010-01-29 08:34:51 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}
[2010-01-29 08:34:51 | 000,000,000 | —D | M] (myBabylon English Toolbar) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}-trash
[2010-11-12 17:42:21 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010-11-12 17:42:21 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}-trash
[2010-05-21 09:32:11 | 000,000,000 | —D | M] (FoxClocks) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1}
[2010-08-17 16:09:07 | 000,000,000 | —D | M] (20-20 3D Viewer) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\[removed]
[2010-10-21 15:33:49 | 000,000,000 | —D | M] (Разпознаване на устройство Logitech) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\[removed]
[2010-06-22 13:22:26 | 000,000,000 | —D | M] (Fast Youtube Downloader) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\[removed]
[2010-10-29 14:01:34 | 000,000,000 | —D | M] (Force-TLS) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\[removed]
[2009-10-03 23:30:27 | 000,000,000 | —D | M] (Move Media Player) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\[removed]
[2010-02-20 10:59:43 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\[removed]
[2010-06-22 13:22:25 | 000,000,000 | —D | M] (Cooliris) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\[removed]
[2010-06-22 13:22:25 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\[removed]-trash
[2010-11-12 13:34:36 | 000,000,000 | —D | M] (FastestFox) – C:\Users\Annelie\AppData\Roaming\mozilla\Firefox\Profiles\rdyfc4m0.default\extensions\[removed]
[2009-11-18 17:45:28 | 000,000,000 | —D | M] (No name found) – C:\Users\Annelie\AppData\Roaming\mozilla\SeaMonkey\Profiles\f498kzad.default\extensions
[2009-11-18 17:45:25 | 000,000,000 | —D | M] (FlashGot) – C:\Users\Annelie\AppData\Roaming\mozilla\SeaMonkey\Profiles\f498kzad.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
[2009-11-18 17:45:25 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\Annelie\AppData\Roaming\mozilla\SeaMonkey\Profiles\f498kzad.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009-09-16 16:19:20 | 000,000,938 | —- | M] () – C:\Users\Annelie\AppData\Roaming\Mozilla\Firefox\Profiles\rdyfc4m0.default\searchplugins\facebook.xml
[2010-08-27 16:06:22 | 000,003,915 | —- | M] () – C:\Users\Annelie\AppData\Roaming\Mozilla\Firefox\Profiles\rdyfc4m0.default\searchplugins\sweetim.xml
[2011-01-03 00:31:40 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010-10-21 15:13:58 | 000,000,000 | —D | M] (Skype extension) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010-04-23 17:13:57 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-08-03 00:36:12 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-11-24 14:29:38 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2009-10-28 18:42:56 | 000,000,000 | —D | M] (RealArcade V3 Plugin) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2010-02-17 15:31:50 | 000,000,000 | —D | M] ("RAW Thumbnail Viewer") – C:\PROGRAM FILES\ARCSOFT\RAW THUMBNAIL VIEWER\FIREFOX EXTENSION
[2010-08-29 19:44:42 | 000,000,000 | —D | M] (Download Accelerator Plus (DAP) extension) – C:\PROGRAM FILES\DAP\DAPFIREFOX
[2007-10-29 11:18:30 | 000,000,000 | —D | M] (AI Roboform Toolbar for Firefox) – C:\PROGRAM FILES\ROBOFORM\FIREFOX
[2009-08-27 15:55:15 | 000,000,000 | —D | M] (SpeedBit Toolbar) – C:\PROGRAM FILES\SPEEDBIT TOOLBAR\SPFIREFOX
[2010-08-29 19:44:11 | 000,000,000 | —D | M] (SpeedBit Video Downloader) – C:\PROGRAM FILES\SPEEDBIT VIDEO DOWNLOADER\SPFIREFOX
[2010-09-15 04:50:38 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010-03-08 11:24:04 | 000,103,168 | —- | M] (Midasplayer Ltd) – C:\Program Files\Mozilla Firefox\plugins\npmidas.dll
[2009-03-30 17:13:54 | 000,098,304 | —- | M] (RealNetworks) – C:\Program Files\Mozilla Firefox\plugins\npraclient.dll
[2006-09-26 13:03:14 | 000,098,304 | —- | M] (Zylom) – C:\Program Files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
[2010-12-11 12:54:10 | 000,001,470 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\allaannonser-sv-SE.xml
[2010-12-11 12:54:10 | 000,002,670 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\prisjakt-sv-SE.xml
[2010-12-11 12:54:10 | 000,000,948 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\tyda-sv-SE.xml
[2010-12-11 12:54:10 | 000,001,174 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-sv-SE.xml
[2010-12-11 12:54:10 | 000,000,951 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\yahoo-sv-SE.xml

O1 HOSTS File: ([2010-05-03 09:05:04 | 000,000,027 | —- | M]) - C:\WINDOWS\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Länkhjälp till Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (IEPlugin Class) - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\Program Files\ArcSoft\Video Downloader\ArcURLRecord.dll (ArcSoft, Inc.)
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (SBCONVERT Class) - {3017FB3E-9A77-4396-88C5-0EC9548FB42F} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O2 - BHO: (SBCONVERT Class) - {31B27F2D-6BC6-451B-B3D2-4EAB36B2FC3B} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (SearchPredictObj Class) - {389943B0-C3A2-4E69-82CB-8596A84CB3DC} - C:\Program Files\SearchPredict\SearchPredict.dll (Speedbit Ltd.)
O2 - BHO: (SPEEDBIT1 Class) - {425E30F0-CCC6-4E24-BBEB-BCBD31720B37} - C:\Program Files\SpeedBit Toolbar\Toolbar\Speedbit.dll ()
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\RoboForm\roboform.dll (Siber Systems Inc.)
O2 - BHO: (ToolbarBHO Class) - {9519AF7E-638D-4933-BAD6-D33D23C79FE5} - C:\Program Files\ArcSoft\RAW Thumbnail Viewer\EXIFToolBar.dll (ArcSoft Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files\Google\GoogleToolbar2.dll (Google Inc.)
O2 - BHO: (DAPIELoader Class) - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\DAP\dapieloader.dll (SpeedBit Ltd.)
O2 - BHO: (GrabberObj Class) - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\SpeedBit Video Downloader\Toolbar\Grabber.dll (Speedbit Ltd.)
O3 - HKLM\..\Toolbar: (SpeedBit Video Downloader) - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (&Google;) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar2.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKLM\..\Toolbar: (&RoboForm;) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (SpeedBit) - {EBFCD017-BCAD-42C3-9ED5-89DBDFC59171} - C:\Program Files\SpeedBit Toolbar\Toolbar\Speedbit.dll ()
O3 - HKLM\..\Toolbar: (RAW Thumbnail Viewer) - {F301665A-12F8-4331-804A-5BCBD379668C} - C:\Program Files\ArcSoft\RAW Thumbnail Viewer\EXIFToolBar.dll (ArcSoft Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (SpeedBit Video Downloader) - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Google;) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar2.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (&RoboForm;) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKCU\..\Toolbar\WebBrowser: (SpeedBit) - {EBFCD017-BCAD-42C3-9ED5-89DBDFC59171} - C:\Program Files\SpeedBit Toolbar\Toolbar\Speedbit.dll ()
O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [FontExpertType1Loader] C:\Program Files\FontExpert\Type1Loader.exe (Proxima Software)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.)
O4 - HKLM..\Run: [ISTray] C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Telia] C:\Program Files\Telia\Supportassistenten\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKCU..\Run: [DownloadAccelerator] C:\Program Files\DAP\DAP.EXE (SpeedBit Ltd.)
O4 - HKCU..\Run: [DriverMax] File not found
O4 - HKCU..\Run: [DriverMax_RESTART] File not found
O4 - HKCU..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.)
O4 - HKCU..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe ()
O4 - HKCU..\Run: [RoboForm] C:\Program Files\RoboForm\RoboTaskBarIcon.exe (Siber Systems)
O4 - Startup: C:\Users\Annelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Annelie\AppData\Roaming\Dropbox\bin\Dropbox.exe ()
O4 - Startup: C:\Users\Annelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyCube Vault.lnk = C:\Program Files\MyCube Vault\launcherwindows.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &Add; animation to IncrediMail Style Box - C:\Program Files\IncrediMail\bin\resources\WebMenuImg.htm ()
O8 - Extra context menu item: &Clean; Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm ()
O8 - Extra context menu item: &Download; with &DAP; - C:\Program Files\DAP\dapextie.htm ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver; - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Anpassa meny - C:\Program Files\RoboForm\RoboFormComCustomizeIEMenu.html ()
O8 - Extra context menu item: Download &all; with DAP - C:\Program Files\DAP\dapextie2.htm ()
O8 - Extra context menu item: Fyll i formulär - C:\Program Files\RoboForm\RoboFormComFillForms.html ()
O8 - Extra context menu item: Läs EXIF - C:\Program Files\ArcSoft\RAW Thumbnail Viewer\ArcEXIFM.htm ()
O8 - Extra context menu item: RF verktygsfält - C:\Program Files\RoboForm\RoboFormComShowToolbar.html ()
O8 - Extra context menu item: Spara formulär - C:\Program Files\RoboForm\RoboFormComSavePass.html ()
O9 - Extra Button: Fyll i formulär - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\RoboForm\RoboFormComFillForms.html ()
O9 - Extra 'Tools' menuitem : Fyll i formulär - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\RoboForm\RoboFormComFillForms.html ()
O9 - Extra Button: Spara - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\RoboForm\RoboFormComSavePass.html ()
O9 - Extra 'Tools' menuitem : Spara formulär - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\RoboForm\RoboFormComSavePass.html ()
O9 - Extra Button: PrimeScratchCards - {3c69c7a4-0fb3-4fe0-bc90-9739726e4570} - Reg Error: Key error. File not found
O9 - Extra Button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra 'Tools' menuitem : RF verktygsfält - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\RoboForm\RoboFormComShowToolbar.html ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\AVSAntiSpamLSP.dll (Online Media Technologies Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\AVSAntiSpamLSP.dll (Online Media Technologies Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\AVSAntiSpamLSP.dll (Online Media Technologies Ltd.)
O16 - DPF: {038E2507-7A48-41E2-94AD-7F23D199AF4E} http://www.worldwinner.com/games/v54/zengems/zengems.cab (ZenGems Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/5/b…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {18C3FD15-74F6-4280-9C98-3590C966B7B8} http://www.worldwinner.com/games/v47/skillgam/skillgam.cab (SkillGam Control)
O16 - DPF: {1A1F56AA-3401-46F9-B277-D57F3421F821} http://www.worldwinner.com/games/v47/share…GamesLoader.cab (FunGamesLoader Object)
O16 - DPF: {2C153C75-8476-434B-B3C3-57B63A3D1939} http://www.worldwinner.com/games/v48/brickout/brickout.cab (Brickout Control)
O16 - DPF: {3D3DBC64-0D21-4EA4-94EE-86D6D9B31C0C} http://www.worldwinner.com/games/v45/moneylist/moneylist.cab (MoneyList Control)
O16 - DPF: {615F158E-D5CA-422F-A8E7-F6A5EED7063B} http://www.worldwinner.com/games/v51/bejeweled/bejeweled.cab (Bejeweled Control)
O16 - DPF: {61900274-3323-4446-BDCD-91548D32AF1B} http://www.worldwinner.com/games/v56/spide…ersolitaire.cab (SpiderSolitaire Control)
O16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} http://www.worldwinner.com/games/v49/blockwerx/blockwerx.cab (Blockwerx Control)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/…b?1232485024879 (WUWebControl Class)
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} http://h20270.www2.hp.com/ediags/gmn2/inst…ctDetection.cab (HpProductDetection Class)
O16 - DPF: {6C6FE41A-0DA6-42A1-9AD8-792026B2B2A7} http://www.worldwinner.com/games/v41/freecell/freecell.cab (FreeCell Control)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat…b?1203119953193 (MUWebControl Class)
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} https://www.worldwinner.com/games/shared/wwlaunch.cab (Wwlaunch Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} http://www.worldwinner.com/games/launcher/….0/iewwload.cab (WorldWinner ActiveX Launcher Control)
O16 - DPF: {94299420-321F-4FF9-A247-62A23EBB640B} http://www.worldwinner.com/games/v46/wordmojo/wordmojo.cab (WordMojo Control)
O16 - DPF: {95A311CD-EC8E-452A-BCEC-B844EB616D03} http://www.worldwinner.com/games/v51/bejew…eweledtwist.cab (BejeweledTwist Control)
O16 - DPF: {A52FBD2B-7AB3-4F6B-90E3-91C772C5D00F} http://www.worldwinner.com/games/v57/wof/wof.cab (WoF Control)
O16 - DPF: {A796D216-2DE1-4EA8-BABB-FE6E7C959098} http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab (HPSDDX Class)
O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} http://www.worldwinner.com/games/v67/swapit/swapit.cab (SwapIt Control)
O16 - DPF: {BE9B2B7C-6680-44E6-9F51-05384AD9C2FF} http://eu.mywayfinder.com/MapConnect.ocx (MapConnect Control)
O16 - DPF: {C82BB209-F528-46F9-96D5-69DEF7260916} http://www.worldwinner.com/games/v45/mysterypi/mysterypi.cab (MysteryPI Control)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…swflash5r42.cab (Shockwave Flash Object)
O16 - DPF: {E12EB891-D000-421B-A8ED-EDE1BDCA14A0} http://www.worldwinner.com/games/v44/golfsol/golfsol.cab (GolfSol Control)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E70E3E64-2793-4AEF-8CC8-F1606BE563B0} http://www.worldwinner.com/games/v54/wwspades/wwspades.cab (WWSpades Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\img27b.jpg
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\img27b.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-01-04 00:58:35 | 000,000,458 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2007-10-27 16:37:44 | 000,000,000 | —- | M] () - E:\AUTOEXEC.BAT – [ NTFS ]
O33 - MountPoints2\{6bb81b2d-96c6-11de-9b5b-001d603192c9}\Shell\AutoRun\command - "" = H:\setupSNK.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.ac3acm - C:\Windows\System32\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\Windows\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\Windows\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.sl_anet - C:\Windows\System32\SL_ANET.ACM (Sipro Lab Telecom Inc.)
Drivers32: msacm.voxacm160 - C:\Windows\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\divx.dll (DivXNetworks, Inc.)
Drivers32: vidc.dvsd - C:\Windows\System32\mcdvd_32.dll (MainConcept)
Drivers32: VIDC.I420 - C:\Windows\System32\LVCodec2.dll (Logitech Inc.)
Drivers32: vidc.xvid - C:\Windows\System32\xvidvfw.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011-01-03 00:34:48 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Users\Annelie\Desktop\OTL.exe
[2010-12-30 18:00:08 | 000,000,000 | —D | C] – C:\Users\Annelie\AppData\Local\Apple Computer
[2010-12-30 18:00:01 | 000,000,000 | —D | C] – C:\Users\Annelie\AppData\Local\ArcSoft
[2010-12-29 10:29:07 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2010-12-29 10:17:02 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2010-12-29 02:07:52 | 000,000,000 | —D | C] – C:\Users\Annelie\AppData\Local\Cooliris
[2010-12-28 22:25:21 | 000,000,000 | —D | C] – C:\ArcSoft
[2010-12-22 15:06:06 | 000,000,000 | —D | C] – C:\Users\Annelie\AppData\Local\Skerryvore Software
[2010-12-17 08:02:45 | 000,000,000 | —D | C] – C:\Program Files\Microsoft.NET
[2010-12-15 09:26:14 | 002,038,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2010-12-15 09:26:08 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\taskschd.dll
[2010-12-15 09:26:07 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmicmiplugin.dll
[2010-12-15 09:26:07 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\taskcomp.dll
[2010-12-15 09:26:03 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\consent.exe
[2010-12-15 09:26:00 | 000,292,352 | —- | C] (Adobe Systems Incorporated) – C:\Windows\System32\atmfd.dll
[2010-12-15 09:26:00 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\System32\atmlib.dll
[2010-12-15 09:25:59 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fontsub.dll
[2010-12-15 09:25:43 | 000,611,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstime.dll
[2010-12-15 09:25:35 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2010-12-15 09:25:33 | 000,602,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2010-12-15 09:25:33 | 000,387,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2010-12-15 09:25:33 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2010-12-15 09:25:32 | 001,469,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2010-12-15 09:25:32 | 000,385,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2010-12-15 09:25:31 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2010-12-15 09:25:31 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2010-12-15 09:25:31 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2010-12-15 09:25:31 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesysprep.dll
[2010-12-15 09:25:31 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2010-12-15 09:25:31 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2010-12-15 09:25:31 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\licmgr10.dll
[2010-12-15 09:25:30 | 001,638,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2010-12-15 09:25:30 | 000,055,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2010-12-15 09:25:30 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2010-12-15 09:25:14 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tzres.dll
[2010-12-11 17:44:21 | 000,000,000 | —D | C] – C:\Program Files\Photo Notifier and Animation Creator
[2010-12-11 17:44:19 | 000,000,000 | —D | C] – C:\ProgramData\Photo Notifier and Animation Creator
[2010-12-09 17:15:38 | 000,000,000 | —D | C] – C:\Users\Annelie\Desktop\Ny mapp
[3 C:\Users\Annelie\Desktop\*.tmp files -> C:\Users\Annelie\Desktop\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011-01-03 01:01:05 | 000,000,968 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-20667866-41827632-2920184442-1000UA.job
[2011-01-03 00:34:52 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Annelie\Desktop\OTL.exe
[2011-01-03 00:19:09 | 000,000,152 | —- | M] () – C:\RACREPCATALOG
[2011-01-03 00:02:53 | 000,003,696 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011-01-03 00:02:53 | 000,003,696 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011-01-03 00:02:33 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011-01-01 22:11:46 | 000,000,916 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-20667866-41827632-2920184442-1000Core.job
[2011-01-01 18:23:36 | 000,037,940 | —- | M] () – C:\Users\Annelie\Desktop\Image3.png
[2010-12-30 17:36:28 | 000,002,592 | —- | M] () – C:\Windows\System32\settings.aaw
[2010-12-30 17:36:27 | 000,001,840 | —- | M] () – C:\Windows\System32\history.aaw
[2010-12-30 17:36:18 | 000,000,012 | —- | M] () – C:\Windows\bthservsdp.dat
[2010-12-30 17:13:25 | 000,051,594 | —- | M] () – C:\Users\Annelie\Desktop\Pavillion.png
[2010-12-29 10:07:51 | 000,000,629 | —- | M] () – C:\Windows\System32\mapisvc.inf
[2010-12-29 02:19:10 | 000,241,899 | —- | M] () – C:\Users\Annelie\Desktop\Cloud About Us.pdf
[2010-12-29 01:29:34 | 000,003,584 | —- | M] () – C:\Users\Annelie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-12-26 11:00:24 | 000,024,064 | —- | M] () – C:\Users\Annelie\Desktop\GE DINA DRÖMMAR EN ÄRPIG LHANS.doc
[2010-12-25 22:48:39 | 000,000,162 | -H– | M] () – C:\Users\Annelie\Desktop\~$ DINA DRÖMMAR EN ÄRPIG LHANS.doc
[2010-12-22 13:17:45 | 000,180,094 | —- | M] () – C:\Users\Annelie\Desktop\pic07711.jpg
[2010-12-22 13:05:26 | 000,391,664 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2010-12-18 02:04:09 | 000,348,521 | —- | M] () – C:\Users\Annelie\Desktop\Teenagers.jpg
[2010-12-17 08:10:33 | 000,605,900 | —- | M] () – C:\Windows\System32\perfh01D.dat
[2010-12-17 08:10:33 | 000,595,798 | —- | M] () – C:\Windows\System32\perfh009.dat
[2010-12-17 08:10:33 | 000,120,302 | —- | M] () – C:\Windows\System32\perfc01D.dat
[2010-12-17 08:10:33 | 000,103,872 | —- | M] () – C:\Windows\System32\perfc009.dat
[2010-12-13 11:21:19 | 000,025,600 | —- | M] () – C:\Users\Annelie\Desktop\Chat.doc
[2010-12-09 12:32:34 | 000,000,945 | —- | M] () – C:\Users\Annelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2010-12-08 02:14:18 | 000,000,298 | —- | M] () – C:\Users\Annelie\Desktop\JB-Forum.url
[2010-12-05 14:22:17 | 000,000,156 | —- | M] () – C:\Users\Annelie\Dokument\Dokument.rtf
[3 C:\Users\Annelie\Desktop\*.tmp files -> C:\Users\Annelie\Desktop\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011-01-01 18:23:36 | 000,037,940 | —- | C] () – C:\Users\Annelie\Desktop\Image3.png
[2010-12-30 17:13:18 | 000,051,594 | —- | C] () – C:\Users\Annelie\Desktop\Pavillion.png
[2010-12-29 02:19:10 | 000,241,899 | —- | C] () – C:\Users\Annelie\Desktop\Cloud About Us.pdf
[2010-12-29 01:29:29 | 000,003,584 | —- | C] () – C:\Users\Annelie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-12-25 22:48:39 | 000,000,162 | -H– | C] () – C:\Users\Annelie\Desktop\~$ DINA DRÖMMAR EN ÄRPIG LHANS.doc
[2010-12-25 16:09:55 | 000,024,064 | —- | C] () – C:\Users\Annelie\Desktop\GE DINA DRÖMMAR EN ÄRPIG LHANS.doc
[2010-12-22 13:17:45 | 000,180,094 | —- | C] () – C:\Users\Annelie\Desktop\pic07711.jpg
[2010-12-18 02:08:40 | 000,348,521 | —- | C] () – C:\Users\Annelie\Desktop\Teenagers.jpg
[2010-12-05 14:07:04 | 000,000,156 | —- | C] () – C:\Users\Annelie\Dokument\Dokument.rtf
[2010-02-12 13:58:23 | 000,000,075 | —- | C] () – C:\Windows\PhotoJam3.ini
[2010-01-15 13:51:53 | 000,000,000 | —- | C] () – C:\Users\Annelie\AppData\Roaming\AVSMediaPlayer.m3u
[2009-11-28 09:36:57 | 000,000,209 | —- | C] () – C:\Windows\ODBCINST.INI
[2009-10-25 10:04:25 | 000,767,952 | —- | C] () – C:\Windows\BDTSupport.dll.old
[2009-10-25 10:04:25 | 000,767,952 | —- | C] () – C:\Windows\BDTSupport.dll
[2009-10-13 13:39:02 | 000,000,091 | —- | C] () – C:\Users\Annelie\AppData\Roaming\setup.log
[2009-10-13 13:38:53 | 000,000,760 | —- | C] () – C:\Users\Annelie\AppData\Roaming\setup_ldm.iss
[2009-10-07 01:46:36 | 000,025,752 | —- | C] () – C:\Windows\System32\drivers\LVPr2Mon.sys
[2009-10-07 01:23:08 | 000,013,584 | —- | C] () – C:\Windows\System32\drivers\iKeyLFT2.dll
[2009-09-11 02:37:16 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009-08-03 14:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2009-04-30 22:39:36 | 000,082,289 | —- | C] () – C:\Windows\System32\lvcoinst.ini
[2009-01-30 11:16:37 | 000,087,552 | —- | C] () – C:\Windows\System32\cpwmon2k.dll
[2008-05-16 02:03:38 | 000,000,118 | —- | C] () – C:\Windows\System32\MRT.INI
[2008-01-18 11:22:43 | 000,057,856 | —- | C] () – C:\Windows\Fce32.dll
[2008-01-18 11:22:41 | 000,057,856 | —- | C] () – C:\Windows\System32\Fce32.dll
[2008-01-18 11:22:40 | 000,092,672 | —- | C] () – C:\Windows\System32\See32.dll
[2008-01-09 22:06:32 | 000,010,752 | —- | C] () – C:\Windows\System32\BASSMOD.dll
[2008-01-09 22:04:16 | 000,000,088 | RHS- | C] () – C:\Windows\System32\3E8B532E94.sys
[2008-01-09 22:04:15 | 000,003,140 | -HS- | C] () – C:\Windows\System32\KGyGaAvL.sys
[2007-12-23 01:00:11 | 000,053,248 | —- | C] () – C:\Windows\System32\TabUnst.dll
[2007-12-23 00:59:01 | 000,013,408 | —- | C] () – C:\Windows\System32\tabinst.dll
[2007-12-23 00:59:01 | 000,004,032 | —- | C] () – C:\Windows\System32\tabins16.dll
[2007-12-23 00:28:37 | 000,026,610 | —- | C] () – C:\Users\Annelie\AppData\Roaming\UserTile.png
[2007-11-29 10:32:11 | 000,005,729 | —- | C] () – C:\Windows\mgxoschk.ini
[2007-11-24 18:12:36 | 000,002,706 | —- | C] () – C:\Windows\FontExpert.INI
[2007-11-12 13:44:06 | 000,086,016 | —- | C] () – C:\Windows\System32\DVResampleru.dll
[2007-11-12 12:19:38 | 000,000,017 | —- | C] () – C:\Windows\MovingPicture.ini
[2007-11-12 08:27:44 | 000,196,096 | —- | C] () – C:\Windows\System32\macd32.dll
[2007-11-12 08:27:44 | 000,138,752 | —- | C] () – C:\Windows\System32\mase32.dll
[2007-11-12 08:27:44 | 000,136,192 | —- | C] () – C:\Windows\System32\mamc32.dll
[2007-11-12 08:27:44 | 000,057,856 | —- | C] () – C:\Windows\System32\masd32.dll
[2007-11-12 08:27:42 | 000,027,648 | —- | C] () – C:\Windows\System32\ma32.dll
[2007-11-05 12:59:33 | 000,000,000 | —- | C] () – C:\Windows\kasta.dll
[2007-11-03 01:27:28 | 000,000,047 | —- | C] () – C:\Users\Annelie\AppData\Roaming\AVSDVDPlayer.m3u
[2007-10-29 13:17:04 | 000,524,288 | —- | C] () – C:\Windows\System32\xvidcore.dll
[2007-10-29 13:17:04 | 000,139,264 | —- | C] () – C:\Windows\System32\xvidvfw.dll
[2007-10-28 08:02:14 | 000,000,072 | —- | C] () – C:\Windows\Klienthanterare.ini
[2007-10-28 07:53:16 | 000,000,722 | —- | C] () – C:\Windows\ODBC.INI
[2007-10-28 01:20:20 | 000,000,474 | —- | C] () – C:\Windows\BRWMARK.INI
[2007-10-28 01:20:20 | 000,000,030 | —- | C] () – C:\Windows\System32\brss01a.ini
[2007-10-28 01:20:20 | 000,000,027 | —- | C] () – C:\Windows\BRPP2KA.INI
[2007-10-28 01:11:01 | 000,106,496 | —- | C] () – C:\Windows\System32\BrMuSNMP.dll
[2007-10-28 00:52:01 | 000,027,024 | —- | C] () – C:\Windows\maxlink.ini
[2007-10-27 23:47:31 | 000,000,096 | —- | C] () – C:\Users\Annelie\AppData\Roaming\wklnhst.dat
[2007-06-27 08:00:00 | 011,194,368 | —- | C] () – C:\Windows\System32\ZHHP_RES.DLL
[2007-06-27 08:00:00 | 000,749,568 | —- | C] () – C:\Windows\System32\AGISSI.DLL
[2007-06-19 04:14:40 | 000,102,400 | —- | C] () – C:\Windows\System32\pywintypes24.dll
[2007-06-19 04:14:39 | 000,327,680 | —- | C] () – C:\Windows\System32\pythoncom24.dll
[2007-03-06 09:47:24 | 000,000,000 | —- | C] () – C:\Windows\System32\px.ini
[2007-02-10 17:32:52 | 001,494,016 | —- | C] () – C:\Windows\System32\vspdfx.dll
[2007-01-12 06:07:48 | 000,520,192 | —- | C] () – C:\Windows\System32\CddbPlaylist2Roxio.dll
[2007-01-12 06:07:48 | 000,204,800 | —- | C] () – C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006-11-02 13:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006-11-02 08:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006-03-06 10:41:02 | 000,073,728 | —- | C] () – C:\Windows\System32\AMV_DecDLL.dll
[2004-09-16 13:26:40 | 000,012,634 | —- | C] () – C:\Windows\System32\drivers\ADFUUD.SYS
[2004-08-20 20:04:14 | 000,319,488 | —- | C] () – C:\Windows\System32\VLMenuRes.dll
[2004-07-10 18:55:38 | 000,252,416 | —- | C] () – C:\Windows\System32\wsiShared.dll
[2002-10-05 12:49:14 | 000,024,576 | —- | C] () – C:\Windows\System32\VlUtils.dll
[2002-03-04 09:16:34 | 000,110,592 | R— | C] () – C:\Windows\System32\Jpeg32.dll

========== LOP Check ==========

[2008-01-09 16:17:43 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\.bittorrent
[2007-11-11 13:52:50 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Acoustica
[2007-11-01 13:21:24 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Axialis
[2010-11-03 17:56:59 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Azureus
[2010-12-09 01:23:26 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\BPFTP
[2010-10-26 13:59:48 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Canon
[2009-12-10 11:46:27 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\CD-LabelPrint
[2011-01-03 00:24:19 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Dropbox
[2010-05-02 12:26:23 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Facebook
[2011-01-02 02:40:32 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\GoodSync
[2010-02-12 13:55:25 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Jalbum AB
[2007-10-29 12:01:54 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Jasc
[2008-09-16 14:14:54 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Leadertech
[2010-03-09 00:53:18 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\MozBackup
[2008-10-09 20:04:04 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\muvee Technologies
[2011-01-03 00:20:04 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\MyCube Vault
[2007-10-31 00:24:46 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Netscape
[2010-07-30 07:47:44 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Obsidium
[2007-12-23 00:28:37 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\PeerNetworking
[2009-08-17 13:43:20 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Personal
[2009-01-15 11:52:59 | 000,000,000 | R–D | M] – C:\Users\Annelie\AppData\Roaming\Pictures
[2007-11-12 12:18:12 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\proDAD
[2007-10-29 17:19:40 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Proxima Software
[2007-12-01 11:13:11 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\ScanSoft
[2008-09-17 11:05:27 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\SEW
[2010-02-12 13:58:08 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\shockwave.com
[2007-12-12 17:23:55 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Skerryvore Software
[2010-09-26 17:40:33 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Spotify
[2010-01-05 13:38:05 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\SYSteam CAB
[2010-09-22 15:57:20 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Teleca
[2007-10-27 23:47:48 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Template
[2007-10-28 08:07:16 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Visma Xor
[2010-02-24 12:50:39 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\WinBatch
[2010-09-19 14:40:13 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Worldwinner
[2010-04-15 10:13:56 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\wsInspector
[2009-11-30 15:36:40 | 000,000,000 | —D | M] – C:\Users\Annelie\AppData\Roaming\Zylom
[2010-12-30 17:36:19 | 000,032,566 | —- | M] () – C:\WINDOWS\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2009-11-28 10:15:31 | 000,000,000 | —- | M] () – C:\AdobeDebug.txt
[2009-01-04 00:58:35 | 000,000,458 | —- | M] () – C:\autoexec.bat
[2006-05-16 16:40:05 | 000,000,305 | -HS- | M] () – C:\boot.ini
[2009-04-11 07:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2007-06-19 13:49:36 | 000,008,192 | R-S- | M] () – C:\BOOTSECT.BAK
[2006-09-18 22:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2010-11-18 18:43:29 | 000,000,090 | —- | M] () – C:\error.log
[2007-10-29 14:50:08 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010-08-18 13:21:15 | 000,011,663 | —- | M] () – C:\LJCP1215.log
[2010-05-04 13:31:50 | 000,000,109 | —- | M] () – C:\mbam-error.txt
[2007-10-29 14:50:08 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004-09-21 12:21:19 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2004-09-21 12:21:19 | 000,250,032 | RHS- | M] () – C:\ntldr
[2011-01-03 00:02:27 | 3533,512,704 | -HS- | M] () – C:\pagefile.sys
[2010-05-06 16:08:42 | 000,000,050 | —- | M] () – C:\PMK.log
[2010-05-06 16:09:12 | 000,001,836 | —- | M] () – C:\pmkonlie.log
[2011-01-03 00:19:09 | 000,000,152 | —- | M] () – C:\RACREPCATALOG
[2008-10-31 11:33:08 | 286,834,090 | —- | M] () – C:\SYM_REGISTRY_BACKUP.reg
[2007-08-14 01:37:00 | 000,107,908 | —- | M] () – C:\toolkit_widget.gif
[2008-01-22 23:03:51 | 000,000,026 | —- | M] () – C:\UpdaterforApp.ini
[2010-05-02 08:46:48 | 000,093,056 | —- | M] (GMER) – C:\uxldqpow.sys

< %systemroot%\Fonts\*.com >
[2006-11-02 13:37:12 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006-11-02 13:37:12 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006-11-02 13:37:12 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009-09-16 10:50:22 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006-09-18 22:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2007-02-08 23:00:00 | 000,026,364 | —- | M] (Brother Industries ,Ltd ) – C:\WINDOWS\System32\spool\prtprocs\w32x86\brmfpp1.dll
[2009-05-26 04:00:00 | 000,027,648 | —- | M] (CANON INC.) – C:\WINDOWS\System32\spool\prtprocs\w32x86\CNMPDA2.DLL
[2009-05-26 04:00:00 | 000,070,656 | —- | M] (CANON INC.) – C:\WINDOWS\System32\spool\prtprocs\w32x86\CNMPPA2.DLL
[2006-11-02 13:35:48 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\spool\prtprocs\w32x86\jnwppr.dll
[2001-11-20 13:37:28 | 000,047,616 | R— | M] (Black Ice Software) – C:\WINDOWS\System32\spool\prtprocs\w32x86\ppbiPr.dll
[2007-06-27 08:00:00 | 000,057,344 | —- | M] (Zenographics, Inc.) – C:\WINDOWS\System32\spool\prtprocs\w32x86\zIMFPRNT.DLL

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010-09-07 16:12:17 | 000,038,848 | —- | M] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >
[2007-11-19 09:12:04 | 000,001,650 | —- | M] () – C:\Users\Annelie\AppData\Roaming\Microsoft\LastFlashConfig.WFC

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2006-11-02 11:34:05 | 000,008,192 | —- | M] () – C:\WINDOWS\System32\config\COMPONENTS.SAV
[2006-11-02 11:34:05 | 000,020,480 | —- | M] () – C:\WINDOWS\System32\config\DEFAULT.SAV
[2006-11-02 11:34:05 | 000,008,192 | —- | M] () – C:\WINDOWS\System32\config\SECURITY.SAV
[2006-11-02 11:34:08 | 010,133,504 | —- | M] () – C:\WINDOWS\System32\config\SOFTWARE.SAV
[2006-11-02 11:34:08 | 001,826,816 | —- | M] () – C:\WINDOWS\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010-02-14 13:26:54 | 000,001,718 | -HS- | M] () – C:\Users\Annelie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2009-03-03 16:07:49 | 000,050,688 | —- | M] (Atribune.org) – C:\Users\Annelie\Desktop\ATF-Cleaner.exe
[2009-07-14 07:28:29 | 007,751,376 | —- | M] () – C:\Users\Annelie\Desktop\AutostoreTelia.exe
[2011-01-03 00:34:52 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Annelie\Desktop\OTL.exe
[3 C:\Users\Annelie\Desktop\*.tmp files -> C:\Users\Annelie\Desktop\*.tmp -> ]

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-12-31 06:12:05

========== Alternate Data Streams ==========

@Alternate Data Stream - 254 bytes -> C:\ProgramData\TEMP:2B11E0DF
@Alternate Data Stream - 247 bytes -> C:\ProgramData\TEMP:D74B6CF5
@Alternate Data Stream - 236 bytes -> C:\ProgramData\TEMP:0F8F5844
@Alternate Data Stream - 206 bytes -> C:\ProgramData\TEMP:BEF4B0E7
@Alternate Data Stream - 193 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 169 bytes -> C:\ProgramData\TEMP:F4CE9946
@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:D1B5B4F1
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:73F5BDC3
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:1CD23587
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8

< End of report >

Best regards
Farmor Annelie