En saa millän F-Securen pois

hatuttaa26.9.2008 klo 17.36

Tarkoituksena asentaa Kaspersky 2009 mutta se ei onnistu. Asennuksen aikana tulee ilmoitus että koneella on F-Secure ja pitäisi poistaa em ohjelma.

Aikoinaan olikin F-Secure mutta poistin lisää/poista sovelluksella. Nyt kokeilin vielä poistoa tällä http://support.f-secure.com/enu/corporate/downloads/removeav.shtml

Vielä sama ilmoitus Kasperskyssä......

Sitten katselin näitä:
HKEY_LOCAL_MACHINE\SOFTWARE\Data Fellows
HKEY_LOCAL_MACHINE\SOFTWARE\BackWeb
HKEY_LOCAL_MACHINE\SOFTWARE\F-Secure.

sekä:

HKEY_CURRENT_USER

ja lopulta:

C:\Documents and Settings

Näissä ei mitään merkintää F-Securesta.

Edelleen Kaspersky ei asennu koska väittää että koneessa on F-Secure.

Auttakaa!!!

131149

Äänestä

Vastaukset 13

Vanhimmat

Joo.26.9.2008 klo 17.45

Kunhan et innostu sillä muuta poistamaan.

http://www.worldstart.com/weekly-download/archives/reg-cleaner4.3.htm

Äänestä

Pera26.9.2008 klo 17.45

Sinne on voinut jäädä muutama rivi F-Securesta.

Äänestä

Vesku.27.9.2008 klo 6.59

Kuinka poistan F-Securen tuotteet kokonaan?

http://support.f-secure.com/fin/corporate/downloads/removeav.shtml

http://support.f-secure.fi/fin/home/supportissue/fsis2007/install_q05.shtml

http://support.f-secure.fi/fin/home/supportissue/fsis2007/install_q05.shtml

http://support.f-secure.fi/fin/home/supportissue/fsis2008/install_q05.shtml

Äänestä

...........................1.10.2008 klo 20.30
Tehääs seuraava:
Lataa tästä HJTInstall.exe
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

# Tallenna HJTInstall.exe työpöydällesi.
# Tuplaklikkaa HJTInstall.exe-kuvaketta työpöydälläsi.
# Oletuksena se asentaa itsensä hakemistoon C:\Program Files\Trend Micro\HijackThis.
# Klikkaa Install.
# Asennusohjelma luo HijackThis-kuvakkeen työpöydälle.
# Kun asennus on valmis, se käynnistää HijackThisin.
# Klikkaa Do a system scan and save a logfile-painiketta. Ohjelma aloittaa skannauksen ja lokin pitäisi avautua Muistioon.
# Klikkaa ensin "Muokkaa > Valitse kaikki" sitten "Muokkaa > Kopioi" kopioidaksesi koko lokin sisällön.
# Liitä lokin sisältö seuraavaan vastaukseesi.
# ÄLÄ käytä Analyse This-nappulaa, sen löydöt ovat vaarallisia väärinymmärrettyinä.
# ÄLÄ fixaa HijackThis-ohjelmalla vielä mitään. Suurin osa sen löydöistä ovat joko harmittomia tai jopa tarpeellisia.

Nähdään onko sinne jäänyt securen palveluja päälle, siihen ei paljoa auta rekisterin siivoojat.
Äänestä
edelleen hatuttaa1.10.2008 klo 20.46
........................... kirjoitti:
Tehääs seuraava:
Lataa tästä HJTInstall.exe
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

# Tallenna HJTInstall.exe työpöydällesi.
# Tuplaklikkaa HJTInstall.exe-kuvaketta työpöydälläsi.
# Oletuksena se asentaa itsensä hakemistoon C:\Program Files\Trend Micro\HijackThis.
# Klikkaa Install.
# Asennusohjelma luo HijackThis-kuvakkeen työpöydälle.
# Kun asennus on valmis, se käynnistää HijackThisin.
# Klikkaa Do a system scan and save a logfile-painiketta. Ohjelma aloittaa skannauksen ja lokin pitäisi avautua Muistioon.
# Klikkaa ensin "Muokkaa > Valitse kaikki" sitten "Muokkaa > Kopioi" kopioidaksesi koko lokin sisällön.
# Liitä lokin sisältö seuraavaan vastaukseesi.
# ÄLÄ käytä Analyse This-nappulaa, sen löydöt ovat vaarallisia väärinymmärrettyinä.
# ÄLÄ fixaa HijackThis-ohjelmalla vielä mitään. Suurin osa sen löydöistä ovat joko harmittomia tai jopa tarpeellisia.

Nähdään onko sinne jäänyt securen palveluja päälle, siihen ei paljoa auta rekisterin siivoojat.
Tässä:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:44:08, on 1.10.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRAM\RISING\RAV\ravmond.exe
C:\PROGRAM\RISING\RAV\RavStub.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\lxdpcoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program\Rising\Rav\RavTask.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\Program\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Microsoft ActiveSync\wcescomm.exe
C:\Program\Logitech\SetPoint\SetPoint.exe
C:\Program\MICROS~4\rapimgr.exe
C:\Program\Delade filer\Logitech\KHAL\KHALMNPR.EXE
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
c:\windows\system\hpsysdrv.exe
C:\Program\Java\jre1.5.0_05\bin\jusched.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Program\uTorrent\uTorrent.exe
C:\Program\Outlook Express\msimn.exe
C:\Program\Messenger\msmsgs.exe
C:\Program\Mozilla Firefox\firefox.exe
C:\Program\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: (no name) - {60D95E43-6A21-476C-AA84-AF0DF0939D52} - (no file)
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - (no file)
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - (no file)
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O4 - HKLM\..\Run: [HPBootOp] "C:\Program\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [RavTask] "C:\Program\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: StartupFaster
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - C:\Program\Xilisoft\Download YouTube Video\upod_link.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Skapa mobilfavorit... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1189574749906
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1193413189687
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program\DELADE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: jkkjk - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - ---"C:\Program\Delade filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe" (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: lxdpCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdpserv.exe
O23 - Service: lxdp_device - - C:\WINDOWS\system32\lxdpcoms.exe
O23 - Service: Moon Secure Antivirus Core (msav) - Unknown owner - C:\Program\Moon Secure Antivirus\msavcore.exe (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Information Technology Co., Ltd. - C:\Program\Rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Information Technology Co., Ltd. - C:\PROGRAM\RISING\RAV\Ravmond.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: UPnPService - Magix AG - C:\Program\Delade filer\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: Läsartjänsten USN Journal för mappdelning i Messenger (usnjsvc) - Unknown owner - ---"C:\Program\MSN Messenger\usnsvc.exe" (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - ---"C:\Program\Windows Media Player\WMPNetwk.exe" (file missing)

--
End of file - 8624 bytes
Äänestä
ei-asiantuntija1.10.2008 klo 21.30
edelleen hatuttaa kirjoitti:
Tässä:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:44:08, on 1.10.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRAM\RISING\RAV\ravmond.exe
C:\PROGRAM\RISING\RAV\RavStub.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\lxdpcoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program\Rising\Rav\RavTask.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\Program\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Microsoft ActiveSync\wcescomm.exe
C:\Program\Logitech\SetPoint\SetPoint.exe
C:\Program\MICROS~4\rapimgr.exe
C:\Program\Delade filer\Logitech\KHAL\KHALMNPR.EXE
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
c:\windows\system\hpsysdrv.exe
C:\Program\Java\jre1.5.0_05\bin\jusched.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Program\uTorrent\uTorrent.exe
C:\Program\Outlook Express\msimn.exe
C:\Program\Messenger\msmsgs.exe
C:\Program\Mozilla Firefox\firefox.exe
C:\Program\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: (no name) - {60D95E43-6A21-476C-AA84-AF0DF0939D52} - (no file)
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - (no file)
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - (no file)
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O4 - HKLM\..\Run: [HPBootOp] "C:\Program\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [RavTask] "C:\Program\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: StartupFaster
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - C:\Program\Xilisoft\Download YouTube Video\upod_link.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Skapa mobilfavorit... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1189574749906
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1193413189687
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program\DELADE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: jkkjk - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - ---"C:\Program\Delade filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe" (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: lxdpCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdpserv.exe
O23 - Service: lxdp_device - - C:\WINDOWS\system32\lxdpcoms.exe
O23 - Service: Moon Secure Antivirus Core (msav) - Unknown owner - C:\Program\Moon Secure Antivirus\msavcore.exe (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Information Technology Co., Ltd. - C:\Program\Rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Information Technology Co., Ltd. - C:\PROGRAM\RISING\RAV\Ravmond.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: UPnPService - Magix AG - C:\Program\Delade filer\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: Läsartjänsten USN Journal för mappdelning i Messenger (usnjsvc) - Unknown owner - ---"C:\Program\MSN Messenger\usnsvc.exe" (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - ---"C:\Program\Windows Media Player\WMPNetwk.exe" (file missing)

--
End of file - 8624 bytes
En väitä osaavani tulkita tuota lokia, mutta ei kai sulla ole kahta antivirusohjelmaa samaan aikaan? Ei saa olla. Mikä on tuo "Moon Secure"?
Äänestä
hatuttaa1.10.2008 klo 21.44
ei-asiantuntija kirjoitti:
En väitä osaavani tulkita tuota lokia, mutta ei kai sulla ole kahta antivirusohjelmaa samaan aikaan? Ei saa olla. Mikä on tuo "Moon Secure"?
Joskus ollut Moon Antivirus.
Äänestä
ei ole mikään ihme1.10.2008 klo 22.31
hatuttaa kirjoitti:
Joskus ollut Moon Antivirus.
Ja sitten siellä on vielä Rising AV! Ei helvetti! Ei ole mikään ihme jos sinne ei mikään enää asennu kun sulla on jämiä F-Securesta, Moon Securesta ja vielä Rising AV pyörii taustalla.
Äänestä
....................2.10.2008 klo 1.24
ei ole mikään ihme kirjoitti:
Ja sitten siellä on vielä Rising AV! Ei helvetti! Ei ole mikään ihme jos sinne ei mikään enää asennu kun sulla on jämiä F-Securesta, Moon Securesta ja vielä Rising AV pyörii taustalla.
Oookke, lähetää kattomaan ku on siel jämiä örkeistä.

u][b]Luo poistolista:[/b][/u]
[list][*] Avaa HiJackThis
[*] Klikkaa "Open the Misc Tools section" valintaa
[*] Klikkaa "Open Uninstall Manager..."
[*] Klikkaa valintaa "Save list"
[*] Kopioi ja liitä kyseinen lista muistiosta postiisi[/list]

anna se lista tänne...

list][*]Lataa [url=http://images.malwareremoval.com/random/RSIT.exe][color=red][b][u]tästä[/u][/b][/color][/url] [color=blue][b]random's system information tool (RSIT)[/b][/color] by [color=#6600cc][b]random/random[/b][/color] ja tallenna se työpöydälle
[*]Tuplaklikkaa [b]RSIT.exeä[/b] ajaaksesi [color=blue][b]RSITin[/b][/color].
[*]Klikkaa [b]Continue[/b].
[*]Kun RSIT on valmis, kaksi lokia avautuu muistioon. Lähetä sekä [b]log.txt:n[/b] (
Äänestä
..............2.10.2008 klo 1.28
.................... kirjoitti:
Oookke, lähetää kattomaan ku on siel jämiä örkeistä.

u][b]Luo poistolista:[/b][/u]
[list][*] Avaa HiJackThis
[*] Klikkaa "Open the Misc Tools section" valintaa
[*] Klikkaa "Open Uninstall Manager..."
[*] Klikkaa valintaa "Save list"
[*] Kopioi ja liitä kyseinen lista muistiosta postiisi[/list]

anna se lista tänne...

list][*]Lataa [url=http://images.malwareremoval.com/random/RSIT.exe][color=red][b][u]tästä[/u][/b][/color][/url] [color=blue][b]random's system information tool (RSIT)[/b][/color] by [color=#6600cc][b]random/random[/b][/color] ja tallenna se työpöydälle
[*]Tuplaklikkaa [b]RSIT.exeä[/b] ajaaksesi [color=blue][b]RSITin[/b][/color].
[*]Klikkaa [b]Continue[/b].
[*]Kun RSIT on valmis, kaksi lokia avautuu muistioon. Lähetä sekä [b]log.txt:n[/b] (
Anteeksi
Luo poistolista:
* Avaa HiJackThis
* Klikkaa "Open the Misc Tools section" valintaa
* Klikkaa "Open Uninstall Manager..."
* Klikkaa valintaa "Save list"
* Kopioi ja liitä kyseinen lista muistiosta postiisi

Lataa tästä random's system information tool (RSIT) by random/random ja tallenna se työpöydälle
http://images.malwareremoval.com/random/RSIT.exe
# ja tallenna se työpöydälle
# Tuplaklikkaa RSIT.exeä ajaaksesi RSITin.
# Klikkaa Continue.
# Kun RSIT on valmis, kaksi lokia avautuu muistioon. Lähetä sekä log.txt:n (
Äänestä
hatuttaa2.10.2008 klo 8.04
.............. kirjoitti:
Anteeksi
Luo poistolista:
* Avaa HiJackThis
* Klikkaa "Open the Misc Tools section" valintaa
* Klikkaa "Open Uninstall Manager..."
* Klikkaa valintaa "Save list"
* Kopioi ja liitä kyseinen lista muistiosta postiisi

Lataa tästä random's system information tool (RSIT) by random/random ja tallenna se työpöydälle
http://images.malwareremoval.com/random/RSIT.exe
# ja tallenna se työpöydälle
# Tuplaklikkaa RSIT.exeä ajaaksesi RSITin.
# Klikkaa Continue.
# Kun RSIT on valmis, kaksi lokia avautuu muistioon. Lähetä sekä log.txt:n (
Logfile of random's system information tool 1.04 (written by random/random)
Run by Compaq_Ägaren at 2008-10-02 08:02:14
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 58 GB (40%) free of 147 GB
Total RAM: 446 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:02:36, on 2.10.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRAM\RISING\RAV\ravmond.exe
C:\PROGRAM\RISING\RAV\RavStub.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\lxdpcoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program\Rising\Rav\RavTask.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Microsoft ActiveSync\wcescomm.exe
C:\Program\Rising\Rav\Ravmon.exe
C:\Program\Logitech\SetPoint\SetPoint.exe
C:\Program\MICROS~4\rapimgr.exe
C:\Program\Delade filer\Logitech\KHAL\KHALMNPR.EXE
C:\HP\KBD\KBD.EXE
C:\Program\Mozilla Firefox\firefox.exe
C:\WINDOWS\ALCXMNTR.EXE
c:\windows\system\hpsysdrv.exe
C:\Program\Java\jre1.5.0_05\bin\jusched.exe
C:\Program\Outlook Express\msimn.exe
C:\Program\Messenger\msmsgs.exe
C:\Program\uTorrent\uTorrent.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Program\Trend Micro\HijackThis\HijackThis.exe
C:\Documents and Settings\Compaq_Ägaren\Skrivbord\RSIT.exe
C:\Program\Trend Micro\HijackThis\Compaq_Ägaren.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: (no name) - {60D95E43-6A21-476C-AA84-AF0DF0939D52} - (no file)
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - (no file)
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - (no file)
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O4 - HKLM\..\Run: [HPBootOp] "C:\Program\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [RavTask] "C:\Program\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: StartupFaster
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - C:\Program\Xilisoft\Download YouTube Video\upod_link.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Skapa mobilfavorit... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1189574749906
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1193413189687
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program\DELADE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: jkkjk - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - ---"C:\Program\Delade filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe" (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: lxdpCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdpserv.exe
O23 - Service: lxdp_device - - C:\WINDOWS\system32\lxdpcoms.exe
O23 - Service: Moon Secure Antivirus Core (msav) - Unknown owner - C:\Program\Moon Secure Antivirus\msavcore.exe (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Information Technology Co., Ltd. - C:\Program\Rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Information Technology Co., Ltd. - C:\PROGRAM\RISING\RAV\Ravmond.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: UPnPService - Magix AG - C:\Program\Delade filer\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: Läsartjänsten USN Journal för mappdelning i Messenger (usnjsvc) - Unknown owner - ---"C:\Program\MSN Messenger\usnsvc.exe" (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - ---"C:\Program\Windows Media Player\WMPNetwk.exe" (file missing)

--
End of file - 8737 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{60D95E43-6A21-476C-AA84-AF0DF0939D52}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}]
DealioBHO Class

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - []
{381FFDE8-2394-4f90-B10D-FC6124A40F8C}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HPBootOp"=C:\Program\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe [2006-02-16 249856]
"RavTask"=C:\Program\Rising\Rav\RavTask.exe [2008-09-25 211568]
"Look 'n' Stop"=C:\Program Files\Soft4Ever\looknstop\looknstop.exe [2008-09-30 552960]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"H/PC Connection Agent"=C:\Program\Microsoft ActiveSync\wcescomm.exe [2005-11-15 1204224]

C:\Documents and Settings\All Users\Start-meny\Program\Autostart
Logitech SetPoint.lnk - C:\Program\Logitech\SetPoint\SetPoint.exe

C:\Documents and Settings\Compaq_Ägaren\Start-meny\Program\Autostart
StartupFaster

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program\SUPERAntiSpyware\SASWINLO.dll [2008-07-23 352256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\SYSTEM32\Ati2evxx.dll [2008-02-26 126976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jkkjk]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\SYSTEM32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
"{32CD708B-60A7-4C00-9377-D73EAA495F0F}"=C:\WINDOWS\system32\RavExt.dll [2008-09-25 113264]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\runtime2.sys.REN]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\runtime2.sys.REN]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program\Messenger\msmsgs.exe"="C:\Program\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program\MSN Messenger\msnmsgr.exe"="C:\Program\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program\MSN Messenger\livecall.exe"="C:\Program\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program\uTorrent\uTorrent.exe"="C:\Program\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program\Microsoft ActiveSync\rapimgr.exe"="C:\Program\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program\Microsoft ActiveSync\wcescomm.exe"="C:\Program\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program\Microsoft ActiveSync\WCESMgr.exe"="C:\Program\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program\Skype\Phone\Skype.exe"="C:\Program\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\WINDOWS\system32\lxdpcoms.exe"="C:\WINDOWS\system32\lxdpcoms.exe:*:Enabled:Z2300 Series Server"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdppswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdppswx.exe:*:Enabled:Printer Status Window Interface"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdptime.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdptime.exe:*:Enabled:Lexmark Connect Time Executable"
"C:\Program\Lexmark Z2300 Series\lxdpmon.exe"="C:\Program\Lexmark Z2300 Series\lxdpmon.exe:*:Enabled:Printer Device Monitor"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdpjswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdpjswx.exe:*:Enabled:Job Status Window Interface"
"C:\WINDOWS\system32\mpxa.exe"="C:\WINDOWS\system32\mpxa.exe:*:Enabled:mpxa"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program\MSN Messenger\msnmsgr.exe"="C:\Program\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program\MSN Messenger\livecall.exe"="C:\Program\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program\Microsoft ActiveSync\rapimgr.exe"="C:\Program\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program\Microsoft ActiveSync\wcescomm.exe"="C:\Program\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program\Microsoft ActiveSync\WCESMgr.exe"="C:\Program\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe"="C:\Program\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe:*:Enabled:F-Secure Automatic Update"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{605e221f-9382-11db-8fbb-0016175b1707}]
shell\AutoRun\command - K:\LaunchU3.exe -a

======List of files/folders created in the last 1 months======

2008-10-02 08:02:14 ----D---- C:\rsit
2008-10-01 20:43:27 ----D---- C:\Program\Trend Micro
2008-09-30 23:45:25 ----A---- C:\WINDOWS\system32\fwapi.dll
2008-09-30 20:47:11 ----D---- C:\Documents and Settings\All Users\Application Data\fqrcxmba
2008-09-30 20:36:24 ----D---- C:\Program\VstPlugins
2008-09-30 20:36:24 ----A---- C:\WINDOWS\system32\rewire.dll
2008-09-30 20:35:04 ----D---- C:\Program\Outsim
2008-09-26 08:35:33 ----D---- C:\Program\SpywareBlaster
2008-09-26 07:56:47 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\PCToolsFirewallPlus
2008-09-25 00:15:06 ----RSH---- C:\rising.ini
2008-09-25 00:15:06 ----A---- C:\WINDOWS\system32\BsMain.ini
2008-09-25 00:14:43 ----A---- C:\WINDOWS\system32\RavExt.dll
2008-09-25 00:14:41 ----A---- C:\WINDOWS\system32\bsmain.exe
2008-09-25 00:14:14 ----D---- C:\Program\Rising
2008-09-25 00:13:35 ----A---- C:\WINDOWS\Rav.ini
2008-09-24 21:08:57 ----A---- C:\WINDOWS\RSBDBACKUP.DLL
2008-09-23 11:38:32 ----A---- C:\WINDOWS\system32\svchost.exe.job
2008-09-23 00:07:47 ----A---- C:\WINDOWS\RsConfig.ini
2008-09-23 00:02:49 ----RSD---- C:\RavBin
2008-09-23 00:01:42 ----D---- C:\Documents and Settings\All Users\Application Data\Rising
2008-09-20 17:34:46 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Comodo
2008-09-20 16:26:02 ----A---- C:\WINDOWS\_MSRSTRT.EXE
2008-09-20 16:12:12 ----D---- C:\Program\Delade filer\Agnitum Shared
2008-09-20 08:25:44 ----A---- C:\WINDOWS\system32\pep.exe
2008-09-18 18:57:53 ----D---- C:\logs
2008-09-18 18:57:28 ----A---- C:\WINDOWS\system32\lxdpvs.dll
2008-09-18 18:57:25 ----A---- C:\WINDOWS\system32\lxdpcoin.dll
2008-09-18 18:57:02 ----D---- C:\Program\Lexmark Toolbar
2008-09-18 18:56:56 ----A---- C:\WINDOWS\system32\lxdpwupd.exe
2008-09-18 18:56:56 ----A---- C:\WINDOWS\system32\lxdpwupd.dll
2008-09-18 18:56:55 ----A---- C:\WINDOWS\system32\lxdprwrd.ini
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\lxdputil.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\LXDPinst.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\lxdpinpa.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\lxdpiesc.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\LXDPhcp.dll
2008-09-18 18:56:41 ----A---- C:\WINDOWS\system32\lxdpusb1.dll
2008-09-18 18:56:41 ----A---- C:\WINDOWS\system32\lxdpserv.dll
2008-09-18 18:56:41 ----A---- C:\WINDOWS\system32\lxdpprox.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdppmui.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdplmpm.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpjswr.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpinsr.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpinsb.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpins.dll
2008-09-18 18:56:39 ----A---- C:\WINDOWS\system32\lxdpih.exe
2008-09-18 18:56:39 ----A---- C:\WINDOWS\system32\lxdphbn3.dll
2008-09-18 18:56:39 ----A---- C:\WINDOWS\system32\lxdpgrd.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpgf.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpcur.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpcub.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpcu.dll
2008-09-18 18:56:37 ----A---- C:\WINDOWS\system32\lxdpcoms.exe
2008-09-18 18:56:37 ----A---- C:\WINDOWS\system32\lxdpcomm.dll
2008-09-18 18:56:37 ----A---- C:\WINDOWS\system32\lxdpcomc.dll
2008-09-18 18:56:36 ----A---- C:\WINDOWS\system32\lxdpcfg.exe
2008-09-18 18:56:36 ----A---- C:\WINDOWS\system32\LXDPcfg.dll
2008-09-18 18:56:29 ----D---- C:\Program\Lexmark Z2300 Series
2008-09-17 14:17:50 ----D---- C:\Program\SUPERAntiSpyware
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbdkor.dll
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbd103.dll
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbd101c.dll
2008-09-10 17:18:28 ----A---- C:\WINDOWS\system32\kbd101b.dll
2008-09-10 17:18:27 ----A---- C:\WINDOWS\system32\kbd106.dll
2008-09-10 17:09:16 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\URSoft
2008-09-10 08:42:26 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-10 08:41:42 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2008-09-08 23:29:11 ----D---- C:\Documents and Settings\All Users\Application Data\Comodo
2008-09-07 01:04:22 ----D---- C:\Program\Microsoft Bootvis
2008-09-05 00:20:39 ----D---- C:\Program\Delade filer\PC Tools
2008-09-04 23:35:17 ----D---- C:\Documents and Settings\All Users\Application Data\Avira

======List of files/folders modified in the last 1 months======

2008-10-02 08:02:14 ----D---- C:\WINDOWS\Prefetch
2008-10-02 07:53:55 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\uTorrent
2008-10-02 07:52:12 ----D---- C:\WINDOWS\Temp
2008-10-02 07:51:40 ----D---- C:\Program\Mozilla Firefox
2008-10-02 01:58:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-10-01 20:43:27 ----RD---- C:\Program
2008-10-01 15:54:31 ----AD---- C:\WINDOWS
2008-10-01 15:46:29 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-10-01 07:59:39 ----D---- C:\WINDOWS\system32\CatRoot2
2008-09-30 23:46:06 ----SHD---- C:\WINDOWS\Installer
2008-09-30 23:46:06 ----SHD---- C:\Config.Msi
2008-09-30 23:45:33 ----HD---- C:\WINDOWS\inf
2008-09-30 23:45:31 ----D---- C:\WINDOWS\system32\drivers
2008-09-30 23:45:25 ----RSHD---- C:\WINDOWS\system32
2008-09-30 23:45:24 ----D---- C:\Program Files
2008-09-30 23:19:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-09-30 22:58:55 ----D---- C:\WINDOWS\system32\wbem
2008-09-30 21:56:21 ----D---- C:\Program\Delade filer\Wise Installation Wizard
2008-09-30 20:22:57 ----A---- C:\WINDOWS\NeroDigital.ini
2008-09-23 20:57:51 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\U3
2008-09-23 11:34:46 ----D---- C:\WINDOWS\system32\LogFiles
2008-09-23 00:22:03 ----D---- C:\WINDOWS\system32\dllcache
2008-09-23 00:21:47 ----D---- C:\WINDOWS\Help
2008-09-23 00:21:11 ----RSD---- C:\WINDOWS\Fonts
2008-09-20 16:12:12 ----D---- C:\Program\Delade filer
2008-09-17 16:08:44 ----D---- C:\Program\Delade filer\Real
2008-09-17 16:08:40 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Real
2008-09-17 14:17:50 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\SUPERAntiSpyware.com
2008-09-17 11:40:53 ----D---- C:\WINDOWS\system32\CatRoot
2008-09-17 00:02:23 ----SD---- C:\WINDOWS\Tasks
2008-09-15 00:32:46 ----D---- C:\WINDOWS\Internet Logs
2008-09-10 23:38:52 ----D---- C:\Program\Malwarebytes' Anti-Malware
2008-09-10 21:39:44 ----SD---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Microsoft
2008-09-10 18:01:12 ----D---- C:\WINDOWS\Debug
2008-09-10 08:42:27 ----D---- C:\WINDOWS\WinSxS
2008-09-09 00:39:07 ----D---- C:\WINDOWS\system32\config
2008-09-09 00:38:41 ----D---- C:\WINDOWS\Registration
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\MSVCRTD.DLL
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\msvcr71.dll
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\msvcp71.dll
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\monln.dll
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\mfc71.dll
2008-09-07 10:38:52 ----D---- C:\Program\DivX
2008-09-03 18:41:39 ----D---- C:\Documents and Settings\All Users\Application Data\Network Associates
2008-09-03 18:41:36 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Network Associates
2008-09-03 10:16:11 ----D---- C:\Program\Delade filer\Softwin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ACEDRV05;ACEDRV05; \??\C:\WINDOWS\system32\drivers\ACEDRV05.sys []
R1 AmdK8;AMD-processordrivrutin; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-10 43008]
R1 BUFADPT;BUFADPT; \??\C:\WINDOWS\system32\BUFADPT.SYS []
R1 HookCont;HookCont; C:\WINDOWS\system32\drivers\HookCont.sys [2008-09-25 13808]
R1 HookNtos;HookNtos; C:\WINDOWS\system32\drivers\HookNtos.sys [2008-09-25 62576]
R1 HookReg;HookReg; C:\WINDOWS\system32\drivers\HookReg.sys [2008-09-25 38256]
R1 HookSys;HookSys; C:\WINDOWS\system32\drivers\HookSys.sys [2008-09-25 164848]
R1 lnsfw1;lnsfw1; C:\WINDOWS\system32\drivers\lnsfw1.sys [2008-09-30 79232]
R1 SASDIFSV;SASDIFSV; \??\C:\Program\SUPERAntiSpyware\SASDIFSV.SYS []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R2 ACEDRV09;ACEDRV09; \??\C:\WINDOWS\system32\drivers\ACEDRV09.sys []
R2 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2006-04-22 8064]
R2 IOSLINK;IOSLINK; \??\C:\WINDOWS\system32\drivers\IosLink.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-08-30 3644928]
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2006-08-18 20096]
R3 Arp1394;1394 ARP-klientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-02-26 2863616]
R3 ElbyDelay;ElbyDelay; C:\WINDOWS\System32\Drivers\ElbyDelay.sys [2005-04-12 4608]
R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2005-05-20 25600]
R3 LHidUsbK;Logitech SetPoint USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsbK.Sys [2005-05-20 36480]
R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\System32\Drivers\LMouKE.sys [2005-05-20 68352]
R3 mouhid;HID-drivrutin för mus; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-06 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2005-12-12 19072]
R3 SFilter;Look 'n' Stop Driver; C:\WINDOWS\system32\DRIVERS\lnsfw.sys [2008-09-30 58232]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-aktiverat nav; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Microsoft USB-skrivarklass; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbstor;Drivrutin för USB-masslagringsenheter; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 WLIU2KG125S;BUFFALO WLI-U2-KG125S Wireless LAN Adapter Driver; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800]
S1 SABKUTIL;SABKUTIL; \??\C:\Program\SuperAdBlocker.com\Super Ad Blocker\SABKUTIL.sys []
S1 SASKUTIL;SASKUTIL; ---\??\C:\Program\SUPERAntiSpyware\SASKUTIL.sys []
S3 0013C;0013C; \??\C:\WINDOWS\system32\0013C.sys []
S3 09a2;09a2; \??\C:\WINDOWS\system32\09a2.sys []
S3 0ca1B;0ca1B; \??\C:\WINDOWS\system32\0ca1B.sys []
S3 16d31;16d31; \??\C:\WINDOWS\system32\16d31.sys []
S3 50c3;50c3; \??\C:\WINDOWS\system32\50c3.sys []
S3 61883;Enhet av typen 61883; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 9362;9362; \??\C:\WINDOWS\system32\9362.sys []
S3 ASFWHide;ASFWHide; \??\C:\DOCUME~1\COMPAQ~1\LOKALA~1\Temp\ASFWHide []
S3 Avc;AVC-enhet; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 b402;b402; \??\C:\WINDOWS\system32\b402.sys []
S3 bdfdll;bdfdll; \??\C:\Program\Softwin\BitDefender10\bdfdll.sys []
S3 bdfm;BDFM; C:\WINDOWS\system32\drivers\bdfm.sys []
S3 BDFSDRV;BDFSDRV; ---\??\C:\Program\Softwin\BitDefender10\bdfsdrv.sys []
S3 BDRsDrv;BDRsDrv; \??\C:\Program\Softwin\BitDefender10\bdrsdrv.sys []
S3 CCDECODE;Avkodare för dold textning; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 d0124;d0124; \??\C:\WINDOWS\system32\d0124.sys []
S3 DrvFltIp;DrvFltIp; \??\C:\Documents and Settings\Compaq_Ägaren\Lokala inställningar\TEMP\DrvFltIp []
S3 ef64;ef64; \??\C:\WINDOWS\system32\ef64.sys []
S3 fsbl-standalone;F-Secure BlackLight Beta Engine Driver; \??\C:\DOCUME~1\COMPAQ~1\LOKALA~1\Temp\F-Secure\BlackLight\fsbldrv.sys []
S3 HidUsb;Microsoft HID-klassdrivrutin; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\System32\Drivers\L8042mou.sys [2005-05-20 54528]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Tee/Sink-to-Sink-konverterare för Microsoft-direktuppspelning; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NCHSSVAD;SoundTap Recorder; C:\WINDOWS\system32\drivers\nchssvad.sys [2007-12-17 23616]
S3 NdisIP;Microsoft TV/Video-anslutning; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288]
S3 Profos;Profos; \??\C:\Program\Delade filer\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-01-19 80512]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 SABProcEnum;SABProcEnum; \??\C:\Program\SuperAdBlocker.com\Super Ad Blocker\SABProcEnum.sys []
S3 SASENUM;SASENUM; \??\C:\Program\SUPERAntiSpyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 snpstd;Trust 120 SpaceCam; C:\WINDOWS\system32\DRIVERS\snpstd.sys [2004-02-19 299776]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 Trufos;Trufos; \??\C:\Program\Delade filer\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 u2kg54l;BUFFALO WLI-U2-KG54L Wireless LAN Driver; C:\WINDOWS\system32\DRIVERS\u2kg54l.sys [2006-08-24 477696]
S3 usbscan;Drivrutin för USB-skanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2004-12-30 104576]
S3 WSTCODEC;Teletext-codec för världsstandard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 intelppm;Intel-processordrivrutin; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40320]
S4 WS2IFSL;Stödmiljö för Windows Socket 2.0 Icke-IFS-tjänstprovider; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
S4 vsdatant;vsdatant; C:\WINDOWS\system32\drivers\vsdatant.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-02-26 520192]
R2 Capture Device Service;Capture Device Service; C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe [2007-03-06 198168]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2003-02-25 303104]
R2 lxdp_device;lxdp_device; C:\WINDOWS\system32\lxdpcoms.exe [2007-12-01 594600]
R2 RsCCenter;Rising Process Communication Center; C:\Program\Rising\Rav\CCenter.exe [2008-09-25 162416]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-02-25 593920]
S2 lxdpCATSCustConnectService;lxdpCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdpserv.exe [2007-12-01 98984]
S2 msav;Moon Secure Antivirus Core; C:\Program\Moon Secure Antivirus\msavcore.exe []
S2 RsRavMon;Rising RealTime Monitor; C:\PROGRAM\RISING\RAV\Ravmond.exe [2008-09-25 395888]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 IDriverT;InstallDriver Table Manager; ---C:\Program\Delade filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe []
S3 ServiceLayer;ServiceLayer; C:\Program\PC Connectivity Solution\ServiceLayer.exe [2007-06-15 300544]
S3 UPnPService;UPnPService; C:\Program\Delade filer\MAGIX Shared\UPnPService\UPnPService.exe [2006-12-14 544768]
S3 usnjsvc;Läsartjänsten USN Journal för mappdelning i Messenger; ---C:\Program\MSN Messenger\usnsvc.exe []
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; ---C:\Program\Windows Media Player\WMPNetwk.exe []
S4 BackWeb Plug-in - 7681197;F-Secure Automatic Update; C:\Program\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE []

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.04 2008-10-02 08:02:40

======Uninstall list======

-->C:\Program\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\BWUnin-6.3.2.116-7681197L.exe -AppId 7681197
-->C:\WINDOWS\IsUn041d.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{35D8D1B9-DAD1-4505-8A33-78095885CF6B}\Setup.exe" -l0x9
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.2 - Svenska-->MsiExec.exe /I{AC76BA86-7AD7-1053-7B44-A81200000003}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Agfa ScanWise 1.60-->C:\WINDOWS\IsUninst.exe -f"C:\Program\Agfa\ScanWise 1_60\uninst.isu" -c"C:\Program\Agfa\ScanWise 1_60\UNINSTALL.DLL"
AnyDVD-->"C:\Program\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program\SlySoft\AnyDVD"
ATI - Hjälp för avinstallation av program-->C:\Program\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->RunDll32 C:\Program\DELADE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Kontrollpanel-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
CCleaner (remove only)-->"C:\Program\CCleaner\uninst.exe"
ChristmasTheme-->MsiExec.exe /X{7523F68F-3DA4-452A-A17F-4AF55A8A25BB}
CloneDVD2-->"C:\Program\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program\Elaborate Bytes\CloneDVD2"
CoverPro-->"C:\Program\CoverPro\unins000.exe"
dBpowerAMP FLAC Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP FLAC Codec.dat
dBpowerAMP Monkeys Audio Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Monkeys Audio Codec.dat
dBpowerAMP Musepack Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Musepack Codec.dat
dBpowerAMP Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat
dBpowerAMP Ogg Vorbis Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Ogg Vorbis Codec.dat
dBpowerAMP WMA V9.1 Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP WMA V9.1 Codec.dat
Deluxe Ski Jump 3 v1.01-->"C:\Program\Deluxe Ski Jump 3\Uninstall\unins000.exe"
Destinator Console Installation-->C:\DESTIN~1\COLLEC~1\UNWISE.EXE C:\DESTIN~1\COLLEC~1\INSTALL.LOG
DivX Converter-->C:\Program\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program\DivX\DivXWebPlayerUninstall.exe /PLUGIN
dMC Power Pack-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dMC Power Pack.dat
DVD Shrink 3.2-->"C:\Program\DVD Shrink\unins000.exe"
EasyCleaner-->RunDll32 C:\Program\DELADE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9 -removeonly
Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
EPSON Printer Software-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EVEREST Ultimate Edition v4.20-->"C:\Program\Lavalys\EVEREST Ultimate Edition\unins000.exe"
Firebird SQL Server - MAGIX Edition (D)-->C:\MAGIX\Common\Database\uninstall.exe
Firebird SQL Server - MAGIX Edition-->C:\MAGIX\Common\Database\unwise.exe
FireTune-->C:\WINDOWS\iun6002.exe "C:\Program\FireTune\irunin.ini"
GoldWave v5.13-->"C:\Program\GoldWave\unstall.exe" "GoldWave v5.13" "C:\Program\GoldWave\unstall.log"
Guitar Pro 5.1-->"C:\Program\Guitar Pro 5\unins000.exe"
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Boot Optimizer-->MsiExec.exe /X{1341D838-719C-4A05-B50F-49420CA1B4BB}
HP DVD Play 2.1-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\Setup.exe" -uninstall
HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
Internet-tjänster-->C:\Program\DELADE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{5CFD7508-7774-48FE-8280-7A3C0AE71755} /l1053
InterVideo DeviceService-->MsiExec.exe /I{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}
J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
J2SE Runtime Environment 5.0 Update 8-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150080}
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
Kundupplevelseförbättringar-->C:\Program\DELADE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{23012310-3E05-46A5-88A9-C6CBCABCAC79} /l1053
Lexmark Z2300 Series-->C:\Program\Lexmark Z2300 Series\Install\x86\Uninst.exe
Logitech SetPoint-->RunDll32 C:\Program\DELADE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x1d -removeonly
Look 'n' Stop 2.06p3-->"C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -uninst
Macromedia Flash Player 8-->MsiExec.exe /X{6815FCDD-401D-481E-BA88-31B4754C2B46}
Macromedia Flash Player 8-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
MAGIX Goya burnR 1.3.1.2 (US)-->C:\Program\MAGIX\Goya_burnR\instslct.exe
MAGIX Music Maker 12 deluxe 12.1.0.4 (US)-->C:\Program\MAGIX\MusicMaker12deluxe\instslct.exe
MAGIX Music Maker Basic Edition 12.1.0.3 (UK)-->C:\Program\MAGIX\MusicMakerBasicEdition\instslct.exe
MAGIX Music Manager 2007 8.1.1.114 (US)-->C:\Program\MAGIX\Music_Manager_2007\instslct.exe
MAGIX Music Manager-->C:\MAGIX\Music_Manager\instslct.exe
MAGIX Photo Manager 2007 4.1.1.77 (US)-->C:\Program\MAGIX\Photo_Manager_2007\instslct.exe
MAGIX Screenshare 4.3.6.1987 (US)-->C:\Program\MAGIX\PCVisit\unwise.exe
MAGIX Xtreme Photo Designer 6 6.0.24.0 (US)-->C:\Program\MAGIX\Xtreme_Photo_Designer_6\unwise.exe
Malwarebytes' Anti-Malware-->"C:\Program\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1 Swedish Language Pack-->MsiExec.exe /X{992A2DB1-4ABC-4738-BD71-045C5FFE00D1}
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack - SVE-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - SVE\install.exe
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft ActiveSync 4.0-->MsiExec.exe /I{B208806F-A231-4FA0-AB3F-5C1B8979223E}
Microsoft Bootvis-->MsiExec.exe /I{0F9196C6-58B4-445B-B56E-B1200FECC151}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2000 Professional-->MsiExec.exe /I{0001041D-78E1-11D2-B60F-006097C998E7}
Microsoft Plus! for Windows XP-->MsiExec.exe /I{EEC2DAFD-5558-40AC-8E9C-5005C8F810E8}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Windows Theme Nunavut-->MsiExec.exe /X{047815FB-4E38-42D5-95CB-8A131DDD8668}
Microsoft Windows Theme Ontario-->MsiExec.exe /X{9757283E-3FCA-4F3D-9257-928859318E55}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works-->MsiExec.exe /I{F4B620CE-4297-4140-B0C3-6D4E8A8EF0AB}
Mozilla Firefox (3.0.3)-->C:\Program\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Nero 7 Demo-->MsiExec.exe /I{1B779CC7-5F25-29B3-5150-AF44A6201053}
Opera 9.52-->MsiExec.exe /X{E1A88DE8-BD36-4DEA-8DD8-E35EF475ADC7}
PC Connectivity Solution-->MsiExec.exe /I{99A40651-0BC2-4095-8F9A-A40FAB224FEF}
PC-Doctor 5 for Windows-->C:\Program\PC-Doctor 5 for Windows\uninst.exe
PhotoNow! 1.0-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\Setup.exe" -uninstall
PoiEdit-->C:\Program\DNOTES~1\POIEDI~1\UNWISE.EXE C:\Program\DNOTES~1\POIEDI~1\INSTALL.LOG
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
QuickTime-->MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}
Recover My Files-->"C:\Program\GetData\Recover My Files\unins000.exe"
Rising Antivirus-->C:\Program\Rising\Rav\Update\Setup.exe /UNINSTALL
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update för Microsoft .NET Framework 2.0 (kB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
Skype 3.1-->"C:\Program\Skype\Phone\unins000.exe"
Skype Plugin Manager-->MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}
Slice Uninstall-->C:\Program\NCH Swift Sound\Slice\uninst.exe
Snabbkorrigering för Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Snabbkorrigering för Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Sonic Express Labeler-->MsiExec.exe /X{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /X{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /X{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /X{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /X{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /X{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
SpywareBlaster 4.1-->"C:\Program\SpywareBlaster\unins000.exe"
SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Switch-->C:\Program\NCH Swift Sound\Switch\uninst.exe
Säkerhetsuppdatering för Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Texas Hold'em Poker 3D - Deluxe Edition 1.0-->"C:\Program\Play+Smile\Texas Hold'em Poker 3D - Deluxe Edition\unins000.exe"
Text-To-Speech-Runtime-->MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
Total Video Converter 3.10-->"C:\Program\Total Video Converter\unins000.exe"
Uppdatering för Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
WavePad Uninstall-->C:\Program\NCH Swift Sound\WavePad\uninst.exe
VideoLAN VLC media player 0.8.6a-->C:\Program\VideoLAN\VLC\uninstall.exe
Windows Defender Signatures-->MsiExec.exe /I{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live Messenger-->MsiExec.exe /I{2E55A582-4FFE-4FF2-8D4D-E7D275FF89BD}
Windows Media Format 11 runtime-->"C:\Program\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Program\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Program\WinRAR\uninstall.exe
Xilisoft Download YouTube Video-->C:\Program\Xilisoft\Download YouTube Video\Uninstall.exe
Yahoo! Install Manager-->C:\WINDOWS\system32\regsvr32 /u C:\Program\Yahoo!\Common\YINSTH~1.DLL

======Security center information======

AV: Rising Antivirus
FW: Look 'n' Stop 2.06p3 (Soft4Ever)

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\PROGRAM\PC CONNECTIVITY SOLUTION\;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;C:\PYTHON22;C:\PROGRAM\ATI TECHNOLOGIES\ATI CONTROL PANEL;C:\PROGRAM\QUICKTIME\QTSYSTEM\;;;C:\PROGRAM\DELADE FILER\ULEAD SYSTEMS\MPEG;C:\Program\ATI Technologies\ATI.ACE\Core-Static
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 63 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=3f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program\Delade filer\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program\Java\jre1.5.0_08\lib\ext\QTJava.zip
"QTJAVA"=C:\Program\Java\jre1.5.0_08\lib\ext\QTJava.zip
"Rav"=C:\Documents and Settings\All Users\Application Data\Rising\Rav

-----------------EOF-----------------
Äänestä
hatuttaa4.10.2008 klo 11.40
hatuttaa kirjoitti:
Logfile of random's system information tool 1.04 (written by random/random)
Run by Compaq_Ägaren at 2008-10-02 08:02:14
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 58 GB (40%) free of 147 GB
Total RAM: 446 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:02:36, on 2.10.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRAM\RISING\RAV\ravmond.exe
C:\PROGRAM\RISING\RAV\RavStub.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\lxdpcoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program\Rising\Rav\RavTask.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Microsoft ActiveSync\wcescomm.exe
C:\Program\Rising\Rav\Ravmon.exe
C:\Program\Logitech\SetPoint\SetPoint.exe
C:\Program\MICROS~4\rapimgr.exe
C:\Program\Delade filer\Logitech\KHAL\KHALMNPR.EXE
C:\HP\KBD\KBD.EXE
C:\Program\Mozilla Firefox\firefox.exe
C:\WINDOWS\ALCXMNTR.EXE
c:\windows\system\hpsysdrv.exe
C:\Program\Java\jre1.5.0_05\bin\jusched.exe
C:\Program\Outlook Express\msimn.exe
C:\Program\Messenger\msmsgs.exe
C:\Program\uTorrent\uTorrent.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Program\Trend Micro\HijackThis\HijackThis.exe
C:\Documents and Settings\Compaq_Ägaren\Skrivbord\RSIT.exe
C:\Program\Trend Micro\HijackThis\Compaq_Ägaren.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: (no name) - {60D95E43-6A21-476C-AA84-AF0DF0939D52} - (no file)
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - (no file)
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - (no file)
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O4 - HKLM\..\Run: [HPBootOp] "C:\Program\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [RavTask] "C:\Program\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: StartupFaster
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - C:\Program\Xilisoft\Download YouTube Video\upod_link.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Skapa mobilfavorit... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1189574749906
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1193413189687
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program\DELADE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: jkkjk - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - ---"C:\Program\Delade filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe" (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: lxdpCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdpserv.exe
O23 - Service: lxdp_device - - C:\WINDOWS\system32\lxdpcoms.exe
O23 - Service: Moon Secure Antivirus Core (msav) - Unknown owner - C:\Program\Moon Secure Antivirus\msavcore.exe (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Information Technology Co., Ltd. - C:\Program\Rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Information Technology Co., Ltd. - C:\PROGRAM\RISING\RAV\Ravmond.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: UPnPService - Magix AG - C:\Program\Delade filer\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: Läsartjänsten USN Journal för mappdelning i Messenger (usnjsvc) - Unknown owner - ---"C:\Program\MSN Messenger\usnsvc.exe" (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - ---"C:\Program\Windows Media Player\WMPNetwk.exe" (file missing)

--
End of file - 8737 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{60D95E43-6A21-476C-AA84-AF0DF0939D52}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}]
DealioBHO Class

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - []
{381FFDE8-2394-4f90-B10D-FC6124A40F8C}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HPBootOp"=C:\Program\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe [2006-02-16 249856]
"RavTask"=C:\Program\Rising\Rav\RavTask.exe [2008-09-25 211568]
"Look 'n' Stop"=C:\Program Files\Soft4Ever\looknstop\looknstop.exe [2008-09-30 552960]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"H/PC Connection Agent"=C:\Program\Microsoft ActiveSync\wcescomm.exe [2005-11-15 1204224]

C:\Documents and Settings\All Users\Start-meny\Program\Autostart
Logitech SetPoint.lnk - C:\Program\Logitech\SetPoint\SetPoint.exe

C:\Documents and Settings\Compaq_Ägaren\Start-meny\Program\Autostart
StartupFaster

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program\SUPERAntiSpyware\SASWINLO.dll [2008-07-23 352256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\SYSTEM32\Ati2evxx.dll [2008-02-26 126976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jkkjk]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\SYSTEM32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
"{32CD708B-60A7-4C00-9377-D73EAA495F0F}"=C:\WINDOWS\system32\RavExt.dll [2008-09-25 113264]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\runtime2.sys.REN]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\runtime2.sys.REN]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program\Messenger\msmsgs.exe"="C:\Program\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program\MSN Messenger\msnmsgr.exe"="C:\Program\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program\MSN Messenger\livecall.exe"="C:\Program\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program\uTorrent\uTorrent.exe"="C:\Program\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program\Microsoft ActiveSync\rapimgr.exe"="C:\Program\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program\Microsoft ActiveSync\wcescomm.exe"="C:\Program\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program\Microsoft ActiveSync\WCESMgr.exe"="C:\Program\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program\Skype\Phone\Skype.exe"="C:\Program\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\WINDOWS\system32\lxdpcoms.exe"="C:\WINDOWS\system32\lxdpcoms.exe:*:Enabled:Z2300 Series Server"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdppswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdppswx.exe:*:Enabled:Printer Status Window Interface"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdptime.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdptime.exe:*:Enabled:Lexmark Connect Time Executable"
"C:\Program\Lexmark Z2300 Series\lxdpmon.exe"="C:\Program\Lexmark Z2300 Series\lxdpmon.exe:*:Enabled:Printer Device Monitor"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdpjswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdpjswx.exe:*:Enabled:Job Status Window Interface"
"C:\WINDOWS\system32\mpxa.exe"="C:\WINDOWS\system32\mpxa.exe:*:Enabled:mpxa"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program\MSN Messenger\msnmsgr.exe"="C:\Program\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program\MSN Messenger\livecall.exe"="C:\Program\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program\Microsoft ActiveSync\rapimgr.exe"="C:\Program\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program\Microsoft ActiveSync\wcescomm.exe"="C:\Program\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program\Microsoft ActiveSync\WCESMgr.exe"="C:\Program\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe"="C:\Program\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe:*:Enabled:F-Secure Automatic Update"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{605e221f-9382-11db-8fbb-0016175b1707}]
shell\AutoRun\command - K:\LaunchU3.exe -a

======List of files/folders created in the last 1 months======

2008-10-02 08:02:14 ----D---- C:\rsit
2008-10-01 20:43:27 ----D---- C:\Program\Trend Micro
2008-09-30 23:45:25 ----A---- C:\WINDOWS\system32\fwapi.dll
2008-09-30 20:47:11 ----D---- C:\Documents and Settings\All Users\Application Data\fqrcxmba
2008-09-30 20:36:24 ----D---- C:\Program\VstPlugins
2008-09-30 20:36:24 ----A---- C:\WINDOWS\system32\rewire.dll
2008-09-30 20:35:04 ----D---- C:\Program\Outsim
2008-09-26 08:35:33 ----D---- C:\Program\SpywareBlaster
2008-09-26 07:56:47 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\PCToolsFirewallPlus
2008-09-25 00:15:06 ----RSH---- C:\rising.ini
2008-09-25 00:15:06 ----A---- C:\WINDOWS\system32\BsMain.ini
2008-09-25 00:14:43 ----A---- C:\WINDOWS\system32\RavExt.dll
2008-09-25 00:14:41 ----A---- C:\WINDOWS\system32\bsmain.exe
2008-09-25 00:14:14 ----D---- C:\Program\Rising
2008-09-25 00:13:35 ----A---- C:\WINDOWS\Rav.ini
2008-09-24 21:08:57 ----A---- C:\WINDOWS\RSBDBACKUP.DLL
2008-09-23 11:38:32 ----A---- C:\WINDOWS\system32\svchost.exe.job
2008-09-23 00:07:47 ----A---- C:\WINDOWS\RsConfig.ini
2008-09-23 00:02:49 ----RSD---- C:\RavBin
2008-09-23 00:01:42 ----D---- C:\Documents and Settings\All Users\Application Data\Rising
2008-09-20 17:34:46 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Comodo
2008-09-20 16:26:02 ----A---- C:\WINDOWS\_MSRSTRT.EXE
2008-09-20 16:12:12 ----D---- C:\Program\Delade filer\Agnitum Shared
2008-09-20 08:25:44 ----A---- C:\WINDOWS\system32\pep.exe
2008-09-18 18:57:53 ----D---- C:\logs
2008-09-18 18:57:28 ----A---- C:\WINDOWS\system32\lxdpvs.dll
2008-09-18 18:57:25 ----A---- C:\WINDOWS\system32\lxdpcoin.dll
2008-09-18 18:57:02 ----D---- C:\Program\Lexmark Toolbar
2008-09-18 18:56:56 ----A---- C:\WINDOWS\system32\lxdpwupd.exe
2008-09-18 18:56:56 ----A---- C:\WINDOWS\system32\lxdpwupd.dll
2008-09-18 18:56:55 ----A---- C:\WINDOWS\system32\lxdprwrd.ini
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\lxdputil.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\LXDPinst.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\lxdpinpa.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\lxdpiesc.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\LXDPhcp.dll
2008-09-18 18:56:41 ----A---- C:\WINDOWS\system32\lxdpusb1.dll
2008-09-18 18:56:41 ----A---- C:\WINDOWS\system32\lxdpserv.dll
2008-09-18 18:56:41 ----A---- C:\WINDOWS\system32\lxdpprox.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdppmui.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdplmpm.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpjswr.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpinsr.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpinsb.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpins.dll
2008-09-18 18:56:39 ----A---- C:\WINDOWS\system32\lxdpih.exe
2008-09-18 18:56:39 ----A---- C:\WINDOWS\system32\lxdphbn3.dll
2008-09-18 18:56:39 ----A---- C:\WINDOWS\system32\lxdpgrd.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpgf.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpcur.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpcub.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpcu.dll
2008-09-18 18:56:37 ----A---- C:\WINDOWS\system32\lxdpcoms.exe
2008-09-18 18:56:37 ----A---- C:\WINDOWS\system32\lxdpcomm.dll
2008-09-18 18:56:37 ----A---- C:\WINDOWS\system32\lxdpcomc.dll
2008-09-18 18:56:36 ----A---- C:\WINDOWS\system32\lxdpcfg.exe
2008-09-18 18:56:36 ----A---- C:\WINDOWS\system32\LXDPcfg.dll
2008-09-18 18:56:29 ----D---- C:\Program\Lexmark Z2300 Series
2008-09-17 14:17:50 ----D---- C:\Program\SUPERAntiSpyware
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbdkor.dll
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbd103.dll
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbd101c.dll
2008-09-10 17:18:28 ----A---- C:\WINDOWS\system32\kbd101b.dll
2008-09-10 17:18:27 ----A---- C:\WINDOWS\system32\kbd106.dll
2008-09-10 17:09:16 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\URSoft
2008-09-10 08:42:26 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-10 08:41:42 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2008-09-08 23:29:11 ----D---- C:\Documents and Settings\All Users\Application Data\Comodo
2008-09-07 01:04:22 ----D---- C:\Program\Microsoft Bootvis
2008-09-05 00:20:39 ----D---- C:\Program\Delade filer\PC Tools
2008-09-04 23:35:17 ----D---- C:\Documents and Settings\All Users\Application Data\Avira

======List of files/folders modified in the last 1 months======

2008-10-02 08:02:14 ----D---- C:\WINDOWS\Prefetch
2008-10-02 07:53:55 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\uTorrent
2008-10-02 07:52:12 ----D---- C:\WINDOWS\Temp
2008-10-02 07:51:40 ----D---- C:\Program\Mozilla Firefox
2008-10-02 01:58:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-10-01 20:43:27 ----RD---- C:\Program
2008-10-01 15:54:31 ----AD---- C:\WINDOWS
2008-10-01 15:46:29 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-10-01 07:59:39 ----D---- C:\WINDOWS\system32\CatRoot2
2008-09-30 23:46:06 ----SHD---- C:\WINDOWS\Installer
2008-09-30 23:46:06 ----SHD---- C:\Config.Msi
2008-09-30 23:45:33 ----HD---- C:\WINDOWS\inf
2008-09-30 23:45:31 ----D---- C:\WINDOWS\system32\drivers
2008-09-30 23:45:25 ----RSHD---- C:\WINDOWS\system32
2008-09-30 23:45:24 ----D---- C:\Program Files
2008-09-30 23:19:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-09-30 22:58:55 ----D---- C:\WINDOWS\system32\wbem
2008-09-30 21:56:21 ----D---- C:\Program\Delade filer\Wise Installation Wizard
2008-09-30 20:22:57 ----A---- C:\WINDOWS\NeroDigital.ini
2008-09-23 20:57:51 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\U3
2008-09-23 11:34:46 ----D---- C:\WINDOWS\system32\LogFiles
2008-09-23 00:22:03 ----D---- C:\WINDOWS\system32\dllcache
2008-09-23 00:21:47 ----D---- C:\WINDOWS\Help
2008-09-23 00:21:11 ----RSD---- C:\WINDOWS\Fonts
2008-09-20 16:12:12 ----D---- C:\Program\Delade filer
2008-09-17 16:08:44 ----D---- C:\Program\Delade filer\Real
2008-09-17 16:08:40 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Real
2008-09-17 14:17:50 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\SUPERAntiSpyware.com
2008-09-17 11:40:53 ----D---- C:\WINDOWS\system32\CatRoot
2008-09-17 00:02:23 ----SD---- C:\WINDOWS\Tasks
2008-09-15 00:32:46 ----D---- C:\WINDOWS\Internet Logs
2008-09-10 23:38:52 ----D---- C:\Program\Malwarebytes' Anti-Malware
2008-09-10 21:39:44 ----SD---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Microsoft
2008-09-10 18:01:12 ----D---- C:\WINDOWS\Debug
2008-09-10 08:42:27 ----D---- C:\WINDOWS\WinSxS
2008-09-09 00:39:07 ----D---- C:\WINDOWS\system32\config
2008-09-09 00:38:41 ----D---- C:\WINDOWS\Registration
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\MSVCRTD.DLL
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\msvcr71.dll
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\msvcp71.dll
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\monln.dll
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\mfc71.dll
2008-09-07 10:38:52 ----D---- C:\Program\DivX
2008-09-03 18:41:39 ----D---- C:\Documents and Settings\All Users\Application Data\Network Associates
2008-09-03 18:41:36 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Network Associates
2008-09-03 10:16:11 ----D---- C:\Program\Delade filer\Softwin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ACEDRV05;ACEDRV05; \??\C:\WINDOWS\system32\drivers\ACEDRV05.sys []
R1 AmdK8;AMD-processordrivrutin; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-10 43008]
R1 BUFADPT;BUFADPT; \??\C:\WINDOWS\system32\BUFADPT.SYS []
R1 HookCont;HookCont; C:\WINDOWS\system32\drivers\HookCont.sys [2008-09-25 13808]
R1 HookNtos;HookNtos; C:\WINDOWS\system32\drivers\HookNtos.sys [2008-09-25 62576]
R1 HookReg;HookReg; C:\WINDOWS\system32\drivers\HookReg.sys [2008-09-25 38256]
R1 HookSys;HookSys; C:\WINDOWS\system32\drivers\HookSys.sys [2008-09-25 164848]
R1 lnsfw1;lnsfw1; C:\WINDOWS\system32\drivers\lnsfw1.sys [2008-09-30 79232]
R1 SASDIFSV;SASDIFSV; \??\C:\Program\SUPERAntiSpyware\SASDIFSV.SYS []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R2 ACEDRV09;ACEDRV09; \??\C:\WINDOWS\system32\drivers\ACEDRV09.sys []
R2 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2006-04-22 8064]
R2 IOSLINK;IOSLINK; \??\C:\WINDOWS\system32\drivers\IosLink.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-08-30 3644928]
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2006-08-18 20096]
R3 Arp1394;1394 ARP-klientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-02-26 2863616]
R3 ElbyDelay;ElbyDelay; C:\WINDOWS\System32\Drivers\ElbyDelay.sys [2005-04-12 4608]
R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2005-05-20 25600]
R3 LHidUsbK;Logitech SetPoint USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsbK.Sys [2005-05-20 36480]
R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\System32\Drivers\LMouKE.sys [2005-05-20 68352]
R3 mouhid;HID-drivrutin för mus; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-06 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2005-12-12 19072]
R3 SFilter;Look 'n' Stop Driver; C:\WINDOWS\system32\DRIVERS\lnsfw.sys [2008-09-30 58232]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-aktiverat nav; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Microsoft USB-skrivarklass; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbstor;Drivrutin för USB-masslagringsenheter; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 WLIU2KG125S;BUFFALO WLI-U2-KG125S Wireless LAN Adapter Driver; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800]
S1 SABKUTIL;SABKUTIL; \??\C:\Program\SuperAdBlocker.com\Super Ad Blocker\SABKUTIL.sys []
S1 SASKUTIL;SASKUTIL; ---\??\C:\Program\SUPERAntiSpyware\SASKUTIL.sys []
S3 0013C;0013C; \??\C:\WINDOWS\system32\0013C.sys []
S3 09a2;09a2; \??\C:\WINDOWS\system32\09a2.sys []
S3 0ca1B;0ca1B; \??\C:\WINDOWS\system32\0ca1B.sys []
S3 16d31;16d31; \??\C:\WINDOWS\system32\16d31.sys []
S3 50c3;50c3; \??\C:\WINDOWS\system32\50c3.sys []
S3 61883;Enhet av typen 61883; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 9362;9362; \??\C:\WINDOWS\system32\9362.sys []
S3 ASFWHide;ASFWHide; \??\C:\DOCUME~1\COMPAQ~1\LOKALA~1\Temp\ASFWHide []
S3 Avc;AVC-enhet; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 b402;b402; \??\C:\WINDOWS\system32\b402.sys []
S3 bdfdll;bdfdll; \??\C:\Program\Softwin\BitDefender10\bdfdll.sys []
S3 bdfm;BDFM; C:\WINDOWS\system32\drivers\bdfm.sys []
S3 BDFSDRV;BDFSDRV; ---\??\C:\Program\Softwin\BitDefender10\bdfsdrv.sys []
S3 BDRsDrv;BDRsDrv; \??\C:\Program\Softwin\BitDefender10\bdrsdrv.sys []
S3 CCDECODE;Avkodare för dold textning; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 d0124;d0124; \??\C:\WINDOWS\system32\d0124.sys []
S3 DrvFltIp;DrvFltIp; \??\C:\Documents and Settings\Compaq_Ägaren\Lokala inställningar\TEMP\DrvFltIp []
S3 ef64;ef64; \??\C:\WINDOWS\system32\ef64.sys []
S3 fsbl-standalone;F-Secure BlackLight Beta Engine Driver; \??\C:\DOCUME~1\COMPAQ~1\LOKALA~1\Temp\F-Secure\BlackLight\fsbldrv.sys []
S3 HidUsb;Microsoft HID-klassdrivrutin; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\System32\Drivers\L8042mou.sys [2005-05-20 54528]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Tee/Sink-to-Sink-konverterare för Microsoft-direktuppspelning; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NCHSSVAD;SoundTap Recorder; C:\WINDOWS\system32\drivers\nchssvad.sys [2007-12-17 23616]
S3 NdisIP;Microsoft TV/Video-anslutning; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288]
S3 Profos;Profos; \??\C:\Program\Delade filer\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-01-19 80512]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 SABProcEnum;SABProcEnum; \??\C:\Program\SuperAdBlocker.com\Super Ad Blocker\SABProcEnum.sys []
S3 SASENUM;SASENUM; \??\C:\Program\SUPERAntiSpyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 snpstd;Trust 120 SpaceCam; C:\WINDOWS\system32\DRIVERS\snpstd.sys [2004-02-19 299776]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 Trufos;Trufos; \??\C:\Program\Delade filer\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 u2kg54l;BUFFALO WLI-U2-KG54L Wireless LAN Driver; C:\WINDOWS\system32\DRIVERS\u2kg54l.sys [2006-08-24 477696]
S3 usbscan;Drivrutin för USB-skanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2004-12-30 104576]
S3 WSTCODEC;Teletext-codec för världsstandard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 intelppm;Intel-processordrivrutin; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40320]
S4 WS2IFSL;Stödmiljö för Windows Socket 2.0 Icke-IFS-tjänstprovider; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
S4 vsdatant;vsdatant; C:\WINDOWS\system32\drivers\vsdatant.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-02-26 520192]
R2 Capture Device Service;Capture Device Service; C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe [2007-03-06 198168]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2003-02-25 303104]
R2 lxdp_device;lxdp_device; C:\WINDOWS\system32\lxdpcoms.exe [2007-12-01 594600]
R2 RsCCenter;Rising Process Communication Center; C:\Program\Rising\Rav\CCenter.exe [2008-09-25 162416]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-02-25 593920]
S2 lxdpCATSCustConnectService;lxdpCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdpserv.exe [2007-12-01 98984]
S2 msav;Moon Secure Antivirus Core; C:\Program\Moon Secure Antivirus\msavcore.exe []
S2 RsRavMon;Rising RealTime Monitor; C:\PROGRAM\RISING\RAV\Ravmond.exe [2008-09-25 395888]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 IDriverT;InstallDriver Table Manager; ---C:\Program\Delade filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe []
S3 ServiceLayer;ServiceLayer; C:\Program\PC Connectivity Solution\ServiceLayer.exe [2007-06-15 300544]
S3 UPnPService;UPnPService; C:\Program\Delade filer\MAGIX Shared\UPnPService\UPnPService.exe [2006-12-14 544768]
S3 usnjsvc;Läsartjänsten USN Journal för mappdelning i Messenger; ---C:\Program\MSN Messenger\usnsvc.exe []
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; ---C:\Program\Windows Media Player\WMPNetwk.exe []
S4 BackWeb Plug-in - 7681197;F-Secure Automatic Update; C:\Program\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE []

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.04 2008-10-02 08:02:40

======Uninstall list======

-->C:\Program\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\BWUnin-6.3.2.116-7681197L.exe -AppId 7681197
-->C:\WINDOWS\IsUn041d.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{35D8D1B9-DAD1-4505-8A33-78095885CF6B}\Setup.exe" -l0x9
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.2 - Svenska-->MsiExec.exe /I{AC76BA86-7AD7-1053-7B44-A81200000003}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Agfa ScanWise 1.60-->C:\WINDOWS\IsUninst.exe -f"C:\Program\Agfa\ScanWise 1_60\uninst.isu" -c"C:\Program\Agfa\ScanWise 1_60\UNINSTALL.DLL"
AnyDVD-->"C:\Program\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program\SlySoft\AnyDVD"
ATI - Hjälp för avinstallation av program-->C:\Program\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->RunDll32 C:\Program\DELADE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Kontrollpanel-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
CCleaner (remove only)-->"C:\Program\CCleaner\uninst.exe"
ChristmasTheme-->MsiExec.exe /X{7523F68F-3DA4-452A-A17F-4AF55A8A25BB}
CloneDVD2-->"C:\Program\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program\Elaborate Bytes\CloneDVD2"
CoverPro-->"C:\Program\CoverPro\unins000.exe"
dBpowerAMP FLAC Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP FLAC Codec.dat
dBpowerAMP Monkeys Audio Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Monkeys Audio Codec.dat
dBpowerAMP Musepack Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Musepack Codec.dat
dBpowerAMP Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat
dBpowerAMP Ogg Vorbis Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Ogg Vorbis Codec.dat
dBpowerAMP WMA V9.1 Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP WMA V9.1 Codec.dat
Deluxe Ski Jump 3 v1.01-->"C:\Program\Deluxe Ski Jump 3\Uninstall\unins000.exe"
Destinator Console Installation-->C:\DESTIN~1\COLLEC~1\UNWISE.EXE C:\DESTIN~1\COLLEC~1\INSTALL.LOG
DivX Converter-->C:\Program\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program\DivX\DivXWebPlayerUninstall.exe /PLUGIN
dMC Power Pack-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dMC Power Pack.dat
DVD Shrink 3.2-->"C:\Program\DVD Shrink\unins000.exe"
EasyCleaner-->RunDll32 C:\Program\DELADE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9 -removeonly
Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
EPSON Printer Software-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EVEREST Ultimate Edition v4.20-->"C:\Program\Lavalys\EVEREST Ultimate Edition\unins000.exe"
Firebird SQL Server - MAGIX Edition (D)-->C:\MAGIX\Common\Database\uninstall.exe
Firebird SQL Server - MAGIX Edition-->C:\MAGIX\Common\Database\unwise.exe
FireTune-->C:\WINDOWS\iun6002.exe "C:\Program\FireTune\irunin.ini"
GoldWave v5.13-->"C:\Program\GoldWave\unstall.exe" "GoldWave v5.13" "C:\Program\GoldWave\unstall.log"
Guitar Pro 5.1-->"C:\Program\Guitar Pro 5\unins000.exe"
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Boot Optimizer-->MsiExec.exe /X{1341D838-719C-4A05-B50F-49420CA1B4BB}
HP DVD Play 2.1-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\Setup.exe" -uninstall
HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
Internet-tjänster-->C:\Program\DELADE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{5CFD7508-7774-48FE-8280-7A3C0AE71755} /l1053
InterVideo DeviceService-->MsiExec.exe /I{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}
J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
J2SE Runtime Environment 5.0 Update 8-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150080}
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
Kundupplevelseförbättringar-->C:\Program\DELADE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{23012310-3E05-46A5-88A9-C6CBCABCAC79} /l1053
Lexmark Z2300 Series-->C:\Program\Lexmark Z2300 Series\Install\x86\Uninst.exe
Logitech SetPoint-->RunDll32 C:\Program\DELADE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x1d -removeonly
Look 'n' Stop 2.06p3-->"C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -uninst
Macromedia Flash Player 8-->MsiExec.exe /X{6815FCDD-401D-481E-BA88-31B4754C2B46}
Macromedia Flash Player 8-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
MAGIX Goya burnR 1.3.1.2 (US)-->C:\Program\MAGIX\Goya_burnR\instslct.exe
MAGIX Music Maker 12 deluxe 12.1.0.4 (US)-->C:\Program\MAGIX\MusicMaker12deluxe\instslct.exe
MAGIX Music Maker Basic Edition 12.1.0.3 (UK)-->C:\Program\MAGIX\MusicMakerBasicEdition\instslct.exe
MAGIX Music Manager 2007 8.1.1.114 (US)-->C:\Program\MAGIX\Music_Manager_2007\instslct.exe
MAGIX Music Manager-->C:\MAGIX\Music_Manager\instslct.exe
MAGIX Photo Manager 2007 4.1.1.77 (US)-->C:\Program\MAGIX\Photo_Manager_2007\instslct.exe
MAGIX Screenshare 4.3.6.1987 (US)-->C:\Program\MAGIX\PCVisit\unwise.exe
MAGIX Xtreme Photo Designer 6 6.0.24.0 (US)-->C:\Program\MAGIX\Xtreme_Photo_Designer_6\unwise.exe
Malwarebytes' Anti-Malware-->"C:\Program\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1 Swedish Language Pack-->MsiExec.exe /X{992A2DB1-4ABC-4738-BD71-045C5FFE00D1}
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack - SVE-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - SVE\install.exe
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft ActiveSync 4.0-->MsiExec.exe /I{B208806F-A231-4FA0-AB3F-5C1B8979223E}
Microsoft Bootvis-->MsiExec.exe /I{0F9196C6-58B4-445B-B56E-B1200FECC151}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2000 Professional-->MsiExec.exe /I{0001041D-78E1-11D2-B60F-006097C998E7}
Microsoft Plus! for Windows XP-->MsiExec.exe /I{EEC2DAFD-5558-40AC-8E9C-5005C8F810E8}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Windows Theme Nunavut-->MsiExec.exe /X{047815FB-4E38-42D5-95CB-8A131DDD8668}
Microsoft Windows Theme Ontario-->MsiExec.exe /X{9757283E-3FCA-4F3D-9257-928859318E55}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works-->MsiExec.exe /I{F4B620CE-4297-4140-B0C3-6D4E8A8EF0AB}
Mozilla Firefox (3.0.3)-->C:\Program\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Nero 7 Demo-->MsiExec.exe /I{1B779CC7-5F25-29B3-5150-AF44A6201053}
Opera 9.52-->MsiExec.exe /X{E1A88DE8-BD36-4DEA-8DD8-E35EF475ADC7}
PC Connectivity Solution-->MsiExec.exe /I{99A40651-0BC2-4095-8F9A-A40FAB224FEF}
PC-Doctor 5 for Windows-->C:\Program\PC-Doctor 5 for Windows\uninst.exe
PhotoNow! 1.0-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\Setup.exe" -uninstall
PoiEdit-->C:\Program\DNOTES~1\POIEDI~1\UNWISE.EXE C:\Program\DNOTES~1\POIEDI~1\INSTALL.LOG
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
QuickTime-->MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}
Recover My Files-->"C:\Program\GetData\Recover My Files\unins000.exe"
Rising Antivirus-->C:\Program\Rising\Rav\Update\Setup.exe /UNINSTALL
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update för Microsoft .NET Framework 2.0 (kB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
Skype 3.1-->"C:\Program\Skype\Phone\unins000.exe"
Skype Plugin Manager-->MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}
Slice Uninstall-->C:\Program\NCH Swift Sound\Slice\uninst.exe
Snabbkorrigering för Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Snabbkorrigering för Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Sonic Express Labeler-->MsiExec.exe /X{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /X{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /X{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /X{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /X{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /X{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
SpywareBlaster 4.1-->"C:\Program\SpywareBlaster\unins000.exe"
SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Switch-->C:\Program\NCH Swift Sound\Switch\uninst.exe
Säkerhetsuppdatering för Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Texas Hold'em Poker 3D - Deluxe Edition 1.0-->"C:\Program\Play+Smile\Texas Hold'em Poker 3D - Deluxe Edition\unins000.exe"
Text-To-Speech-Runtime-->MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
Total Video Converter 3.10-->"C:\Program\Total Video Converter\unins000.exe"
Uppdatering för Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
WavePad Uninstall-->C:\Program\NCH Swift Sound\WavePad\uninst.exe
VideoLAN VLC media player 0.8.6a-->C:\Program\VideoLAN\VLC\uninstall.exe
Windows Defender Signatures-->MsiExec.exe /I{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live Messenger-->MsiExec.exe /I{2E55A582-4FFE-4FF2-8D4D-E7D275FF89BD}
Windows Media Format 11 runtime-->"C:\Program\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Program\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Program\WinRAR\uninstall.exe
Xilisoft Download YouTube Video-->C:\Program\Xilisoft\Download YouTube Video\Uninstall.exe
Yahoo! Install Manager-->C:\WINDOWS\system32\regsvr32 /u C:\Program\Yahoo!\Common\YINSTH~1.DLL

======Security center information======

AV: Rising Antivirus
FW: Look 'n' Stop 2.06p3 (Soft4Ever)

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\PROGRAM\PC CONNECTIVITY SOLUTION\;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;C:\PYTHON22;C:\PROGRAM\ATI TECHNOLOGIES\ATI CONTROL PANEL;C:\PROGRAM\QUICKTIME\QTSYSTEM\;;;C:\PROGRAM\DELADE FILER\ULEAD SYSTEMS\MPEG;C:\Program\ATI Technologies\ATI.ACE\Core-Static
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 63 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=3f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program\Delade filer\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program\Java\jre1.5.0_08\lib\ext\QTJava.zip
"QTJAVA"=C:\Program\Java\jre1.5.0_08\lib\ext\QTJava.zip
"Rav"=C:\Documents and Settings\All Users\Application Data\Rising\Rav

-----------------EOF-----------------
mitä?
Äänestä
tuppiboy6.3.2009 klo 21.05
hatuttaa kirjoitti:
Logfile of random's system information tool 1.04 (written by random/random)
Run by Compaq_Ägaren at 2008-10-02 08:02:14
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 58 GB (40%) free of 147 GB
Total RAM: 446 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:02:36, on 2.10.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRAM\RISING\RAV\ravmond.exe
C:\PROGRAM\RISING\RAV\RavStub.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\lxdpcoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program\Rising\Rav\RavTask.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\Microsoft ActiveSync\wcescomm.exe
C:\Program\Rising\Rav\Ravmon.exe
C:\Program\Logitech\SetPoint\SetPoint.exe
C:\Program\MICROS~4\rapimgr.exe
C:\Program\Delade filer\Logitech\KHAL\KHALMNPR.EXE
C:\HP\KBD\KBD.EXE
C:\Program\Mozilla Firefox\firefox.exe
C:\WINDOWS\ALCXMNTR.EXE
c:\windows\system\hpsysdrv.exe
C:\Program\Java\jre1.5.0_05\bin\jusched.exe
C:\Program\Outlook Express\msimn.exe
C:\Program\Messenger\msmsgs.exe
C:\Program\uTorrent\uTorrent.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Program\Trend Micro\HijackThis\HijackThis.exe
C:\Documents and Settings\Compaq_Ägaren\Skrivbord\RSIT.exe
C:\Program\Trend Micro\HijackThis\Compaq_Ägaren.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: (no name) - {60D95E43-6A21-476C-AA84-AF0DF0939D52} - (no file)
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - (no file)
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - (no file)
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O4 - HKLM\..\Run: [HPBootOp] "C:\Program\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [RavTask] "C:\Program\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJÄNST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: StartupFaster
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - C:\Program\Xilisoft\Download YouTube Video\upod_link.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Skapa mobilfavorit... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program\MICROS~4\INetRepl.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Hjälp med anslutning - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1189574749906
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1193413189687
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program\DELADE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: jkkjk - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - ---"C:\Program\Delade filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe" (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: lxdpCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdpserv.exe
O23 - Service: lxdp_device - - C:\WINDOWS\system32\lxdpcoms.exe
O23 - Service: Moon Secure Antivirus Core (msav) - Unknown owner - C:\Program\Moon Secure Antivirus\msavcore.exe (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Information Technology Co., Ltd. - C:\Program\Rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Information Technology Co., Ltd. - C:\PROGRAM\RISING\RAV\Ravmond.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: UPnPService - Magix AG - C:\Program\Delade filer\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: Läsartjänsten USN Journal för mappdelning i Messenger (usnjsvc) - Unknown owner - ---"C:\Program\MSN Messenger\usnsvc.exe" (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - ---"C:\Program\Windows Media Player\WMPNetwk.exe" (file missing)

--
End of file - 8737 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{60D95E43-6A21-476C-AA84-AF0DF0939D52}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}]
DealioBHO Class

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - []
{381FFDE8-2394-4f90-B10D-FC6124A40F8C}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HPBootOp"=C:\Program\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe [2006-02-16 249856]
"RavTask"=C:\Program\Rising\Rav\RavTask.exe [2008-09-25 211568]
"Look 'n' Stop"=C:\Program Files\Soft4Ever\looknstop\looknstop.exe [2008-09-30 552960]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"H/PC Connection Agent"=C:\Program\Microsoft ActiveSync\wcescomm.exe [2005-11-15 1204224]

C:\Documents and Settings\All Users\Start-meny\Program\Autostart
Logitech SetPoint.lnk - C:\Program\Logitech\SetPoint\SetPoint.exe

C:\Documents and Settings\Compaq_Ägaren\Start-meny\Program\Autostart
StartupFaster

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program\SUPERAntiSpyware\SASWINLO.dll [2008-07-23 352256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\SYSTEM32\Ati2evxx.dll [2008-02-26 126976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jkkjk]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\SYSTEM32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
"{32CD708B-60A7-4C00-9377-D73EAA495F0F}"=C:\WINDOWS\system32\RavExt.dll [2008-09-25 113264]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\runtime2.sys.REN]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\runtime2.sys.REN]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program\Messenger\msmsgs.exe"="C:\Program\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program\MSN Messenger\msnmsgr.exe"="C:\Program\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program\MSN Messenger\livecall.exe"="C:\Program\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program\uTorrent\uTorrent.exe"="C:\Program\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program\Microsoft ActiveSync\rapimgr.exe"="C:\Program\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program\Microsoft ActiveSync\wcescomm.exe"="C:\Program\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program\Microsoft ActiveSync\WCESMgr.exe"="C:\Program\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program\Skype\Phone\Skype.exe"="C:\Program\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\WINDOWS\system32\lxdpcoms.exe"="C:\WINDOWS\system32\lxdpcoms.exe:*:Enabled:Z2300 Series Server"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdppswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdppswx.exe:*:Enabled:Printer Status Window Interface"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdptime.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdptime.exe:*:Enabled:Lexmark Connect Time Executable"
"C:\Program\Lexmark Z2300 Series\lxdpmon.exe"="C:\Program\Lexmark Z2300 Series\lxdpmon.exe:*:Enabled:Printer Device Monitor"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdpjswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdpjswx.exe:*:Enabled:Job Status Window Interface"
"C:\WINDOWS\system32\mpxa.exe"="C:\WINDOWS\system32\mpxa.exe:*:Enabled:mpxa"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program\MSN Messenger\msnmsgr.exe"="C:\Program\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program\MSN Messenger\livecall.exe"="C:\Program\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program\Microsoft ActiveSync\rapimgr.exe"="C:\Program\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program\Microsoft ActiveSync\wcescomm.exe"="C:\Program\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program\Microsoft ActiveSync\WCESMgr.exe"="C:\Program\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe"="C:\Program\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe:*:Enabled:F-Secure Automatic Update"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{605e221f-9382-11db-8fbb-0016175b1707}]
shell\AutoRun\command - K:\LaunchU3.exe -a

======List of files/folders created in the last 1 months======

2008-10-02 08:02:14 ----D---- C:\rsit
2008-10-01 20:43:27 ----D---- C:\Program\Trend Micro
2008-09-30 23:45:25 ----A---- C:\WINDOWS\system32\fwapi.dll
2008-09-30 20:47:11 ----D---- C:\Documents and Settings\All Users\Application Data\fqrcxmba
2008-09-30 20:36:24 ----D---- C:\Program\VstPlugins
2008-09-30 20:36:24 ----A---- C:\WINDOWS\system32\rewire.dll
2008-09-30 20:35:04 ----D---- C:\Program\Outsim
2008-09-26 08:35:33 ----D---- C:\Program\SpywareBlaster
2008-09-26 07:56:47 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\PCToolsFirewallPlus
2008-09-25 00:15:06 ----RSH---- C:\rising.ini
2008-09-25 00:15:06 ----A---- C:\WINDOWS\system32\BsMain.ini
2008-09-25 00:14:43 ----A---- C:\WINDOWS\system32\RavExt.dll
2008-09-25 00:14:41 ----A---- C:\WINDOWS\system32\bsmain.exe
2008-09-25 00:14:14 ----D---- C:\Program\Rising
2008-09-25 00:13:35 ----A---- C:\WINDOWS\Rav.ini
2008-09-24 21:08:57 ----A---- C:\WINDOWS\RSBDBACKUP.DLL
2008-09-23 11:38:32 ----A---- C:\WINDOWS\system32\svchost.exe.job
2008-09-23 00:07:47 ----A---- C:\WINDOWS\RsConfig.ini
2008-09-23 00:02:49 ----RSD---- C:\RavBin
2008-09-23 00:01:42 ----D---- C:\Documents and Settings\All Users\Application Data\Rising
2008-09-20 17:34:46 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Comodo
2008-09-20 16:26:02 ----A---- C:\WINDOWS\_MSRSTRT.EXE
2008-09-20 16:12:12 ----D---- C:\Program\Delade filer\Agnitum Shared
2008-09-20 08:25:44 ----A---- C:\WINDOWS\system32\pep.exe
2008-09-18 18:57:53 ----D---- C:\logs
2008-09-18 18:57:28 ----A---- C:\WINDOWS\system32\lxdpvs.dll
2008-09-18 18:57:25 ----A---- C:\WINDOWS\system32\lxdpcoin.dll
2008-09-18 18:57:02 ----D---- C:\Program\Lexmark Toolbar
2008-09-18 18:56:56 ----A---- C:\WINDOWS\system32\lxdpwupd.exe
2008-09-18 18:56:56 ----A---- C:\WINDOWS\system32\lxdpwupd.dll
2008-09-18 18:56:55 ----A---- C:\WINDOWS\system32\lxdprwrd.ini
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\lxdputil.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\LXDPinst.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\lxdpinpa.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\lxdpiesc.dll
2008-09-18 18:56:42 ----A---- C:\WINDOWS\system32\LXDPhcp.dll
2008-09-18 18:56:41 ----A---- C:\WINDOWS\system32\lxdpusb1.dll
2008-09-18 18:56:41 ----A---- C:\WINDOWS\system32\lxdpserv.dll
2008-09-18 18:56:41 ----A---- C:\WINDOWS\system32\lxdpprox.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdppmui.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdplmpm.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpjswr.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpinsr.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpinsb.dll
2008-09-18 18:56:40 ----A---- C:\WINDOWS\system32\lxdpins.dll
2008-09-18 18:56:39 ----A---- C:\WINDOWS\system32\lxdpih.exe
2008-09-18 18:56:39 ----A---- C:\WINDOWS\system32\lxdphbn3.dll
2008-09-18 18:56:39 ----A---- C:\WINDOWS\system32\lxdpgrd.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpgf.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpcur.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpcub.dll
2008-09-18 18:56:38 ----A---- C:\WINDOWS\system32\lxdpcu.dll
2008-09-18 18:56:37 ----A---- C:\WINDOWS\system32\lxdpcoms.exe
2008-09-18 18:56:37 ----A---- C:\WINDOWS\system32\lxdpcomm.dll
2008-09-18 18:56:37 ----A---- C:\WINDOWS\system32\lxdpcomc.dll
2008-09-18 18:56:36 ----A---- C:\WINDOWS\system32\lxdpcfg.exe
2008-09-18 18:56:36 ----A---- C:\WINDOWS\system32\LXDPcfg.dll
2008-09-18 18:56:29 ----D---- C:\Program\Lexmark Z2300 Series
2008-09-17 14:17:50 ----D---- C:\Program\SUPERAntiSpyware
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbdkor.dll
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbd103.dll
2008-09-10 17:18:34 ----A---- C:\WINDOWS\system32\kbd101c.dll
2008-09-10 17:18:28 ----A---- C:\WINDOWS\system32\kbd101b.dll
2008-09-10 17:18:27 ----A---- C:\WINDOWS\system32\kbd106.dll
2008-09-10 17:09:16 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\URSoft
2008-09-10 08:42:26 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-10 08:41:42 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2008-09-08 23:29:11 ----D---- C:\Documents and Settings\All Users\Application Data\Comodo
2008-09-07 01:04:22 ----D---- C:\Program\Microsoft Bootvis
2008-09-05 00:20:39 ----D---- C:\Program\Delade filer\PC Tools
2008-09-04 23:35:17 ----D---- C:\Documents and Settings\All Users\Application Data\Avira

======List of files/folders modified in the last 1 months======

2008-10-02 08:02:14 ----D---- C:\WINDOWS\Prefetch
2008-10-02 07:53:55 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\uTorrent
2008-10-02 07:52:12 ----D---- C:\WINDOWS\Temp
2008-10-02 07:51:40 ----D---- C:\Program\Mozilla Firefox
2008-10-02 01:58:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-10-01 20:43:27 ----RD---- C:\Program
2008-10-01 15:54:31 ----AD---- C:\WINDOWS
2008-10-01 15:46:29 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-10-01 07:59:39 ----D---- C:\WINDOWS\system32\CatRoot2
2008-09-30 23:46:06 ----SHD---- C:\WINDOWS\Installer
2008-09-30 23:46:06 ----SHD---- C:\Config.Msi
2008-09-30 23:45:33 ----HD---- C:\WINDOWS\inf
2008-09-30 23:45:31 ----D---- C:\WINDOWS\system32\drivers
2008-09-30 23:45:25 ----RSHD---- C:\WINDOWS\system32
2008-09-30 23:45:24 ----D---- C:\Program Files
2008-09-30 23:19:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-09-30 22:58:55 ----D---- C:\WINDOWS\system32\wbem
2008-09-30 21:56:21 ----D---- C:\Program\Delade filer\Wise Installation Wizard
2008-09-30 20:22:57 ----A---- C:\WINDOWS\NeroDigital.ini
2008-09-23 20:57:51 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\U3
2008-09-23 11:34:46 ----D---- C:\WINDOWS\system32\LogFiles
2008-09-23 00:22:03 ----D---- C:\WINDOWS\system32\dllcache
2008-09-23 00:21:47 ----D---- C:\WINDOWS\Help
2008-09-23 00:21:11 ----RSD---- C:\WINDOWS\Fonts
2008-09-20 16:12:12 ----D---- C:\Program\Delade filer
2008-09-17 16:08:44 ----D---- C:\Program\Delade filer\Real
2008-09-17 16:08:40 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Real
2008-09-17 14:17:50 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\SUPERAntiSpyware.com
2008-09-17 11:40:53 ----D---- C:\WINDOWS\system32\CatRoot
2008-09-17 00:02:23 ----SD---- C:\WINDOWS\Tasks
2008-09-15 00:32:46 ----D---- C:\WINDOWS\Internet Logs
2008-09-10 23:38:52 ----D---- C:\Program\Malwarebytes' Anti-Malware
2008-09-10 21:39:44 ----SD---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Microsoft
2008-09-10 18:01:12 ----D---- C:\WINDOWS\Debug
2008-09-10 08:42:27 ----D---- C:\WINDOWS\WinSxS
2008-09-09 00:39:07 ----D---- C:\WINDOWS\system32\config
2008-09-09 00:38:41 ----D---- C:\WINDOWS\Registration
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\MSVCRTD.DLL
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\msvcr71.dll
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\msvcp71.dll
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\monln.dll
2008-09-08 23:28:52 ----A---- C:\WINDOWS\system32\mfc71.dll
2008-09-07 10:38:52 ----D---- C:\Program\DivX
2008-09-03 18:41:39 ----D---- C:\Documents and Settings\All Users\Application Data\Network Associates
2008-09-03 18:41:36 ----D---- C:\Documents and Settings\Compaq_Ägaren\Application Data\Network Associates
2008-09-03 10:16:11 ----D---- C:\Program\Delade filer\Softwin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ACEDRV05;ACEDRV05; \??\C:\WINDOWS\system32\drivers\ACEDRV05.sys []
R1 AmdK8;AMD-processordrivrutin; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-10 43008]
R1 BUFADPT;BUFADPT; \??\C:\WINDOWS\system32\BUFADPT.SYS []
R1 HookCont;HookCont; C:\WINDOWS\system32\drivers\HookCont.sys [2008-09-25 13808]
R1 HookNtos;HookNtos; C:\WINDOWS\system32\drivers\HookNtos.sys [2008-09-25 62576]
R1 HookReg;HookReg; C:\WINDOWS\system32\drivers\HookReg.sys [2008-09-25 38256]
R1 HookSys;HookSys; C:\WINDOWS\system32\drivers\HookSys.sys [2008-09-25 164848]
R1 lnsfw1;lnsfw1; C:\WINDOWS\system32\drivers\lnsfw1.sys [2008-09-30 79232]
R1 SASDIFSV;SASDIFSV; \??\C:\Program\SUPERAntiSpyware\SASDIFSV.SYS []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R2 ACEDRV09;ACEDRV09; \??\C:\WINDOWS\system32\drivers\ACEDRV09.sys []
R2 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2006-04-22 8064]
R2 IOSLINK;IOSLINK; \??\C:\WINDOWS\system32\drivers\IosLink.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-08-30 3644928]
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2006-08-18 20096]
R3 Arp1394;1394 ARP-klientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-02-26 2863616]
R3 ElbyDelay;ElbyDelay; C:\WINDOWS\System32\Drivers\ElbyDelay.sys [2005-04-12 4608]
R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2005-05-20 25600]
R3 LHidUsbK;Logitech SetPoint USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsbK.Sys [2005-05-20 36480]
R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\System32\Drivers\LMouKE.sys [2005-05-20 68352]
R3 mouhid;HID-drivrutin för mus; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-06 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2005-12-12 19072]
R3 SFilter;Look 'n' Stop Driver; C:\WINDOWS\system32\DRIVERS\lnsfw.sys [2008-09-30 58232]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-aktiverat nav; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Microsoft USB-skrivarklass; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbstor;Drivrutin för USB-masslagringsenheter; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 WLIU2KG125S;BUFFALO WLI-U2-KG125S Wireless LAN Adapter Driver; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800]
S1 SABKUTIL;SABKUTIL; \??\C:\Program\SuperAdBlocker.com\Super Ad Blocker\SABKUTIL.sys []
S1 SASKUTIL;SASKUTIL; ---\??\C:\Program\SUPERAntiSpyware\SASKUTIL.sys []
S3 0013C;0013C; \??\C:\WINDOWS\system32\0013C.sys []
S3 09a2;09a2; \??\C:\WINDOWS\system32\09a2.sys []
S3 0ca1B;0ca1B; \??\C:\WINDOWS\system32\0ca1B.sys []
S3 16d31;16d31; \??\C:\WINDOWS\system32\16d31.sys []
S3 50c3;50c3; \??\C:\WINDOWS\system32\50c3.sys []
S3 61883;Enhet av typen 61883; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 9362;9362; \??\C:\WINDOWS\system32\9362.sys []
S3 ASFWHide;ASFWHide; \??\C:\DOCUME~1\COMPAQ~1\LOKALA~1\Temp\ASFWHide []
S3 Avc;AVC-enhet; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 b402;b402; \??\C:\WINDOWS\system32\b402.sys []
S3 bdfdll;bdfdll; \??\C:\Program\Softwin\BitDefender10\bdfdll.sys []
S3 bdfm;BDFM; C:\WINDOWS\system32\drivers\bdfm.sys []
S3 BDFSDRV;BDFSDRV; ---\??\C:\Program\Softwin\BitDefender10\bdfsdrv.sys []
S3 BDRsDrv;BDRsDrv; \??\C:\Program\Softwin\BitDefender10\bdrsdrv.sys []
S3 CCDECODE;Avkodare för dold textning; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 d0124;d0124; \??\C:\WINDOWS\system32\d0124.sys []
S3 DrvFltIp;DrvFltIp; \??\C:\Documents and Settings\Compaq_Ägaren\Lokala inställningar\TEMP\DrvFltIp []
S3 ef64;ef64; \??\C:\WINDOWS\system32\ef64.sys []
S3 fsbl-standalone;F-Secure BlackLight Beta Engine Driver; \??\C:\DOCUME~1\COMPAQ~1\LOKALA~1\Temp\F-Secure\BlackLight\fsbldrv.sys []
S3 HidUsb;Microsoft HID-klassdrivrutin; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\System32\Drivers\L8042mou.sys [2005-05-20 54528]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Tee/Sink-to-Sink-konverterare för Microsoft-direktuppspelning; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NCHSSVAD;SoundTap Recorder; C:\WINDOWS\system32\drivers\nchssvad.sys [2007-12-17 23616]
S3 NdisIP;Microsoft TV/Video-anslutning; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288]
S3 Profos;Profos; \??\C:\Program\Delade filer\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-01-19 80512]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 SABProcEnum;SABProcEnum; \??\C:\Program\SuperAdBlocker.com\Super Ad Blocker\SABProcEnum.sys []
S3 SASENUM;SASENUM; \??\C:\Program\SUPERAntiSpyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 snpstd;Trust 120 SpaceCam; C:\WINDOWS\system32\DRIVERS\snpstd.sys [2004-02-19 299776]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 Trufos;Trufos; \??\C:\Program\Delade filer\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 u2kg54l;BUFFALO WLI-U2-KG54L Wireless LAN Driver; C:\WINDOWS\system32\DRIVERS\u2kg54l.sys [2006-08-24 477696]
S3 usbscan;Drivrutin för USB-skanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2004-12-30 104576]
S3 WSTCODEC;Teletext-codec för världsstandard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 intelppm;Intel-processordrivrutin; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40320]
S4 WS2IFSL;Stödmiljö för Windows Socket 2.0 Icke-IFS-tjänstprovider; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
S4 vsdatant;vsdatant; C:\WINDOWS\system32\drivers\vsdatant.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-02-26 520192]
R2 Capture Device Service;Capture Device Service; C:\Program\Delade filer\InterVideo\DeviceService\DevSvc.exe [2007-03-06 198168]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2003-02-25 303104]
R2 lxdp_device;lxdp_device; C:\WINDOWS\system32\lxdpcoms.exe [2007-12-01 594600]
R2 RsCCenter;Rising Process Communication Center; C:\Program\Rising\Rav\CCenter.exe [2008-09-25 162416]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-02-25 593920]
S2 lxdpCATSCustConnectService;lxdpCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdpserv.exe [2007-12-01 98984]
S2 msav;Moon Secure Antivirus Core; C:\Program\Moon Secure Antivirus\msavcore.exe []
S2 RsRavMon;Rising RealTime Monitor; C:\PROGRAM\RISING\RAV\Ravmond.exe [2008-09-25 395888]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 IDriverT;InstallDriver Table Manager; ---C:\Program\Delade filer\InstallShield\Driver\1050\Intel 32\IDriverT.exe []
S3 ServiceLayer;ServiceLayer; C:\Program\PC Connectivity Solution\ServiceLayer.exe [2007-06-15 300544]
S3 UPnPService;UPnPService; C:\Program\Delade filer\MAGIX Shared\UPnPService\UPnPService.exe [2006-12-14 544768]
S3 usnjsvc;Läsartjänsten USN Journal för mappdelning i Messenger; ---C:\Program\MSN Messenger\usnsvc.exe []
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; ---C:\Program\Windows Media Player\WMPNetwk.exe []
S4 BackWeb Plug-in - 7681197;F-Secure Automatic Update; C:\Program\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE []

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.04 2008-10-02 08:02:40

======Uninstall list======

-->C:\Program\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\BWUnin-6.3.2.116-7681197L.exe -AppId 7681197
-->C:\WINDOWS\IsUn041d.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{35D8D1B9-DAD1-4505-8A33-78095885CF6B}\Setup.exe" -l0x9
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.2 - Svenska-->MsiExec.exe /I{AC76BA86-7AD7-1053-7B44-A81200000003}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Agfa ScanWise 1.60-->C:\WINDOWS\IsUninst.exe -f"C:\Program\Agfa\ScanWise 1_60\uninst.isu" -c"C:\Program\Agfa\ScanWise 1_60\UNINSTALL.DLL"
AnyDVD-->"C:\Program\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program\SlySoft\AnyDVD"
ATI - Hjälp för avinstallation av program-->C:\Program\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->RunDll32 C:\Program\DELADE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Kontrollpanel-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
CCleaner (remove only)-->"C:\Program\CCleaner\uninst.exe"
ChristmasTheme-->MsiExec.exe /X{7523F68F-3DA4-452A-A17F-4AF55A8A25BB}
CloneDVD2-->"C:\Program\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program\Elaborate Bytes\CloneDVD2"
CoverPro-->"C:\Program\CoverPro\unins000.exe"
dBpowerAMP FLAC Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP FLAC Codec.dat
dBpowerAMP Monkeys Audio Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Monkeys Audio Codec.dat
dBpowerAMP Musepack Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Musepack Codec.dat
dBpowerAMP Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat
dBpowerAMP Ogg Vorbis Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Ogg Vorbis Codec.dat
dBpowerAMP WMA V9.1 Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP WMA V9.1 Codec.dat
Deluxe Ski Jump 3 v1.01-->"C:\Program\Deluxe Ski Jump 3\Uninstall\unins000.exe"
Destinator Console Installation-->C:\DESTIN~1\COLLEC~1\UNWISE.EXE C:\DESTIN~1\COLLEC~1\INSTALL.LOG
DivX Converter-->C:\Program\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program\DivX\DivXWebPlayerUninstall.exe /PLUGIN
dMC Power Pack-->"C:\WINDOWS\system32\SpoonUninstall.exe" C:\WINDOWS\system32\SpoonUninstall-dMC Power Pack.dat
DVD Shrink 3.2-->"C:\Program\DVD Shrink\unins000.exe"
EasyCleaner-->RunDll32 C:\Program\DELADE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9 -removeonly
Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
EPSON Printer Software-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EVEREST Ultimate Edition v4.20-->"C:\Program\Lavalys\EVEREST Ultimate Edition\unins000.exe"
Firebird SQL Server - MAGIX Edition (D)-->C:\MAGIX\Common\Database\uninstall.exe
Firebird SQL Server - MAGIX Edition-->C:\MAGIX\Common\Database\unwise.exe
FireTune-->C:\WINDOWS\iun6002.exe "C:\Program\FireTune\irunin.ini"
GoldWave v5.13-->"C:\Program\GoldWave\unstall.exe" "GoldWave v5.13" "C:\Program\GoldWave\unstall.log"
Guitar Pro 5.1-->"C:\Program\Guitar Pro 5\unins000.exe"
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Boot Optimizer-->MsiExec.exe /X{1341D838-719C-4A05-B50F-49420CA1B4BB}
HP DVD Play 2.1-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\Setup.exe" -uninstall
HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
Internet-tjänster-->C:\Program\DELADE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{5CFD7508-7774-48FE-8280-7A3C0AE71755} /l1053
InterVideo DeviceService-->MsiExec.exe /I{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}
J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
J2SE Runtime Environment 5.0 Update 8-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150080}
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
Kundupplevelseförbättringar-->C:\Program\DELADE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{23012310-3E05-46A5-88A9-C6CBCABCAC79} /l1053
Lexmark Z2300 Series-->C:\Program\Lexmark Z2300 Series\Install\x86\Uninst.exe
Logitech SetPoint-->RunDll32 C:\Program\DELADE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x1d -removeonly
Look 'n' Stop 2.06p3-->"C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -uninst
Macromedia Flash Player 8-->MsiExec.exe /X{6815FCDD-401D-481E-BA88-31B4754C2B46}
Macromedia Flash Player 8-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
MAGIX Goya burnR 1.3.1.2 (US)-->C:\Program\MAGIX\Goya_burnR\instslct.exe
MAGIX Music Maker 12 deluxe 12.1.0.4 (US)-->C:\Program\MAGIX\MusicMaker12deluxe\instslct.exe
MAGIX Music Maker Basic Edition 12.1.0.3 (UK)-->C:\Program\MAGIX\MusicMakerBasicEdition\instslct.exe
MAGIX Music Manager 2007 8.1.1.114 (US)-->C:\Program\MAGIX\Music_Manager_2007\instslct.exe
MAGIX Music Manager-->C:\MAGIX\Music_Manager\instslct.exe
MAGIX Photo Manager 2007 4.1.1.77 (US)-->C:\Program\MAGIX\Photo_Manager_2007\instslct.exe
MAGIX Screenshare 4.3.6.1987 (US)-->C:\Program\MAGIX\PCVisit\unwise.exe
MAGIX Xtreme Photo Designer 6 6.0.24.0 (US)-->C:\Program\MAGIX\Xtreme_Photo_Designer_6\unwise.exe
Malwarebytes' Anti-Malware-->"C:\Program\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1 Swedish Language Pack-->MsiExec.exe /X{992A2DB1-4ABC-4738-BD71-045C5FFE00D1}
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Language Pack - SVE-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - SVE\install.exe
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft ActiveSync 4.0-->MsiExec.exe /I{B208806F-A231-4FA0-AB3F-5C1B8979223E}
Microsoft Bootvis-->MsiExec.exe /I{0F9196C6-58B4-445B-B56E-B1200FECC151}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2000 Professional-->MsiExec.exe /I{0001041D-78E1-11D2-B60F-006097C998E7}
Microsoft Plus! for Windows XP-->MsiExec.exe /I{EEC2DAFD-5558-40AC-8E9C-5005C8F810E8}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Windows Theme Nunavut-->MsiExec.exe /X{047815FB-4E38-42D5-95CB-8A131DDD8668}
Microsoft Windows Theme Ontario-->MsiExec.exe /X{9757283E-3FCA-4F3D-9257-928859318E55}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works-->MsiExec.exe /I{F4B620CE-4297-4140-B0C3-6D4E8A8EF0AB}
Mozilla Firefox (3.0.3)-->C:\Program\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Nero 7 Demo-->MsiExec.exe /I{1B779CC7-5F25-29B3-5150-AF44A6201053}
Opera 9.52-->MsiExec.exe /X{E1A88DE8-BD36-4DEA-8DD8-E35EF475ADC7}
PC Connectivity Solution-->MsiExec.exe /I{99A40651-0BC2-4095-8F9A-A40FAB224FEF}
PC-Doctor 5 for Windows-->C:\Program\PC-Doctor 5 for Windows\uninst.exe
PhotoNow! 1.0-->RunDll32 C:\Program\DELADE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\Setup.exe" -uninstall
PoiEdit-->C:\Program\DNOTES~1\POIEDI~1\UNWISE.EXE C:\Program\DNOTES~1\POIEDI~1\INSTALL.LOG
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
QuickTime-->MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}
Recover My Files-->"C:\Program\GetData\Recover My Files\unins000.exe"
Rising Antivirus-->C:\Program\Rising\Rav\Update\Setup.exe /UNINSTALL
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update för Microsoft .NET Framework 2.0 (kB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
Skype 3.1-->"C:\Program\Skype\Phone\unins000.exe"
Skype Plugin Manager-->MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}
Slice Uninstall-->C:\Program\NCH Swift Sound\Slice\uninst.exe
Snabbkorrigering för Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Snabbkorrigering för Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Sonic Express Labeler-->MsiExec.exe /X{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /X{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /X{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /X{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /X{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /X{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
SpywareBlaster 4.1-->"C:\Program\SpywareBlaster\unins000.exe"
SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Switch-->C:\Program\NCH Swift Sound\Switch\uninst.exe
Säkerhetsuppdatering för Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Säkerhetsuppdatering för Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Texas Hold'em Poker 3D - Deluxe Edition 1.0-->"C:\Program\Play+Smile\Texas Hold'em Poker 3D - Deluxe Edition\unins000.exe"
Text-To-Speech-Runtime-->MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
Total Video Converter 3.10-->"C:\Program\Total Video Converter\unins000.exe"
Uppdatering för Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
WavePad Uninstall-->C:\Program\NCH Swift Sound\WavePad\uninst.exe
VideoLAN VLC media player 0.8.6a-->C:\Program\VideoLAN\VLC\uninstall.exe
Windows Defender Signatures-->MsiExec.exe /I{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live Messenger-->MsiExec.exe /I{2E55A582-4FFE-4FF2-8D4D-E7D275FF89BD}
Windows Media Format 11 runtime-->"C:\Program\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Program\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Program\WinRAR\uninstall.exe
Xilisoft Download YouTube Video-->C:\Program\Xilisoft\Download YouTube Video\Uninstall.exe
Yahoo! Install Manager-->C:\WINDOWS\system32\regsvr32 /u C:\Program\Yahoo!\Common\YINSTH~1.DLL

======Security center information======

AV: Rising Antivirus
FW: Look 'n' Stop 2.06p3 (Soft4Ever)

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\PROGRAM\PC CONNECTIVITY SOLUTION\;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;C:\PYTHON22;C:\PROGRAM\ATI TECHNOLOGIES\ATI CONTROL PANEL;C:\PROGRAM\QUICKTIME\QTSYSTEM\;;;C:\PROGRAM\DELADE FILER\ULEAD SYSTEMS\MPEG;C:\Program\ATI Technologies\ATI.ACE\Core-Static
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 63 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=3f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program\Delade filer\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program\Java\jre1.5.0_08\lib\ext\QTJava.zip
"QTJAVA"=C:\Program\Java\jre1.5.0_08\lib\ext\QTJava.zip
"Rav"=C:\Documents and Settings\All Users\Application Data\Rising\Rav

-----------------EOF-----------------
moi! voisitko laittaa deluxe ski jump 3:n rekisteröinti nimen ja mun sähköpostiin. se on [email protected]. maksoin siitä jo kympin enkä toista enää maksa koska aikaisempi ei toiminut. olisin todella kiitollinen!
Äänestä

Odottaa vastausta

Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

Ilmoitukset

En saa millän F-Securen pois

Muut lukivat myös

Vastaukset 13

Odottaa vastausta

Luetuimmat keskustelut

Kommentoi aloitusta

Ilmoita asiaton sisältö

Ilmoitus lähetetty

Jaa keskustelu