Gå til innhold

lando calrissian

Medlemmer
  • Innlegg

    206
  • Ble med

  • Besøkte siden sist

Innlegg skrevet av lando calrissian

  1.  

    OTL Extras logfile created on: 14.07.2012 16:18:37 - Run 1

    OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\whoisX\Downloads

    64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

    Internet Explorer (Version = 9.0.8112.16421)

    Locale: 00000414 | Country: Norge | Language: NOR | Date Format: dd.MM.yyyy

     

    7,92 Gb Total Physical Memory | 5,91 Gb Available Physical Memory | 74,68% Memory free

    15,84 Gb Paging File | 13,63 Gb Available in Paging File | 86,09% Paging File free

    Paging file location(s): ?:\pagefile.sys [binary data]

     

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

    Drive C: | 119,14 Gb Total Space | 63,60 Gb Free Space | 53,38% Space Free | Partition Type: NTFS

    Drive D: | 149,05 Gb Total Space | 145,17 Gb Free Space | 97,40% Space Free | Partition Type: NTFS

    Drive E: | 4,00 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

     

    Computer Name: GAMINGRIG | User Name: whoisX | Logged in as Administrator.

    Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

     

    ========== Extra Registry (SafeList) ==========

     

     

    ========== File Associations ==========

     

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

    .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

    .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

     

    ========== Shell Spawning ==========

     

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

    batfile [open] -- "%1" %*

    cmdfile [open] -- "%1" %*

    comfile [open] -- "%1" %*

    exefile [open] -- "%1" %*

    helpfile [open] -- Reg Error: Key error.

    htmlfile [edit] -- Reg Error: Key error.

    htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

    InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

    InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

    piffile [open] -- "%1" %*

    regfile [merge] -- Reg Error: Key error.

    scrfile [config] -- "%1"

    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

    scrfile [open] -- "%1" /S

    txtfile [edit] -- Reg Error: Key error.

    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    Folder [explore] -- Reg Error: Value error.

    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

    batfile [open] -- "%1" %*

    cmdfile [open] -- "%1" %*

    comfile [open] -- "%1" %*

    cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

    exefile [open] -- "%1" %*

    helpfile [open] -- Reg Error: Key error.

    htmlfile [edit] -- Reg Error: Key error.

    htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

    piffile [open] -- "%1" %*

    regfile [merge] -- Reg Error: Key error.

    scrfile [config] -- "%1"

    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

    scrfile [open] -- "%1" /S

    txtfile [edit] -- Reg Error: Key error.

    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    Folder [explore] -- Reg Error: Value error.

    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

     

    ========== Security Center Settings ==========

     

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

    "cval" = 1

     

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

     

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

    "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]

    "AntiVirusOverride" = 0

    "AntiSpywareOverride" = 0

    "FirewallOverride" = 0

     

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

     

    ========== Firewall Settings ==========

     

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

    "DisableNotifications" = 0

    "EnableFirewall" = 1

     

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

    "DisableNotifications" = 0

    "EnableFirewall" = 1

     

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

    "DisableNotifications" = 0

    "EnableFirewall" = 1

     

    ========== Authorized Applications List ==========

     

     

    ========== Vista Active Open Ports Exception List ==========

     

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

     

    ========== Vista Active Application Exception List ==========

     

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

    "{014FC711-0F10-47C1-B56E-28E78B1B2BEE}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |

    "{07E15771-354B-4616-BA8D-388F7B34C49A}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |

    "{12A74162-EEFF-4828-BA5B-2058E1660792}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |

    "{41CAA43E-F4F3-45B4-AD79-A0C053B0AC62}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgemca.exe |

    "{4AEFC0D2-6217-43A7-B967-17D091383BB3}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |

    "{6E523FA3-7CF7-4256-949C-4544DB9E471B}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |

    "{84BE365A-74F1-47C1-B689-DF6B8E2509B3}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |

    "{92288215-9ECE-4629-BD90-DA1783FD3F18}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |

    "{A2501AFB-52FD-4D67-9CBB-E512AD799D7C}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |

    "{A4CA2B9D-73A1-4E60-84CC-EC4A76AEAEEF}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |

    "{B1212BA9-6503-43E9-9FDC-02C287A96ACF}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgemca.exe |

    "{BB1D08B6-51CE-4F86-9A4A-39D8B70FDD85}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

    "{BD0A6EEB-9040-4692-8960-084BA5097109}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |

    "{CA6F743A-1B0A-4CC6-BE42-E056799592C5}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |

    "{CAFB4464-A85D-4EB5-A9CA-47995B6EB535}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |

    "{CE7CD4F9-45D1-4E91-9E48-5910C5356D1D}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |

    "{D8FE2016-FF72-4381-8BDD-846719EEDB17}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |

    "TCP Query User{11D716AB-1DA5-4604-94D6-7E6398E58977}C:\users\whoisx\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\whoisx\appdata\roaming\spotify\spotify.exe |

    "TCP Query User{477AB7AD-8ECC-4DDC-A9C1-9DD49EF1EFBD}C:\users\whoisx\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\whoisx\appdata\roaming\spotify\spotify.exe |

    "TCP Query User{98894921-AC82-4EC3-9093-BE57B5F481D7}C:\program files (x86)\origin games\battlefield 3\bf3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |

    "TCP Query User{F793E915-C022-40FE-93FC-627B2DB0D245}C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |

    "UDP Query User{2A3E36EE-51CA-42FF-9E5E-123D1170071C}C:\users\whoisx\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\whoisx\appdata\roaming\spotify\spotify.exe |

    "UDP Query User{768844E0-1076-497D-92A6-1AAF5FE40B1A}C:\program files (x86)\origin games\battlefield 3\bf3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |

    "UDP Query User{8620A703-D63B-4D29-B4C0-B2DDCB6CEFA7}C:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |

    "UDP Query User{BAEEB70C-2643-401E-9D14-99F31FD69D68}C:\users\whoisx\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\whoisx\appdata\roaming\spotify\spotify.exe |

     

    ========== HKEY_LOCAL_MACHINE Uninstall List ==========

     

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

    "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

    "{3C8159DD-1890-4625-A5B2-E3D8D78D4486}" = AVG 2012

    "{6B9CE44B-52D0-4B2F-BDFA-56FF4977A790}" = AVG 2012

    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 301.42

    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 301.42

    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 301.42

    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 301.42

    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.12.0213

    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.8.15

    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.3.16.0

    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

    "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components

    "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

    "AVG" = AVG 2012

    "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

    "WinRAR archiver" = WinRAR 4.20 (64-bit)

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

    "{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1

    "{1A36CF15-DF66-4756-9482-A9ABF3DDACE6}_is1" = Driver Robot

    "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    "{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java 7 Update 5

    "{3B35725F-C623-4A1E-B5CC-99C0868679E3}" = Smart 6 B11.0824.1

    "{3B983EFD-6E37-4AD9-9A7D-8C83E61674F7}" = Splashtop Connect IE

    "{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.0110.1

    "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology

    "{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.0823.1

    "{45D49CA7-D7D8-4659-B35A-EBD98C30AF28}" = Splashtop Connect for Firefox

    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

    "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components

    "{675F86A8-E093-4002-87D5-915CC2C45571}" = DES 2.0

    "{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™

    "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver

    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    "{B26438B4-BF51-49C3-9567-7F14A5E40CB9}" = Dolby Home Theater v4

    "{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS

    "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call

    "{C5DA59CF-2BB8-48D5-8E5B-17F2E0F0FEE4}" = System Requirements Lab for Intel

    "{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1

    "{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX

    "{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller

    "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10

    "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

    "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Processor Graphics

    "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

    "{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center

    "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel® OpenCL CPU Runtime

    "{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables

    "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

    "Battlelog Web Plugins" = Battlelog Web Plugins

    "ESN Sonar-0.70.4" = ESN Sonar

    "InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.0823.1

    "InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1

    "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver

    "Origin" = Origin

    "PunkBusterSvc" = PunkBuster Services

     

    ========== HKEY_CURRENT_USER Uninstall List ==========

     

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

    "Google Chrome" = Google Chrome

    "Spotify" = Spotify

     

    ========== Last 20 Event Log Errors ==========

     

    [ Application Events ]

    Error - 13.07.2012 09:47:47 | Computer Name = gamingrig | Source = SideBySide | ID = 16842785

    Description = Activation context generation failed for "C:\Program Files (x86)\Driver

    Robot\2.5.4.2\_imagingft.pyd". Dependent Assembly Microsoft.VC90.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"

    could not be found. Please use sxstrace.exe for detailed diagnosis.

     

    Error - 13.07.2012 09:49:35 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3012

    Description = The performance strings in the Performance registry value is corrupted

    when process Performance extension counter provider. The BaseIndex value from the

    Performance registry is the first DWORD in the Data section, LastCounter value

    is the second DWORD in the Data section, and LastHelp value is the third DWORD in

    the Data section.

     

    Error - 13.07.2012 09:49:35 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3011

    Description = Unloading the performance counter strings for service WmiApRpl (WmiApRpl)

    failed. The first DWORD in the Data section contains the error code.

     

    Error - 13.07.2012 09:53:54 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3012

    Description = The performance strings in the Performance registry value is corrupted

    when process Performance extension counter provider. The BaseIndex value from the

    Performance registry is the first DWORD in the Data section, LastCounter value

    is the second DWORD in the Data section, and LastHelp value is the third DWORD in

    the Data section.

     

    Error - 13.07.2012 09:53:54 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3011

    Description = Unloading the performance counter strings for service WmiApRpl (WmiApRpl)

    failed. The first DWORD in the Data section contains the error code.

     

    Error - 13.07.2012 09:57:13 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3012

    Description = The performance strings in the Performance registry value is corrupted

    when process Performance extension counter provider. The BaseIndex value from the

    Performance registry is the first DWORD in the Data section, LastCounter value

    is the second DWORD in the Data section, and LastHelp value is the third DWORD in

    the Data section.

     

    Error - 13.07.2012 09:57:13 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3011

    Description = Unloading the performance counter strings for service WmiApRpl (WmiApRpl)

    failed. The first DWORD in the Data section contains the error code.

     

    Error - 14.07.2012 10:09:22 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3012

    Description = The performance strings in the Performance registry value is corrupted

    when process Performance extension counter provider. The BaseIndex value from the

    Performance registry is the first DWORD in the Data section, LastCounter value

    is the second DWORD in the Data section, and LastHelp value is the third DWORD in

    the Data section.

     

    Error - 14.07.2012 10:09:22 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3011

    Description = Unloading the performance counter strings for service WmiApRpl (WmiApRpl)

    failed. The first DWORD in the Data section contains the error code.

     

    Error - 14.07.2012 10:15:41 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3012

    Description = The performance strings in the Performance registry value is corrupted

    when process Performance extension counter provider. The BaseIndex value from the

    Performance registry is the first DWORD in the Data section, LastCounter value

    is the second DWORD in the Data section, and LastHelp value is the third DWORD in

    the Data section.

     

    Error - 14.07.2012 10:15:41 | Computer Name = gamingrig | Source = Microsoft-Windows-LoadPerf | ID = 3011

    Description = Unloading the performance counter strings for service WmiApRpl (WmiApRpl)

    failed. The first DWORD in the Data section contains the error code.

     

    [ System Events ]

    Error - 13.07.2012 09:14:55 | Computer Name = gamingrig | Source = EventLog | ID = 6008

    Description = The previous system shutdown at 15:13:25 on ?13.?07.?2012 was unexpected.

     

    Error - 13.07.2012 09:14:57 | Computer Name = gamingrig | Source = BugCheck | ID = 1001

    Description =

     

    Error - 13.07.2012 09:43:27 | Computer Name = gamingrig | Source = EventLog | ID = 6008

    Description = The previous system shutdown at 15:33:45 on ?13.?07.?2012 was unexpected.

     

    Error - 13.07.2012 09:43:27 | Computer Name = GAMINGRIG | Source = BugCheck | ID = 1001

    Description =

     

    Error - 13.07.2012 09:52:07 | Computer Name = gamingrig | Source = EventLog | ID = 6008

    Description = The previous system shutdown at 15:51:12 on ?13.?07.?2012 was unexpected.

     

    Error - 13.07.2012 09:52:07 | Computer Name = GAMINGRIG | Source = BugCheck | ID = 1001

    Description =

     

    Error - 14.07.2012 10:04:16 | Computer Name = gamingrig | Source = EventLog | ID = 6008

    Description = The previous system shutdown at 16:03:03 on ?14.?07.?2012 was unexpected.

     

    Error - 14.07.2012 10:04:17 | Computer Name = gamingrig | Source = BugCheck | ID = 1001

    Description =

     

    Error - 14.07.2012 10:10:46 | Computer Name = gamingrig | Source = EventLog | ID = 6008

    Description = The previous system shutdown at 16:09:06 on ?14.?07.?2012 was unexpected.

     

    Error - 14.07.2012 10:10:46 | Computer Name = GAMINGRIG | Source = BugCheck | ID = 1001

    Description =

     

     

    < End of report >

     

  2. Takk igjen for at du er så behjelpelig.

     

    Det kom bare en fil.

     

     

    OTL logfile created on: 14.07.2012 16:22:19 - Run 2

    OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\whoisX\Downloads

    64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

    Internet Explorer (Version = 9.0.8112.16421)

    Locale: 00000414 | Country: Norge | Language: NOR | Date Format: dd.MM.yyyy

     

    7,92 Gb Total Physical Memory | 5,77 Gb Available Physical Memory | 72,91% Memory free

    15,84 Gb Paging File | 13,58 Gb Available in Paging File | 85,75% Paging File free

    Paging file location(s): ?:\pagefile.sys [binary data]

     

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

    Drive C: | 119,14 Gb Total Space | 63,59 Gb Free Space | 53,38% Space Free | Partition Type: NTFS

    Drive D: | 149,05 Gb Total Space | 145,17 Gb Free Space | 97,40% Space Free | Partition Type: NTFS

    Drive E: | 4,00 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

     

    Computer Name: GAMINGRIG | User Name: whoisX | Logged in as Administrator.

    Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

     

    ========== Processes (SafeList) ==========

     

    PRC - [2012.07.14 16:22:14 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\whoisX\Downloads\OTL (1).exe

    PRC - [2012.07.12 16:25:03 | 003,407,496 | ---- | M] (Electronic Arts) -- C:\Program Files (x86)\Origin\Origin.exe

    PRC - [2012.07.12 16:17:44 | 001,107,552 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe

    PRC - [2012.07.12 16:17:44 | 000,935,008 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

    PRC - [2012.07.12 14:10:56 | 007,601,880 | ---- | M] (Spotify Ltd) -- C:\Users\whoisX\AppData\Roaming\Spotify\spotify.exe

    PRC - [2012.07.12 14:10:56 | 001,193,176 | ---- | M] () -- C:\Users\whoisX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

    PRC - [2012.07.12 13:03:51 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe

    PRC - [2012.07.05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    PRC - [2012.07.04 17:25:54 | 005,160,568 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe

    PRC - [2012.05.15 12:48:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

    PRC - [2012.05.15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

    PRC - [2012.04.05 05:12:34 | 002,587,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe

    PRC - [2012.02.14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe

    PRC - [2011.10.03 20:23:58 | 002,656,536 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    PRC - [2011.10.03 20:23:54 | 000,325,912 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    PRC - [2011.08.22 15:26:10 | 000,057,344 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe

    PRC - [2011.05.20 10:10:26 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

    PRC - [2011.05.20 10:10:12 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

    PRC - [2011.03.24 06:37:18 | 000,493,384 | ---- | M] (Splashtop Inc.) -- C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe

    PRC - [2011.03.22 10:37:16 | 000,497,480 | ---- | M] (Splashtop Inc.) -- C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe

    PRC - [2010.11.20 14:17:55 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

    PRC - [2010.11.15 13:21:56 | 000,841,544 | ---- | M] (Splashtop Inc.) -- C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe

    PRC - [2010.11.15 13:21:54 | 000,477,000 | ---- | M] (Splashtop Inc.) -- C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe

    PRC - [2010.04.22 15:05:26 | 001,011,712 | ---- | M] (Gigabyte Technology CO., LTD.) -- C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe

    PRC - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

    PRC - [2009.10.13 16:39:46 | 000,114,688 | ---- | M] (Gigabyte Technology CO., LTD.) -- C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe

     

     

    ========== Modules (No Company Name) ==========

     

    MOD - [2012.07.12 16:17:44 | 001,107,552 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe

    MOD - [2012.07.12 16:17:44 | 000,132,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\SiteSafety.dll

    MOD - [2012.07.12 14:10:56 | 020,219,096 | ---- | M] () -- C:\Users\whoisX\AppData\Roaming\Spotify\Data\libcef.dll

    MOD - [2012.07.12 14:10:56 | 001,193,176 | ---- | M] () -- C:\Users\whoisX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

    MOD - [2012.07.10 06:09:00 | 000,438,296 | ---- | M] () -- C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppgooglenaclpluginchrome.dll

    MOD - [2012.07.10 06:08:59 | 003,972,120 | ---- | M] () -- C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll

    MOD - [2012.07.10 06:07:39 | 000,554,520 | ---- | M] () -- C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\libglesv2.dll

    MOD - [2012.07.10 06:07:37 | 000,117,784 | ---- | M] () -- C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\libegl.dll

    MOD - [2012.07.10 06:07:22 | 000,140,328 | ---- | M] () -- C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\avutil-51.dll

    MOD - [2012.07.10 06:07:21 | 000,262,184 | ---- | M] () -- C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\avformat-54.dll

    MOD - [2012.07.10 06:07:19 | 002,386,984 | ---- | M] () -- C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\avcodec-54.dll

    MOD - [2012.04.24 00:35:09 | 000,630,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

    MOD - [2012.03.22 00:32:36 | 005,025,792 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

    MOD - [2012.02.11 01:31:42 | 001,253,376 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll

    MOD - [2012.01.04 04:51:03 | 003,190,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

    MOD - [2012.01.04 04:50:59 | 004,550,656 | ---- | M] () -- C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

    MOD - [2010.11.05 03:58:14 | 002,048,000 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll

    MOD - [2010.11.05 03:58:10 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

    MOD - [2010.11.05 03:58:04 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll

    MOD - [2009.06.10 23:22:40 | 000,010,752 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

     

     

    ========== Win32 Services (SafeList) ==========

     

    SRV:64bit: - [2010.04.06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)

    SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

    SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

    SRV - [2012.07.12 16:30:10 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

    SRV - [2012.07.12 16:17:44 | 000,935,008 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe -- (vToolbarUpdater11.2.0)

    SRV - [2012.07.12 13:03:51 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)

    SRV - [2012.07.05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)

    SRV - [2012.07.04 17:25:54 | 005,160,568 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent)

    SRV - [2012.07.03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

    SRV - [2012.05.15 12:48:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

    SRV - [2012.05.15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

    SRV - [2012.03.19 16:44:20 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) Intel®

    SRV - [2012.02.14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -- (avgwd)

    SRV - [2011.10.03 20:23:58 | 002,656,536 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS) Intel®

    SRV - [2011.10.03 20:23:54 | 000,325,912 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS) Intel®

    SRV - [2011.08.22 15:26:10 | 000,057,344 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe -- (DES2 Service)

    SRV - [2011.05.20 10:10:26 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel®

    SRV - [2011.03.24 06:37:18 | 000,493,384 | ---- | M] (Splashtop Inc.) [Auto | Running] -- C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe -- (WCUService_STC_FF)

    SRV - [2011.03.22 10:37:16 | 000,497,480 | ---- | M] (Splashtop Inc.) [Auto | Running] -- C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe -- (WCUService_STC_IE)

    SRV - [2010.11.15 13:21:54 | 000,477,000 | ---- | M] (Splashtop Inc.) [Auto | Running] -- C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe -- (SCBackService)

    SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

    SRV - [2009.10.13 16:39:46 | 000,114,688 | ---- | M] (Gigabyte Technology CO., LTD.) [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe -- (Smart TimeLock)

    SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

     

     

    ========== Driver Services (SafeList) ==========

     

    DRV:64bit: - [2012.04.19 04:50:26 | 000,028,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)

    DRV:64bit: - [2012.04.18 19:08:03 | 000,188,736 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)

    DRV:64bit: - [2012.03.19 16:32:04 | 014,745,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

    DRV:64bit: - [2012.03.19 05:17:26 | 000,383,808 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)

    DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

    DRV:64bit: - [2012.02.22 05:25:32 | 000,289,872 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)

    DRV:64bit: - [2012.01.31 04:46:48 | 000,036,944 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)

    DRV:64bit: - [2011.12.23 13:32:14 | 000,047,696 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)

    DRV:64bit: - [2011.12.23 13:32:04 | 000,029,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\avgidsfiltera.sys -- (AVGIDSFilter)

    DRV:64bit: - [2011.12.23 13:31:58 | 000,124,496 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)

    DRV:64bit: - [2011.12.12 17:42:00 | 001,256,192 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bcmwlhigh664.sys -- (BCMH43XX)

    DRV:64bit: - [2011.12.06 04:23:10 | 000,331,264 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel®

    DRV:64bit: - [2011.09.22 09:49:56 | 000,056,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel®

    DRV:64bit: - [2011.07.29 05:40:00 | 000,079,104 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)

    DRV:64bit: - [2011.07.29 05:40:00 | 000,056,960 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)

    DRV:64bit: - [2011.06.01 05:16:50 | 000,535,656 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

    DRV:64bit: - [2011.05.20 09:53:44 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)

    DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

    DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

    DRV:64bit: - [2011.01.10 18:16:08 | 000,021,104 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)

    DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

    DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

    DRV:64bit: - [2010.11.20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

    DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

    DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

    DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

    DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

    DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

    DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

    DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

    DRV:64bit: - [2007.04.09 10:09:46 | 000,012,288 | ---- | M] (Waytech Development, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UsbFltr.sys -- (UsbFltr)

    DRV - [2012.07.14 16:10:47 | 000,025,640 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)

    DRV - [2012.07.12 11:48:10 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)

    DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

     

     

    ========== Standard Registry (SafeList) ==========

     

     

    ========== Internet Explorer ==========

     

    IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

    IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

    IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

     

    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://no.msn.com/?ocid=iehp

    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = nb-NO

    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 45 23 D8 F7 FD 60 CD 01 [binary data]

    IE - HKCU\..\URLSearchHook: {0F3DC9E0-C459-4a40-BCF8-747BD9322E10} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll (Splashtop Inc.)

    IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}

    IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

    IE - HKCU\..\SearchScopes\{1D25BD54-586E-446f-B650-240CC259D16F}: "URL" = http://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}

    IE - HKCU\..\SearchScopes\{21AD30B5-D188-4b2c-B9B0-5833BC11972D}: "URL" = http://no.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV

    IE - HKCU\..\SearchScopes\{765CDD20-DCD3-4b9d-89EB-1705003D85A6}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH

    IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={1FBCAF58-0B2C-4E4C-83C5-392F9A8997B8}&mid=4b2406eec23647d0ab3d416272f15a39-237cb14f828802a818005a4f2c6e194029dbcbd8&lang=en&ds=AVG&pr=fr&d=2012-07-12 16:17:44&v=11.1.0.12&sap=dsp&q={searchTerms}

    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

     

     

    ========== FireFox ==========

     

    FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

    FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll ()

    FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

    FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)

    FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

    FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)

    FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

    FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

    FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

    FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\whoisX\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

    FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\whoisX\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

     

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1} [2012.07.12 15:39:00 | 000,000,000 | ---D | M]

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0} [2012.07.12 15:39:00 | 000,000,000 | ---D | M]

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{d9284e50-81fc-11da-a72b-0800200c9a66}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66} [2012.07.12 15:39:00 | 000,000,000 | ---D | M]

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack\ [2012.07.12 16:17:34 | 000,000,000 | ---D | M]

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\11.1.0.12\ [2012.07.12 16:17:45 | 000,000,000 | ---D | M]

     

     

    ========== Chrome ==========

     

    CHR - homepage:

    CHR - default_search_provider: Google (Enabled)

    CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}

    CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}

    CHR - homepage:

    CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer

    CHR - plugin: Native Client (Enabled) = C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll

    CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll

    CHR - plugin: Shockwave Flash (Enabled) = C:\Users\whoisX\AppData\Local\Google\Chrome\Application\20.0.1132.57\gcswf32.dll

    CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

    CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

    CHR - plugin: Google Update (Enabled) = C:\Users\whoisX\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll

    CHR - Extension: YouTube = C:\Users\whoisX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\

    CHR - Extension: Google Search = C:\Users\whoisX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\

    CHR - Extension: Skype Click to Call = C:\Users\whoisX\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.1.0.10441_0\

    CHR - Extension: AVG Do Not Track = C:\Users\whoisX\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.0.0.2166_0\

    CHR - Extension: Gmail = C:\Users\whoisX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

     

    O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

    O2:64bit: - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)

    O2 - BHO: (Splashtop Connect VisualBookmark) - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (Splashtop Inc.)

    O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)

    O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)

    O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()

    O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

    O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)

    O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()

    O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

    O4:64bit: - HKLM..\Run: [igfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

    O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

    O4:64bit: - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)

    O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

    O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)

    O4 - HKLM..\Run: [Dolby Home Theater v4] C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (Dolby Laboratories Inc.)

    O4 - HKLM..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)

    O4 - HKLM..\Run: [sTCAgent] C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe (Splashtop Inc.)

    O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()

    O4 - HKLM..\Run: [ZyngaGamesAgent] C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe (Splashtop Inc.)

    O4 - HKCU..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)

    O4 - HKCU..\Run: [spotify] C:\Users\whoisX\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)

    O4 - HKCU..\Run: [spotify Web Helper] C:\Users\whoisX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe ()

    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

    O9:64bit: - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)

    O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)

    O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

    O1364bit: - gopher Prefix: missing

    O13 - gopher Prefix: missing

    O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} http://download.gigabyte.com.tw/object/Dldrv.ocx (Dldrv2 Control)

    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{330DE321-EB7F-4D9E-933B-654CA0F35BD7}: DhcpNameServer = 193.75.75.75 193.75.75.193

    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CEF58ABB-91FD-46D6-8B0C-F06F9A0F916F}: DhcpNameServer = 192.168.0.1

    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FECC3F41-7D16-456C-A721-B67C2254338A}: DhcpNameServer = 192.168.0.1

    O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)

    O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

    O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found

    O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found

    O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)

    O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

    O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

    O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll ()

    O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

    O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

    O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)

    O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found

    O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

    O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

    O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found

    O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

    O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

    O32 - HKLM CDRom: AutoRun - 1

    O32 - AutoRun File - [2003.10.21 16:05:32 | 000,000,039 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ]

    O33 - MountPoints2\{f64255bf-cc25-11e1-9260-806e6f6e6963}\Shell - "" = AutoRun

    O33 - MountPoints2\{f64255bf-cc25-11e1-9260-806e6f6e6963}\Shell\AutoRun\command - "" = E:\run.exe -- [2009.09.02 08:03:54 | 000,240,168 | R--- | M] ()

    O34 - HKLM BootExecute: (autocheck autochk *)

    O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart)

    O35:64bit: - HKLM\..comfile [open] -- "%1" %*

    O35:64bit: - HKLM\..exefile [open] -- "%1" %*

    O35 - HKLM\..comfile [open] -- "%1" %*

    O35 - HKLM\..exefile [open] -- "%1" %*

    O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

    O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

    O37 - HKLM\...com [@ = comfile] -- "%1" %*

    O37 - HKLM\...exe [@ = exefile] -- "%1" %*

    O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

    O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

    O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

     

    ========== Files/Folders - Created Within 30 Days ==========

     

    [2012.07.13 15:47:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Robot

    [2012.07.13 15:47:47 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Blitware

    [2012.07.13 15:47:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Robot

    [2012.07.13 15:00:43 | 000,053,248 | R--- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll

    [2012.07.13 14:13:05 | 000,000,000 | ---D | C] -- C:\Users\whoisX\Desktop\minidump

    [2012.07.13 14:12:11 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\WinRAR

    [2012.07.13 14:12:11 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

    [2012.07.13 14:12:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

    [2012.07.13 14:12:09 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR

    [2012.07.13 04:24:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab

    [2012.07.13 04:24:25 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\SystemRequirementsLab

    [2012.07.13 01:31:02 | 000,000,000 | ---D | C] -- C:\Windows\Panther

    [2012.07.13 01:17:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET

    [2012.07.13 00:50:29 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview

    [2012.07.13 00:50:21 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders

    [2012.07.13 00:49:29 | 000,116,224 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\SysNative\fms.dll

    [2012.07.13 00:49:26 | 000,093,696 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll

    [2012.07.12 23:19:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun

    [2012.07.12 23:19:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

    [2012.07.12 23:19:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oracle

    [2012.07.12 23:19:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java

    [2012.07.12 22:10:55 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Skype

    [2012.07.12 22:10:54 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype

    [2012.07.12 22:10:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

    [2012.07.12 22:10:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype

    [2012.07.12 22:10:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype

    [2012.07.12 21:51:21 | 000,281,104 | ---- | C] (CACE Technologies, Inc.) -- C:\Windows\SysWow64\wpcap.dll

    [2012.07.12 21:51:21 | 000,096,784 | ---- | C] (CACE Technologies, Inc.) -- C:\Windows\SysWow64\Packet.dll

    [2012.07.12 21:51:21 | 000,047,632 | ---- | C] (CACE Technologies, Inc.) -- C:\Windows\SysNative\drivers\npf.sys

    [2012.07.12 17:13:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battlelog Web Plugins

    [2012.07.12 17:12:14 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core

    [2012.07.12 16:43:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3

    [2012.07.12 16:43:14 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\EAInstaller

    [2012.07.12 16:22:52 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Origin

    [2012.07.12 16:22:51 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\Origin

    [2012.07.12 16:22:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin

    [2012.07.12 16:22:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin Games

    [2012.07.12 16:22:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin

    [2012.07.12 16:22:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts

    [2012.07.12 16:22:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin

    [2012.07.12 16:18:15 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\AVG2012

    [2012.07.12 16:17:46 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\AVG Secure Search

    [2012.07.12 16:17:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

    [2012.07.12 16:17:44 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search

    [2012.07.12 16:17:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search

    [2012.07.12 16:17:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG Secure Search

    [2012.07.12 16:17:35 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\AVG

    [2012.07.12 16:17:33 | 000,000,000 | -H-D | C] -- C:\$AVG

    [2012.07.12 16:17:33 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2012

    [2012.07.12 16:17:33 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\AVG

    [2012.07.12 16:17:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG

    [2012.07.12 16:16:03 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files

    [2012.07.12 16:16:03 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData

    [2012.07.12 16:12:10 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

    [2012.07.12 16:11:46 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\Google

    [2012.07.12 16:11:19 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Macromedia

    [2012.07.12 16:09:58 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat

    [2012.07.12 16:09:58 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat

    [2012.07.12 16:09:14 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\Deployment

    [2012.07.12 16:09:14 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\Apps

    [2012.07.12 16:09:04 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Adobe

    [2012.07.12 16:08:52 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed

    [2012.07.12 16:08:52 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed

    [2012.07.12 16:07:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

    [2012.07.12 16:07:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel

    [2012.07.12 16:06:15 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA

    [2012.07.12 16:05:59 | 000,020,992 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll

    [2012.07.12 16:05:59 | 000,017,920 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll

    [2012.07.12 16:05:58 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation

    [2012.07.12 16:05:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation

    [2012.07.12 16:05:16 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation

    [2012.07.12 16:04:59 | 000,000,000 | ---D | C] -- C:\NVIDIA

    [2012.07.12 15:58:00 | 002,604,376 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll

    [2012.07.12 15:57:59 | 002,132,824 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll

    [2012.07.12 15:57:59 | 000,603,984 | ---- | C] (Knowles Acoustics ) -- C:\Windows\SysNative\KAAPORT64.dll

    [2012.07.12 15:57:59 | 000,527,872 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll

    [2012.07.12 15:57:59 | 000,515,584 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll

    [2012.07.12 15:57:59 | 000,439,808 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll

    [2012.07.12 15:50:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\obj

    [2012.07.12 15:50:28 | 000,000,000 | ---D | C] -- C:\Windows\GBD

    [2012.07.12 15:50:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel Corporation

    [2012.07.12 15:48:38 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Intel Corporation

    [2012.07.12 15:45:48 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallShield

    [2012.07.12 15:44:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE

    [2012.07.12 15:44:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD

    [2012.07.12 15:43:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Splashtop

    [2012.07.12 15:43:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent

    [2012.07.12 15:43:22 | 000,000,000 | ---D | C] -- C:\Program Files\GIGABYTE

    [2012.07.12 15:43:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GIGABYTE

    [2012.07.12 15:43:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Etron Technology

    [2012.07.12 15:42:28 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\InstallShield

    [2012.07.12 15:41:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dolby Home Theater v4

    [2012.07.12 15:41:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby

    [2012.07.12 15:41:26 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM

    [2012.07.12 15:41:26 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek

    [2012.07.12 15:41:15 | 000,535,656 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys

    [2012.07.12 15:41:04 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll

    [2012.07.12 15:41:04 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll

    [2012.07.12 15:41:04 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll

    [2012.07.12 15:41:04 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll

    [2012.07.12 15:41:03 | 000,220,512 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFNHK64.dll

    [2012.07.12 15:41:03 | 000,081,248 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFCOM64.dll

    [2012.07.12 15:41:03 | 000,078,176 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFAPO64.dll

    [2012.07.12 15:41:03 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll

    [2012.07.12 15:40:56 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll

    [2012.07.12 15:40:56 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll

    [2012.07.12 15:40:56 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll

    [2012.07.12 15:40:56 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll

    [2012.07.12 15:40:55 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll

    [2012.07.12 15:40:55 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll

    [2012.07.12 15:40:44 | 003,308,376 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll

    [2012.07.12 15:40:44 | 000,136,024 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll

    [2012.07.12 15:40:43 | 000,426,328 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll

    [2012.07.12 15:40:43 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll

    [2012.07.12 15:40:43 | 000,118,104 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll

    [2012.07.12 15:40:43 | 000,074,072 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll

    [2012.07.12 15:40:42 | 003,768,152 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll

    [2012.07.12 15:40:41 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll

    [2012.07.12 15:40:41 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll

    [2012.07.12 15:40:30 | 002,085,440 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll

    [2012.07.12 15:40:30 | 000,693,352 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll

    [2012.07.12 15:40:29 | 001,756,264 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll

    [2012.07.12 15:40:29 | 001,568,360 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll

    [2012.07.12 15:40:29 | 000,712,296 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll

    [2012.07.12 15:40:29 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll

    [2012.07.12 15:40:29 | 000,432,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll

    [2012.07.12 15:40:28 | 001,486,952 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll

    [2012.07.12 15:40:28 | 000,728,680 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll

    [2012.07.12 15:40:28 | 000,428,648 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll

    [2012.07.12 15:40:28 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll

    [2012.07.12 15:40:28 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll

    [2012.07.12 15:40:28 | 000,241,768 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll

    [2012.07.12 15:40:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek

    [2012.07.12 15:40:22 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp

    [2012.07.12 15:40:22 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information

    [2012.07.12 15:40:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield

    [2012.07.12 15:40:15 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

    [2012.07.12 15:40:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel

    [2012.07.12 15:40:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel

    [2012.07.12 15:39:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel

    [2012.07.12 15:39:03 | 000,000,000 | ---D | C] -- C:\Intel

    [2012.07.12 15:38:40 | 000,000,000 | -H-D | C] -- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}

    [2012.07.12 15:38:40 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Splashtop

    [2012.07.12 15:38:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Splashtop

    [2012.07.12 15:38:29 | 000,000,000 | -HSD | C] -- C:\Windows\Installer

    [2012.07.12 15:36:28 | 000,000,000 | R--D | C] -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

    [2012.07.12 15:36:28 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Searches

    [2012.07.12 15:36:28 | 000,000,000 | R--D | C] -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

    [2012.07.12 15:36:28 | 000,000,000 | -H-D | C] -- C:\Users\whoisX\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned

    [2012.07.12 15:36:22 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Identities

    [2012.07.12 15:36:21 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Contacts

    [2012.07.12 15:36:21 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\VirtualStore

    [2012.07.12 15:35:42 | 000,000,000 | --SD | C] -- C:\Users\whoisX\AppData\Roaming\Microsoft

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Videos

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Saved Games

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Pictures

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Music

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Links

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Favorites

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Downloads

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Documents

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\Desktop

    [2012.07.12 15:35:42 | 000,000,000 | R--D | C] -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\AppData\Local\Temporary Internet Files

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\Templates

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\Start Menu

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\SendTo

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\Recent

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\PrintHood

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\NetHood

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\Documents\My Videos

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\Documents\My Pictures

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\Documents\My Music

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\My Documents

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\Local Settings

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\AppData\Local\History

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\Cookies

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\Application Data

    [2012.07.12 15:35:42 | 000,000,000 | -HSD | C] -- C:\Users\whoisX\AppData\Local\Application Data

    [2012.07.12 15:35:42 | 000,000,000 | -H-D | C] -- C:\Users\whoisX\AppData

    [2012.07.12 15:35:42 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\Temp

    [2012.07.12 15:35:42 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\Microsoft

    [2012.07.12 15:35:42 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Media Center Programs

    [2012.07.12 15:35:26 | 000,000,000 | -HSD | C] -- C:\Recovery

    [2012.07.12 15:35:25 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution

    [2012.07.12 15:32:19 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch

    [2012.07.12 15:32:04 | 000,000,000 | -HSD | C] -- C:\System Volume Information

    [2012.07.12 14:10:57 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\Spotify

    [2012.07.12 14:10:39 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Roaming\Spotify

    [2012.07.12 11:41:06 | 000,000,000 | ---D | C] -- C:\Windows\Minidump

    [2012.07.12 02:48:18 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\PunkBuster

    [2012.07.12 02:48:15 | 000,000,000 | ---D | C] -- C:\Users\whoisX\Documents\Battlefield 3

    [2012.07.12 02:47:26 | 000,000,000 | ---D | C] -- C:\Users\whoisX\AppData\Local\ESN Sonar

    [2012.07.12 02:46:59 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs

     

    ========== Files - Modified Within 30 Days ==========

     

    [2012.07.14 16:16:00 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3635487587-749428666-3091529855-1000UA.job

    [2012.07.14 16:16:00 | 000,000,954 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3635487587-749428666-3091529855-1000Core.job

    [2012.07.14 16:15:44 | 000,683,170 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

    [2012.07.14 16:15:44 | 000,170,478 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

    [2012.07.14 16:15:44 | 000,005,152 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

    [2012.07.14 16:10:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

    [2012.07.14 16:10:42 | 524,692,282 | ---- | M] () -- C:\Windows\MEMORY.DMP

    [2012.07.14 16:10:42 | 2082,295,807 | -HS- | M] () -- C:\hiberfil.sys

    [2012.07.14 16:02:42 | 000,028,289 | ---- | M] () -- C:\Users\whoisX\Desktop\bs.rar

    [2012.07.13 15:52:08 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\Driver Robot.job

    [2012.07.13 15:52:07 | 000,295,592 | ---- | M] () -- C:\Users\whoisX\Desktop\071312-16879-01.dmp

    [2012.07.13 15:47:47 | 000,001,172 | ---- | M] () -- C:\Users\Public\Desktop\Driver Robot.lnk

    [2012.07.13 15:30:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

    [2012.07.13 15:00:03 | 000,027,520 | ---- | M] () -- C:\Users\whoisX\AppData\Local\dt.dat

    [2012.07.13 14:59:19 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini

    [2012.07.13 14:50:56 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat

    [2012.07.13 14:15:23 | 101,479,373 | ---- | M] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm

    [2012.07.13 14:13:19 | 000,162,125 | ---- | M] () -- C:\Users\whoisX\Desktop\minidump.rar

    [2012.07.13 04:39:15 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

    [2012.07.13 04:39:15 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

    [2012.07.13 04:29:33 | 000,018,602 | ---- | M] () -- C:\Windows\SysNative\results.xml

    [2012.07.13 02:40:36 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr

    [2012.07.13 02:40:36 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe

    [2012.07.13 02:40:27 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0

    [2012.07.13 01:06:25 | 000,274,680 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

    [2012.07.13 00:20:31 | 000,001,437 | ---- | M] () -- C:\Users\whoisX\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

    [2012.07.12 23:54:27 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf

    [2012.07.12 23:54:26 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf

    [2012.07.12 22:10:54 | 000,002,513 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk

    [2012.07.12 21:59:15 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_bcmwlhigh664_01009.Wdf

    [2012.07.12 21:58:27 | 000,045,383 | ---- | M] () -- C:\Users\whoisX\Desktop\Untitled.wma

    [2012.07.12 16:22:46 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk

    [2012.07.12 16:17:45 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2012.lnk

    [2012.07.12 16:17:35 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\AVG\incavi.avm

    [2012.07.12 16:17:35 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\AVG\iavichjw.avm

    [2012.07.12 16:09:34 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

    [2012.07.12 15:45:00 | 000,000,810 | ---- | M] () -- C:\Users\Public\Desktop\smart6.lnk

    [2012.07.12 15:44:45 | 000,002,012 | ---- | M] () -- C:\Users\Public\Desktop\ET6.lnk

    [2012.07.12 15:33:50 | 000,042,045 | ---- | M] () -- C:\Windows\SysWow64\license.rtf

    [2012.07.12 15:33:50 | 000,042,045 | ---- | M] () -- C:\Windows\SysNative\license.rtf

    [2012.07.12 14:10:57 | 000,001,772 | ---- | M] () -- C:\Users\whoisX\Desktop\Spotify.lnk

    [2012.07.12 13:03:51 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe

    [2012.07.12 11:48:10 | 000,030,528 | ---- | M] () -- C:\Windows\GVTDrv64.sys

    [2012.07.12 11:48:10 | 000,000,004 | ---- | M] () -- C:\Windows\SysWow64\GVTunner.ref

    [2012.07.12 02:46:47 | 000,001,170 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 3.lnk

     

    ========== Files Created - No Company Name ==========

     

    [2012.07.14 16:02:42 | 000,028,289 | ---- | C] () -- C:\Users\whoisX\Desktop\bs.rar

    [2012.07.14 16:02:36 | 000,295,592 | ---- | C] () -- C:\Users\whoisX\Desktop\071312-16879-01.dmp

    [2012.07.13 15:47:47 | 000,001,172 | ---- | C] () -- C:\Users\Public\Desktop\Driver Robot.lnk

    [2012.07.13 15:47:47 | 000,000,352 | ---- | C] () -- C:\Windows\tasks\Driver Robot.job

    [2012.07.13 15:00:03 | 000,027,520 | ---- | C] () -- C:\Users\whoisX\AppData\Local\dt.dat

    [2012.07.13 14:50:56 | 000,003,288 | ---- | C] () -- C:\bootsqm.dat

    [2012.07.13 14:15:23 | 101,479,373 | ---- | C] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm

    [2012.07.13 14:13:19 | 000,162,125 | ---- | C] () -- C:\Users\whoisX\Desktop\minidump.rar

    [2012.07.13 00:49:44 | 000,095,744 | ---- | C] () -- C:\Windows\SysNative\RDVGHelper.exe

    [2012.07.13 00:49:40 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd

    [2012.07.13 00:49:24 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml

    [2012.07.13 00:49:23 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml

    [2012.07.13 00:49:23 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml

    [2012.07.13 00:49:20 | 000,146,389 | ---- | C] () -- C:\Windows\SysWow64\printmanagement.msc

    [2012.07.13 00:49:20 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml

    [2012.07.12 23:54:27 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf

    [2012.07.12 23:54:26 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf

    [2012.07.12 22:10:54 | 000,002,513 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk

    [2012.07.12 21:59:15 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_bcmwlhigh664_01009.Wdf

    [2012.07.12 21:58:18 | 000,045,383 | ---- | C] () -- C:\Users\whoisX\Desktop\Untitled.wma

    [2012.07.12 21:51:21 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll

    [2012.07.12 16:43:15 | 000,001,170 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 3.lnk

    [2012.07.12 16:42:55 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe

    [2012.07.12 16:42:55 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.ex0

    [2012.07.12 16:42:54 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe

    [2012.07.12 16:22:46 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk

    [2012.07.12 16:17:45 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2012.lnk

    [2012.07.12 16:17:35 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\AVG\incavi.avm

    [2012.07.12 16:17:35 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\AVG\iavichjw.avm

    [2012.07.12 16:11:46 | 000,001,006 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3635487587-749428666-3091529855-1000UA.job

    [2012.07.12 16:11:46 | 000,000,954 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3635487587-749428666-3091529855-1000Core.job

    [2012.07.12 16:09:34 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

    [2012.07.12 16:08:53 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

    [2012.07.12 16:07:37 | 000,018,602 | ---- | C] () -- C:\Windows\SysNative\results.xml

    [2012.07.12 16:06:05 | 002,621,723 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin

    [2012.07.12 16:05:50 | 000,014,324 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb

    [2012.07.12 15:48:49 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys

    [2012.07.12 15:48:49 | 000,000,004 | ---- | C] () -- C:\Windows\SysWow64\GVTunner.ref

    [2012.07.12 15:47:04 | 000,001,437 | ---- | C] () -- C:\Users\whoisX\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

    [2012.07.12 15:45:00 | 000,000,810 | ---- | C] () -- C:\Users\Public\Desktop\smart6.lnk

    [2012.07.12 15:44:45 | 000,002,012 | ---- | C] () -- C:\Users\Public\Desktop\ET6.lnk

    [2012.07.12 15:43:23 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll

    [2012.07.12 15:43:23 | 000,008,192 | ---- | C] () -- C:\Windows\SysNative\drivers\IntelMEFWVer.dll

    [2012.07.12 15:43:22 | 000,031,272 | ---- | C] () -- C:\Windows\SysNative\AppleChargerSrv.exe

    [2012.07.12 15:43:22 | 000,021,104 | ---- | C] () -- C:\Windows\SysNative\drivers\AppleCharger.sys

    [2012.07.12 15:41:11 | 000,074,344 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll

    [2012.07.12 15:39:55 | 001,981,696 | ---- | C] () -- C:\Windows\SysNative\iglhxa64.cpa

    [2012.07.12 15:39:55 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin

    [2012.07.12 15:39:55 | 000,145,804 | ---- | C] () -- C:\Windows\SysNative\igcompkrng600.bin

    [2012.07.12 15:39:55 | 000,094,208 | ---- | C] () -- C:\Windows\SysNative\IccLibDll_x64.dll

    [2012.07.12 15:38:40 | 000,001,424 | ---- | C] () -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Social Games.lnk

    [2012.07.12 15:37:26 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini

    [2012.07.12 15:36:31 | 000,001,409 | ---- | C] () -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk

    [2012.07.12 15:36:29 | 000,001,443 | ---- | C] () -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

    [2012.07.12 15:35:42 | 000,000,290 | ---- | C] () -- C:\Users\whoisX\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

    [2012.07.12 15:35:42 | 000,000,272 | ---- | C] () -- C:\Users\whoisX\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

    [2012.07.12 15:33:47 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

    [2012.07.12 15:33:45 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

    [2012.07.12 15:32:04 | 2082,295,807 | -HS- | C] () -- C:\hiberfil.sys

    [2012.07.12 14:10:57 | 000,001,772 | ---- | C] () -- C:\Users\whoisX\Desktop\Spotify.lnk

    [2012.07.12 14:10:57 | 000,001,758 | ---- | C] () -- C:\Users\whoisX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

    [2012.07.12 11:41:02 | 524,692,282 | ---- | C] () -- C:\Windows\MEMORY.DMP

    [2012.07.12 02:48:21 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr

    [2012.05.15 02:21:50 | 000,423,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe

    [2012.03.19 16:31:16 | 000,963,912 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin

    [2012.03.19 16:31:16 | 000,261,208 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin

    [2012.03.19 16:25:58 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll

    [2012.03.19 15:21:14 | 013,212,672 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll

     

    ========== LOP Check ==========

     

    [2012.07.12 16:18:15 | 000,000,000 | ---D | M] -- C:\Users\whoisX\AppData\Roaming\AVG2012

    [2012.07.13 15:47:47 | 000,000,000 | ---D | M] -- C:\Users\whoisX\AppData\Roaming\Blitware

    [2012.07.12 16:25:05 | 000,000,000 | ---D | M] -- C:\Users\whoisX\AppData\Roaming\Origin

    [2012.07.12 15:38:40 | 000,000,000 | ---D | M] -- C:\Users\whoisX\AppData\Roaming\Splashtop

    [2012.07.14 16:15:50 | 000,000,000 | ---D | M] -- C:\Users\whoisX\AppData\Roaming\Spotify

    [2012.07.13 04:24:25 | 000,000,000 | ---D | M] -- C:\Users\whoisX\AppData\Roaming\SystemRequirementsLab

    [2012.07.13 15:52:08 | 000,000,352 | ---- | M] () -- C:\Windows\Tasks\Driver Robot.job

    [2009.07.14 07:08:49 | 000,014,254 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

     

    ========== Purity Check ==========

     

    < End of report >

     

  3. Ja alle valgfrie opptateringer også. Jeg har et gtx 670 phantom. Ja det står skikkelig i sporet sitt. Jeg prøvde å flytte det over til det andre pci 3 sporet. Når jeg startet opp igjen måtte jeg vente til windows hadde installert driverene til kortet igjen, og da jeg restartet fikk jeg bluscreen med en gang windows var ferdig lastet.

  4. Selv takk. Har engelsk windows. Maskinen fungerer og starter opp som vanlig. Det kan fort gå mange timer før det kommer bluescreen, til å komme 3-4 på rappen. Jeg har installert alle opptateringer som er mulig utenom de språkpakkene så tror ikke det har noe med det å gjøre heller :(

  5. Jeg måtte installere win 7 på nytt, men jeg får fortsatt bluescreen. Det står noe med memory, men det går så kjapt at jeg ikke får lest hva som står før dataen restarter. Det virker som det begynner når jeg opptaterer windows for det var jo når jeg skulle installere sp 1 bluscreen startet forige gang. Skal jeg bare slå av win update og bare la vær å opptatere windows kanskje?

  6. Jeg bygget ny pc igår og installerte win 7. Den har virket helt fint idag og jeg har spilt på den i mange timer. Men etter hvert som jeg opptaterte windows begynte jeg å få bluescreen, og midt under installasjonen av servicepack 1 kom det enda en bluescreen og maskinen restartet. Nå får jeg ikke bootet opp for det står bare loading operating system og ingenting skjer. Er det noen som kan hjelpe?

     

    loading%20operating%20system.jpg

     

    Spec: Samsung SSD 830 Series 128GB

    Gigabyte GA-Z68X-UD3H-B3, Socket-1155

    i5 2500k

    gtx670

    8 gb ddr3 1600 mhz

  7. Hei!

     

    Jeg lurer på om det er mulig å bli lærling i sjøforsvaret som matros uten studiokompetanse? Jeg har bare gk byggfag og et år i lære men hoppet av fordi tømrer er noe jeg ikke ønsker å bli. Det er jo noe som heter full opplæring i bedrift der man tar skolegang underveis over fire år mener jeg. Jeg har et stort ønske om å bli matros og jobbe i sjøforsvaret. jeg har alle sikkerhetskurs og helseattester man trenger og har jobbet noen måneder på sjøen for havforskningsinstituttet og fått utmerkede attester og referanser. Problemet er at jeg var i hæren for noen år siden og var mg1`er i stormesk, men fikk en prolaps på vinterøvelse etter ca 8 måneder og ble dimmet av legen mot min egen vilje. Prolapsen er operert og jeg 100% frisk igjen. Er det noe mulighet for å komme inn igjen i i militæret/sjøforsvaret og så bli lærling i matrosfaget og ta skolegang underveis?

  8. Hvordan skal vi hvite hvem hun så på? o_O

     

    godt spørsmål, men lurer på om hun klarer å fokusere på den personen hun har hodet rettet mot (sjøgle folk generelt) eller om hun må snu på hodet til et av øynene treffer ditt...

  9. idag snakket jeg med en dame i en butikk som sjøglet sånn at øynene gikk hver sin vei. altså når hun såg med hodet beint mot meg gikk det høyre øyet ut til høyre og det venstre ut til venstre, men det virket som hun registrerte meg siden hun nikket og smilte liksom, men hele tiden lurte jeg på om hun egentlig såg på de folkene som stod bak meg på høyre og venstre side :hmm: hvordan fungerer det egentlig når man er så sjøgl?

×
×
  • Opprett ny...