Hi,

und zwar habe ich mir heute wohl einen Virus eingefangen, jedoch weiß ich nicht wie..
Zu meinem Problem: Alle paar Minuten öffnet sich der Internet Explorer im Hintergrund und spielt irgendeinen Soundeffekt (aus einem Film oder so?!) ab. Ist so ein 2-3 Sekunden Effekt..
In der Taskleiste wird mir auch kein geöffneter IE angezeigt, sondern nur bei dem Lautsprecher-Symbol unten rechts (rechtsklick -> Lautstärkemixer öffnen) ..
Und jedesmal öffnet sich das von neuem.. nach ein Paar Stunden hab ich das dann um die 150 mal geöffnet.

Kann mir eventuell jemand weiterhelfen?

Hier mein AntiVir Log (bei dem 6 Sachen gefunden wurden ):



Avira Free Antivirus
Erstellungsdatum der Reportdatei: Sonntag, 2. Dezember 2012 21:48


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer : Avira Free Antivirus
Seriennummer : 0000149996-ADJIE-0000001
Plattform : Windows 7 Enterprise
Windowsversion : (plain) [6.1.7600]
Boot Modus : Normal gebootet
Benutzername : mottisson
Computername : MOTTISSON-PC

Versionsinformationen:
BUILD.DAT : 13.0.0.2832 48424 Bytes 20.11.2012 13:46:00
AVSCAN.EXE : 13.4.0.294 639264 Bytes 16.11.2012 15:03:34
AVSCANRC.DLL : 13.4.0.219 64800 Bytes 09.10.2012 12:49:58
LUKE.DLL : 13.4.0.267 67360 Bytes 13.11.2012 15:45:05
AVSCPLR.DLL : 13.4.0.271 93984 Bytes 14.11.2012 17:44:58
AVREG.DLL : 13.4.0.267 245536 Bytes 13.11.2012 15:36:46
avlode.dll : 13.4.0.294 426784 Bytes 16.11.2012 15:03:00
avlode.rdf : 13.0.0.24 7196 Bytes 27.09.2012 09:30:38
VBASE000.VDF : 7.10.0.0 19875328 Bytes 06.11.2009 13:50:29
VBASE001.VDF : 7.11.0.0 13342208 Bytes 14.12.2010 13:50:31
VBASE002.VDF : 7.11.19.170 14374912 Bytes 20.12.2011 13:50:34
VBASE003.VDF : 7.11.21.238 4472832 Bytes 01.02.2012 13:50:36
VBASE004.VDF : 7.11.26.44 4329472 Bytes 28.03.2012 13:50:37
VBASE005.VDF : 7.11.34.116 4034048 Bytes 29.06.2012 13:42:40
VBASE006.VDF : 7.11.41.250 4902400 Bytes 06.09.2012 13:42:40
VBASE007.VDF : 7.11.45.207 2363904 Bytes 11.10.2012 14:52:17
VBASE008.VDF : 7.11.45.208 2048 Bytes 11.10.2012 14:52:17
VBASE009.VDF : 7.11.45.209 2048 Bytes 11.10.2012 14:52:17
VBASE010.VDF : 7.11.45.210 2048 Bytes 11.10.2012 14:52:17
VBASE011.VDF : 7.11.45.211 2048 Bytes 11.10.2012 14:52:17
VBASE012.VDF : 7.11.45.212 2048 Bytes 11.10.2012 14:52:17
VBASE013.VDF : 7.11.45.213 2048 Bytes 11.10.2012 14:52:17
VBASE014.VDF : 7.11.46.65 220160 Bytes 16.10.2012 11:34:30
VBASE015.VDF : 7.11.46.153 173568 Bytes 18.10.2012 08:35:47
VBASE016.VDF : 7.11.46.223 162304 Bytes 19.10.2012 08:35:47
VBASE017.VDF : 7.11.47.35 126464 Bytes 22.10.2012 06:59:23
VBASE018.VDF : 7.11.47.95 175616 Bytes 24.10.2012 11:50:08
VBASE019.VDF : 7.11.47.177 164352 Bytes 26.10.2012 15:38:43
VBASE020.VDF : 7.11.47.229 143360 Bytes 28.10.2012 12:01:23
VBASE021.VDF : 7.11.48.47 138240 Bytes 30.10.2012 13:01:55
VBASE022.VDF : 7.11.48.135 122880 Bytes 01.11.2012 09:08:46
VBASE023.VDF : 7.11.48.209 142848 Bytes 05.11.2012 09:00:18
VBASE024.VDF : 7.11.48.243 119296 Bytes 05.11.2012 12:12:23
VBASE025.VDF : 7.11.49.47 136704 Bytes 07.11.2012 10:09:00
VBASE026.VDF : 7.11.49.135 194560 Bytes 09.11.2012 13:31:53
VBASE027.VDF : 7.11.49.209 188416 Bytes 12.11.2012 08:24:33
VBASE028.VDF : 7.11.50.27 212992 Bytes 14.11.2012 08:23:59
VBASE029.VDF : 7.11.50.105 200704 Bytes 18.11.2012 12:37:58
VBASE030.VDF : 7.11.50.164 340992 Bytes 20.11.2012 12:39:34
VBASE031.VDF : 7.11.50.166 2048 Bytes 20.11.2012 12:39:34
Engineversion : 8.2.10.202
AEVDF.DLL : 8.1.2.10 102772 Bytes 19.09.2012 13:42:55
AESCRIPT.DLL : 8.1.4.66 463227 Bytes 12.11.2012 12:19:00
AESCN.DLL : 8.1.9.4 131445 Bytes 15.11.2012 15:08:00
AESBX.DLL : 8.2.5.12 606578 Bytes 28.08.2012 15:58:06
AERDL.DLL : 8.2.0.74 643445 Bytes 07.11.2012 10:09:14
AEPACK.DLL : 8.3.0.40 815479 Bytes 12.11.2012 12:19:00
AEOFFICE.DLL : 8.1.2.50 201084 Bytes 05.11.2012 14:00:38
AEHEUR.DLL : 8.1.4.138 5542265 Bytes 15.11.2012 15:08:00
AEHELP.DLL : 8.1.25.2 258423 Bytes 12.10.2012 14:52:32
AEGEN.DLL : 8.1.6.10 438646 Bytes 15.11.2012 15:08:00
AEEXP.DLL : 8.2.0.10 119158 Bytes 05.11.2012 14:00:38
AEEMU.DLL : 8.1.3.2 393587 Bytes 19.09.2012 13:42:55
AECORE.DLL : 8.1.29.2 201079 Bytes 07.11.2012 10:09:14
AEBB.DLL : 8.1.1.4 53619 Bytes 05.11.2012 14:00:38
AVWINLL.DLL : 13.4.0.163 25888 Bytes 19.09.2012 17:09:30
AVPREF.DLL : 13.4.0.163 50464 Bytes 19.09.2012 17:07:51
AVREP.DLL : 13.4.0.244 177952 Bytes 30.10.2012 13:06:41
AVARKT.DLL : 13.4.0.292 260384 Bytes 16.11.2012 12:58:39
AVEVTLOG.DLL : 13.4.0.267 167200 Bytes 13.11.2012 15:35:34
SQLITE3.DLL : 3.7.0.1 397088 Bytes 19.09.2012 17:17:40
AVSMTP.DLL : 13.4.0.163 62240 Bytes 19.09.2012 17:08:54
NETNT.DLL : 13.4.0.163 15648 Bytes 19.09.2012 17:16:26
RCIMAGE.DLL : 13.4.0.163 4780832 Bytes 19.09.2012 17:21:16
RCTEXT.DLL : 13.4.0.163 68384 Bytes 19.09.2012 17:21:16

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: A:\Program Files\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: interaktiv
Sekundäre Aktion......................: ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: A:, B:, C:, D:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Datei Suchmodus.......................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Abweichende Gefahrenkategorien........: +JOKE,

Beginn des Suchlaufs: Sonntag, 2. Dezember 2012 21:48

Der Suchlauf über die Masterbootsektoren wird begonnen:
Masterbootsektor HD0
[INFO] Es wurde kein Virus gefunden!
Masterbootsektor HD1
[INFO] Es wurde kein Virus gefunden!

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'A:\'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'B:\'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'C:\'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'D:\'
[INFO] Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '97' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '105' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '157' Modul(e) wurden durchsucht
Durchsuche Prozess 'CTAudSvc.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '103' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '81' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '71' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'WireHelperSvc.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'TeamViewer_Service.exe' - '86' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSVC.EXE' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSvcM.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '66' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '221' Modul(e) wurden durchsucht
Durchsuche Prozess 'wire.exe' - '90' Modul(e) wurden durchsucht
Durchsuche Prozess 'spotify.exe' - '140' Modul(e) wurden durchsucht
Durchsuche Prozess 'SpotifyWebHelper.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'FacebookMessenger.exe' - '131' Modul(e) wurden durchsucht
Durchsuche Prozess 'KoneHID.EXE' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '81' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '74' Modul(e) wurden durchsucht
Durchsuche Prozess 'Savu Monitor.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'MOM.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'soffice.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'soffice.bin' - '97' Modul(e) wurden durchsucht
Durchsuche Prozess 'osd.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCC.exe' - '235' Modul(e) wurden durchsucht
Durchsuche Prozess 'iPodService.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '114' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'inGame32.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'dbus-daemon.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '15' Modul(e) wurden durchsucht
Durchsuche Prozess 'DllHost.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMS.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'UNS.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'jucheck.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'javaw.exe' - '86' Modul(e) wurden durchsucht
Durchsuche Prozess 'PnkBstrA.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'steam.exe' - '147' Modul(e) wurden durchsucht
Durchsuche Prozess 'SyncServer.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '15' Modul(e) wurden durchsucht
Durchsuche Prozess 'Origin.exe' - '137' Modul(e) wurden durchsucht
Durchsuche Prozess 'OriginClientService.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'rads_user_kernel.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'LoLLauncher.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'LolClient.exe' - '112' Modul(e) wurden durchsucht
Durchsuche Prozess 'PMB.exe' - '83' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '126' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess '8A07m7j5.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess '8A07m7j5.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '88' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '157' Modul(e) wurden durchsucht
Durchsuche Prozess 'iexplore.exe' - '88' Modul(e) wurden durchsucht
Durchsuche Prozess 'iexplore.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'iexplore.exe' - '87' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '117' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'iexplore.exe' - '87' Modul(e) wurden durchsucht
Durchsuche Prozess 'iexplore.exe' - '111' Modul(e) wurden durchsucht
Durchsuche Prozess 'iexplore.exe' - '91' Modul(e) wurden durchsucht
Durchsuche Prozess 'iexplore.exe' - '99' Modul(e) wurden durchsucht
Durchsuche Prozess '8A07m7j5.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'iexplore.exe' - '111' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '2369' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'A:\'
A:\Downloads\0003.rar
[0] Archivtyp: RAR
--> F1.2012.MULTi2-ZKY\zky-f112.iso
[WARNUNG] Die Datei konnte nicht geschrieben werden!
[WARNUNG] Die Datei konnte nicht geschrieben werden!
A:\Downloads\LOLPBE.zip
[0] Archivtyp: ZIP
--> LOLPBE/RADS/projects/lol_game_client/filearchives/0.0.0.1/Archive_197017904.raf.dat
[WARNUNG] Die Datei konnte nicht geschrieben werden!
A:\Program Files (x86)\CTM\CH-Fahrschule\chfahrschule_baa1-patch.exe
[FUND] Ist das Trojanische Pferd TR/PSW.LdPinch.atxz
A:\Program Files (x86)\FUSSBALL MANAGER 13\Manager13.exe
[FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen2
A:\Program Files (x86)\FUSSBALL MANAGER 13\rld.dll
[FUND] Ist das Trojanische Pferd TR/Rogue.8152493
A:\Program Files (x86)\Ubisoft\FarCry 3\bin\ubiorbitapi_r2_loader.dll
[FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen
Beginne mit der Suche in 'B:\'
Beginne mit der Suche in 'C:\'
C:\Users\mottisson\Downloads\Sony.Vegas.Unlock.package\Keygen v.1.8\Keygen.exe
[FUND] Ist das Trojanische Pferd TR/Agent.sdgo
C:\Users\mottisson\Downloads\Sony.Vegas.Unlock.package\Keygen v.1.9\Keygen.exe
[FUND] Ist das Trojanische Pferd TR/Offend.6906603.1
Beginne mit der Suche in 'D:\' <SYSTEM RESERVED>

Beginne mit der Desinfektion:
C:\Users\mottisson\Downloads\Sony.Vegas.Unlock.package\Keygen v.1.9\Keygen.exe
[FUND] Ist das Trojanische Pferd TR/Offend.6906603.1
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '59d967e9.qua' verschoben!
C:\Users\mottisson\Downloads\Sony.Vegas.Unlock.package\Keygen v.1.8\Keygen.exe
[FUND] Ist das Trojanische Pferd TR/Agent.sdgo
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '414e484e.qua' verschoben!
A:\Program Files (x86)\Ubisoft\FarCry 3\bin\ubiorbitapi_r2_loader.dll
[FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '130112a3.qua' verschoben!
A:\Program Files (x86)\FUSSBALL MANAGER 13\rld.dll
[FUND] Ist das Trojanische Pferd TR/Rogue.8152493
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '750d5d6f.qua' verschoben!
A:\Program Files (x86)\FUSSBALL MANAGER 13\Manager13.exe
[FUND] Ist das Trojanische Pferd TR/Crypt.XPACK.Gen2
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '30bf705e.qua' verschoben!
A:\Program Files (x86)\CTM\CH-Fahrschule\chfahrschule_baa1-patch.exe
[FUND] Ist das Trojanische Pferd TR/PSW.LdPinch.atxz
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4fac4234.qua' verschoben!


Ende des Suchlaufs: Sonntag, 2. Dezember 2012 22:24
Benötigte Zeit: 35:14 Minute(n)

Der Suchlauf wurde vollständig durchgeführt.

47557 Verzeichnisse wurden überprüft
728385 Dateien wurden geprüft
6 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
6 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
728379 Dateien ohne Befall
6709 Archive wurden durchsucht
1 Warnungen
6 Hinweise
674184 Objekte wurden beim Rootkitscan durchsucht
0 Versteckte Objekte wurden gefunden

__________________________________________________________

OTL.txt:

OTL logfile created on: 03.12.2012 01:47:51 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\mottisson\Desktop
64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

7,98 Gb Total Physical Memory | 6,51 Gb Available Physical Memory | 81,49% Memory free
14,41 Gb Paging File | 12,12 Gb Available in Paging File | 84,09% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 45,53 Gb Total Space | 0,94 Gb Free Space | 2,06% Space Free | Partition Type: NTFS
Drive D: | 100,00 Mb Total Space | 71,87 Mb Free Space | 71,87% Space Free | Partition Type: NTFS
Drive F: | 4,69 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: MOTTISSON-PC | User Name: mottisson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.12.03 01:46:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\mottisson\Desktop\OTL.exe
PRC - [2012.12.02 17:44:11 | 000,120,320 | ---- | M] () -- C:\ProgramData\8A07m7j5.exe
PRC - [2012.11.29 19:17:56 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012.11.19 15:38:29 | 000,085,280 | ---- | M] (Avira Operations GmbH & Co. KG) -- A:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2012.11.19 15:37:53 | 000,109,344 | ---- | M] (Avira Operations GmbH & Co. KG) -- A:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.11.16 16:02:52 | 000,384,800 | ---- | M] (Avira Operations GmbH & Co. KG) -- A:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.11.14 11:59:26 | 000,024,480 | ---- | M] () -- A:\Program Files\EslWire\inGame32.exe
PRC - [2012.10.27 11:07:32 | 001,199,576 | ---- | M] (Spotify Ltd) -- C:\Users\mottisson\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2012.10.23 10:47:48 | 002,848,168 | ---- | M] (TeamViewer GmbH) -- A:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2012.09.25 10:05:20 | 000,247,728 | ---- | M] (Facebook) -- C:\Users\mottisson\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe
PRC - [2012.09.10 15:22:32 | 000,872,048 | ---- | M] (ROCCAT GmbH) -- C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe
PRC - [2012.08.13 11:08:08 | 010,376,704 | ---- | M] (OpenOffice.org) -- A:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2012.08.13 11:08:08 | 010,368,512 | ---- | M] (OpenOffice.org) -- A:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2012.07.03 08:04:58 | 000,507,312 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
PRC - [2010.12.20 17:30:38 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010.12.20 17:30:36 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010.05.20 10:04:14 | 000,286,720 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009.09.15 16:02:48 | 000,180,224 | ---- | M] (ROCCAT) -- C:\Program Files (x86)\ROCCAT\Kone Mouse\KoneHID.EXE
PRC - [2008.10.06 10:40:32 | 000,458,752 | ---- | M] (ROCCAT) -- C:\Program Files (x86)\ROCCAT\Kone Mouse\osd.exe


========== Modules (No Company Name) ==========

MOD - [2012.11.17 20:38:58 | 011,824,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\398df77267992efc77df5ef5176a89c6\System.Web.ni.dll
MOD - [2012.11.17 20:38:53 | 006,618,624 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\ff1a3712e3bbd4944ffb5c78fd9c7bca\System.Data.ni.dll
MOD - [2012.11.17 20:38:40 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\515c6ffea562bb0f03a1ed8f75279648\System.Windows.Forms.ni.dll
MOD - [2012.11.17 20:38:36 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\f4be07261983040b29685575b69085e8\System.Drawing.ni.dll
MOD - [2012.11.17 20:38:23 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d2d47118e5da6db054d5676e665f2be2\System.Xml.ni.dll
MOD - [2012.11.17 20:38:20 | 007,973,888 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c8ebcd93a2b547dc72dee2fcfabcdd50\System.ni.dll
MOD - [2012.11.17 20:38:20 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2f44dac350b6161a9e9ce7222ae94335\System.Configuration.ni.dll
MOD - [2012.11.17 20:38:16 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\5530227809880c9b8b1d834e5434e840\mscorlib.ni.dll
MOD - [2012.11.14 12:05:50 | 000,165,888 | ---- | M] () -- A:\Program Files\EslWire\NocIPC32.dll
MOD - [2012.11.14 11:59:26 | 000,447,904 | ---- | M] () -- A:\Program Files\EslWire\inGame32.dll
MOD - [2012.11.14 11:59:26 | 000,024,480 | ---- | M] () -- A:\Program Files\EslWire\inGame32.exe
MOD - [2012.09.25 10:05:32 | 022,423,984 | ---- | M] () -- C:\Users\mottisson\AppData\Local\Facebook\Messenger\2.1.4651.0\libcef.dll
MOD - [2012.09.25 10:05:08 | 000,181,680 | ---- | M] () -- C:\Users\mottisson\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.WinForms.dll
MOD - [2012.09.25 10:05:00 | 000,286,640 | ---- | M] () -- C:\Users\mottisson\AppData\Local\Facebook\Messenger\2.1.4651.0\CefSharp.dll
MOD - [2012.08.10 16:51:32 | 000,985,088 | ---- | M] () -- A:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2012.02.20 20:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012.02.20 20:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2009.07.14 11:48:20 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009.06.10 22:23:17 | 002,933,248 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll


========== Services (SafeList) ==========

SRV:64bit: - [2012.09.28 02:38:16 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012.11.29 19:17:56 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.11.29 15:55:24 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2012.11.29 15:55:20 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2012.11.19 15:38:29 | 000,085,280 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- A:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.11.19 15:37:53 | 000,109,344 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- A:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.11.14 12:00:10 | 000,678,416 | ---- | M] () [Auto | Running] -- A:\Program Files\EslWire\service\WireHelperSvc.exe -- (EslWireHelper)
SRV - [2012.10.27 12:37:49 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.10.23 10:47:48 | 002,848,168 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- A:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2012.08.31 09:25:40 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.07.13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2010.12.20 17:30:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010.12.20 17:30:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010.05.20 10:04:14 | 000,286,720 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2010.03.18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.08.18 12:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.11.16 20:17:15 | 000,129,216 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2012.11.16 20:17:15 | 000,098,888 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012.11.16 20:17:15 | 000,027,800 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2012.11.14 11:59:58 | 000,160,784 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ESLWireACD.sys -- (ESLWireAC)
DRV:64bit: - [2012.09.28 03:21:20 | 010,697,216 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.09.28 02:12:52 | 000,460,288 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012.09.25 12:36:08 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2012.08.21 12:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012.07.09 12:42:54 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.05.14 07:12:30 | 000,096,896 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012.03.26 13:50:12 | 000,022,528 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
DRV:64bit: - [2012.03.01 07:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.03.11 07:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.12.24 14:32:54 | 000,412,264 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010.10.19 15:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010.07.01 14:21:50 | 000,038,992 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ScreamingBAudio64.sys -- (ScreamBAudioSvc)
DRV:64bit: - [2009.07.31 03:40:32 | 000,025,600 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\XENfiltv.sys -- (XENfiltv)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008.12.11 13:56:54 | 000,015,488 | ---- | M] (ROCCAT Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Kone.sys -- (KoneFltr)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = hxxp://search.babylon.com/?affID=110184&tt=120912_cpc_3812_4&babsrc=HP_ss&mntrId=509b007a000000000000e069959f1b45
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=110184&tt=120912_cpc_3812_4&babsrc=HP_ss&mntrId=509b007a000000000000e069959f1b45
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 07 61 7D D7 A7 95 CD 01 [binary data]
IE - HKCU\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=110184&tt=120912_cpc_3812_4&babsrc=SP_ss&mntrId=509b007a000000000000e069959f1b45
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.order.1: "Google"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Search the web (Babylon)"


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: A:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\mottisson\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: A:\Program Files (x86)\Mozilla Firefox\components [2012.10.27 12:37:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: A:\Program Files (x86)\Mozilla Firefox\plugins

[2012.08.31 09:12:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\mottisson\AppData\Roaming\mozilla\Extensions
[2012.12.02 17:50:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\mottisson\AppData\Roaming\mozilla\Firefox\Profiles\33zpq1dq.default\extensions
[2012.12.02 17:50:05 | 000,804,627 | ---- | M] () (No name found) -- C:\Users\mottisson\AppData\Roaming\mozilla\firefox\profiles\33zpq1dq.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

========== Chrome ==========

CHR - homepage: about:home
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:se archFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: about:home
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.95\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.95\pdf.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: iTunes Application Detector (Enabled) = A:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 7 U7 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.70.11 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Facebook Desktop (Enabled) = C:\Users\mottisson\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll
CHR - Extension: YouTube = C:\Users\mottisson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Adblock Plus = C:\Users\mottisson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.3.1_0\
CHR - Extension: Google-Suche = C:\Users\mottisson\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Google Mail = C:\Users\mottisson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (no name) - {2EECD738-5844-4a99-B4B6-146BF802613B} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] A:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Kone] C:\Program Files (x86)\ROCCAT\Kone Mouse\KoneHID.EXE (ROCCAT)
O4 - HKLM..\Run: [ROCCAT Savu Gaming Mouse] C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe (ROCCAT GmbH)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [ESL Wire] A:\Program Files\EslWire\wire.exe (Turtle Entertainment GmbH)
O4 - HKCU..\Run: [Facebook Update] C:\Users\mottisson\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKCU..\Run: [Spotify] C:\Users\mottisson\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKCU..\Run: [Spotify Web Helper] C:\Users\mottisson\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKCU..\Run: [Steam] A:\program files (x86)\steam\steam.exe (Valve Corporation)
O4 - Startup: C:\Users\mottisson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk = C:\Users\mottisson\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe (Facebook)
O4 - Startup: C:\Users\mottisson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = A:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D5F1594D-A9BE-4161-86BD-8D0607FC737D}: DhcpNameServer = 139.7.30.126 139.7.30.125
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E1A85977-0DC8-47C4-A38D-180ED0BDB3D8}: DhcpNameServer = 192.168.2.1 192.168.2.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012.05.15 21:15:00 | 000,000,057 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{b2686891-05be-11e2-9cd9-e069959f1b45}\Shell - "" = AutoRun
O33 - MountPoints2\{b2686891-05be-11e2-9cd9-e069959f1b45}\Shell\AutoRun\command - "" = F:\Setup.exe -- [2012.05.16 19:11:48 | 000,883,490 | R--- | M] (ZKY )
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012.12.03 01:46:56 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\mottisson\Desktop\OTL.exe
[2012.12.02 21:46:15 | 000,000,000 | ---D | C] -- C:\Users\mottisson\AppData\Roaming\Avira
[2012.12.02 21:43:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2012.12.02 21:43:38 | 000,129,216 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
[2012.12.02 21:43:38 | 000,098,888 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2012.12.02 21:43:38 | 000,027,800 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2012.12.02 21:43:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2012.11.30 10:33:27 | 000,000,000 | ---D | C] -- C:\Users\mottisson\AppData\Local\FLT
[2012.11.30 10:33:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2012.11.30 10:32:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters
[2012.11.29 19:22:59 | 000,000,000 | ---D | C] -- C:\Users\mottisson\Documents\My Games
[2012.11.29 19:22:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Orbit
[2012.11.29 15:58:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative
[2012.11.29 15:55:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative
[2012.11.29 15:55:35 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2012.11.29 15:55:24 | 000,466,520 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2012.11.29 15:55:24 | 000,445,016 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2012.11.29 15:55:23 | 002,906,591 | ---- | C] (Creative) -- C:\Windows\SysWow64\Sens_oal.dll
[2012.11.29 15:55:23 | 001,942,528 | ---- | C] (Creative) -- C:\Windows\SysNative\Sens_oal.dll
[2012.11.29 15:55:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared
[2012.11.29 15:55:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
[2012.11.29 15:55:13 | 000,000,000 | ---D | C] -- C:\Program Files\Creative
[2012.11.29 15:55:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2012.11.29 12:57:36 | 013,892,968 | ---- | C] (CAPCOM U.S.A, INC.) -- C:\Users\mottisson\Desktop\Street Fight X Tekken.exe
[2012.11.29 12:51:45 | 000,000,000 | ---D | C] -- C:\Users\mottisson\Desktop\Bilder x)
[2012.11.23 03:27:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX
[2012.11.21 20:37:10 | 000,000,000 | ---D | C] -- C:\Users\mottisson\Documents\Hitman Blood Money
[2012.11.21 20:36:45 | 000,000,000 | ---D | C] -- C:\Users\mottisson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2012.11.21 20:34:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eidos
[2012.11.19 19:31:25 | 000,000,000 | ---D | C] -- C:\Users\mottisson\AppData\Local\Ubisoft Game Launcher
[2012.11.19 19:31:25 | 000,000,000 | ---D | C] -- C:\Users\mottisson\Documents\Assassin's Creed III
[2012.11.19 19:16:29 | 000,000,000 | ---D | C] -- C:\Users\mottisson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
[2012.11.19 19:16:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft
[2012.11.18 05:12:03 | 000,000,000 | ---D | C] -- C:\Users\mottisson\Documents\CAPCOM
[2012.11.18 00:53:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
[2012.11.18 00:53:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2012.11.18 00:53:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2012.11.17 21:03:04 | 000,000,000 | ---D | C] -- C:\Users\mottisson\AppData\Roaming\Ashampoo
[2012.11.17 21:02:59 | 000,000,000 | ---D | C] -- C:\Users\mottisson\AppData\Local\ashampoo
[2012.11.17 21:02:59 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo
[2012.11.17 21:02:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
[2012.11.13 20:04:47 | 000,000,000 | ---D | C] -- C:\Users\mottisson\AppData\Roaming\OpenOffice.org
[2012.11.13 20:04:21 | 000,000,000 | --SD | C] -- C:\Users\mottisson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
[2012.11.13 19:12:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activision
[2012.11.08 02:27:13 | 000,000,000 | ---D | C] -- C:\Users\mottisson\Documents\FUSSBALL MANAGER 13
[2012.11.06 13:56:50 | 000,000,000 | ---D | C] -- C:\Users\mottisson\AppData\Local\cache

========== Files - Modified Within 30 Days ==========

[2012.12.03 01:46:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\mottisson\Desktop\OTL.exe
[2012.12.03 01:45:46 | 000,000,168 | ---- | M] () -- C:\Users\mottisson\defogger_reenable
[2012.12.03 01:30:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.12.03 01:00:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At2.job
[2012.12.03 01:00:00 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At26.job
[2012.12.03 00:43:00 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2137025091-1880340154-1991070181-1000UA.job
[2012.12.03 00:38:10 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At1.job
[2012.12.03 00:36:09 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At25.job
[2012.12.03 00:36:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.12.02 23:20:34 | 000,058,608 | ---- | M] () -- C:\Users\mottisson\Desktop\hey_gema_20121202_1539916568.jpg
[2012.12.02 23:07:19 | 001,980,805 | ---- | M] () -- C:\Users\mottisson\Desktop\Metallbauer.jpg
[2012.12.02 23:07:19 | 000,002,100 | ---- | M] () -- C:\Users\mottisson\AppData\Local\recently-used.xbel
[2012.12.02 23:01:12 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At24.job
[2012.12.02 23:00:00 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At48.job
[2012.12.02 22:58:32 | 000,112,073 | ---- | M] () -- C:\Users\mottisson\Desktop\Troll-Guy-MEME-memes-29215018-800-500.jpg
[2012.12.02 22:43:45 | 000,016,160 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.12.02 22:43:45 | 000,016,160 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.12.02 22:41:28 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.12.02 22:41:28 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.12.02 22:41:28 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.12.02 22:41:28 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.12.02 22:41:28 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.12.02 22:35:29 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At42.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At41.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At40.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At39.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At38.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At37.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At36.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At35.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At34.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At33.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At32.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At31.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At30.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At29.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At28.job
[2012.12.02 22:35:06 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At27.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At9.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At8.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At7.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At6.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At5.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At4.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At3.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At18.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At17.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At16.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At15.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At14.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At13.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At12.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At11.job
[2012.12.02 22:35:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At10.job
[2012.12.02 22:35:02 | 2133,688,319 | -HS- | M] () -- C:\hiberfil.sys
[2012.12.02 22:00:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At23.job
[2012.12.02 22:00:00 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At47.job
[2012.12.02 21:43:39 | 000,000,915 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012.12.02 21:04:41 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At22.job
[2012.12.02 21:00:00 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At46.job
[2012.12.02 20:38:47 | 000,038,586 | ---- | M] () -- C:\Users\mottisson\Desktop\hey_gema_20121202_1323331271.jpg
[2012.12.02 20:38:32 | 000,055,603 | ---- | M] () -- C:\Users\mottisson\Desktop\hey_gema_20121202_1220718421.jpg
[2012.12.02 20:01:49 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At21.job
[2012.12.02 20:00:38 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At45.job
[2012.12.02 19:00:09 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At44.job
[2012.12.02 19:00:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At20.job
[2012.12.02 18:43:00 | 000,000,922 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2137025091-1880340154-1991070181-1000Core.job
[2012.12.02 18:00:08 | 000,000,346 | ---- | M] () -- C:\Windows\tasks\At43.job
[2012.12.02 18:00:06 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\At19.job
[2012.12.02 17:44:32 | 000,000,000 | ---- | M] () -- C:\ProgramData\8afO0Q68.dat
[2012.12.02 17:44:18 | 000,000,001 | ---- | M] () -- C:\ProgramData\8A07m7j5.exe_.b
[2012.12.02 17:44:18 | 000,000,001 | ---- | M] () -- C:\ProgramData\8A07m7j5.exe.b
[2012.12.02 17:44:11 | 000,120,320 | ---- | M] () -- C:\ProgramData\8A07m7j5.exe
[2012.11.30 10:32:17 | 000,000,830 | ---- | M] () -- C:\Users\Public\Desktop\F1 2012.lnk
[2012.11.29 19:23:22 | 000,281,688 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012.11.29 19:23:22 | 000,281,688 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.11.29 19:17:57 | 000,282,512 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012.11.29 19:17:56 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.11.29 19:17:55 | 000,001,390 | ---- | M] () -- C:\Users\mottisson\Desktop\Far Cry 3.lnk
[2012.11.29 15:55:34 | 000,000,376 | RH-- | M] () -- C:\Windows\ctfile.rfc
[2012.11.29 15:55:24 | 000,466,520 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2012.11.29 15:55:24 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2012.11.29 12:58:15 | 000,001,701 | ---- | M] () -- C:\Users\mottisson\Desktop\Harry Potter und die Heiligtümer des Todes - Teil 1.lnk
[2012.11.27 19:17:17 | 000,000,219 | ---- | M] () -- C:\Users\mottisson\Desktop\Dota 2.url
[2012.11.23 03:27:29 | 000,000,986 | ---- | M] () -- C:\Users\Public\Desktop\Hitman Absolution.lnk
[2012.11.21 20:34:50 | 000,000,697 | ---- | M] () -- C:\Users\Public\Desktop\Hitman Blood Money starten.lnk
[2012.11.19 19:25:27 | 000,000,244 | ---- | M] () -- C:\Users\mottisson\Desktop\Assassin's Creed III.lnk
[2012.11.17 20:37:57 | 000,294,184 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.11.16 20:17:15 | 000,129,216 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
[2012.11.16 20:17:15 | 000,098,888 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2012.11.16 20:17:15 | 000,027,800 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2012.11.14 11:59:58 | 000,160,784 | ---- | M] (<Turtle Entertainment>) -- C:\Windows\SysNative\drivers\ESLWireACD.sys
[2012.11.13 20:04:51 | 000,000,868 | ---- | M] () -- C:\Users\mottisson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
[2012.11.13 19:12:24 | 000,001,042 | ---- | M] () -- C:\Users\Public\Desktop\Call of Duty Black Ops II.lnk
[2012.11.13 19:12:24 | 000,001,042 | ---- | M] () -- C:\Users\Public\Desktop\Call of Duty Black Ops II Multiplayer.lnk
[2012.11.08 02:24:22 | 000,000,216 | ---- | M] () -- C:\Users\mottisson\Desktop\FUSSBALL MANAGER 13.lnk
[2012.11.07 15:19:10 | 000,000,196 | ---- | M] () -- C:\Users\mottisson\Desktop\Crysis® 2.lnk

========== Files Created - No Company Name ==========

[2012.12.03 01:45:46 | 000,000,168 | ---- | C] () -- C:\Users\mottisson\defogger_reenable
[2012.12.02 23:20:34 | 000,058,608 | ---- | C] () -- C:\Users\mottisson\Desktop\hey_gema_20121202_1539916568.jpg
[2012.12.02 23:07:19 | 000,002,100 | ---- | C] () -- C:\Users\mottisson\AppData\Local\recently-used.xbel
[2012.12.02 22:58:32 | 000,112,073 | ---- | C] () -- C:\Users\mottisson\Desktop\Troll-Guy-MEME-memes-29215018-800-500.jpg
[2012.12.02 22:57:54 | 001,980,805 | ---- | C] () -- C:\Users\mottisson\Desktop\Metallbauer.jpg
[2012.12.02 21:43:39 | 000,000,915 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012.12.02 20:38:47 | 000,038,586 | ---- | C] () -- C:\Users\mottisson\Desktop\hey_gema_20121202_1323331271.jpg
[2012.12.02 20:38:32 | 000,055,603 | ---- | C] () -- C:\Users\mottisson\Desktop\hey_gema_20121202_1220718421.jpg
[2012.12.02 19:13:46 | 000,120,320 | ---- | C] () -- C:\ProgramData\8A07m7j5.exe
[2012.12.02 17:44:32 | 000,000,000 | ---- | C] () -- C:\ProgramData\8afO0Q68.dat
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At48.job
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At47.job
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At46.job
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At45.job
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At44.job
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At43.job
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At42.job
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At41.job
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At40.job
[2012.12.02 17:44:18 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At39.job
[2012.12.02 17:44:18 | 000,000,001 | ---- | C] () -- C:\ProgramData\8A07m7j5.exe_.b
[2012.12.02 17:44:18 | 000,000,001 | ---- | C] () -- C:\ProgramData\8A07m7j5.exe.b
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At38.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At37.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At36.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At35.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At34.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At33.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At32.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At31.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At30.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At29.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At28.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At27.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At26.job
[2012.12.02 17:44:17 | 000,000,346 | ---- | C] () -- C:\Windows\tasks\At25.job
[2012.12.02 17:44:17 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At24.job
[2012.12.02 17:44:17 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At23.job
[2012.12.02 17:44:17 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At22.job
[2012.12.02 17:44:17 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At21.job
[2012.12.02 17:44:17 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At20.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At9.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At8.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At7.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At6.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At5.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At4.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At3.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At2.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At19.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At18.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At17.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At16.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At15.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At14.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At13.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At12.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At11.job
[2012.12.02 17:44:16 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At10.job
[2012.12.02 17:44:15 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\At1.job
[2012.11.30 10:32:17 | 000,000,830 | ---- | C] () -- C:\Users\Public\Desktop\F1 2012.lnk
[2012.11.29 19:17:55 | 000,001,390 | ---- | C] () -- C:\Users\mottisson\Desktop\Far Cry 3.lnk
[2012.11.29 15:55:26 | 000,242,176 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL
[2012.11.29 15:55:26 | 000,186,880 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2012.11.29 15:55:26 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL
[2012.11.29 15:55:26 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2012.11.29 15:55:26 | 000,000,376 | RH-- | C] () -- C:\Windows\ctfile.rfc
[2012.11.29 15:55:21 | 000,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd
[2012.11.29 12:58:15 | 000,001,701 | ---- | C] () -- C:\Users\mottisson\Desktop\Harry Potter und die Heiligtümer des Todes - Teil 1.lnk
[2012.11.29 12:56:53 | 004,753,480 | ---- | C] () -- C:\Users\mottisson\Desktop\Call of Duty MW3.exe
[2012.11.29 12:55:08 | 000,090,112 | ---- | C] () -- C:\Users\mottisson\Desktop\League of Legends Public Beta.exe
[2012.11.27 19:17:17 | 000,000,219 | ---- | C] () -- C:\Users\mottisson\Desktop\Dota 2.url
[2012.11.23 03:27:29 | 000,000,986 | ---- | C] () -- C:\Users\Public\Desktop\Hitman Absolution.lnk
[2012.11.21 20:34:50 | 000,000,697 | ---- | C] () -- C:\Users\Public\Desktop\Hitman Blood Money starten.lnk
[2012.11.19 19:25:27 | 000,000,244 | ---- | C] () -- C:\Users\mottisson\Desktop\Assassin's Creed III.lnk
[2012.11.18 00:53:15 | 000,001,338 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
[2012.11.16 03:02:20 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2012.11.16 03:00:16 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2012.11.13 20:04:51 | 000,000,868 | ---- | C] () -- C:\Users\mottisson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
[2012.11.13 19:12:24 | 000,001,042 | ---- | C] () -- C:\Users\Public\Desktop\Call of Duty Black Ops II.lnk
[2012.11.13 19:12:24 | 000,001,042 | ---- | C] () -- C:\Users\Public\Desktop\Call of Duty Black Ops II Multiplayer.lnk
[2012.11.08 02:24:22 | 000,000,216 | ---- | C] () -- C:\Users\mottisson\Desktop\FUSSBALL MANAGER 13.lnk
[2012.11.07 15:19:10 | 000,000,196 | ---- | C] () -- C:\Users\mottisson\Desktop\Crysis® 2.lnk
[2012.10.24 12:49:15 | 000,281,688 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.10.24 12:48:56 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.10.23 11:56:49 | 000,008,192 | ---- | C] () -- C:\Users\mottisson\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.09.20 15:54:52 | 000,032,256 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll
[2012.09.20 15:52:27 | 000,107,520 | RHS- | C] () -- C:\Windows\SysWow64\TAKDSDecoder.dll
[2012.09.15 07:58:40 | 000,156,160 | ---- | C] () -- C:\Windows\SysWow64\WS_ContextMenu.dll
[2012.09.02 14:24:11 | 000,168,864 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe
[2012.08.31 09:28:51 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.07.28 02:39:50 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.07.28 02:39:50 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.06.19 13:02:17 | 003,123,272 | R--- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2012.05.02 13:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2011.09.12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.03.31 08:59:24 | 000,002,169 | ---- | C] () -- C:\Windows\XENcfg.ini

========== ZeroAccess Check ==========

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.07.14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2012.11.17 21:03:04 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\Ashampoo
[2012.09.20 15:52:24 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\Babylon
[2012.09.25 13:26:06 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\DAEMON Tools Lite
[2012.11.01 17:32:39 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\de.3m5.wendel.flcd.FLCDB.4E7DF207D694E815646D9C9DD7DC91A41EB7FD23.1
[2012.10.25 01:31:32 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\de.apollo-medien.eurofahrschule2011.9151FF1C04D985321FBE252CD7DD9485437B0213.1
[2012.09.18 18:35:23 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\FileZilla
[2012.12.02 21:16:32 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\HLSW
[2012.08.31 11:03:02 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\LolClient
[2012.11.01 20:37:28 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\Milestone
[2012.11.13 20:04:47 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\OpenOffice.org
[2012.12.01 21:46:17 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\Origin
[2012.09.10 22:08:34 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\Publish Providers
[2012.08.31 08:57:25 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\ROCCAT
[2012.09.15 13:45:57 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\Screaming Bee
[2012.09.10 22:12:42 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\Sony
[2012.12.03 01:00:57 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\Spotify
[2012.10.28 21:04:59 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\TeamViewer
[2012.12.02 21:28:39 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\TS3Client
[2012.08.31 12:21:57 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\ts3overlay
[2012.09.20 15:53:09 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\TuneUp Software
[2012.10.12 18:19:27 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\uTorrent
[2012.09.15 07:52:04 | 000,000,000 | ---D | M] -- C:\Users\mottisson\AppData\Roaming\Wondershare Video Converter Ultimate

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 204 bytes -> C:\ProgramData\TEMP:BA85A56C

< End of report >




__________________________________________________

Extras.txt:

OTL Extras logfile created on: 03.12.2012 01:47:51 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\mottisson\Desktop
64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

7,98 Gb Total Physical Memory | 6,51 Gb Available Physical Memory | 81,49% Memory free
14,41 Gb Paging File | 12,12 Gb Available in Paging File | 84,09% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 45,53 Gb Total Space | 0,94 Gb Free Space | 2,06% Space Free | Partition Type: NTFS
Drive D: | 100,00 Mb Total Space | 71,87 Mb Free Space | 71,87% Space Free | Partition Type: NTFS
Drive F: | 4,69 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: MOTTISSON-PC | User Name: mottisson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{076B3817-F500-4B65-8F5F-1B03F30BA2F9}" = lport=58567 | protocol=17 | dir=in | name=pando media booster |
"{38912D44-1F62-4B5D-86BC-E515D94A75EC}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3B0CD9BE-7D83-44CF-A5C7-6935F6E3837C}" = lport=58567 | protocol=6 | dir=in | name=pando media booster |
"{4D1C99B9-60B7-4575-A0B0-BB58CD35A81A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{4EEC65F3-39D7-4EE4-A751-6A1BB649A600}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4EF31F4D-92DE-4D48-B9CC-50CDBE8257E6}" = rport=137 | protocol=17 | dir=out | app=system |
"{4F151309-C5F9-413C-99FB-152AC5D6B1DE}" = lport=58567 | protocol=6 | dir=in | name=pando media booster |
"{6D7CD31A-91A5-4EA6-B48B-179D6754975D}" = rport=445 | protocol=6 | dir=out | app=system |
"{71615FEA-E887-4C0C-93C2-D330E487EB48}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{77CE6072-28A2-4D12-A7FB-B0DF6066AEF8}" = lport=137 | protocol=17 | dir=in | app=system |
"{7E53AF4E-9694-4702-BF3E-C3A28B52D383}" = rport=139 | protocol=6 | dir=out | app=system |
"{8373927B-D945-45E9-BEEF-1FD80BE9008C}" = lport=139 | protocol=6 | dir=in | app=system |
"{91E20B1C-23F4-4E95-BA58-B7416EDE9863}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A00A80DE-1948-49AC-B6F6-D550F3D3FE57}" = rport=138 | protocol=17 | dir=out | app=system |
"{ABCA9319-5B76-474D-8582-129B569AC78F}" = lport=58567 | protocol=17 | dir=in | name=pando media booster |
"{B2921865-A98F-42E4-B2D4-CC901285435B}" = lport=10243 | protocol=6 | dir=in | app=system |
"{B402ED6A-3A79-4800-B0FD-59F90F32336A}" = lport=138 | protocol=17 | dir=in | app=system |
"{BA810506-2DB4-4858-8DA4-99E151BF27C3}" = lport=445 | protocol=6 | dir=in | app=system |
"{C4452607-359F-4A12-8D28-200FE76B7028}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{D06C6A4A-F810-4029-864C-8B5BA6DC4831}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{DC84E670-F26A-47A6-9652-54ED5B6037DF}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{ED880BF7-345D-4B54-8369-F3D322A581BD}" = rport=10243 | protocol=6 | dir=out | app=system |
"{EE464EF1-04C8-4818-A705-A879F83C5B2E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{EFA7EB13-03A4-4068-ACD7-B53384EC2DF9}" = lport=2869 | protocol=6 | dir=in | app=system |
"{FF8F786A-6BE1-46BF-8029-505603F972B5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{012BEE9B-0FC7-4385-94D2-BF66415746E5}" = protocol=6 | dir=in | app=c:\users\mottisson\appdata\roaming\spotify\spotify.exe |
"{059C5DAE-3C00-4039-8A5B-70AF9E73DB8B}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0AF8D2F9-358C-4FA5-9723-FD5548320AA1}" = protocol=17 | dir=in | app=c:\users\mottisson\appdata\roaming\spotify\spotify.exe |
"{0DDC0184-CBC5-49A9-9E35-E746BFC4679E}" = protocol=6 | dir=in | app=a:\program files (x86)\fussball manager 13\manager13.exe |
"{0EFBA47E-5C31-4622-A254-42302484E7DC}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{1425F0E7-9369-44A8-B595-88DDA7FC44AC}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{14F8D42E-536A-44F0-BD89-E382DB3C890D}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{182065DF-EC1C-460E-98BB-86642AAA5581}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{19AEB900-A418-4393-A2F5-4E9D3485A7DB}" = protocol=17 | dir=in | app=a:\program files (x86)\capcom\street fighter x tekken\sftk.exe |
"{1E654D96-5BFC-4198-B305-0D6962FDC63C}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{216EC410-A17A-4790-9EC6-142052781C92}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{28334CED-B7FB-404C-8BDE-06FE7302AF3E}" = protocol=17 | dir=in | app=a:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{2E082AE7-0B77-41F5-8D4F-370BE8706371}" = protocol=6 | dir=in | app=c:\users\mottisson\appdata\roaming\spotify\spotify.exe |
"{3218EE8A-639D-4BEC-A152-06DD938A75F4}" = protocol=1 | dir=in | name=hlsw icmp |
"{34958A2B-973A-44B6-A0C1-B051D62DDFD8}" = protocol=6 | dir=in | app=a:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{34D41BC9-C160-42EB-AF86-5FF013CF43BB}" = protocol=6 | dir=in | app=a:\program files (x86)\ubisoft\farcry 3\bin\fc3editor.exe |
"{362A8D92-997C-4487-8684-51490102EEA9}" = protocol=6 | dir=in | app=a:\program files (x86)\ubisoft\farcry 3\bin\farcry3_d3d11.exe |
"{38AB2640-878A-46AE-8099-96126C293275}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\fifa 13 demo\game\fifa13_demo.exe |
"{3D6D10D9-1084-4ED4-A4C5-933727CD27FF}" = protocol=6 | dir=in | app=a:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{3D8E7EDC-8AAC-4209-A7C7-123A9A01E0F9}" = protocol=17 | dir=in | app=a:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{448FE7B5-405B-43DA-A311-1E3602742587}" = protocol=17 | dir=in | app=a:\program files (x86)\ubisoft\farcry 3\bin\fc3updater.exe |
"{44CE630C-19DD-45AB-AED3-47BFB51A8C9D}" = protocol=17 | dir=in | app=a:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{4DF7F5E0-3755-4577-9864-1862C45B115A}" = protocol=17 | dir=in | app=a:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{525FE49C-C37A-4CDF-86A3-B226A26305B6}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{595ACE3D-C293-4E40-8399-EB53880DC1E3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5C6657F7-D1CE-4B2C-B8A7-F090E264F72A}" = protocol=17 | dir=in | app=a:\program files (x86)\utorrent\utorrent.exe |
"{66825C29-4FAF-4984-A38E-812E7778053F}" = protocol=6 | dir=out | app=system |
"{6E3A00A1-4418-42A4-A371-9BD1561A99E8}" = protocol=6 | dir=in | app=a:\program files (x86)\ubisoft\farcry 3\bin\farcry3.exe |
"{73114F09-C1CD-48E1-853C-97D006618A5E}" = protocol=17 | dir=in | app=a:\program files (x86)\ubisoft\farcry 3\bin\fc3editor.exe |
"{751F9D6C-DC09-4627-8F82-EA1A1020A0DF}" = protocol=6 | dir=in | app=a:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{7951E98B-5CC7-47A2-A74B-E67C5A775DB3}" = protocol=17 | dir=in | app=a:\program files (x86)\ubisoft\farcry 3\bin\farcry3_d3d11.exe |
"{7DCAFC13-E013-40D1-AEDA-2B3E2948C4E7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{86C7234D-9C24-45C4-82D5-7CEC1EFEC7F6}" = dir=out | app=a:\program files (x86)\rockstar games\max payne 3\playmaxpayne3.exe |
"{88E99162-EA10-4809-B611-9965038651D4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8B4CF319-CCA7-480E-93FC-F8C2C1EE9C88}" = protocol=17 | dir=in | app=c:\users\mottisson\appdata\roaming\spotify\spotify.exe |
"{8EFC749C-3FAE-4501-B08E-69F1907495CB}" = protocol=17 | dir=in | app=a:\program files (x86)\rockstar games\max payne 3\playmaxpayne3.exe |
"{917D9C31-5242-44BD-92B6-1665821F7F14}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{93EB6B23-8B9A-4FD6-A48D-6EA6B27BCED0}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{95E61F70-D4AA-494C-9650-103A9A7800EC}" = dir=in | app=a:\program files\eslwire\wire.exe |
"{95F9B296-7F0C-4CBD-8290-84DDC0991021}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{97A23646-739A-41C5-B493-93A2EA51797F}" = protocol=6 | dir=in | app=a:\program files (x86)\ea\fifa 13\game\fifa13.exe |
"{9C47F845-2670-4067-A43B-EDBCEB56AF81}" = protocol=17 | dir=in | app=a:\program files (x86)\ea\fifa 13\game\fifa13.exe |
"{9CD831F6-CEC3-4303-910C-1C87559301FF}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{9EB0A502-9391-4797-97B5-CF00BA594190}" = protocol=17 | dir=in | app=a:\program files (x86)\ubisoft\farcry 3\bin\farcry3.exe |
"{9F7FAB8A-9247-4272-ACEE-A5A543EC9ADD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A035C7AD-6006-4303-BE20-FAFA5012F0AD}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\fifa 13 demo\game\fifa13_demo.exe |
"{A0FA3951-1E11-4A51-9EB7-8BCCBA2AE2BA}" = dir=in | app=a:\program files (x86)\itunes\itunes.exe |
"{B41A08C3-6409-4701-BFD6-C083F6796027}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{B4669F7B-48FE-48D7-BA4E-C6C48C9ED033}" = protocol=6 | dir=in | app=a:\program files (x86)\rockstar games\max payne 3\playmaxpayne3.exe |
"{B5866594-B7C6-41F1-9423-A7B9150AAEA3}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{B6E651D9-3294-47EC-91F3-B43A394F5A1B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{B79F0877-1A8F-405B-9786-9B57C51097A3}" = protocol=6 | dir=in | app=a:\program files (x86)\utorrent\utorrent.exe |
"{B986439A-A7DA-42E1-B46E-8D5012305474}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{BB48185C-06AB-40E8-B1E0-C307BA45306F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{BC4667A4-003F-485C-A458-BBC6BF971173}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{BEDABCD5-0719-453D-BD2C-A1E2DA05EFB1}" = protocol=6 | dir=in | app=a:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{BFD096A1-7510-48BF-BA8B-8828D9B88916}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C69C84EC-46A5-4739-9C15-76A2ED59813B}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{C877D1AF-56E3-4A1E-B985-793441A56030}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{CB811721-8A36-4BA5-8F29-C58E8CBE8450}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{CBD0F20C-4886-44DB-9052-96ADFC1CAE11}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{CC719A11-0BAA-47C1-AA57-8DE458C6CEE6}" = protocol=6 | dir=in | app=a:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{CD136AB4-C490-483B-874A-269D1070D07E}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{CE44D20A-787C-4B88-97A0-0234E7A6E0F2}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{D5550FE7-11BB-428C-A0D1-CB0796A5095A}" = protocol=17 | dir=in | app=a:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{D6E642A1-EB64-4C28-A12D-E1D779892F5A}" = protocol=6 | dir=in | app=a:\program files (x86)\steam\steam.exe |
"{D7811D7E-0C05-451B-A56E-68820633C7E5}" = dir=out | app=a:\program files\eslwire\wire.exe |
"{DA1CDCBD-0AA0-418E-BC9B-1FC96228C5FC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DA26D544-8815-45AF-9BBE-57D9E116EF12}" = protocol=17 | dir=in | app=a:\program files (x86)\fussball manager 13\manager13.exe |
"{DAB8DD66-91C4-4B5F-AC23-20A8F009C65E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{DB2BEF3E-7C10-4942-863C-94D963B23034}" = protocol=6 | dir=in | app=a:\program files (x86)\ubisoft\farcry 3\bin\fc3updater.exe |
"{DD18C778-E6DF-457B-9EB2-EA96F0AE82F4}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{F2733212-6D0C-4000-B246-31A708E84EE7}" = protocol=17 | dir=in | app=a:\program files (x86)\steam\steam.exe |
"{F5CCEA38-E48A-4323-896A-4D3A5F324A46}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{F6F634AF-E01F-40B4-8E20-A220CD82018C}" = protocol=6 | dir=in | app=a:\program files (x86)\capcom\street fighter x tekken\sftk.exe |
"TCP Query User{111DA189-2947-49C0-AF4D-F94D6036FA7A}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{11D4B9AA-C682-4BA1-B5C2-FC029394D12B}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{44C32A84-88F2-4F76-9D8A-C679F0390686}A:\program files (x86)\activision\call of duty black ops ii\t6sp.exe" = protocol=6 | dir=in | app=a:\program files (x86)\activision\call of duty black ops ii\t6sp.exe |
"TCP Query User{8B495EAC-111F-467C-9076-3625CDBF8AC0}A:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe" = protocol=6 | dir=in | app=a:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe |
"TCP Query User{90CD83A6-C0CF-400A-961F-5B72C73BC942}A:\program files (x86)\activision\call of duty black ops ii\t6sp.exe" = protocol=6 | dir=in | app=a:\program files (x86)\activision\call of duty black ops ii\t6sp.exe |
"TCP Query User{A3F78068-EDF6-451C-AA27-AB01833D8842}A:\program files (x86)\electronic arts\crytek\crysis 2\bin32\crysis2.exe" = protocol=6 | dir=in | app=a:\program files (x86)\electronic arts\crytek\crysis 2\bin32\crysis2.exe |
"TCP Query User{E10DD289-D141-436D-8151-ACE77192FDD7}A:\program files (x86)\ea games\need for speed most wanted\nfs13.exe" = protocol=6 | dir=in | app=a:\program files (x86)\ea games\need for speed most wanted\nfs13.exe |
"TCP Query User{FD01DA13-CE3F-4573-891E-499E7A0E7F33}A:\program files (x86)\hlsw\hlsw.exe" = protocol=6 | dir=in | app=a:\program files (x86)\hlsw\hlsw.exe |
"TCP Query User{FE9DB1DD-C659-490B-B2F7-8D812E3AC719}A:\program files (x86)\hlsw\hlsw.exe" = protocol=6 | dir=in | app=a:\program files (x86)\hlsw\hlsw.exe |
"TCP Query User{FFC547DB-63C0-48F4-9B51-0426B4DFC326}A:\program files (x86)\activision\call of duty black ops ii\t6zm.exe" = protocol=6 | dir=in | app=a:\program files (x86)\activision\call of duty black ops ii\t6zm.exe |
"UDP Query User{0C0691DF-FEA1-4236-8BAA-5E27E322AB21}A:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe" = protocol=17 | dir=in | app=a:\program files (x86)\rockstar games\max payne 3\maxpayne3.exe |
"UDP Query User{1340810B-916E-433A-A7D1-128B671A7E8D}A:\program files (x86)\ea games\need for speed most wanted\nfs13.exe" = protocol=17 | dir=in | app=a:\program files (x86)\ea games\need for speed most wanted\nfs13.exe |
"UDP Query User{29F6C5A9-C5B7-4D58-B515-BC1CD853C3AB}A:\program files (x86)\electronic arts\crytek\crysis 2\bin32\crysis2.exe" = protocol=17 | dir=in | app=a:\program files (x86)\electronic arts\crytek\crysis 2\bin32\crysis2.exe |
"UDP Query User{2A9B7D3D-0743-45D3-9B77-336E37658E15}A:\program files (x86)\activision\call of duty black ops ii\t6sp.exe" = protocol=17 | dir=in | app=a:\program files (x86)\activision\call of duty black ops ii\t6sp.exe |
"UDP Query User{316C8636-590F-44F8-B7D2-C063C82004C3}A:\program files (x86)\hlsw\hlsw.exe" = protocol=17 | dir=in | app=a:\program files (x86)\hlsw\hlsw.exe |
"UDP Query User{52F692CA-F325-4972-AB0B-442AB82F510F}A:\program files (x86)\activision\call of duty black ops ii\t6sp.exe" = protocol=17 | dir=in | app=a:\program files (x86)\activision\call of duty black ops ii\t6sp.exe |
"UDP Query User{78E1D0BF-2A5C-480A-A455-8BD1B5D03147}A:\program files (x86)\hlsw\hlsw.exe" = protocol=17 | dir=in | app=a:\program files (x86)\hlsw\hlsw.exe |
"UDP Query User{9CA275F5-99B8-449B-A9B9-AF747A4CCCC2}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{9F399255-A1BC-4D82-8B76-109F19D771EA}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{C3348D1A-D396-4CE2-8BF9-2F259B843882}A:\program files (x86)\activision\call of duty black ops ii\t6zm.exe" = protocol=17 | dir=in | app=a:\program files (x86)\activision\call of duty black ops ii\t6zm.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06CB0DD1-71A5-F352-E0A9-FE6016380A8F}" = AMD Drag and Drop Transcoding
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}" = iTunes
"{18A5D014-E9AD-DEFE-FAFE-A409612F51B4}" = AMD Media Foundation Decoders
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{44A79F1E-8DF7-11E1-80E3-F04DA23A5C58}" = Vegas Pro 11.0 (64-bit)
"{49F6DFDE-8DF7-11E1-9E5F-F04DA23A5C58}" = MSVCRT Redists
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{50BD00DC-127E-BF00-FDD5-E1A93AB3507C}" = ccc-utility64
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}" = Apple Mobile Device Support
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{BB009B20-0BA0-ABDF-1947-4D56639214C7}" = AMD Accelerated Video Transcoding
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240D3}" = WinZip 16.5
"{D285FC5F-3021-32E9-9C59-24CA325BDC5C}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729
"{E85D1C80-28C4-76B8-5A5A-2C8D8B38D5D9}" = AMD Catalyst Install Manager
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"ESL Wire_is1" = ESL Wire 1.15
"GIMP-2_is1" = GIMP 2.8.2
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 4.20 (64-Bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03AEAB60-A7B3-A8DB-468B-EB30FB4B40B0}" = CCC Help German
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{076CCB30-C617-4A56-1906-D5BA3A3D910E}" = Euro-Fahrschule 2011
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{162ABED6-E60C-6CFF-100E-43C16ABBC5BE}" = CCC Help Chinese Standard
"{17D26CDD-B87C-412B-92F0-2D5DD4313522}" = Facebook Messenger 2.1.4651.0
"{1AA94747-3BF6-4237-9E1A-7B3067738FE1}" = Max Payne 3
"{1CB724FF-D18C-8FFB-E7C9-0A09CF8EC066}" = CCC Help Japanese
"{20C14CC3-5E3B-D39A-5B37-B15E59785063}" = CCC Help Chinese Traditional
"{2226247D-9846-4370-A1EF-FAA6958F7632}" = Sound Blaster Tactic(3D) Alpha
"{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1
"{2632A2C0-ECF4-7F79-7136-9FEA4C253A4C}" = CCC Help Turkish
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7
"{30F712DA-64FE-5DBE-AE76-3F8EA3F8223C}" = CCC Help French
"{3B1DB741-8060-4D1C-8556-95A51A20704D}_is1" = Need for Speed: Most Wanted
"{3C39B3CC-4EC8-C756-AF4B-72366504FCA5}" = CCC Help Hungarian
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{43430FA5-AF68-4A2D-A7D4-891000008200}" = Street Fighter X Tekken
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{49471DB8-7F3C-42DB-89C2-AC50FA0C5290}" = Camtasia Studio 7
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CC9D761-A9B6-D8EA-D2A9-B74B5A90B108}" = CCC Help Norwegian
"{54B227A6-BDBE-69FA-D450-B99609063044}" = CCC Help Greek
"{6033673D-2530-4587-8AD0-EB059FC263F9}" = Crysis® 2
"{63EC2120-1742-4625-AA47-C6A8AEC9C64C}" = Apple Application Support
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6F4B8EA6-4546-4160-A05F-0706F7DC1EFF}" = Savu Mouse
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7C587778-C433-980E-F3C1-203890DC4FBE}" = CCC Help Polish
"{7DC3EABF-66A2-6D79-B485-6328525CA387}" = CCC Help Swedish
"{80AF0300-866F-400F-A350-D53E3C3E34E0}" = FUSSBALL MANAGER 13
"{843603C6-75B7-BAB5-80DE-E76FB28DEEF2}" = CCC Help Finnish
"{8BBC66FD-0195-29B4-5A58-E0B0554E8F42}" = Catalyst Control Center
"{8D9EEAC7-42D5-3951-612A-EAA7B684C592}" = CCC Help Italian
"{8F311E72-C27F-4DF0-8254-B739A1831668}_is1" = SUPER © v2012.build.53 (Sep 13, 2012) Version v2012.build.53
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6
"{9733747E-E53D-4C17-977E-3A872AFB93E1}" = ROCCAT Kone Mouse Driver
"{9791DAED-B734-2835-988B-157BDA087496}" = CCC Help Dutch
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{98B740C3-FAA4-C523-7478-4DBCAB7B27D1}" = Catalyst Control Center Graphics Previews Common
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}" = Assassin's Creed ® III
"{9F0CAC6D-9B0D-A95F-CF61-6E88952D6181}" = CCC Help Thai
"{A29E18C2-7AB1-4b6b-848C-5D5E2C85F0C0}" = FIFA 13
"{A625DB70-98D5-16FD-C49D-4B8B1B2304A4}" = CCC Help Spanish
"{A804B134-F03D-4EFD-9BC0-DCD257AA1B22}" = Hitman Blood Money
"{A90214C3-3A0C-2F05-6083-E1A4BAD9E30D}" = CCC Help Danish
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA123216-6DE0-E57C-DC57-4FECEACB482F}" = CCC Help Russian
"{B4BF2667-112C-45EF-B8CB-1168E4EB5BA8}_is1" = WRC3 Version 1.0
"{B99459D2-B91A-417E-9DFA-F53D569F4445}_is1" = H.264 Encoder
"{BBC8F2F4-C823-4EE8-B176-74DCDEF8F68A}_is1" = F1 2012 Version V1.0
"{C9AAF970-4E7E-4C98-AD67-09C74379D345}" = Harry Potter und die Heiligtümer des Todes™ - Teil 1
"{D0837A59-83E6-3392-1BD9-86D3445676DB}" = CCC Help Korean
"{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}" = Full Tilt Poker
"{D70AB273-113B-D7DE-5C8D-82CABA7CB0AF}" = Catalyst Control Center Localization All
"{DC8772D4-C75F-5235-63E2-BBC73F909B7A}" = CCC Help Czech
"{DE8DF2C7-2436-4CAD-82D6-7446E15A3455}" = MorphVOX Pro
"{DED7FD3C-DDD2-43BB-B0F5-B07F9D0430D3}" = CCC Help Portuguese
"{E12EB4D3-C2E9-4387-925C-3F1ED8F2A399}_is1" = MP4 MP3 Converter v4.3 build 1509
"{E157F2EB-E06F-B57F-9105-68F348DB2EAD}" = CCC Help English
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}" = Far Cry 3
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EF036F44-A287-BC23-3F6E-AAE6FDEF47EF}" = Catalyst Control Center InstallProxy
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F6E190CB-56C8-490E-B933-C9807B8DE666}_is1" = Medal of Honor Warfighter DEU Patch Version 1.0
"{F9D54D77-01A4-7D34-6F3C-EDC9F8F466E3}" = Fragen-Lern-CD 4.0
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE v.6.81
"Avira AntiVir Desktop" = Avira Free Antivirus
"Call of Duty Black Ops II_is1" = Call of Duty Black Ops II
"DAEMON Tools Lite" = DAEMON Tools Lite
"de.3m5.wendel.flcd.FLCDB.4E7DF207D694E815646D9C9DD7DC91A41EB7FD23.1" = Fragen-Lern-CD 4.0
"de.apollo-medien.eurofahrschule2011.9151FF1C04D985321FBE252CD7DD9485437B0213.1" = Euro-Fahrschule 2011
"FileZilla Client" = FileZilla Client 3.2.7.1
"Fraps" = Fraps (remove only)
"Google Chrome" = Google Chrome
"Hitman Absolution_is1" = Hitman Absolution
"HLSW_is1" = HLSW v1.4.0.2
"Mafia II_is1" = Mafia II
"Mozilla Firefox 16.0.2 (x86 de)" = Mozilla Firefox 16.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Origin" = Origin
"PunkBusterSvc" = PunkBuster Services
"Rockstar Games Social Club" = Rockstar Games Social Club
"Steam App 240" = Counter-Strike: Source
"Steam App 570" = Dota 2
"Steam App 730" = Counter-Strike: Global Offensive
"SysInfo" = Creative Systeminformationen
"TeamViewer 7" = TeamViewer 7
"Uplay" = Uplay
"uTorrent" = µTorrent
"VLC media player" = VLC media player 2.0.3
"Wondershare Video Converter Ultimate_is1" = Wondershare Video Converter Ultimate(Build 5.7.1.1)

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Spotify" = Spotify

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 30.11.2012 16:00:24 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1014

Error - 30.11.2012 16:00:25 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 30.11.2012 16:00:25 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2059

Error - 30.11.2012 16:00:25 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2059

Error - 30.11.2012 16:00:26 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 30.11.2012 16:00:26 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 3058

Error - 30.11.2012 16:00:26 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 3058

Error - 30.11.2012 16:00:27 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 30.11.2012 16:00:27 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 4056

Error - 30.11.2012 16:00:27 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 4056

Error - 30.11.2012 16:00:28 | Computer Name = mottisson-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

[ System Events ]
Error - 21.11.2012 18:48:12 | Computer Name = mottisson-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error - 21.11.2012 21:18:39 | Computer Name = mottisson-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error - 23.11.2012 12:07:07 | Computer Name = mottisson-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error - 23.11.2012 21:31:55 | Computer Name = mottisson-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error - 25.11.2012 09:56:08 | Computer Name = mottisson-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error - 27.11.2012 08:16:03 | Computer Name = mottisson-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 12.

Error - 27.11.2012 08:16:03 | Computer Name = mottisson-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.

Error - 27.11.2012 12:14:56 | Computer Name = mottisson-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error - 28.11.2012 17:31:07 | Computer Name = mottisson-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error - 28.11.2012 22:33:06 | Computer Name = mottisson-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


< End of report >




Wäre super lieb wenn sich das mal jemand angucken könnte..

C:\Users\mottisson\Downloads\Sony.Vegas.Unlock.package\Keygen v.1.9\Keygen.exe
[FUND] Ist das Trojanische Pferd TR/Offend.6906603.1
         

Siehe auch => http://www.trojaner-board.de/95393-c...-software.html

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support ohne jegliche Diskussion beenden.

Cracks/Keygens sind zu 99,9% gefährliche Schädlinge, mit denen man nicht spaßen sollte. Ausserdem sind diese illegal und wir unterstützen die Verwendung von geklauter Software nicht. Somit beschränkt sich der Support auf Anleitung zur kompletten Neuinstallation!!

Dass illegale Cracks und Keygens im Wesentlichen dazu dienen, Malware zu verbreiten ist kein Geheimnis und muss jedem klar sein!


In Zukunft Finger weg von: Softonic, Registry-Bereinigern und illegalem Zeugs Cracks/Keygens/Serials