Trojaner crypt AKKB

OTL Extras logfile created on: 01.09.2011 15:21:55 - Run 1
OTL by OldTimer - Version 3.2.27.0     Folder = C:\Users\Ute\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 1,88 Gb Available Physical Memory | 62,56% Memory free
6,19 Gb Paging File | 5,00 Gb Available in Paging File | 80,77% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 275,41 Gb Total Space | 198,08 Gb Free Space | 71,92% Space Free | Partition Type: NTFS
Drive D: | 22,66 Gb Total Space | 12,51 Gb Free Space | 55,20% Space Free | Partition Type: FAT32
 
Computer Name: WELZ-PC | User Name: Ute | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~4\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02375815-B61E-48F3-9349-A2CB419EE451}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{13859769-D901-47F4-919E-4CFB7F27FC5C}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{1BAC40F0-03AE-4758-8C7D-4EBB268A167A}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{211722C8-CE70-485B-91E5-DDA973587769}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{22741205-7AF1-4967-BF25-AF03661E369C}" = lport=10381 | protocol=6 | dir=in | name=bitcomet 10381 tcp | 
"{2B8FE12F-16CA-4013-97E6-C8A331B163EA}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{2C833879-39C1-4283-B223-827F0A46E935}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{301B5F5A-F560-421D-AB02-EE9E92001363}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{314FE679-F42A-4865-A40F-C3C079B1325A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{31FD8096-CB5F-4F3D-B5A3-F7133FCC91CC}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{39A07893-AA0C-49D0-8F18-D045BD0B6F24}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{3AF6455D-7609-47F5-8F2E-5BC736EC48A3}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{42AC19AC-5BFE-4728-B0E8-40A27F9E836C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{45E35C9B-3E34-49C5-A7DF-A72CDFBA42F6}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{55D197B4-66F6-4488-8B09-846D079C1193}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{57281C07-9BD7-452D-8C0E-F2F131C0B686}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{5CDBB479-2231-45DC-9C0F-9B2F1DFD6413}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{62BA1525-56DD-432F-91A2-7B1DE51281B7}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{651B29D9-3424-4EC6-97C2-069145561A3E}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{6B666B35-FEB2-4560-BC9C-85F032CB9B53}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{70C70F60-87AB-46BB-9110-E902F7054489}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{7D15ED71-D6C4-468C-8060-3E36AE15E919}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{7D538F27-3C85-4DD9-81CC-767D27E6FCF6}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{80BC841E-361B-4D80-9A9C-F3DFACB2DC93}" = lport=10381 | protocol=17 | dir=in | name=bitcomet 10381 udp | 
"{86790E90-2206-44C9-924C-EE5D5B8B3879}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{917D76CD-41FE-42AC-9B7C-9CFC1B2B64CD}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{9826ECE7-9583-477D-97F4-4EE2F92D551E}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{9D6BC682-ABC8-456B-8463-36BBDF73F036}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{A47842A6-4C90-4B4B-8272-D9015582CF4A}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{A8B70B73-634E-47DC-A93C-CF2EB1767627}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{AF7F6A66-B829-4050-A70A-CAFF10E1EA10}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{BE13329A-15ED-4802-A0EA-447336B73971}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{C0B8678D-5A6E-4CCD-94A2-03E1AA95E4FC}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{CA465F66-1FAF-4154-A5B8-1F3A95870A7A}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{D2580AD5-6EA1-4B87-AF34-E7066273767E}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{D350C56D-017D-4D8C-8F38-E33433205474}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{DDC44A4C-B341-492D-B2B0-0073D7255E23}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{E26A37DC-83B7-48BB-ADE6-3DC7AE6A7F3D}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{E6F95496-3680-4CC8-8B1F-C9758746A46E}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{E71E04CE-4D7A-440A-BAE1-97A0673276B0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{E9BC4855-D213-4004-925B-D553391B1ABE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{F0519B52-F868-49F0-A7FD-B7ECA736542D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{F35FAE20-566A-4CD5-88B1-155B015A6399}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{F7BBAA5B-F913-431B-B06D-7CCC4372A427}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0F47084A-C3E6-4524-8008-397409F71DFD}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{101FC9B4-ABEC-4533-894D-BB6CC25E1898}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{1091C35F-8C93-41CA-89DC-5F677FF61634}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{13E5A136-5B97-4F4F-8452-C6A85EDEEAEE}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{1F20714F-D251-47F3-B855-C1F8B9B52844}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{1FE191B5-8F17-424E-92CA-D9E8E890D815}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{200694D6-87DB-438B-8923-A88B4955ED71}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{23C3E794-2189-4C6F-9F7D-7467F4E8408B}" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe | 
"{24BA1B87-CCD8-4DBD-A35D-4C8946B17B99}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{289F4083-94FF-4FA0-964B-8AD17F302DA2}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{2B0683A1-C4D3-4BB0-86C8-01FCB0E32F0F}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{30611AB3-4371-451A-9702-C50EC67E5691}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{33AD372C-0D40-4760-A96F-7804F5FE4E6B}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{3670B695-2C41-45FA-B579-492A74789930}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{3930F4D2-5DCA-4215-B167-E27B5C51E9C8}" = dir=in | app=c:\program files\windows live\mesh\moe.exe | 
"{4C0B7194-E0A2-4110-BDC9-EA0B4CB5976F}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{5346BEEA-98E0-45D5-9228-F0D62F3C2A38}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{58C243E8-5A00-46C1-A3D9-023F5DB83A02}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{58FE3B8E-39E1-477E-9907-2C048C377F81}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{5C686759-9872-4330-8DE7-499A6F2D38E1}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{5C84F8D7-2718-4C4A-AF3D-7CFAA07E72EF}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{629E58FF-018D-4A84-B56B-9A4BBC3F9485}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{644EB0A1-F786-4056-A0A6-960B1B474931}" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe | 
"{6981F647-E08A-4C68-8382-862780E54F49}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{721FB120-0D74-41EA-BF3B-F276C91497D9}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{734C851D-9239-46F7-98EE-DE868692E8C5}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{77E41CDE-57D9-45DF-8CFE-C4ADEAF1F5B4}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{82030634-008E-4EAB-8867-EA9B33C92643}" = protocol=6 | dir=in | app=c:\program files\dna\btdna.exe | 
"{8A706A25-3EC7-44D4-816F-65D5BBE4EE57}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{8AB32B53-2FED-4F71-A075-A1DC0DA72B0E}" = protocol=17 | dir=in | app=c:\program files\dna\btdna.exe | 
"{8B4DC01C-7F2A-4B8B-BBB3-B9C3B42370DF}" = dir=in | app=c:\program files\avg\avg9\avgemc.exe | 
"{8EF4904C-726C-4C50-B057-6CAC5EA1FC3D}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{8F451F93-90D0-4816-BDA2-3F430D61297B}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{96D352A0-F5FC-4CE5-8663-D613EA15D8DD}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{96EE7343-328E-460B-B372-2B36D01EE775}" = dir=in | app=c:\program files\homecinema\makedisc\makedisc.exe | 
"{9A79AE20-FE17-4EBC-BCAB-9CA7EC9D365F}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{9BA6F70D-AC01-4FDE-A58B-DB49D3990E85}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{9CC3C7EF-F2CA-4D14-AC98-1E1B6AAF8A54}" = dir=in | app=c:\program files\homecinema\powerdvd\powerdvd.exe | 
"{A519B55D-3348-41C3-990B-2AB894CB978B}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{AEDBE3BF-DB41-410D-A299-98619C76B768}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{C156059D-4DB0-4C4A-9652-EC50CB92132C}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{C7502F25-D77E-45AC-A118-9FB6F5CFC59F}" = dir=in | app=c:\program files\homecinema\powerdirector\pdr.exe | 
"{C8738F34-E226-4C44-BCAE-CE7CFC0C5233}" = dir=in | app=c:\program files\avg\avg9\avgupd.exe | 
"{D1FA6257-35D7-41FC-B55C-74682A48B9B0}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{DDA35B63-C999-4236-8C90-F6257070C06E}" = dir=in | app=c:\program files\avg\avg9\avgnsx.exe | 
"{DDA3CE12-9EAA-4B77-8BDD-21CC59C10EFC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{E1574A18-E618-41CE-B557-EE17AA15AB05}" = dir=in | app=c:\program files\windows live\messenger\livecall.exe | 
"{EBB42C07-EB97-4E58-A41A-D4D72859E140}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{F94A90A7-DBF2-4F96-BEBA-6A8548BBA911}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"TCP Query User{00E9C448-0173-4CBF-893C-8BEFA3A91B40}C:\users\welz\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\welz\program files\dna\btdna.exe | 
"TCP Query User{447FF079-BE4B-4D62-99B9-4D220483738A}C:\program files\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\program files\bittorrent\bittorrent.exe | 
"TCP Query User{7197AABB-7A53-4847-B2DC-3EB36485B9AA}C:\program files\bitcomet\bitcomet.exe" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | 
"TCP Query User{8C3D0632-CE4F-4A84-A338-BA31D55F7C6C}C:\users\welz\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\welz\program files\dna\btdna.exe | 
"TCP Query User{B4688451-2F4C-4E05-A99A-96BDDA9CF66D}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"TCP Query User{B8B0A154-65E5-4C25-BFFC-B21028F5F3A3}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{062C1D7A-BE85-417C-9613-6EDE4C31A77B}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{4DDA9BC8-1464-4D6C-9005-92D882FB6858}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"UDP Query User{91995A39-6D02-4B9E-BBA7-6E66A91303FF}C:\users\welz\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\welz\program files\dna\btdna.exe | 
"UDP Query User{B6CCFF5E-AF7D-46D2-9C32-A93511021CB7}C:\users\welz\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\welz\program files\dna\btdna.exe | 
"UDP Query User{E902D599-589A-4C3B-B555-AFE99354B0A2}C:\program files\bitcomet\bitcomet.exe" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe | 
"UDP Query User{EE0CD603-BA55-429B-8CF1-5F8540EE16B6}C:\program files\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\program files\bittorrent\bittorrent.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{11AFE21E-B193-430D-B57A-DFF7815BB962}" = Ulead PhotoImpact 12
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{2B4E24A0-A06F-488D-87D8-16738E5E1104}" = Windows Live Family Safety
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{47948554-90C6-4AAC-8CFA-D23CE11C1031}" = Nero 8 Essentials
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6CF47FD1-3CF8-4206-BA24-A2B1E43D8CCA}" = IncrediMail
"{75AE8014-1184-4BC0-B279-C879540719EE}" = PhotoMail Maker
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel(R) Matrix Storage Manager
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-A90000000001}" = Adobe Reader 9 - Deutsch
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B145EC69-66F5-11D8-9D75-000129760D75}" = MakeDisc
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer
"{BD1587F7-B8D0-4111-8F1F-3327628AB02F}" = 3531-W-D
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0846526-66DD-4DC9-A02C-98F9A2806812}" = Launch Manager V1.4.9
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{D5A9B7C0-8751-11D8-9D75-000129760D75}" = MediaShow
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E0091C29-DEE8-4B24-BF65-8C35B5940D77}" = Letstrade
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E1640DA5-89B4-4F52-B15D-5DA3D14F29D4}" = LG USB Modem Drivers
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E815FB81-995F-4F33-8E25-F16712123AB7}" = AuthenTec Fingerprint Sensor Minimum Install
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F4E57F49-84B4-4CF2-B0A1-8CA1752BDF7E}" = OmniPass 5.00.91
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FEDE400D-3381-4087-ACCB-689DD8A56123}" = Inst5657
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"AVG9Uninstall" = AVG Free 9.0
"AVMFBox" = AVM FRITZ!Box Dokumentation
"AVMFBoxPrinter" = AVM FRITZ!Box Druckeranschluss
"AVMWLANCLI" = AVM FRITZ!WLAN
"CCleaner" = CCleaner
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"eBay Icon" = eBay Icon
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"EPSON Scanner" = EPSON Scan
"FormatFactory" = FormatFactory 2.20
"Free YouTube to Mp3 Converter_is1" = Free YouTube to Mp3 Converter version 3.1
"Google Desktop" = Google Desktop
"Google Updater" = Google Updater
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"ICQToolbar" = ICQ Toolbar
"IncrediMail" = IncrediMail 2.0
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 5.1.0
"LetsTrade" = LetsTrade Komponenten
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox 5.0.1 (x86 de)" = Mozilla Firefox 5.0.1 (x86 de)
"NVIDIA Drivers" = NVIDIA Drivers
"PhotoMail" = PhotoMail Maker
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"VLC media player" = VLC media player 1.1.4
"WinLiveSuite" = Windows Live Essentials
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 16.08.2011 02:59:05 | Computer Name = WELZ-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 26.08.2011 12:44:26 | Computer Name = WELZ-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 27.08.2011 03:36:58 | Computer Name = WELZ-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 27.08.2011 04:11:16 | Computer Name = WELZ-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 29.08.2011 03:27:11 | Computer Name = WELZ-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 29.08.2011 03:35:15 | Computer Name = WELZ-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 01.09.2011 04:11:26 | Computer Name = WELZ-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 01.09.2011 04:49:34 | Computer Name = WELZ-PC | Source = EventSystem | ID = 4621
Description = 
 
Error - 01.09.2011 04:51:14 | Computer Name = WELZ-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 01.09.2011 09:12:13 | Computer Name = WELZ-PC | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 16.08.2011 02:59:05 | Computer Name = WELZ-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 26.08.2011 12:44:26 | Computer Name = WELZ-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 27.08.2011 03:36:58 | Computer Name = WELZ-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 27.08.2011 04:11:16 | Computer Name = WELZ-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 29.08.2011 03:27:12 | Computer Name = WELZ-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 29.08.2011 03:35:16 | Computer Name = WELZ-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 01.09.2011 04:11:27 | Computer Name = WELZ-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 01.09.2011 04:26:37 | Computer Name = WELZ-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 01.09.2011 04:51:14 | Computer Name = WELZ-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 01.09.2011 09:12:14 | Computer Name = WELZ-PC | Source = Service Control Manager | ID = 7000
Description = 
 
 
< End of report >