Hallo, Ich habe mir heute auch diesen Suisa Virus eingefangen. Sobald ich das Wlan einschalte und eine Verbindung hergestellt ist, wird der Bildschirm auf meinem win7(64bit) Laptop weiss und es kommt diese Meldung die 75.- will. ich kann meinen Laptop aber noch normal starten, es muss einfach entweder das Internet am Router oder am Laptop ausgeschaltet bzw. deaktiviert sein. Ich habe nun den Anweisungen folgend das 'defogger' Programm und das 'OTL' Programm drüberlaufenlassen. Hier die beiden Texte des OTL-Scans:

OTL.txt:

OTL logfile created on: 10.07.2012 20:53:40 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = C:\Users\Rexxxyboy\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
7.95 Gb Total Physical Memory | 6.37 Gb Available Physical Memory | 80.19% Memory free
15.90 Gb Paging File | 14.14 Gb Available in Paging File | 88.95% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 910.58 Gb Total Space | 692.41 Gb Free Space | 76.04% Space Free | Partition Type: NTFS
Drive D: | 931.51 Gb Total Space | 931.39 Gb Free Space | 99.99% Space Free | Partition Type: NTFS
Drive E: | 20.64 Gb Total Space | 2.13 Gb Free Space | 10.34% Space Free | Partition Type: NTFS
Drive G: | 503.88 Mb Total Space | 503.30 Mb Free Space | 99.89% Space Free | Partition Type: FAT
 
Computer Name: HP_NICO | User Name: Rexxxyboy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.07.10 20:52:12 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Rexxxyboy\Desktop\OTL.exe
PRC - [2012.07.10 17:28:31 | 000,071,168 | ---- | M] (Hitachi) -- C:\Users\Rexxxyboy\AppData\Local\Temp\cdoqovxndc.exe
PRC - [2012.06.27 17:11:10 | 001,090,440 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
PRC - [2012.06.27 17:01:34 | 000,791,488 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
PRC - [2012.05.23 18:55:29 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012.04.27 19:05:40 | 000,613,208 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
PRC - [2012.04.26 21:14:46 | 000,521,560 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Game Booster 3\FPSClient.exe
PRC - [2012.02.28 17:38:56 | 001,987,976 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.02.15 13:58:00 | 000,034,872 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2012.01.09 21:17:44 | 000,821,592 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
PRC - [2012.01.03 06:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.12.29 23:29:04 | 000,497,496 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
PRC - [2011.12.29 17:43:36 | 000,368,472 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\DelayLoad.exe
PRC - [2011.12.29 17:43:30 | 000,620,376 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe
PRC - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011.08.25 06:30:52 | 000,260,424 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
PRC - [2011.08.25 06:30:34 | 000,653,128 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
PRC - [2011.08.25 06:30:08 | 000,142,664 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
PRC - [2011.06.14 18:11:46 | 001,098,296 | ---- | M] (Hewlett-Packard Development Company L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
PRC - [2011.04.17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe
PRC - [2011.03.22 12:42:40 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
PRC - [2011.02.25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2011.01.13 04:00:42 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010.12.22 22:25:02 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010.12.22 22:24:58 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010.04.23 12:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010.04.23 12:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010.04.23 12:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010.04.23 12:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.04.26 21:14:56 | 000,218,968 | ---- | M] () -- C:\Program Files (x86)\IObit\Game Booster 3\fps.dll
MOD - [2012.04.26 21:14:54 | 000,269,656 | ---- | M] () -- C:\Program Files (x86)\IObit\Game Booster 3\D3DX8Wrapper.dll
MOD - [2011.11.02 00:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.11.02 00:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011.04.21 17:54:40 | 000,347,024 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\madExcept_.bpl
MOD - [2011.04.21 17:54:40 | 000,179,088 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\madBasic_.bpl
MOD - [2011.04.21 17:54:40 | 000,046,480 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\madDisAsm_.bpl
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2012.04.25 14:02:52 | 000,031,000 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
SRV:64bit: - [2011.05.07 21:25:40 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012.06.27 17:01:34 | 000,791,488 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2012.06.27 16:20:38 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.06.25 20:18:10 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.06.23 17:49:24 | 000,087,040 | ---- | M] (Highresolution Enterprises) [Auto | Running] -- C:\Programme\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonSvc.exe -- (XMouseButton Launcher)
SRV - [2012.05.23 18:55:29 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.02.29 08:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.02.28 17:38:54 | 002,343,816 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.02.15 13:58:00 | 000,034,872 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
SRV - [2012.01.09 21:17:44 | 000,821,592 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
SRV - [2012.01.03 06:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.12.29 23:29:04 | 000,497,496 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe -- (AdvancedSystemCareService5)
SRV - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011.09.09 18:10:28 | 000,086,072 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe -- (HP Support Assistant Service)
SRV - [2011.08.25 06:30:52 | 000,260,424 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe -- (FPLService)
SRV - [2011.06.14 18:11:46 | 001,098,296 | ---- | M] (Hewlett-Packard Development Company L.P.) [On_Demand | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe -- (hpCMSrv)
SRV - [2011.04.17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe -- (NIS)
SRV - [2011.03.11 12:23:16 | 000,297,984 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Programme\IDT\WDM\stacsv64.exe -- (STacSV)
SRV - [2011.03.01 22:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.02.25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2011.01.25 14:56:32 | 000,241,648 | ---- | M] (CyberLink) [Auto | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe -- (CLKMSVC10_38F51D56)
SRV - [2011.01.13 04:00:42 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2010.12.22 22:25:02 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2010.12.22 22:24:58 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2010.10.12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010.10.11 02:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Programme\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)
SRV - [2010.09.22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2010.09.21 14:49:00 | 002,286,976 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.07.29 20:39:24 | 000,951,584 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Programme\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.09 22:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.03.03 12:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Programme\IDT\WDM\AESTSr64.exe -- (AESTFilters)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.04.25 14:02:52 | 000,043,800 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
DRV:64bit: - [2012.04.25 14:02:52 | 000,030,488 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
DRV:64bit: - [2012.03.15 21:26:05 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2012.03.15 21:26:05 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.15 11:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011.12.29 20:34:22 | 000,174,200 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2011.10.31 02:13:46 | 003,065,408 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:64bit: - [2011.10.01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2011.10.01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2011.10.01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2011.10.01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2011.09.21 10:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)
DRV:64bit: - [2011.09.04 06:53:28 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.09.04 06:53:28 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.05.07 21:58:06 | 009,259,520 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011.05.07 20:50:14 | 000,301,568 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011.04.21 03:37:49 | 000,386,168 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys -- (SymNetS)
DRV:64bit: - [2011.04.15 06:08:26 | 012,228,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdpmd64.sys -- (intelkmd)
DRV:64bit: - [2011.03.31 05:00:09 | 000,744,568 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2011.03.31 05:00:09 | 000,040,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV:64bit: - [2011.03.15 04:31:23 | 000,912,504 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys -- (SymEFA)
DRV:64bit: - [2011.03.11 12:23:16 | 000,521,728 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2011.02.17 03:11:08 | 000,428,136 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.01.27 08:47:10 | 000,450,680 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys -- (SymDS)
DRV:64bit: - [2011.01.27 07:07:06 | 000,171,128 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys -- (SymIRON)
DRV:64bit: - [2011.01.13 03:51:44 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2011.01.13 02:10:44 | 000,333,928 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:64bit: - [2010.12.17 04:28:38 | 001,403,440 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2010.12.10 23:50:36 | 000,181,248 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2010.12.10 23:50:36 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2010.11.26 19:02:18 | 000,017,720 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV:64bit: - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.10.20 02:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:64bit: - [2010.10.14 20:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:64bit: - [2010.07.28 10:13:50 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)
DRV:64bit: - [2010.07.20 23:26:42 | 000,102,952 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2010.07.20 23:26:38 | 000,135,720 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2010.07.20 23:26:34 | 000,021,544 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2010.07.14 16:25:38 | 000,344,616 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl)
DRV:64bit: - [2010.03.03 00:37:40 | 000,039,464 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:64bit: - [2009.06.10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:64bit: - [2009.06.10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:64bit: - [2009.06.10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.03.18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2008.05.19 16:37:32 | 000,063,552 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\h643331.sys -- (h643331)
DRV - [2012.02.06 13:14:07 | 000,482,936 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2012.02.06 13:14:07 | 000,138,360 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012.01.02 16:28:09 | 002,048,632 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20120222.032\EX64.SYS -- (NAVEX15)
DRV - [2012.01.02 16:28:09 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20120222.032\ENG64.SYS -- (NAVENG)
DRV - [2011.12.16 01:33:20 | 000,488,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20120222.002\IDSviA64.sys -- (IDSVia64)
DRV - [2011.12.01 04:25:03 | 001,157,240 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20120215.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2010.11.01 06:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2008.05.19 16:15:10 | 000,041,336 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Hid3331.sys -- (hid3331)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCON/12
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCON/12
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{4681C72A-45CA-481E-82D2-0276A6F1C9AA}: "URL" = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = hxxp://ch.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = hxxp://rover.ebay.com/rover/1/5222-111091-7834-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCON/12
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCON/12
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
IE - HKLM\..\SearchScopes\{4681C72A-45CA-481E-82D2-0276A6F1C9AA}: "URL" = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = hxxp://ch.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = hxxp://rover.ebay.com/rover/1/5222-111091-7834-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCON/12
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
IE - HKCU\..\URLSearchHook: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\6.0\iobitToolbarIE.dll (Spigot, Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {9F3AB452-B199-4352-A448-C6169C7F8BAC}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=112060&tt=280612_5_&babsrc=SP_ss&mntrId=ea8ccc15000000000000402cf43a0646
IE - HKCU\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
IE - HKCU\..\SearchScopes\{4681C72A-45CA-481E-82D2-0276A6F1C9AA}: "URL" = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7PRFB_deCH477
IE - HKCU\..\SearchScopes\{9F3AB452-B199-4352-A448-C6169C7F8BAC}: "URL" = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=382950&p={searchTerms}
IE - HKCU\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = hxxp://ch.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
IE - HKCU\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
IE - HKCU\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = hxxp://rover.ebay.com/rover/1/5222-111091-7834-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.startup.homepage: "hxxp://search.babylon.com/?affID=112060&tt=280612_5_&babsrc=HP_ss&mntrId=ea8ccc15000000000000402cf43a0646"
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 0
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..keyword.URL: "hxxp://ch.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=382950&p="
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=382950"
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1: C:\Windows\system32\npDeployJava1.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.1: C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Rexxxyboy\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Rexxxyboy\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\IPSFFPlgn\ [2012.02.11 12:20:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\coFFPlgn_2011_7_9_4 [2012.07.10 20:40:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.05.05 18:20:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.05.05 18:20:40 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2012.02.11 14:00:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rexxxyboy\AppData\Roaming\mozilla\Extensions
[2012.07.02 16:54:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rexxxyboy\AppData\Roaming\mozilla\Firefox\Profiles\u7wlpokr.default\extensions
[2012.05.23 18:39:07 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\Rexxxyboy\AppData\Roaming\mozilla\Firefox\Profiles\u7wlpokr.default\extensions\battlefieldplay4free@ea.com
[2012.05.05 18:20:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.02.12 17:32:42 | 000,000,000 | ---D | M] (TrueSuite Website Logon) -- C:\Program Files (x86)\mozilla firefox\extensions\websitelogon@truesuite.com
[2012.07.02 16:54:23 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\WTXPCOM
[2012.07.02 16:54:23 | 000,000,000 | ---D | M] (IObit Toolbar) -- C:\PROGRAM FILES (X86)\IOBIT TOOLBAR\FF
[2012.05.05 18:20:40 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.02.08 19:36:16 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.07.02 07:49:28 | 000,002,352 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012.02.08 19:21:19 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.02.08 19:36:16 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.08 19:36:16 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.08 19:36:16 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.02.08 19:36:16 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Search the web (Babylon) (Enabled)
CHR - default_search_provider: search_url = hxxp://search.babylon.com/?q={searchTerms}&affID=112060&tt=280612_5_&babsrc=SP_ss&mntrId=ea8ccc15000000000000402cf43a0646
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\Application\20.0.1132.47\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\Application\20.0.1132.47\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_228.dll
CHR - plugin: Simple Pass 2011 (Enabled) = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfaldikcoaplhepekpbngkepfcoiihef\1.0_0\npwebsitelogon.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: WildTangent Games App Presence Detector (Enabled) = C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - Extension: Running Fred = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfalcbcdebaemokjapphcfnldiogddk\1.4.3.11_0\
CHR - Extension: The Fancy Pants Adventures: Sneak Peek = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbkegjmflkgobogelkobmmdeddkclooc\5_0\
CHR - Extension: YouTube = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Stunt Dirt Bike = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmbnpkmmbmniajjhocmmgblekhhmffge\1.5_0\
CHR - Extension: TankiOnline = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\chnamgoimgnbgkabfjkikldbfdhhfhdo\1.0.6_0\
CHR - Extension: Google-Suche = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Website Logon = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfaldikcoaplhepekpbngkepfcoiihef\1.0_0\
CHR - Extension: Paper Toss = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlifoiidlkcpdlchhngenehnhcadakpl\2.3_0\
CHR - Extension: Apple Shooter = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ingecjekeggadjbbklelffkgeppklgnm\2.1_0\
CHR - Extension: Treiber Parkplatz = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhbejhnopmdbkkodiffaopllalmialfe\2.1_0\
CHR - Extension: The Fancy Pants Adventure: World 2 = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\loamdenijebhollnjgehcfbnpeelfhlk\14_0\
CHR - Extension: Fancy Pants = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndpjkhphenpeicbkkplcndfgmgnabjlh\1.0_0\
CHR - Extension: Google Mail = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: Canvas Rider = C:\Users\Rexxxyboy\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk\0.7_0\
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (IObit Toolbar) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\6.0\iobitToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (ChromeFrame BHO) - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\20.0.1132.47\npchrome_frame.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (IObit Toolbar) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\6.0\iobitToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe (Hewlett-Packard Development Company L.P.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKCU..\Run: [] C:\Users\Rexxxyboy\AppData\Local\Temp\cdoqovxndc.exe (Hitachi)
O4 - HKCU..\Run: [Advanced SystemCare 5] C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe (IObit)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra Button: Senden an Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Senden an &Bluetooth-Gerät... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.1)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.80.2.cab (Battlefield Play4Free Updater)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D32E3B4E-3896-4B8F-9C1A-B8965BE7841C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DA0792AC-C2B5-43C7-A890-F849D7173855}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\gcf - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\gcf {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\20.0.1132.47\npchrome_frame.dll (Google Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.07.10 20:53:10 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\Rexxxyboy\Desktop\OTL.exe
[2012.07.07 16:15:35 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\AppData\Roaming\wargaming.net
[2012.07.02 16:54:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Application Updater
[2012.07.02 16:54:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
[2012.07.02 16:54:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit Toolbar
[2012.07.02 08:11:58 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\AppData\Roaming\Highresolution Enterprises
[2012.07.02 08:11:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Highresolution Enterprises
[2012.07.02 08:11:58 | 000,000,000 | ---D | C] -- C:\Program Files\Highresolution Enterprises
[2012.07.02 07:49:42 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\AppData\Roaming\BabylonToolbar
[2012.07.02 07:49:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BabylonToolbar
[2012.07.02 07:49:20 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\AppData\Roaming\Babylon
[2012.07.02 07:49:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2012.06.20 18:07:24 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\AppData\Roaming\Teeworlds
[2012.06.19 18:15:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2012.06.19 18:15:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
[2012.06.13 17:03:00 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\Documents\Mount&Blade Warband Savegames
[2012.06.13 17:01:56 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\Documents\Mount&Blade Warband
[2012.06.13 17:01:56 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\AppData\Roaming\Mount&Blade Warband
[2012.06.13 16:30:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
[2012.06.13 16:30:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ffdshow
[2012.06.11 10:20:25 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\AppData\Roaming\Need for Speed World
[2012.06.11 09:41:47 | 000,000,000 | ---D | C] -- C:\Users\Rexxxyboy\AppData\Local\Electronic_Arts_Inc
[2012.06.11 09:41:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
 
========== Files - Modified Within 30 Days ==========
 
[2012.07.10 20:52:12 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Rexxxyboy\Desktop\OTL.exe
[2012.07.10 20:51:58 | 001,500,018 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.07.10 20:51:58 | 000,654,610 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.07.10 20:51:58 | 000,616,452 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.07.10 20:51:58 | 000,130,192 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.07.10 20:51:58 | 000,106,574 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.07.10 20:51:13 | 000,000,000 | ---- | M] () -- C:\Users\Rexxxyboy\defogger_reenable
[2012.07.10 20:48:10 | 000,050,477 | ---- | M] () -- C:\Users\Rexxxyboy\Desktop\Defogger.exe
[2012.07.10 20:48:05 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.10 20:48:05 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.10 20:40:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.07.10 20:40:01 | 2106,478,591 | -HS- | M] () -- C:\hiberfil.sys
[2012.07.10 20:35:49 | 000,000,348 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForRexxxyboy.job
[2012.07.10 18:18:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.07.10 17:35:00 | 000,001,136 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2196232370-1087742729-926825829-1000UA.job
[2012.07.10 17:35:00 | 000,001,084 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2196232370-1087742729-926825829-1000Core.job
[2012.07.10 17:28:39 | 000,050,688 | ---- | M] () -- C:\Windows\SysWow64\mdhcp32.dll
[2012.07.10 13:42:11 | 000,000,936 | ---- | M] () -- C:\Users\Public\Desktop\Nexus Mod Manager.lnk
[2012.07.04 18:59:24 | 000,282,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012.07.04 18:59:24 | 000,282,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.07.04 18:59:17 | 000,234,768 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012.07.02 17:35:14 | 000,001,294 | ---- | M] () -- C:\Users\Rexxxyboy\Desktop\X-Mouse Button Control.lnk
[2012.07.02 07:49:34 | 000,000,250 | ---- | M] () -- C:\user.js
[2012.06.13 16:30:38 | 000,001,172 | ---- | M] () -- C:\Users\Public\Desktop\Game Booster 3.lnk
[2012.06.13 14:36:49 | 001,538,404 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\Cat.DB
 
========== Files Created - No Company Name ==========
 
[2012.07.10 20:51:13 | 000,000,000 | ---- | C] () -- C:\Users\Rexxxyboy\defogger_reenable
[2012.07.10 20:50:51 | 000,050,477 | ---- | C] () -- C:\Users\Rexxxyboy\Desktop\Defogger.exe
[2012.07.10 17:28:39 | 000,050,688 | ---- | C] () -- C:\Windows\SysWow64\mdhcp32.dll
[2012.07.03 19:29:13 | 000,000,348 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForRexxxyboy.job
[2012.07.02 08:18:30 | 000,001,294 | ---- | C] () -- C:\Users\Rexxxyboy\Desktop\X-Mouse Button Control.lnk
[2012.07.02 07:49:33 | 000,000,250 | ---- | C] () -- C:\user.js
[2012.06.13 16:30:36 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2012.05.30 20:59:15 | 000,004,417 | ---- | C] () -- C:\Users\Rexxxyboy\AppData\Roaming\CamStudio.cfg
[2012.05.30 20:59:15 | 000,000,408 | ---- | C] () -- C:\Users\Rexxxyboy\AppData\Roaming\CamShapes.ini
[2012.05.30 20:59:15 | 000,000,408 | ---- | C] () -- C:\Users\Rexxxyboy\AppData\Roaming\CamLayout.ini
[2012.05.30 20:59:15 | 000,000,046 | ---- | C] () -- C:\Users\Rexxxyboy\AppData\Roaming\Camdata.ini
[2012.03.31 10:11:19 | 000,000,058 | ---- | C] () -- C:\Windows\SysWow64\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2012.03.31 10:11:19 | 000,000,058 | ---- | C] () -- C:\Users\Rexxxyboy\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2012.02.29 21:01:20 | 000,008,192 | ---- | C] () -- C:\Users\Rexxxyboy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.02.08 15:18:45 | 000,138,460 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2012.01.23 11:05:24 | 001,526,948 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.01.07 17:48:05 | 000,282,104 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.01.07 17:48:03 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.12.27 11:49:13 | 000,041,336 | ---- | C] ( ) -- C:\Windows\SysWow64\drivers\Hid3331.sys
[2011.10.31 02:20:55 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.10.31 02:09:12 | 000,003,155 | ---- | C] () -- C:\Windows\SysWow64\atipblup.dat
[2011.10.31 02:08:04 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011.10.31 02:08:03 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011.10.31 02:08:03 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011.10.31 02:08:02 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011.10.31 02:08:01 | 013,359,616 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011.10.31 02:07:59 | 000,003,155 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.10.31 02:03:07 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011.09.28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.09.03 21:31:15 | 000,000,068 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat
[2011.03.03 22:04:58 | 000,007,736 | ---- | C] () -- C:\Windows\hpDSTRES.DLL
[2010.12.17 04:26:22 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
 
========== LOP Check ==========
 
[2012.07.09 15:46:51 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\.minecraft
[2012.06.03 19:35:50 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\.Nitrous
[2012.06.15 21:52:25 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\.spoutcraft
[2012.07.02 07:49:20 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Babylon
[2012.07.02 07:49:42 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\BabylonToolbar
[2012.05.09 13:52:29 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Blockscape
[2012.03.31 10:11:19 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\DonationCoder
[2012.05.26 13:56:58 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\DVDVideoSoft
[2012.07.02 08:11:58 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Highresolution Enterprises
[2012.02.09 20:38:28 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\IObit
[2012.03.17 13:27:30 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\JavaEditor
[2012.05.12 17:34:22 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Kalypso Media
[2012.01.31 22:45:36 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\LolClient
[2012.06.13 17:02:17 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Mount&Blade Warband
[2012.01.22 15:34:01 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Mumble
[2012.06.11 10:20:25 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Need for Speed World
[2012.02.14 18:03:27 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Notepad++
[2011.12.25 15:43:45 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Origin
[2012.01.08 20:11:37 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\pymclevel
[2012.03.18 16:03:50 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\SoftGrid Client
[2012.02.29 21:01:20 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Solveig Multimedia
[2011.12.24 20:36:53 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Synaptics
[2012.06.20 18:09:20 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Teeworlds
[2012.05.26 15:48:49 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\TIPP10
[2012.01.23 11:06:04 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\TP
[2012.05.12 17:55:00 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Tropico 4
[2012.05.22 16:13:45 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\TS3Client
[2012.02.15 18:19:31 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\ts3overlay
[2012.02.27 18:10:15 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Ubisoft
[2012.07.07 16:15:35 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\wargaming.net
[2012.01.05 16:15:35 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\Windows Live Writer
[2012.01.21 15:11:57 | 000,000,000 | ---D | M] -- C:\Users\Rexxxyboy\AppData\Roaming\_MDLogs
[2012.04.11 18:31:58 | 000,032,624 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         

extras.txt:

OTL Extras logfile created on: 10.07.2012 20:53:40 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = C:\Users\Rexxxyboy\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
7.95 Gb Total Physical Memory | 6.37 Gb Available Physical Memory | 80.19% Memory free
15.90 Gb Paging File | 14.14 Gb Available in Paging File | 88.95% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 910.58 Gb Total Space | 692.41 Gb Free Space | 76.04% Space Free | Partition Type: NTFS
Drive D: | 931.51 Gb Total Space | 931.39 Gb Free Space | 99.99% Space Free | Partition Type: NTFS
Drive E: | 20.64 Gb Total Space | 2.13 Gb Free Space | 10.34% Space Free | Partition Type: NTFS
Drive G: | 503.88 Mb Total Space | 503.30 Mb Free Space | 99.89% Space Free | Partition Type: FAT
 
Computer Name: HP_NICO | User Name: Rexxxyboy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{035CA2B3-1DF9-4BEA-977F-BE7DE52579E2}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{13C7EE4B-E3C1-4A70-B448-9796EC5EE4DD}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{181622E8-D7F3-488F-8CB7-0DBB612376F9}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2166EF0B-E9CA-4CBD-9E58-53931DA708C9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{2A90520D-F4A3-4937-9C97-CCE73EA7B947}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{36CE7968-D630-456B-B6ED-80C07F96B5BC}" = lport=137 | protocol=17 | dir=in | app=system | 
"{3C97A4EB-D933-45A7-ACDD-EA402E019645}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{3F473F8D-3ACC-4FEB-AF87-6FB45AC47F05}" = lport=445 | protocol=6 | dir=in | app=system | 
"{411B3BCE-8880-465F-8207-0C62220C7E27}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{47D973BF-CB05-4C73-97C2-0AA35E8BFD77}" = rport=137 | protocol=17 | dir=out | app=system | 
"{7C46F2A2-9903-4A0B-8CD6-F4C399ACAD62}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{8CEC1379-8D35-4D7C-B6BD-9CD6076FA701}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{9B05CF80-5F90-4D0E-ADFF-24455A228D9C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{9D4987BD-4E0B-4AB9-8440-9CC4FBDD0F5E}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe | 
"{ADEFC3AC-8754-418D-8ADF-8F7EF71413E5}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{B600F16B-6102-4163-B1AB-7F435754430F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{BFDB8E27-7A62-4CA0-A45D-C6CD0356055F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{C9170439-F371-4A16-B529-6D97E3F9E63C}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{CEC91C0F-FB20-44D7-97EA-BFCF96CA0A8F}" = rport=138 | protocol=17 | dir=out | app=system | 
"{D280D940-935F-438F-BE9C-1BC1C3AAE658}" = rport=445 | protocol=6 | dir=out | app=system | 
"{D8D5B835-48CB-4639-AE8F-1951AB59807D}" = rport=139 | protocol=6 | dir=out | app=system | 
"{D9DDD4CF-F4BA-44D8-AF78-5E5764DA1990}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{DB95E93E-CC85-4FFD-8249-56403D2A1BA8}" = lport=139 | protocol=6 | dir=in | app=system | 
"{E37D8B81-ED43-4501-ADE1-028DA815E3F8}" = lport=138 | protocol=17 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07544BAF-F402-4035-835E-19BA6B46B70E}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\autopatcher.exe | 
"{0A34343B-34DA-4219-BD8D-79E46C7353A1}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070 demo\anno5.exe | 
"{0DEBACA0-FD17-40A2-8F05-DD9DCF55D4D2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{12597F46-8065-4273-9A4A-26CD3F7445CA}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{1918F29F-646D-416C-9FB6-A46E1BED468B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rayman origins demo\rayman origins.exe | 
"{1A74C94D-9734-4E61-B100-58D13ECDE733}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{1C27A045-7908-41AC-9936-0DC3111A7FE2}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{1C531B99-50BA-40AC-BB43-750167D8B225}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\need for speed the run limited edition\need for speed the run.exe | 
"{1FC55A84-5703-4D11-9AD4-AD8B2E93F698}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.868\agent.exe | 
"{21147BE7-47EF-4EAD-BC36-BF32CB6D315C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.515\agent.exe | 
"{2750562B-A748-4D49-9198-301F91ABC857}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{2FD7B7E7-6791-4E6F-A84D-6DD63AE83CDF}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{397A4A0E-64A3-44C0-BEE9-6FB4B8DA3E1C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"{3AD94B40-F5A5-4FC3-A50B-46427B460D41}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii beta\diablo iii.exe | 
"{3B1D1D0A-6387-4402-A739-641857EEE5DC}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{3BE4BC1F-B326-47D7-BD68-0D07724A9A09}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070 demo\initengine.exe | 
"{3FFAA02D-7FD4-44DE-8D70-983ADCD5FA37}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{40298910-B0EB-4143-BC02-A5B05BCF3254}" = dir=in | app=c:\windows\system32\ezsharedsvchost.exe | 
"{4292158F-2133-41F4-839C-0CE5169735C5}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | 
"{4BC6A49C-6350-4317-B896-55D665CF6BAD}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\need for speed the run limited edition\need for speed the run.exe | 
"{4D87BCED-8623-416B-880E-39305622F0BE}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\microsoft flight\flight.exe | 
"{54C68BB8-C828-41A1-ACA4-7B660D691863}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd10.exe | 
"{58AEDA4A-6107-47FE-B1B1-C78C9E127F59}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\creationkit.exe | 
"{58D41A55-A3C7-47A1-AF45-9E483D2573EA}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\risen - demo\bin\risen.exe | 
"{5A302909-B693-4C84-91CF-17A844209871}" = protocol=17 | dir=in | app=c:\program files (x86)\world of warcraft\launcher.exe | 
"{5A5CAEA6-D554-4064-88B8-7677CD33E81B}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070 demo\initengine.exe | 
"{5B999C99-41B3-445B-AA3C-F52EBC0F47C0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blacklightretribution\blacklight retribution.exe | 
"{5C0765B6-B30B-45F2-82D1-834F4163A067}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe | 
"{5C294FB0-7133-45C8-9812-E14FEA5681B4}" = protocol=6 | dir=in | app=c:\program files (x86)\world of warcraft\launcher.exe | 
"{5D312BF9-F0CD-4012-8CE5-4FDE05E32F72}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{5D74CD3E-1399-4AB4-A276-4CA0C20B9A88}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\everquest 2\launchpad.exe | 
"{5F971619-123C-452B-A7EB-6DCC9D44A588}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\eets\eets.exe | 
"{5FD8CA04-4E73-4CED-8149-CE7B48F8C0AC}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\everquest 2\launchpad.exe | 
"{5FF081B2-3B01-4C76-B41E-D12F07C268CB}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{605669EE-E73E-4B4E-9A94-B0DC1D778FFB}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\die siedler 7\data\base\_dbg\bin\release\settlers7r.exe | 
"{64BAE0C8-3E9F-4EA8-8B98-E53E4E51362E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tropico 4\tropico4.exe | 
"{65019EC7-DF58-4577-BF96-D347449203CA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{6BD2B96B-7EA2-48CC-BABE-B9EC3B61DFBD}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{70337FB7-557B-4FCD-B1AD-728B0D44C5BA}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\initengine.exe | 
"{7254325F-F8B1-4894-B996-9AA5DD0F1EF6}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{74F69158-32E4-47F5-8582-618D777712B2}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{776E7C8C-DADC-4921-A5BC-CDD038A4BE37}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{7ABD86D4-1333-4188-908B-1937DFB7A1DE}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii beta\diablo iii.exe | 
"{7D63CF07-9142-4E5B-B0D0-0418237A5A4E}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{7E065A61-663A-43F5-AA69-2EAA6C4D761A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{849B57FC-9CC7-4DE7-9621-D7C3D10D19FB}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{856C1900-04E2-401C-8BAD-4B5ADF637D0E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\risen - demo\bin\risen.exe | 
"{88D1ACCE-A3CA-411E-844A-7BD676C86647}" = protocol=17 | dir=in | app=c:\program files (x86)\world of warcraft\launcher.patch.exe | 
"{89BB5356-9A6F-40F5-9024-DFD986310C37}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\initengine.exe | 
"{8E60FC11-E027-4294-B929-940CDF62491B}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{92259805-7757-4BA0-A79F-C0394F9AD178}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\eets\eets.exe | 
"{9344D976-FC7F-4D7C-8533-0AFE9FC9D56C}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{99326252-C217-4F0C-A848-A7A3DC8789A8}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\die siedler 7\data\base\_dbg\bin\release\settlers7r.exe | 
"{9A36F10D-C52C-4082-A7BF-57177182DC88}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{9A3A98F1-DB8C-480C-AE4D-6E94AB03FC95}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | 
"{9C14D788-A0AD-442C-B49A-3ABFC360062D}" = protocol=58 | dir=in | app=system | 
"{9D051B0B-4B65-406B-9D57-67048E32E0CE}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{9DF2D6B6-614F-4025-BBEB-52554037AD4A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blacklightretribution\blacklight retribution.exe | 
"{A165475D-8916-4003-9452-E85B2A3042C4}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070 demo\anno5.exe | 
"{A2F511B6-4A00-497A-9B90-C5EF110BE27D}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{A35AC69D-73A1-442D-85D1-1399B59775A3}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rayman origins demo\rayman origins.exe | 
"{A5345076-D596-4A9B-822C-8F1DFEF150E9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{A9E7AD75-0874-46FE-9DA4-4D4D540B97F0}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | 
"{AA08795D-CC54-43D4-B412-A0000C937D09}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | 
"{B2417FA2-6C04-4420-99FC-33139A62F2CE}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{B2D9F5CD-9FE0-486B-8277-CDF412E5D12C}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{B80E9E2B-8FDC-4A6B-BDD0-307E8BC3C0E9}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{B9006E70-9072-4E44-B28A-57F5A73E3F9F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{B9B93CB1-24A6-405C-8D97-9159C5B9FB13}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | 
"{B9CC5B50-2C04-4FE2-AC8F-0776FCD41219}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\creationkit.exe | 
"{BAE52818-6ABF-49F6-B4FB-0B326DBB8B80}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe | 
"{BBF6F7B9-3DF9-4AAE-919D-767A34690997}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{BC4AC5E5-4366-48C0-AF81-18D5540B688E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.515\agent.exe | 
"{C0536F75-2900-4927-A84E-751DAF739255}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C345EC1C-8642-4D75-B8C9-5EF290148F07}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\microsoft flight\flight.exe | 
"{C44152B3-60E9-4E2C-B345-470460B46A02}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\stronghold kingdoms\strongholdkingdoms.exe | 
"{C6B22C6F-771F-4188-98FA-ED3048583928}" = dir=in | app=c:\program files (x86)\easybits for kids\ezdesktop.exe | 
"{C8F66AA4-C90F-4B0B-BA7F-EC038E82E9D6}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | 
"{CA3BF5C0-C8EE-4E7D-895A-99FAFED407C3}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.868\agent.exe | 
"{CBDF1A2B-02B7-4705-B22E-F205F7F39C15}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{CCD59BE5-CA4C-4C30-A6C0-068BCFCBE3F3}" = protocol=6 | dir=in | app=c:\program files (x86)\world of warcraft\launcher.patch.exe | 
"{D4B818B5-F0F0-42EE-8B47-4399C0441F88}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\anno5.exe | 
"{D4E7CDD0-9413-442A-88E9-47CF4D89952A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{D7AE1908-CFAE-476A-88BA-3DF78C065B94}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mount and blade warband - demo\mb_warband.exe | 
"{DABE1091-D074-4F6D-803D-42584F4D3E54}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\autopatcher.exe | 
"{E01731AB-5AFB-4332-A7C0-E0FE0BC909B1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tropico 4\tropico4.exe | 
"{E22F9251-FCB8-4FB6-894A-EABFABB8067F}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | 
"{E2787D43-FABF-4FDA-B69E-7A5606C5FC86}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\anno5.exe | 
"{E53A004C-9F19-4502-BDE4-7CCCA3D732E8}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{E748AE86-3EE0-451B-A71B-8B56576D13B3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"{E988697A-BE4B-4C1F-A585-86F1D04ACB15}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | 
"{EA3F2EA7-0435-4E37-A709-B27600B6A98A}" = protocol=6 | dir=out | app=system | 
"{EDE93FC4-A3AB-40D5-A460-9FAB720B0386}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe | 
"{F6B2718F-54AD-4FD8-AB62-0B26B0E26DF3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\stronghold kingdoms\strongholdkingdoms.exe | 
"{F97B3A93-893D-4A3C-AE07-FFC4C78C5CBD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{FB57B1B4-1A3D-47A6-A2D8-982A6FD11ED3}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{FC83CDA8-D1A7-47DA-AB19-E1130F9CF4CB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mount and blade warband - demo\mb_warband.exe | 
"TCP Query User{05FCD537-DB21-4F60-BEF9-C06E515F127B}C:\program files (x86)\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=6 | dir=in | app=c:\program files (x86)\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe | 
"TCP Query User{0601C6A2-0029-4535-B94A-823A17D75CC6}C:\programdata\battle.net\agent\agent.913\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.913\agent.exe | 
"TCP Query User{1BC14A4A-9E83-4151-A6E2-910ECA4E81FE}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"TCP Query User{34E4C802-7287-4190-9876-BE27214747CD}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe | 
"TCP Query User{4B5CA570-F6AD-4AA6-A26C-4C6D2C93A4E7}C:\program files (x86)\ea games\battlefield play4free\bfp4f.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ea games\battlefield play4free\bfp4f.exe | 
"TCP Query User{931D0A2C-8FF3-4D27-9D4F-CD312FFE36F8}C:\programdata\battle.net\agent\agent.954\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | 
"TCP Query User{B622B427-465D-4C9E-8F60-67E8D5FBA912}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"TCP Query User{BDB03B5C-1810-4816-A3B0-BAC4EA8822DA}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe | 
"TCP Query User{CC2DCFC9-7620-4CE3-85A9-D22BE0D96687}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"TCP Query User{EC6B2B75-ED01-4F6B-91F5-06EF47B2D412}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | 
"UDP Query User{1421463E-7CB5-4091-A993-D73243DA40B2}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{253D902D-E1DA-4328-818A-D1CA0DA9B63F}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"UDP Query User{2C7B08FE-5746-4429-9175-44C5D55F30D5}C:\programdata\battle.net\agent\agent.913\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.913\agent.exe | 
"UDP Query User{49FDECA5-7AD1-4140-A3FA-4799D8A50F28}C:\programdata\battle.net\agent\agent.954\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | 
"UDP Query User{54647ED6-7379-4624-9088-C9346EAB9883}C:\program files (x86)\ea games\battlefield play4free\bfp4f.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ea games\battlefield play4free\bfp4f.exe | 
"UDP Query User{7DEC29E8-DF1B-42AA-A61C-F42E184B898A}C:\program files (x86)\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=17 | dir=in | app=c:\program files (x86)\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe | 
"UDP Query User{89CCC13B-C302-4049-9F19-BB548B4438B5}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"UDP Query User{98BE9AFD-2676-4686-9EB7-D2A7495FD8FE}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe | 
"UDP Query User{BB7112FF-8815-4A0E-8D05-220CDDE1BCD6}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | 
"UDP Query User{F1F936AF-8449-44F2-9DC1-F1D02BA3D5D1}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{054EF02F-95D8-48F4-9EEB-2F9CE3072ED8}" = AuthenTec TrueAPI
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1111706F-666A-4037-7777-203648764D10}" = JavaFX 2.0.3 (64-bit)
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{2222706F-666A-4037-7777-203648764D10}" = JavaFX 2.0.3 SDK (64-bit)
"{26A24AE4-039D-4CA4-87B4-2F86416024FF}" = Java(TM) 6 Update 24 (64-bit)
"{26A24AE4-039D-4CA4-87B4-2F86417003FF}" = Java(TM) 7 Update 3 (64-bit)
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = Broadcom 2070 Bluetooth 3.0
"{45DB21FA-B3F4-20D9-A21C-5CDEB23315AC}" = ccc-utility64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}" = Paint.NET v3.5.10
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{5FEAD3E5-A158-4B66-B92B-0C959D7CF838}" = Windows Live Remote Service Resources
"{64A3A4F4-B792-11D6-A78A-00B0D0170030}" = Java(TM) SE Development Kit 7 Update 3 (64-bit)
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{7B4DEBE1-E3E3-45BD-88E6-6C3CA9EEED36}" = HP 3D DriveGuard
"{7C54D017-21BB-43AE-9746-33E78AF4A425}" = Validity WBF DDK
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{8970AE69-40BE-4058-9916-0ACB1B974A3D}" = Windows Live Remote Client Resources
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010
"{90140000-006D-0407-1000-0000000FF1CE}" = Microsoft Office Klick-und-Los 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A11B072-9CE7-ABB9-2F65-EC971A7B839D}" = ATI Catalyst Install Manager
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{B8AD779A-82DA-4365-A7D0-AD3DCFC55CFF}" = Apple Mobile Device Support
"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
"{CF8FFD12-602B-422D-AF1D-511B411E7632}" = iTunes
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"6af12c54-643b-4752-87d0-8335503010de_is1" = Nexus Mod Manager
"Broadcom 802.11 Wireless LAN Adapter" = Broadcom 802.11 Wireless LAN Adapter
"CCleaner" = CCleaner
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.60
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 4.01 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00A42832-B21A-4296-B5F4-D296D0BC4A3E}" = HP Quick Launch
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0CDD00EB-1DC3-C181-DB3C-F954B2BDAB6D}" = CCC Help Chinese Standard
"{0EDC9BA0-016E-406a-86DA-04FC1BE00C21}" = Need for Speed™ The Run
"{108069CB-B8B1-4858-82A4-E4BD5A749EFB}" = CCC Help Greek
"{118F296E-18AC-AAC1-78F9-B0FF8279D009}" = Catalyst Control Center Graphics Previews Common
"{166E80E3-7B0C-D22C-3EAE-A66860DF48E7}" = CCC Help Danish
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1B121E56-4949-83AE-B8A7-9D01EBB7CB29}" = CCC Help Italian
"{1C4551A6-4743-4093-91E4-1477CD655043}" = NVIDIA PhysX
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{210A03F5-B2ED-4947-B27E-516F50CBB292}" = HP Setup
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{236BB7C4-4419-42FD-0407-2E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A82D40B-899C-4BDB-BAC1-8A0126C3DAA2}" = Risen Demo
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{2F5BCBDC-7C08-FBC2-31B0-1D83C3247CAD}" = CCC Help Dutch
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33C8C01E-4787-482B-9D2C-AB8221FCC01D}" = IObit Toolbar v6.0
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3D035310-3D86-4537-93B5-D390A6CF1778}" = ANNO 2070 DEMO
"{3D0C22FA-96D7-4789-BC5B-991A5A99BFFA}" = Windows Live Messenger
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
"{41C160D7-9255-A4EB-55FB-FC3D5FE6BED3}" = CCC Help Portuguese
"{46872828-6453-4138-BE1C-CE35FBF67978}" = Windows Live Mesh
"{4741965C-AFD0-4D00-81D1-1039F96D4DC3}" = HP SimplePass 2011
"{483539DB-FA71-4C45-8438-55D3DCFDECC8}" = HP Software Framework
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{56709CD7-06E8-B205-56A6-110DC5090A9A}" = PX Profile Update
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5A38BA9E-D1B3-E7C2-F3B9-623359AFEDAA}" = CCC Help Thai
"{5E63C0AB-19B0-47D4-842E-6B324EB0614B}" = HP Connection Manager
"{602586CF-6ABD-1DBA-641A-959E5A999861}" = CCC Help Chinese Traditional
"{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{65FBA21B-7F80-4E4E-B275-0958D2648F94}_is1" = Java-Editor 11.7, 2012.03.11
"{677AAD91-1790-4FC5-B285-0E6A9D65F7DC}" = Windows Live Mail
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.2.0
"{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}" = HP Support Assistant
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp" = WildTangent Games App (HP Games)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7132DF7E-C237-0D66-77A0-F1F378520605}" = CCC Help Japanese
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73E80655-FB3C-46F4-BE00-62D248BC490A}" = Visual C++ 2008 Runtime (x64)
"{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
"{751A4ABF-A3BC-AA70-3252-C285F10A265B}" = Catalyst Control Center Localization All
"{786C5747-0C40-4930-9AFE-113BCE553101}" = Adobe Stock Photos 1.0
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7A5B032B-CCF0-43BE-D0B9-28FFA0B0B034}" = CCC Help Norwegian
"{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World
"{7F3203C1-25BD-E32E-F470-2332E1AD5EDF}" = Catalyst Control Center Profiles Mobile
"{807CE83D-F17E-5F76-035F-3525EAE8978F}" = CCC Help Hungarian
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{83A375B6-6FC2-4F8A-948E-E506DB9DCDF0}" = HP Documentation
"{83AA2913-C123-4146-85BD-AD8F93971D39}" = BabylonObjectInstaller
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{85E719A1-1E6B-B44A-62AC-824E5DDD0415}" = CCC Help Turkish
"{872B1C80-38EC-4A31-A25C-980820593900}" = HP Power Manager
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{87686C21-8A15-4b4d-A3F1-11141D9BE094}" = Battlefield Play4Free
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0407-1000-0000000FF1CE}_Office14.SingleImage_{594128C9-2CDF-43CE-8103-DC100CF013B6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.SingleImage_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.SingleImage_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{93E464B3-D075-4989-87FD-A828B5C308B1}" = Windows Live Writer Resources
"{949D6B51-10E8-4CD4-A81E-064E38240415}" = Catalyst Control Center - Branding
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9957DA6E-DE8D-0DED-2897-B1F4FBEF300E}" = CCC Help English
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AD5C619-D41C-2D47-C2A0-AB02D6C4A7D4}" = CCC Help German
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C916142-C18C-429D-BFED-40094A7E0BEB}" = Die Siedler 7
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X (10.1.3) MUI
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{AF405820-19DE-03BA-1B41-0797EA62F213}" = CCC Help Finnish
"{AFE59147-DDC0-4A42-A10C-9EF953728A1C}" = Hama Racing Wheel V18
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B3CAF031-3289-5C18-149A-C350C0B43D6D}" = Catalyst Control Center InstallProxy
"{B48E264C-C8CD-4617-B0BE-46E977BAD694}" = ANNO 2070
"{B4E7C6D9-8824-147E-721F-004F52D6418E}" = CCC Help Russian
"{B74D4E10-6884-0000-0000-000000000101}" = Adobe Bridge 1.0
"{BB51D3AF-1115-1676-0D33-CE5BBCCD8B00}" = CCC Help Polish
"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C3E9887A-23BA-4777-8080-191A5AFCAB74}" = Mumble 1.2.3
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}" = Windows Live Mesh ActiveX Control for Remote Connections
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C6E70A7A-2A2F-4E3E-B99A-C4B488314306}" = Prey Demo
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DBCD5E64-7379-4648-9444-8A6558DCB614}" = Recovery Manager
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}" = Windows Live Writer
"{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2494AD8-314D-44F8-B39C-4358A60DC184}" = LogMeIn Hamachi
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E62FA27C-3F19-FC14-424D-F1CEE432604F}" = CCC Help Czech
"{E7F752BB-8B7B-2906-9CD2-8B25CAD7B303}" = CCC Help Spanish
"{E815530E-14D8-E337-3D21-6A1AB5F9DDD9}" = Catalyst Control Center
"{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0
"{EAFA49E7-56AC-67B2-17E9-75F466884000}" = CCC Help French
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
"{ED1BD69A-07E3-418C-91F1-D856582581BF}" = HP On Screen Display
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Display Audio Driver
"{F5307A59-A5A2-C48F-BDD3-6C88E83203A6}" = CCC Help Korean
"{F761359C-9CED-45AE-9A51-9D6605CD55C4}" = Evernote v. 4.2.2
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FFFCCF57-5102-C54C-778C-C613EC82F647}" = CCC Help Swedish
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-2E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Advanced SystemCare 5_is1" = Advanced SystemCare 5
"BabylonToolbar" = Babylon toolbar on IE
"Blockscape_is1" = Blockscape Phase 1 (beta)
"Call of Duty Dawnville Demo" = Call of Duty Dawnville Demo
"Call of Duty Single Player Demo" = Call of Duty Single Player Demo
"Deponia" = Deponia
"Diablo III Beta" = Diablo III Beta
"EasyBits Magic Desktop" = Magic Desktop
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"ffdshow_is1" = ffdshow [rev 3154] [2009-12-09]
"Fraps" = Fraps
"Free Video to iPod Converter_is1" = Free Video to iPod Converter version 5.0.11.504
"Game Booster_is1" = Game Booster 3
"Google Chrome Frame" = Google Chrome Frame
"HP DVB-T TV Tuner" = HP DVB-T TV Tuner 8.0.64.43
"HyperCam 3" = HyperCam 3
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"IObit Malware Fighter_is1" = IObit Malware Fighter
"LogMeIn Hamachi" = LogMeIn Hamachi
"Mozilla Firefox 10.0.1 (x86 de)" = Mozilla Firefox 10.0.1 (x86 de)
"NIS" = Norton Internet Security
"Notepad++" = Notepad++
"Office14.Click2Run" = Microsoft Office Klick-und-Los 2010
"Office14.SingleImage" = Microsoft Office Home and Student 2010
"Origin" = Origin
"PunkBusterSvc" = PunkBuster Services
"ScreenshotCaptor_is1" = Screenshot Captor 2.102.01
"Smart Defrag 2_is1" = Smart Defrag 2
"Steam App 201230" = EverQuest II
"Steam App 202480" = Creation Kit
"Steam App 203850" = Microsoft Flight
"Steam App 207510" = Rayman Origins Demo
"Steam App 209870" = Blacklight: Retribution
"Steam App 22600" = Worms Reloaded
"Steam App 40310" = Risen - Demo
"Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer
"Steam App 47410" = Stronghold Kingdoms
"Steam App 48710" = Mount and Blade Warband - Demo
"Steam App 57690" = Tropico 4
"Steam App 6100" = Eets
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 91600" = Sanctum
"TIPP10_is1" = TIPP10 Version 2.1.0
"WildTangent hp Master Uninstall" = HP Games
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.01 (32-Bit)
"Wisdom-soft Set up ASR 3.1 Free" = Wisdom-soft Set up ASR 3.1 Free
"World of Warcraft" = World of Warcraft
"WT087328" = Blackhawk Striker 2
"WT087330" = Bounce Symphony
"WT087335" = Build-a-lot 2
"WT087343" = Dora's World Adventure
"WT087361" = FATE
"WT087393" = Mah Jong Medley
"WT087394" = Penguins!
"WT087395" = Poker Superstars III
"WT087396" = Polar Bowler
"WT087397" = Polar Golfer
"WT087490" = Jewel Quest Solitaire
"WT087510" = Slingo Deluxe
"WT087513" = Virtual Villagers - The Secret City
"WT087519" = Wedding Dash
"WT087536" = Diner Dash 2 Restaurant Rescue
"WT089307" = Virtual Villagers 4 - The Tree of Life
"WT089308" = Blasterball 3
"WT089328" = Farm Frenzy
"WT089359" = Cake Mania
"WT089362" = Agatha Christie - Peril at End House
"WT089453" = Bejeweled 2 Deluxe
"WT089454" = Chuzzle Deluxe
"WT089455" = Zuma Deluxe
"WT089457" = Slingo Supreme
"WT089458" = Plants vs. Zombies - Game of the Year
"WT089460" = Mystery P.I. - The London Caper
"WT089470" = FATE - The Traitor Soul
"WT089484" = Namco All-Stars PAC-MAN
"WT089492" = Crazy Chicken Kart 2
"WT089493" = Fishdom
"WT089496" = Mystery P.I. - Stolen in San Francisco
"WT089497" = Big Rig Europe
"WT089498" = Bejeweled 3
"WT089504" = Final Drive Nitro
"WTA-49dad4fb-7d01-4541-89d4-ce1afcc689c9" = FlatOut
"X-Mouse Button Control" = X-Mouse Button Control 2.5
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Mozilla Firefox 10.0.2 (x86 de)" = Mozilla Firefox 10.0.2 (x86 de)
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 18.06.2012 02:43:21 | Computer Name = HP_Nico | Source = WinMgmt | ID = 10
Description = 
 
Error - 18.06.2012 11:25:06 | Computer Name = HP_Nico | Source = WinMgmt | ID = 10
Description = 
 
Error - 19.06.2012 10:59:04 | Computer Name = HP_Nico | Source = WinMgmt | ID = 10
Description = 
 
Error - 19.06.2012 11:23:56 | Computer Name = HP_Nico | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 19.06.2012 11:23:56 | Computer Name = HP_Nico | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1077
 
Error - 19.06.2012 11:23:56 | Computer Name = HP_Nico | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1077
 
Error - 19.06.2012 15:48:42 | Computer Name = HP_Nico | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: iexplore.exe, Version: 9.0.8112.16421,
 Zeitstempel: 0x4d76255d  Name des fehlerhaften Moduls: ADVAPI32.dll, Version: 6.1.7601.17514,
 Zeitstempel: 0x4ce7b706  Ausnahmecode: 0xc0000096  Fehleroffset: 0x000114da  ID des fehlerhaften
 Prozesses: 0xa98  Startzeit der fehlerhaften Anwendung: 0x01cd4e2c592dc936  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\iexplore.exe  Pfad
 des fehlerhaften Moduls: C:\Windows\syswow64\ADVAPI32.dll  Berichtskennung: c53d6847-ba47-11e1-9808-2c41386043b3
 
Error - 19.06.2012 15:48:42 | Computer Name = HP_Nico | Source = Application Error | ID = 1005
Description = Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen
 werden:  Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der
 gespeicherten Datei bzw. den auf dem Computer installierten  Speichertreibern, oder
 der Datenträger fehlt.  Das Programm Internet Explorer wurde wegen dieses Fehlers
 geschlossen.    Programm: Internet Explorer  Datei:     Der Fehlerwert ist im Abschnitt "Zusätzliche
 Dateien" aufgelistet.  Benutzeraktion  1. Öffnen Sie die Datei erneut.  Diese Situation
 ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das 
Programm erneut ausgeführt wird.  2.  Wenn Sie weiterhin nicht auf die Datei zugreifen
 können und   - diese sich im Netzwerk befindet,   dann sollte der Netzwerkadministrator
 überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem 
Server hergestellt werden kann.   - diese sich auf einem Wechseldatenträger, wie z.
 B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig
 in den Computer eingelegt ist.  3. Überprüfen und reparieren Sie das Dateisystem,
 indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben
 Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK
 /F ein, und drücken Sie die EINGABETASTE.  4. Stellen Sie die Datei von einer Sicherungskopie
 wieder her, wenn das Problem weiterhin besteht.  5. Überprüfen Sie, ob andere Dateien
 auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist,
 ist der Datenträger eventuell beschädigt.   Wenden Sie sich an den Administrator 
oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, 
wenn es sich um eine Festplatte handelt.    Zusätzliche Daten  Fehlerwert: 00000000  Datenträgertyp:
 0
 
Error - 20.06.2012 08:22:13 | Computer Name = HP_Nico | Source = WinMgmt | ID = 10
Description = 
 
Error - 21.06.2012 15:03:34 | Computer Name = HP_Nico | Source = WinMgmt | ID = 10
Description = 
 
[ Hewlett-Packard Events ]
Error - 03.01.2012 04:47:10 | Computer Name = HP_Nico | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\011203094706.xml
 File not created by asset agent
 
Error - 17.06.2012 04:20:27 | Computer Name = HP_Nico | Source = HPSF.exe | ID = 4000
Description = 
 
[ HP Connection Manager Events ]
Error - 27.06.2012 15:43:51 | Computer Name = HP_Nico | Source = hpCMSrv | ID = 5
Description = 2012/06/27 21:43:51.720|000009D0|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 27.06.2012 15:43:55 | Computer Name = HP_Nico | Source = hpCMSrv | ID = 5
Description = 2012/06/27 21:43:55.869|000009D0|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 03.07.2012 15:34:24 | Computer Name = HP_Nico | Source = hpCMSrv | ID = 5
Description = 2012/07/03 21:34:24.274|00000E20|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 09.07.2012 07:18:43 | Computer Name = HP_Nico | Source = hpMobile | ID = 5
Description = 2012.07.09 13:18:43.883|00001BC0|Error      |[HP.Mobile]Wwan::<InternalIPAddressChangedEx>b__21{void()}|
 
Error - 09.07.2012 15:23:57 | Computer Name = HP_Nico | Source = hpCMSrv | ID = 5
Description = 2012/07/09 21:23:57.941|000017E4|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 09.07.2012 15:24:17 | Computer Name = HP_Nico | Source = hpCMSrv | ID = 5
Description = 2012/07/09 21:24:17.051|000017E4|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 09.07.2012 15:24:17 | Computer Name = HP_Nico | Source = hpCMSrv | ID = 5
Description = 2012/07/09 21:24:17.940|000017E4|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 09.07.2012 15:24:27 | Computer Name = HP_Nico | Source = hpCMSrv | ID = 5
Description = 2012/07/09 21:24:27.940|000017E4|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 09.07.2012 15:24:47 | Computer Name = HP_Nico | Source = hpCMSrv | ID = 5
Description = 2012/07/09 21:24:47.939|000017E4|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 09.07.2012 15:24:57 | Computer Name = HP_Nico | Source = hpCMSrv | ID = 5
Description = 2012/07/09 21:24:57.938|000017E4|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
[ HP Software Framework Events ]
Error - 18.04.2012 09:02:18 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.04.18 15:02:18.786|00000D34|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 20.04.2012 13:22:46 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.04.20 19:22:46.276|00000F44|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 21.04.2012 05:18:37 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.04.21 11:18:37.950|00001598|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 05.05.2012 09:55:58 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.05.05 15:55:58.603|00001BE8|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 05.05.2012 10:04:19 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.05.05 16:04:19.723|00000B30|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 05.05.2012 10:06:01 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.05.05 16:06:01.533|00001A24|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 05.05.2012 10:06:03 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.05.05 16:06:03.672|0000054C|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 07.05.2012 14:39:02 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.05.07 20:39:02.750|0000162C|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 08.05.2012 11:01:24 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.05.08 17:01:24.696|000011E8|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 08.05.2012 11:08:15 | Computer Name = HP_Nico | Source = CaslWmi | ID = 5
Description = 2012.05.08 17:08:15.596|000015F8|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
[ System Events ]
Error - 07.06.2012 16:14:46 | Computer Name = HP_Nico | Source = Service Control Manager | ID = 7038
Description = Der Dienst "PolicyAgent" konnte sich nicht als "NT Authority\NetworkService"
 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%50    Vergewissern
 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
 Management Console (MMC).
 
Error - 07.06.2012 16:14:46 | Computer Name = HP_Nico | Source = Service Control Manager | ID = 7000
Description = Der Dienst "IPsec-Richtlinien-Agent" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1069
 
Error - 07.06.2012 16:14:47 | Computer Name = HP_Nico | Source = Service Control Manager | ID = 7038
Description = Der Dienst "PolicyAgent" konnte sich nicht als "NT Authority\NetworkService"
 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%50    Vergewissern
 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
 Management Console (MMC).
 
Error - 07.06.2012 16:14:47 | Computer Name = HP_Nico | Source = Service Control Manager | ID = 7000
Description = Der Dienst "IPsec-Richtlinien-Agent" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1069
 
Error - 07.06.2012 16:14:47 | Computer Name = HP_Nico | Source = Service Control Manager | ID = 7038
Description = Der Dienst "PolicyAgent" konnte sich nicht als "NT Authority\NetworkService"
 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%50    Vergewissern
 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
 Management Console (MMC).
 
Error - 07.06.2012 16:14:47 | Computer Name = HP_Nico | Source = Service Control Manager | ID = 7000
Description = Der Dienst "IPsec-Richtlinien-Agent" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1069
 
Error - 07.06.2012 16:14:47 | Computer Name = HP_Nico | Source = Microsoft-Windows-LanguagePackSetup | ID = 1000
Description = Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b
 
Error - 07.06.2012 16:14:47 | Computer Name = HP_Nico | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description = Fehler beim Starten des Assistenten für das Sprachpaket-Setup. Führen
 Sie einen Neustart des Systems aus, und führen Sie den Assistenten erneut aus.
 
Error - 07.06.2012 16:14:51 | Computer Name = HP_Nico | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Computerbrowser" wurde mit folgendem Fehler beendet:   %%1115
 
Error - 07.06.2012 16:14:52 | Computer Name = HP_Nico | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Server" wurde mit folgendem Fehler beendet:   %%1062
 
 
< End of report >
         

Ich hoffe ihr könnt mir helfen.

Mfg und Danke im Vorraus
Nico

hi
falls du deinen nutzernamen unkenntlich gemacht hast, bitte im script anpassen
dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
O4 - HKCU..\Run: [] C:\Users\Rexxxyboy\AppData\Local\Temp\cdoqovxndc.exe (Hitachi)

 :Files
C:\Users\Rexxxyboy\AppData\Local\Temp\cdoqovxndc.exe
:Commands
[purity]
[EMPTYFLASH] 
[emptytemp]
[Reboot]
         

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die + E Taste.

• Öffne dein Systemlaufwerk ( meistens C: )
• Suche nun
  folgenden Ordner: _OTL und öffne diesen.
• Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
• 
  Dies wird eine Movedfiles.zip Datei in _OTL erstellen
• Lade diese bitte in unseren Uploadchannel
  hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

So, ich habe jetzt den Fix gemacht und die Datei geuploadet. Es hat alles gut geklappt. Hier ist noch der Text aus der Datei, die nach dem Reboot angezeigt wurde:

All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
C:\Users\Rexxxyboy\AppData\Local\Temp\cdoqovxndc.exe moved successfully.
========== COMMANDS ==========
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
 
User: Default User
 
User: Public
 
User: Rexxxyboy
->Flash cache emptied: 17696 bytes
 
Total Flash Files Cleaned = 0.00 mb
 
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: Rexxxyboy
->Temp folder emptied: 2623950112 bytes
->Temporary Internet Files folder emptied: 1882455877 bytes
->Java cache emptied: 206077 bytes
->FireFox cache emptied: 373662270 bytes
->Google Chrome cache emptied: 374185294 bytes
->Flash cache emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 132455903 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67832 bytes
RecycleBin emptied: 49618199 bytes
 
Total Files Cleaned = 5'185.00 mb
 
 
OTL by OldTimer - Version 3.2.53.1 log created on 07112012_160558

Files\Folders moved on Reboot...
C:\Users\Rexxxyboy\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...
File C:\Users\Rexxxyboy\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot...
         

Mfg
Nico

danke

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Ok, ich habe Combofix laufen lassen. Mein Laptop musste zwar nicht neu gestartet werden, aber die Datei wurde erstellt und es gab keine Probleme. Hier der Inhalt der combofix Datei:

ComboFix 12-07-11.03 - Rexxxyboy 11.07.2012  17:16:13.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.41.1031.18.8140.6610 [GMT 2:00]
ausgeführt von:: c:\users\Rexxxyboy\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabund led/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: IObit Malware Fighter *Disabled/Outdated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Norton Internet Security *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\mdhcp32.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-06-11 bis 2012-07-11  ))))))))))))))))))))))))))))))
.
.
2012-07-11 15:24 . 2012-07-11 15:24	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-07-11 14:05 . 2012-07-11 14:13	--------	d-----w-	C:\_OTL
2012-07-07 14:15 . 2012-07-07 14:15	--------	d-----w-	c:\users\Rexxxyboy\AppData\Roaming\wargaming.net
2012-07-02 14:54 . 2012-07-02 14:54	--------	d-----w-	c:\program files (x86)\Application Updater
2012-07-02 14:54 . 2012-07-02 14:54	--------	d-----w-	c:\program files (x86)\IObit Toolbar
2012-07-02 14:54 . 2012-07-02 14:54	--------	d-----w-	c:\program files (x86)\Common Files\Spigot
2012-07-02 06:11 . 2012-07-02 06:11	--------	d-----w-	c:\users\Rexxxyboy\AppData\Roaming\Highresolution Enterprises
2012-07-02 06:11 . 2012-07-02 06:11	--------	d-----w-	c:\program files\Highresolution Enterprises
2012-07-02 05:49 . 2012-07-02 05:49	250	----a-w-	C:\user.js
2012-07-02 05:49 . 2012-07-02 05:49	--------	d-----w-	c:\program files (x86)\BabylonToolbar
2012-07-02 05:49 . 2012-07-02 05:49	--------	d-----w-	c:\users\Rexxxyboy\AppData\Roaming\Babylon
2012-07-02 05:49 . 2012-07-02 05:49	--------	d-----w-	c:\programdata\Babylon
2012-06-20 16:07 . 2012-06-20 16:09	--------	d-----w-	c:\users\Rexxxyboy\AppData\Roaming\Teeworlds
2012-06-13 15:01 . 2012-06-13 15:02	--------	d-----w-	c:\users\Rexxxyboy\AppData\Roaming\Mount&Blade Warband
2012-06-13 14:30 . 2012-06-13 14:30	--------	d-----w-	c:\program files (x86)\ffdshow
2012-06-13 14:30 . 2009-12-05 17:42	85504	----a-w-	c:\windows\SysWow64\ff_vfw.dll
2012-06-12 13:20 . 2012-06-13 12:25	--------	d-----w-	c:\windows\system32\drivers\NISx64\1207020.003
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-04 16:59 . 2012-01-07 16:07	282104	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2012-07-04 16:59 . 2012-01-07 15:48	282104	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2012-07-04 16:59 . 2012-01-07 15:48	234768	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2012-06-25 18:18 . 2012-04-04 10:05	426184	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-25 18:18 . 2012-01-11 17:49	70344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-23 16:55 . 2012-01-07 15:48	76888	----a-w-	c:\windows\SysWow64\PnkBstrA.exe
2012-04-25 12:02 . 2012-04-25 12:02	43800	----a-w-	c:\windows\system32\drivers\Accelerometer.sys
2012-04-25 12:02 . 2012-04-25 12:02	31000	----a-w-	c:\windows\system32\hpservice.exe
2012-04-25 12:02 . 2012-04-25 12:02	21272	----a-w-	c:\windows\system32\accelerometerdll.DLL
2012-04-25 12:02 . 2012-04-25 12:02	18200	----a-w-	c:\windows\system32\HPMDPCoInst12.dll
2012-04-25 12:02 . 2011-01-26 15:01	30488	----a-w-	c:\windows\system32\drivers\hpdskflt.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 5"="c:\program files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" [2011-12-29 620376]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-04-01 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HPConnectionManager"="c:\program files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2011-06-14 103992]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SearchSettings"="c:\program files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [2012-06-27 1090440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
R2 CLKMSVC10_38F51D56;CyberLink Product - 2011/10/31 01:29;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2011-01-25 241648]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update-Dienst (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 136176]
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-09-09 86072]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-25 250056]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-01 183560]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-07-14 344616]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 136176]
R3 h643331;h643331;c:\windows\system32\drivers\h643331.sys [2008-05-19 63552]
R3 hid3331;hid3331;c:\windows\system32\drivers\hid3331.sys [x]
R3 hpCMSrv;HP Connection Manager 4 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-06-14 1098296]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-02-15 52736]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2011-12-27 1255736]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1207020.003\SYMDS64.SYS [2011-01-27 450680]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1207020.003\SYMEFA64.SYS [2011-03-15 912504]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20120215.001\BHDrvx64.sys [2011-12-01 1157240]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20120222.002\IDSvia64.sys [2011-12-15 488568]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [2011-01-27 171128]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [2011-04-21 386168]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2011-12-29 497496]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-05-07 203776]
S2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [2012-06-27 791488]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [2011-09-21 21992]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe [x]
S2 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-08-25 260424]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2012-04-25 31000]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-02-15 34872]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-09 821592]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [2011-04-17 130008]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-22 2656280]
S2 XMouseButton Launcher;XMouseButton Launcher;c:\program files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonSvc.exe [2012-06-23 87040]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2011-05-07 9259520]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2011-05-07 301568]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-02-06 138360]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [2011-04-15 12228128]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-01-13 333928]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - CLKMDRV10_38F51D56
.
Inhalt des "geplante Tasks" Ordners
.
2012-07-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 18:18]
.
2012-04-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 09:35]
.
2012-04-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 09:35]
.
2012-07-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2196232370-1087742729-926825829-1000Core.job
- c:\users\Rexxxyboy\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-04 18:40]
.
2012-07-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2196232370-1087742729-926825829-1000UA.job
- c:\users\Rexxxyboy\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-04 18:40]
.
2012-07-10 c:\windows\Tasks\HPCeeScheduleForRexxxyboy.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.ch/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\users\Rexxxyboy\AppData\Roaming\Mozilla\Firefox\Profiles\u7wlpokr.default\
FF - prefs.js: browser.startup.homepage - hxxp://search.babylon.com/?affID=112060&tt=280612_5_&babsrc=HP_ss&mntrId=ea8ccc15000000000000402cf43a0646
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://ch.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=382950&p=
FF - prefs.js: network.proxy.type - 0
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=112060&tt=280612_5_
FF - user.js: extensions.BabylonToolbar_i.babExt - 
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - ea8ccc15000000000000402cf43a0646
FF - user.js: extensions.BabylonToolbar_i.hardId - ea8ccc15000000000000402cf43a0646
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15523
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.177:49
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-07-11  17:25:41
ComboFix-quarantined-files.txt  2012-07-11 15:25
.
Vor Suchlauf: 15 Verzeichnis(se), 751'245'717'504 Bytes frei
Nach Suchlauf: 21 Verzeichnis(se), 750'884'700'160 Bytes frei
.
- - End Of File - - F5A51989ECF7B7B857CB3725DB8FB59C
         

Mfg
Nico

malwarebytes:
Downloade Dir bitte Malwarebytes

• Installiere
  das Programm in den vorgegebenen Pfad.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Starte Malwarebytes, klicke auf Aktualisierung --> Suche
  nach Aktualisierung
• Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
• Wenn der Scan beendet
  ist, klicke auf Ergebnisse anzeigen.
• Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
• Poste
  das Logfile, welches sich in Notepad öffnet, hier in den Thread.
• Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Geht es auch ohne die Aktualisierung? Ich kann ja nicht ins Internet.

hast du getestet ob du ins inet kannst?
wenn nicht erst mal ohne

Ok, ich habe es jetzt aktualisieren können. Hier das Log-File:

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.07.13.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Rexxxyboy :: HP_NICO [Administrator]

13.07.2012 16:44:32
mbam-log-2012-07-13 (16-44-32).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|Q:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 435933
Laufzeit: 48 Minute(n), 9 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 9
C:\Qoobox\Quarantine\C\Windows\SysWOW64\mdhcp32.dll.vir (Spyware.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Rexxxyboy\Desktop\DER Ordner\SoftonicDownloader_fuer_autoscreenrecorder.exe (PUP.ToolbarDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Rexxxyboy\Desktop\DER Ordner\SoftonicDownloader_fuer_camstudio.exe (PUP.ToolbarDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Rexxxyboy\Desktop\DER Ordner\SoftonicDownloader_fuer_screenshot-captor.exe (PUP.ToolbarDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Rexxxyboy\Desktop\Games\installer_scp-087.exe (PUP.BundleInstaller.BT) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Rexxxyboy\Downloads\PDFCreatorSetup.exe (Adware.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Rexxxyboy\Downloads\SoftonicDownloader_fuer_hypercam (1).exe (PUP.BundleOffer.Downloader.S) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Rexxxyboy\Downloads\SoftonicDownloader_fuer_hypercam.exe (PUP.BundleOffer.Downloader.S) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\07112012_160558\C_Users\Rexxxyboy\AppData\Local\Temp\cdoqovxndc.exe (Trojan.Phex.THAGen1) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

hi
lade den CCleaner standard:
CCleaner Download - CCleaner 3.20.1750
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

So,das müsste die Liste sein:

Adobe Flash Player 11 ActiveX	Adobe Systems Incorporated	11.06.2012	6.00MB	11.3.300.257	notwendig
Adobe Flash Player 11 Plugin	Adobe Systems Incorporated	25.06.2012	6.00MB	11.3.300.262		notwendig
Adobe Photoshop CS2	Adobe Systems, Inc.	24.03.2012		9.0				notwendig
Adobe Reader X (10.1.3) MUI	Adobe Systems Incorporated	13.06.2012	479MB	10.1.3		notwendig
Adobe Shockwave Player 11.5	Adobe Systems, Inc.	31.10.2011		11.5.9.620		unbekannt
Advanced SystemCare 5	IObit	09.02.2012	82.8MB	5.1.0						unbekannt
ANNO 2070	Ubisoft	27.02.2012		1.0.0.0							notwendig
ANNO 2070 DEMO	Ubisoft	27.01.2012		1.0.0.0							unnötig
Apple Application Support	Apple Inc.	06.05.2012	61.0MB	2.1.7					unbekannt
Apple Mobile Device Support	Apple Inc.	06.05.2012	24.9MB	5.1.1.4					unbekannt
Apple Software Update	Apple Inc.	08.02.2012	2.38MB	2.1.3.127					notwendig
ATI Catalyst Install Manager	ATI Technologies, Inc.	31.10.2011	22.4MB	3.0.816.0				unbekannt
Babylon toolbar on IE		02.07.2012								unnötig
BabylonObjectInstaller	Babylon Ltd	02.07.2012	2.05MB	2.0.0.2					unnötig
Battlefield Play4Free	EA Digital illusions	07.01.2012							notwendig
Bing Bar	Microsoft Corporation	31.10.2011	24.4MB	7.0.610.0						unnötig
Blacklight: Retribution		10.07.2012								notwendig
Blockscape Phase 1 (beta)	ioneo AB	08.05.2012	78.1MB							unnötig
Bonjour	Apple Inc.	08.02.2012	2.04MB	3.0.0.10							unbekannt
Broadcom 2070 Bluetooth 3.0	Broadcom Corporation	31.10.2011	183MB	6.3.0.6300		notwendig
Broadcom 802.11 Wireless LAN Adapter	Broadcom Corporation	31.10.2011		5.60.48.61	notwendig
Call of Duty Dawnville Demo		30.05.2012								notwendig
Call of Duty Single Player Demo		30.05.2012							notwendig
Call of Duty: Modern Warfare 3 - Multiplayer	Infinity Ward - Sledgehammer Games	17.02.2012			notwendig
CCleaner	Piriform	22.06.2012		3.20								notwendig
Contrôle ActiveX Windows Live Mesh pour connexions à distance	Microsoft Corporation 03.09.2011 5.57MB 15.4.5722.2	unbekannt
CPUID CPU-Z 1.60		31.03.2012	3.34MB								unbekannt
Creation Kit		17.02.2012									notwendig
CyberLink PowerDVD 10	CyberLink Corp.	31.10.2011	226MB	10.0.3.2714				unbekannt
CyberLink YouCam	CyberLink Corp.	31.10.2011	124MB	3.5.1.3922					notwendig
Deponia	Daedalic Entertainment	03.02.2012		1.0						notwendig
Diablo III Beta	Blizzard Entertainment	22.05.2012		0.2.0.7162				unnötig
Die Siedler 7	Ubisoft	25.12.2011		1.12.1396						notwendig
Eets	Klei Entertainment	21.05.2012									notwendig
Energy Star Digital Logo	Hewlett-Packard	31.10.2011	300KB	1.0.1					unbekannt
EVEREST Home Edition v2.20	Lavalys Inc	31.03.2012		2.20					unbekannt
Evernote v. 4.2.2	Evernote Corp.	03.09.2011	139MB	4.2.2.3979					unbekannt
EverQuest II	Sony Online Entertainment	23.05.2012							notwendig
ffdshow [rev 3154] [2009-12-09]		13.06.2012	16.6MB	1.0					unbekannt
Fraps		19.01.2012										unnötig
Free Video to iPod Converter version 5.0.11.504	DVDVideoSoft Ltd.	26.05.2012	70.8MB	5.0.11.504		unnötig
Game Booster 3	IObit	13.06.2012	26.9MB	3.5							notwendig
Google Chrome	Google Inc.	04.04.2012		20.0.1132.47					notwendig
Google Chrome Frame	Google Inc.	07.02.2012		20.0.1132.57				unbekannt
Google Toolbar for Internet Explorer	Google Inc.	01.04.2012		7.3.2710.138			notwendig
Hama Racing Wheel V18		27.12.2011		V4.0a						notwendig
HP 3D DriveGuard	Hewlett-Packard Company	15.05.2012	6.99MB	4.1.16.1					notwendig
HP Connection Manager	Hewlett-Packard Company	16.02.2012	34.5MB	4.1.23.1				notwendig
HP Documentation	Hewlett-Packard	31.10.2011	333MB	1.1.0.0						unbekannt
HP DVB-T TV Tuner 8.0.64.43		31.10.2011		8.0.64.43					notwendig
HP Games	WildTangent	10.01.2012		1.0.2.5						notwendig
HP On Screen Display	Hewlett-Packard Company	08.02.2012	358KB	1.3.5				notwendig
HP Power Manager	Hewlett-Packard Company	31.10.2011	3.61MB	1.2.3					notwendig
HP Quick Launch	Hewlett-Packard Company	06.03.2012	6.10MB	2.6.3					notwendig
HP Setup	Hewlett-Packard Company	03.09.2011		8.6.4530.3651					notwendig
HP Setup Manager	Hewlett-Packard Company	31.10.2011	8.30MB	1.1.13253.3682				notwendig
HP SimplePass 2011	Hewlett-Packard	24.12.2011	77.0MB	5.3.0.273					notwendig
HP Software Framework	Hewlett-Packard Company	08.05.2012	4.72MB	4.5.10.1				notwendig
HP Support Assistant	Hewlett-Packard Company	22.02.2012	75.8MB	6.1.12.1				notwendig
HyperCam 3	Solveig Multimedia	29.02.2012		3.2.1107.8					unnötig
IDT Audio	IDT	31.10.2011		1.0.6329.0						unbekannt
Intel(R) Display Audio Driver	Intel Corporation	31.10.2011		6.14.00.3074				notwendig
Intel(R) Management Engine Components	Intel Corporation	31.10.2011		7.0.0.1144		notwendig
Intel(R) Rapid Storage Technology	Intel Corporation	31.10.2011		10.1.2.1004			notwendig
IObit Malware Fighter	IObit	09.02.2012	21.0MB	1.0						unbekannt
IObit Toolbar v6.0	Spigot, Inc.	02.07.2012	14.6MB	6.0						unbekannt
iTunes	Apple Inc.	06.05.2012	158MB	10.6.1.7							notwendig
Java(TM) 6 Update 24 (64-bit)	Oracle	03.09.2011	90.7MB	6.0.240					unbekannt
Java(TM) 6 Update 31	Oracle	01.03.2012	95.1MB	6.0.310						unbekannt
Java(TM) 7 Update 3 (64-bit)	Oracle	17.03.2012	93.6MB	7.0.30					unbekannt
Java(TM) SE Development Kit 7 Update 3 (64-bit)	Oracle	17.03.2012	141MB	1.7.0.30			unbekannt
Java-Editor 11.7, 2012.03.11	Gerhard Röhner	17.03.2012	8.91MB					unbekannt
JavaFX 2.0.3 (64-bit)	Oracle Corporation	17.03.2012	20.8MB	2.0.3					unbekannt
JavaFX 2.0.3 SDK (64-bit)	Oracle Corporation	17.03.2012	66.7MB	2.0.3					unbekannt
League of Legends	Riot Games	31.01.2012		1.02.0000					notwendig
LogMeIn Hamachi	LogMeIn, Inc.	18.04.2012		2.1.0.166						notwendig
Magic Desktop	EasyBits Software AS	31.10.2011	107MB	3.0					notwendig
Malwarebytes Anti-Malware Version 1.62.0.1300	Malwarebytes Corporation	13.07.2012  18.7MB   1.62.0.1300	notwendig
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	04.01.2012	38.8MB	4.0.30319	unbekannt
Microsoft .NET Framework 4 Client Profile DEU Language Pack   Microsoft Corporation  04.01.2012  2.93MB  4.0.30319	unbekannt
Microsoft Flight		23.05.2012									notwendig
Microsoft Games for Windows - LIVE Redistributable	Microsoft Corporation	23.05.2012	31.3MB	3.5.92.0	notwendig
Microsoft Games for Windows Marketplace	Microsoft Corporation	23.05.2012	6.03MB	3.5.50.0		notwendig
Microsoft Office Home and Student 2010	Microsoft Corporation	21.03.2012		14.0.6029.1000	notwendig
Microsoft Office Klick-und-Los 2010	Microsoft Corporation	23.01.2012		14.0.4763.1000		notwendig
Microsoft Silverlight	Microsoft Corporation	11.05.2012	80.3MB	4.1.10329.0			unbekannt
Microsoft SQL Server 2005 Compact Edition [ENU]	Microsoft Corporation	03.09.2011	1.69MB	3.1.0000	unbekannt
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	25.01.2012	300KB	8.0.56336	unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17     Microsoft Corporation  03.09.2011  788KB  9.0.30729	unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148  Microsoft Corporation  31.10.2011  784KB  9.0.30729.4148	unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161  Microsoft Corporation  25.01.2012  788KB  9.0.30729.6161	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022          Microsoft Corporation  25.12.2011  1.41MB  9.0.21022	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17     Microsoft Corporation  25.12.2011  240KB  9.0.30729	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148  Microsoft Corporation  31.10.2011  592KB  9.0.30729.4148	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161  Microsoft Corporation  25.01.2012  600KB  9.0.30729.6161	unbekannt
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319       Microsoft Corporation  21.03.2012  13.7MB  10.0.30319	unbekannt
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219       Microsoft Corporation  25.01.2012  11.8MB  10.0.40219	unbekannt
Microsoft XNA Framework Redistributable 4.0	Microsoft Corporation	08.05.2012   8.03MB       4.0.20823.0		unbekannt
Mount and Blade Warband - Demo	Taleworlds Entertainment	09.06.2012					notwendig
Mozilla Firefox 10.0.1 (x86 de)	Mozilla	11.02.2012	35.4MB	10.0.1					unnötig
Mozilla Firefox 10.0.2 (x86 de)	Mozilla	05.05.2012	43.5MB	10.0.2					notwendig
Mumble 1.2.3	Thorvald Natvig	21.01.2012	32.2MB	1.2.3						notwendig
Need for Speed™ The Run	Electronic Arts	25.12.2011		1.0.0.0					notwendig
Need For Speed™ World	Electronic Arts	11.06.2012	12.4MB	1.0.0.936					notwendig
Nexus Mod Manager	Black Tree Gaming	10.07.2012	13.3MB	0.18.9					notwendig
Norton Internet Security	Symantec Corporation	24.12.2011		18.7.2.3				notwendig
Notepad++		14.02.2012		5.9.8							notwendig
NVIDIA PhysX	NVIDIA Corporation	15.03.2012	119MB	9.09.0203					unbekannt
Origin	Electronic Arts, Inc.	04.04.2012		8.5.0.4554					notwendig
Paint.NET v3.5.10	dotPDN LLC	07.02.2012	10.6MB	3.60.0						notwendig
Pando Media Booster	Pando Networks Inc.	31.01.2012	5.46MB	2.6.0.2				unbekannt
Prey Demo	Human Head Studios, Inc.	14.03.2012		0.2					notwendig
PunkBuster Services	Even Balance, Inc.	07.01.2012		0.990					unbekannt
Rayman Origins Demo		23.05.2012								notwendig
Realtek Ethernet Controller Driver	Realtek	31.10.2011		7.41.216.2011				unbekannt
Realtek PCIE Card Reader	Realtek Semiconductor Corp.	31.10.2011		6.1.7600.74			unbekannt
Renesas Electronics USB 3.0 Host Controller Driver    Renesas Electronics Corporation   31.10.2011   601KB   2.0.32.0	unbekannt
Risen - Demo	Piranha Bytes	19.02.2012								notwendig
Risen Demo	Deep Silver	15.03.2012		1.00						notwendig
Sanctum		05.05.2012										notwendig
Screenshot Captor 2.102.01		31.03.2012	12.8MB							unnötig
Skype™ 5.8	Skype Technologies S.A.	02.04.2012	19.0MB	5.8.158					notwendig
Smart Defrag 2	IObit	09.02.2012	9.11MB	2.3							unbekannt
Steam	Valve Corporation	17.02.2012	35.4MB	1.0.0.0							notwendig
Stronghold Kingdoms	Firefly Studios Ltd	23.05.2012							notwendig
Synaptics Pointing Device Driver	Synaptics Incorporated	31.10.2011	46.4MB	15.2.4.4			unbekannt
TeamSpeak 3 Client	TeamSpeak Systems GmbH	03.01.2012						notwendig
The Elder Scrolls V: Skyrim	Bethesda Game Studios	17.02.2012						notwendig
TIPP10 Version 2.1.0	(c) 2006-2011, Tom Thielicke IT Solutions	03.04.2012				notwendig
Tropico 4		12.05.2012										notwendig
Ubisoft Game Launcher	UBISOFT	25.12.2011		1.0.0.0						notwendig
Validity WBF DDK	Validity Sensors, Inc.	31.10.2011	22.6MB	4.3.118.0					unbekannt
Windows Live Essentials	Microsoft Corporation	03.09.2011		15.4.3508.1109			notwendig
Windows Live Mesh ActiveX control for remote connections   Microsoft Corporation	03.09.2011   5.57MB   15.4.5722.2	unbekannt
Windows Live Mesh ActiveX Control for Remote Connections   Microsoft Corporation	03.09.2011   5.57MB   15.4.5722.2	unbekannt
WinRAR 4.01 (32-Bit)	win.rar GmbH	24.12.2011		4.01.0					notwendig
WinRAR 4.01 (64-Bit)	win.rar GmbH	24.12.2011		4.01.0					notwendig
Wisdom-soft Set up ASR 3.1 Free	Wisdom Software Inc.	30.05.2012					unbekannt
World of Tanks	Wargaming.net	19.06.2012	15.0MB							notwendig
World of Warcraft	Blizzard Entertainment	05.05.2012		4.3.4.15595				notwendig
Worms Reloaded	Team17	01.06.2012									notwendig
X-Mouse Button Control 2.5	Highresolution Enterprises	02.07.2012		2.5				notwendig
         

Ich weiss nicht ob die Antwort jetzt 2x angezeigt wird, aber bei mir wird meine Antwort von vorher nicht angezeigt. Sorry falls Doppelpost, aber hier die Liste:

Adobe Flash Player 11 ActiveX	Adobe Systems Incorporated	11.06.2012	6.00MB	11.3.300.257	notwendig
Adobe Flash Player 11 Plugin	Adobe Systems Incorporated	25.06.2012	6.00MB	11.3.300.262		notwendig
Adobe Photoshop CS2	Adobe Systems, Inc.	24.03.2012		9.0				notwendig
Adobe Reader X (10.1.3) MUI	Adobe Systems Incorporated	13.06.2012	479MB	10.1.3		notwendig
Adobe Shockwave Player 11.5	Adobe Systems, Inc.	31.10.2011		11.5.9.620		unbekannt
Advanced SystemCare 5	IObit	09.02.2012	82.8MB	5.1.0						unbekannt
ANNO 2070	Ubisoft	27.02.2012		1.0.0.0							notwendig
ANNO 2070 DEMO	Ubisoft	27.01.2012		1.0.0.0							unnötig
Apple Application Support	Apple Inc.	06.05.2012	61.0MB	2.1.7					unbekannt
Apple Mobile Device Support	Apple Inc.	06.05.2012	24.9MB	5.1.1.4					unbekannt
Apple Software Update	Apple Inc.	08.02.2012	2.38MB	2.1.3.127					notwendig
ATI Catalyst Install Manager	ATI Technologies, Inc.	31.10.2011	22.4MB	3.0.816.0				unbekannt
Babylon toolbar on IE		02.07.2012								unnötig
BabylonObjectInstaller	Babylon Ltd	02.07.2012	2.05MB	2.0.0.2					unnötig
Battlefield Play4Free	EA Digital illusions	07.01.2012							notwendig
Bing Bar	Microsoft Corporation	31.10.2011	24.4MB	7.0.610.0						unnötig
Blacklight: Retribution		10.07.2012								notwendig
Blockscape Phase 1 (beta)	ioneo AB	08.05.2012	78.1MB							unnötig
Bonjour	Apple Inc.	08.02.2012	2.04MB	3.0.0.10							unbekannt
Broadcom 2070 Bluetooth 3.0	Broadcom Corporation	31.10.2011	183MB	6.3.0.6300		notwendig
Broadcom 802.11 Wireless LAN Adapter	Broadcom Corporation	31.10.2011		5.60.48.61	notwendig
Call of Duty Dawnville Demo		30.05.2012								notwendig
Call of Duty Single Player Demo		30.05.2012							notwendig
Call of Duty: Modern Warfare 3 - Multiplayer	Infinity Ward - Sledgehammer Games	17.02.2012			notwendig
CCleaner	Piriform	22.06.2012		3.20								notwendig
Contrôle ActiveX Windows Live Mesh pour connexions à distance	Microsoft Corporation 03.09.2011 5.57MB 15.4.5722.2	unbekannt
CPUID CPU-Z 1.60		31.03.2012	3.34MB								unbekannt
Creation Kit		17.02.2012									notwendig
CyberLink PowerDVD 10	CyberLink Corp.	31.10.2011	226MB	10.0.3.2714				unbekannt
CyberLink YouCam	CyberLink Corp.	31.10.2011	124MB	3.5.1.3922					notwendig
Deponia	Daedalic Entertainment	03.02.2012		1.0						notwendig
Diablo III Beta	Blizzard Entertainment	22.05.2012		0.2.0.7162				unnötig
Die Siedler 7	Ubisoft	25.12.2011		1.12.1396						notwendig
Eets	Klei Entertainment	21.05.2012									notwendig
Energy Star Digital Logo	Hewlett-Packard	31.10.2011	300KB	1.0.1					unbekannt
EVEREST Home Edition v2.20	Lavalys Inc	31.03.2012		2.20					unbekannt
Evernote v. 4.2.2	Evernote Corp.	03.09.2011	139MB	4.2.2.3979					unbekannt
EverQuest II	Sony Online Entertainment	23.05.2012							notwendig
ffdshow [rev 3154] [2009-12-09]		13.06.2012	16.6MB	1.0					unbekannt
Fraps		19.01.2012										unnötig
Free Video to iPod Converter version 5.0.11.504	DVDVideoSoft Ltd.	26.05.2012	70.8MB	5.0.11.504		unnötig
Game Booster 3	IObit	13.06.2012	26.9MB	3.5							notwendig
Google Chrome	Google Inc.	04.04.2012		20.0.1132.47					notwendig
Google Chrome Frame	Google Inc.	07.02.2012		20.0.1132.57				unbekannt
Google Toolbar for Internet Explorer	Google Inc.	01.04.2012		7.3.2710.138			notwendig
Hama Racing Wheel V18		27.12.2011		V4.0a						notwendig
HP 3D DriveGuard	Hewlett-Packard Company	15.05.2012	6.99MB	4.1.16.1					notwendig
HP Connection Manager	Hewlett-Packard Company	16.02.2012	34.5MB	4.1.23.1				notwendig
HP Documentation	Hewlett-Packard	31.10.2011	333MB	1.1.0.0						unbekannt
HP DVB-T TV Tuner 8.0.64.43		31.10.2011		8.0.64.43					notwendig
HP Games	WildTangent	10.01.2012		1.0.2.5						notwendig
HP On Screen Display	Hewlett-Packard Company	08.02.2012	358KB	1.3.5				notwendig
HP Power Manager	Hewlett-Packard Company	31.10.2011	3.61MB	1.2.3					notwendig
HP Quick Launch	Hewlett-Packard Company	06.03.2012	6.10MB	2.6.3					notwendig
HP Setup	Hewlett-Packard Company	03.09.2011		8.6.4530.3651					notwendig
HP Setup Manager	Hewlett-Packard Company	31.10.2011	8.30MB	1.1.13253.3682				notwendig
HP SimplePass 2011	Hewlett-Packard	24.12.2011	77.0MB	5.3.0.273					notwendig
HP Software Framework	Hewlett-Packard Company	08.05.2012	4.72MB	4.5.10.1				notwendig
HP Support Assistant	Hewlett-Packard Company	22.02.2012	75.8MB	6.1.12.1				notwendig
HyperCam 3	Solveig Multimedia	29.02.2012		3.2.1107.8					unnötig
IDT Audio	IDT	31.10.2011		1.0.6329.0						unbekannt
Intel(R) Display Audio Driver	Intel Corporation	31.10.2011		6.14.00.3074				notwendig
Intel(R) Management Engine Components	Intel Corporation	31.10.2011		7.0.0.1144		notwendig
Intel(R) Rapid Storage Technology	Intel Corporation	31.10.2011		10.1.2.1004			notwendig
IObit Malware Fighter	IObit	09.02.2012	21.0MB	1.0						unbekannt
IObit Toolbar v6.0	Spigot, Inc.	02.07.2012	14.6MB	6.0						unbekannt
iTunes	Apple Inc.	06.05.2012	158MB	10.6.1.7							notwendig
Java(TM) 6 Update 24 (64-bit)	Oracle	03.09.2011	90.7MB	6.0.240					unbekannt
Java(TM) 6 Update 31	Oracle	01.03.2012	95.1MB	6.0.310						unbekannt
Java(TM) 7 Update 3 (64-bit)	Oracle	17.03.2012	93.6MB	7.0.30					unbekannt
Java(TM) SE Development Kit 7 Update 3 (64-bit)	Oracle	17.03.2012	141MB	1.7.0.30			unbekannt
Java-Editor 11.7, 2012.03.11	Gerhard Röhner	17.03.2012	8.91MB					unbekannt
JavaFX 2.0.3 (64-bit)	Oracle Corporation	17.03.2012	20.8MB	2.0.3					unbekannt
JavaFX 2.0.3 SDK (64-bit)	Oracle Corporation	17.03.2012	66.7MB	2.0.3					unbekannt
League of Legends	Riot Games	31.01.2012		1.02.0000					notwendig
LogMeIn Hamachi	LogMeIn, Inc.	18.04.2012		2.1.0.166						notwendig
Magic Desktop	EasyBits Software AS	31.10.2011	107MB	3.0					notwendig
Malwarebytes Anti-Malware Version 1.62.0.1300	Malwarebytes Corporation	13.07.2012  18.7MB   1.62.0.1300	notwendig
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	04.01.2012	38.8MB	4.0.30319	unbekannt
Microsoft .NET Framework 4 Client Profile DEU Language Pack   Microsoft Corporation  04.01.2012  2.93MB  4.0.30319	unbekannt
Microsoft Flight		23.05.2012									notwendig
Microsoft Games for Windows - LIVE Redistributable	Microsoft Corporation	23.05.2012	31.3MB	3.5.92.0	notwendig
Microsoft Games for Windows Marketplace	Microsoft Corporation	23.05.2012	6.03MB	3.5.50.0		notwendig
Microsoft Office Home and Student 2010	Microsoft Corporation	21.03.2012		14.0.6029.1000	notwendig
Microsoft Office Klick-und-Los 2010	Microsoft Corporation	23.01.2012		14.0.4763.1000		notwendig
Microsoft Silverlight	Microsoft Corporation	11.05.2012	80.3MB	4.1.10329.0			unbekannt
Microsoft SQL Server 2005 Compact Edition [ENU]	Microsoft Corporation	03.09.2011	1.69MB	3.1.0000	unbekannt
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	25.01.2012	300KB	8.0.56336	unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17     Microsoft Corporation  03.09.2011  788KB  9.0.30729	unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148  Microsoft Corporation  31.10.2011  784KB  9.0.30729.4148	unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161  Microsoft Corporation  25.01.2012  788KB  9.0.30729.6161	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022          Microsoft Corporation  25.12.2011  1.41MB  9.0.21022	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17     Microsoft Corporation  25.12.2011  240KB  9.0.30729	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148  Microsoft Corporation  31.10.2011  592KB  9.0.30729.4148	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161  Microsoft Corporation  25.01.2012  600KB  9.0.30729.6161	unbekannt
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319       Microsoft Corporation  21.03.2012  13.7MB  10.0.30319	unbekannt
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219       Microsoft Corporation  25.01.2012  11.8MB  10.0.40219	unbekannt
Microsoft XNA Framework Redistributable 4.0	Microsoft Corporation	08.05.2012   8.03MB       4.0.20823.0		unbekannt
Mount and Blade Warband - Demo	Taleworlds Entertainment	09.06.2012					notwendig
Mozilla Firefox 10.0.1 (x86 de)	Mozilla	11.02.2012	35.4MB	10.0.1					unnötig
Mozilla Firefox 10.0.2 (x86 de)	Mozilla	05.05.2012	43.5MB	10.0.2					notwendig
Mumble 1.2.3	Thorvald Natvig	21.01.2012	32.2MB	1.2.3						notwendig
Need for Speed™ The Run	Electronic Arts	25.12.2011		1.0.0.0					notwendig
Need For Speed™ World	Electronic Arts	11.06.2012	12.4MB	1.0.0.936					notwendig
Nexus Mod Manager	Black Tree Gaming	10.07.2012	13.3MB	0.18.9					notwendig
Norton Internet Security	Symantec Corporation	24.12.2011		18.7.2.3				notwendig
Notepad++		14.02.2012		5.9.8							notwendig
NVIDIA PhysX	NVIDIA Corporation	15.03.2012	119MB	9.09.0203					unbekannt
Origin	Electronic Arts, Inc.	04.04.2012		8.5.0.4554					notwendig
Paint.NET v3.5.10	dotPDN LLC	07.02.2012	10.6MB	3.60.0						notwendig
Pando Media Booster	Pando Networks Inc.	31.01.2012	5.46MB	2.6.0.2				unbekannt
Prey Demo	Human Head Studios, Inc.	14.03.2012		0.2					notwendig
PunkBuster Services	Even Balance, Inc.	07.01.2012		0.990					unbekannt
Rayman Origins Demo		23.05.2012								notwendig
Realtek Ethernet Controller Driver	Realtek	31.10.2011		7.41.216.2011				unbekannt
Realtek PCIE Card Reader	Realtek Semiconductor Corp.	31.10.2011		6.1.7600.74			unbekannt
Renesas Electronics USB 3.0 Host Controller Driver    Renesas Electronics Corporation   31.10.2011   601KB   2.0.32.0	unbekannt
Risen - Demo	Piranha Bytes	19.02.2012								notwendig
Risen Demo	Deep Silver	15.03.2012		1.00						notwendig
Sanctum		05.05.2012										notwendig
Screenshot Captor 2.102.01		31.03.2012	12.8MB							unnötig
Skype™ 5.8	Skype Technologies S.A.	02.04.2012	19.0MB	5.8.158					notwendig
Smart Defrag 2	IObit	09.02.2012	9.11MB	2.3							unbekannt
Steam	Valve Corporation	17.02.2012	35.4MB	1.0.0.0							notwendig
Stronghold Kingdoms	Firefly Studios Ltd	23.05.2012							notwendig
Synaptics Pointing Device Driver	Synaptics Incorporated	31.10.2011	46.4MB	15.2.4.4			unbekannt
TeamSpeak 3 Client	TeamSpeak Systems GmbH	03.01.2012						notwendig
The Elder Scrolls V: Skyrim	Bethesda Game Studios	17.02.2012						notwendig
TIPP10 Version 2.1.0	(c) 2006-2011, Tom Thielicke IT Solutions	03.04.2012				notwendig
Tropico 4		12.05.2012										notwendig
Ubisoft Game Launcher	UBISOFT	25.12.2011		1.0.0.0						notwendig
Validity WBF DDK	Validity Sensors, Inc.	31.10.2011	22.6MB	4.3.118.0					unbekannt
Windows Live Essentials	Microsoft Corporation	03.09.2011		15.4.3508.1109			notwendig
Windows Live Mesh ActiveX control for remote connections   Microsoft Corporation	03.09.2011   5.57MB   15.4.5722.2	unbekannt
Windows Live Mesh ActiveX Control for Remote Connections   Microsoft Corporation	03.09.2011   5.57MB   15.4.5722.2	unbekannt
WinRAR 4.01 (32-Bit)	win.rar GmbH	24.12.2011		4.01.0					notwendig
WinRAR 4.01 (64-Bit)	win.rar GmbH	24.12.2011		4.01.0					notwendig
Wisdom-soft Set up ASR 3.1 Free	Wisdom Software Inc.	30.05.2012					unbekannt
World of Tanks	Wargaming.net	19.06.2012	15.0MB							notwendig
World of Warcraft	Blizzard Entertainment	05.05.2012		4.3.4.15595				notwendig
Worms Reloaded	Team17	01.06.2012									notwendig
X-Mouse Button Control 2.5	Highresolution Enterprises	02.07.2012		2.5				notwendig
         

Ich werde nun eine Woche weg sein. Also kann ich in dieser Zeit nicht antworten. In einer Woche können wir dann weiter machen.

Mfg
Nico

deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen

bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok



deinstaliere:
Adobe Shockwave
ANNO 2070 DEMO
Babylon : alle
Bing

Blockscape
Contrôle
Diablo
EVEREST
Evernote
Fraps
Free Video
Google Toolbar : finger weg von toolbars, machen den browser langsam, zusatz risiko
HyperCam
IObit : beide
Java: alle
Download der kostenlosen Java-Software
downloade java jre instalieren, instalieren.
Microsoft Silverlight

Screenshot Captor
Smart Defrag

öffne ccleaner analysieren, starten
öffne otl, cleanup nach pc neustart, testen wie er läuft

Ok, ich habe alles ohne Probleme gemacht. Bis jetzt läuft er auch ohne Probleme.

ok pc absichern:
als antimalware programm würde ich emsisoft empfehlen.
diese haben für mich den besten schutz kostet aber etwas.
http://www.trojaner-board.de/103809-...i-malware.html
testversion:
Meine Antivirus-Empfehlung: Emsisoft Anti-Malware
insbesondere wenn du onlinebanking, einkäufe, sonstige zahlungsabwicklungen oder ähnlich wichtiges, wie zb berufliches machst, also sensible daten zu schützen sind, solltest du in sicherheitssoftware investieren.
vor dem aktivieren der lizenz die 30 tage testzeitraum ausnutzen.

kostenlos, aber eben nicht ganz so gut wäre avast zu empfehlen.
http://www.trojaner-board.de/110895-...antivirus.html

sag mir welches du nutzt, dann gebe ich konfigurationshinweise.
bitte dein bisheriges av deinstalieren
die folgende anleitung ist umfangreich, dass ist mir klar, sie sollte aber umgesetzt werden, da nur dann dein pc sicher ist. stelle so viele fragen wie nötig, ich arbeite gern alles mit dir durch!

http://www.trojaner-board.de/96344-a...-rechners.html
Starte bitte mit der Passage, Windows Vista und Windows 7
Bitte beginne damit, Windows Updates zu instalieren.
Am besten geht dies, wenn du über Start, Suchen gehst, und dort Windows Updates eingibst.
Prüfe unter "Einstellungen ändern" dass folgendes ausgewählt ist:
- Updates automatisch Instalieren,
- Täglich
- Uhrzeit wählen
- Bitte den gesammten rest anhaken, außer:
- detailierte benachichtungen anzeigen, wenn neue Microsoft software verfügbar ist.
Klicke jetzt die Schaltfläche "OK"
Klicke jetzt "nach Updates suchen".
Bitte instaliere zunächst wichtige Updates.
Es wird nötig sein, den PC zwischendurch neu zu starten. falls dies der Fall ist, musst du erneut über Start, Suchen, Windows Update aufrufen, auf Updates suchen klicken und die nächsten instalieren.
Mache das selbe bitte mit den optionalen Updates.
Bitte übernimm den rest so, wie es im Abschnitt windows 7 / Vista zu lesen ist.
aus dem Abschnitt xp, bitte den punkt "datenausführungsverhinderung, dep" übernehmen.
als browser rate ich dir zu chrome:
Installation von Google Chrome für mehrere Nutzerkonten - Google Chrome-Hilfe
anleitung lesen bitte
falls du nen andern nutzen willst, sags mir dann muss ich teile der nun folgenden anleitung


Sandboxie
Die devinition einer Sandbox ist hier nachzulesen:
Sandbox
Kurz gesagt, man kann Programme fast 100 %ig isuliert vom System ausführen.

Der Vorteil liegt klar auf der Hand, wenn über den Browser Schadcode eingeschläust wird, kann dieser nicht nach außen dringen.
Download Link:
Sandboxie Download - Sandboxie 3.72

anleitung:
http://www.trojaner-board.de/71542-a...sandboxie.html
ausführliche anleitung als pdf, auch abarbeiten:
Sandbox Einstellungen |

bitte folgende zusatz konfiguration machen:
sandboxie control öffnen, menü sandbox anklicken, defauldbox wählen.
dort klicke auf sandbox einstellungen.
beschrenkungen, bei programm start und internet zugriff schreibe:
chrome.exe
dann gehe auf anwendungen, webbrowser, chrome.
dort aktiviere alles außer gesammten profil ordner freigeben.
Wie du evtl. schon gesehen hast, kannst du einige Funktionen nicht nutzen.
Dies ist nur in der Vollversion nötig, zu deren Kauf ich dir rate.
Du kannst zb unter "Erzwungene Programmstarts" festlegen, dass alle Browser in der Sandbox starten.
Ansonsten musst du immer auf "Sandboxed webbrowser" klicken bzw Rechtsklick, in Sandboxie starten.
Eine lebenslange Lizenz kostet 30 €, und ist auf allen deinen PC's nutzbar.

Weiter mit:
Maßnahmen für ALLE Windows-Versionen
alles komplett durcharbeiten
anmerkung zu file hippo.
in den settings zusätzlich auswählen:
hide beta updates.
Run updateChecker when Windows starts

Backup Programm:
in meiner Anleitung ist bereits ein Backup Programm verlinkt, als Alternative bietet sich auch das Windows eigene Backup Programm an:
http://www.trojaner-board.de/82962-w...en-backup.html
Dies ist aber leider nur für Windows 7 Nutzer vernünftig nutzbar.
Alle Anderen sollten sich aber auf jeden fall auch ein Backup Programm instalieren, denn dies kann unter Umständen sehr wichtig sein, zum Beispiel, wenn die Festplatte einmal kaputt ist.

Zum Schluss, die allgemeinen sicherheitstipps beachten, wenn es dich betrifft, den Tipp zum Onlinebanking beachten und alle Passwörter ändern
bitte auch lesen, wie mache ich programme für alle sichtbar:
Programme für alle Konten nutzbar machen - PCtipp.ch - Praxis & Hilfe
surfe jetzt also nur noch im standard nutzer konto und dort in der sandbox.
wenn du die kostenlose version nutzt, dann mit klick auf sandboxed web browser, wenn du die bezahlversion hast, kannst du erzwungene programm starts festlegen, dann wird Sandboxie immer gestartet wenn du nen browser aufrufst.
wenn du mit der maus über den browser fährst sollte der eingerahmt sein, dann bist du im sandboxed web browser

Ich nehme dann wohl avast, weil ich diesen Laptop eigentlich nur zur Unterhaltung benutze.
Ich werde mich nun mal die Anleitung durchgehen.