ACER TM 2350 mit W7 überlastet

OTL logfile created on: 03.08.2013 09:21:00 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Turismo\Desktop
 Professional  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,98 Gb Total Physical Memory | 1,24 Gb Available Physical Memory | 62,39% Memory free
3,97 Gb Paging File | 3,04 Gb Available in Paging File | 76,69% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 59,62 Gb Total Space | 22,73 Gb Free Space | 38,13% Space Free | Partition Type: NTFS
 
Computer Name: TURISMO-PC | User Name: Turismo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (All) ==========
 
PRC - [2013.08.02 21:05:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Turismo\Desktop\OTL.exe
PRC - [2013.05.20 12:29:55 | 000,488,448 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Users\Turismo\AppData\Local\Temp\RtkBtMnt.EXE
PRC - [2013.04.08 18:44:12 | 001,320,496 | ---- | M] (pdfforge GmbH) -- C:\Programme\PDF Architect\HelperService.exe
PRC - [2013.04.08 18:43:36 | 000,799,280 | ---- | M] (pdfforge GmbH) -- C:\Programme\PDF Architect\ConversionService.exe
PRC - [2013.03.19 04:50:03 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smss.exe
PRC - [2013.02.04 19:55:35 | 002,890,232 | ---- | M] (Sophos Limited) -- C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
PRC - [2013.01.11 14:12:02 | 000,790,008 | ---- | M] (Sophos Limited) -- C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\ALUpdate.exe
PRC - [2013.01.11 14:11:57 | 000,929,272 | ---- | M] (Sophos Limited) -- C:\Program Files\Sophos\AutoUpdate\ALMon.exe
PRC - [2013.01.11 14:11:54 | 000,237,048 | ---- | M] (Sophos Limited) -- C:\Program Files\Sophos\AutoUpdate\ALsvc.exe
PRC - [2013.01.11 14:11:24 | 000,217,592 | ---- | M] (Sophos Limited) -- C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
PRC - [2013.01.02 17:49:24 | 000,009,216 | ---- | M] (www.shadowexplorer.com) -- C:\Program Files\ShadowExplorer\sesvc.exe
PRC - [2012.11.12 18:00:09 | 000,357,400 | ---- | M] (Sophos Limited) -- C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe
PRC - [2012.09.21 12:13:23 | 000,159,296 | ---- | M] (Sophos Limited) -- C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
PRC - [2012.06.03 00:19:33 | 000,053,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuauclt.exe
PRC - [2012.02.11 07:41:06 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe
PRC - [2011.11.17 07:36:26 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
PRC - [2011.05.04 06:52:12 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
PRC - [2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe
PRC - [2009.07.14 03:14:47 | 001,121,280 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe
PRC - [2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe
PRC - [2009.07.14 03:14:42 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\servicing\TrustedInstaller.exe
PRC - [2009.07.14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009.07.14 03:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\services.exe
PRC - [2009.07.14 03:14:23 | 000,261,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe
PRC - [2009.07.14 03:14:19 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
PRC - [2009.07.14 03:14:16 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe
PRC - [2009.04.14 07:43:42 | 000,604,704 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SOUNDMAN.EXE
PRC - [2003.12.15 00:20:38 | 000,155,648 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxtray.exe
PRC - [2003.12.15 00:07:26 | 000,118,784 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hkcmd.exe
PRC - [2003.06.19 23:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
 
 OTL Extras logfile created on: 03.08.2013 09:21:00 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Turismo\Desktop
 Professional  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,98 Gb Total Physical Memory | 1,24 Gb Available Physical Memory | 62,39% Memory free
3,97 Gb Paging File | 3,04 Gb Available in Paging File | 76,69% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 59,62 Gb Total Space | 22,73 Gb Free Space | 38,13% Space Free | Partition Type: NTFS
 
Computer Name: TURISMO-PC | User Name: Turismo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (All) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- "%1" %*
.chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cmd [@ = cmdfile] -- "%1" %*
.com [@ = comfile] -- "%1" %*
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.exe [@ = exefile] -- "%1" %*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\Windows\System32\mshta.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf [@ = inffile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\rundll32.exe (Microsoft Corporation)
.js [@ = JSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.pif [@ = piffile] -- "%1" %*
.reg [@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
.scr [@ = scrfile] -- "%1" /S
.txt [@ = txtfile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\System32\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
"" = 
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{3737D697-83F4-4779-B48F-FE1C26F088CB}" = lport=138 | protocol=17 | dir=in | app=system | 
"{4F300A00-0B1E-4EB4-9F05-A1494E7437A5}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{75825A5A-E1D4-44B8-B3CA-3DB05B612611}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{7B9B2857-3D41-4E18-A926-25AFAD08A4EB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{808AABB0-0946-4917-AE38-ADEB9BE89F4E}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{97575865-3523-44CA-866F-AA0C060DD5CA}" = rport=138 | protocol=17 | dir=out | app=system | 
"{9D821A06-FA50-4243-B0E9-53A6F44E356F}" = rport=445 | protocol=6 | dir=out | app=system | 
"{A50AB18E-570A-47A5-BD96-7BCA87B5C538}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{A7B4EC8A-7492-4E05-AACF-FAB100D410AE}" = rport=139 | protocol=6 | dir=out | app=system | 
"{A8D181E4-8C12-4542-8940-899DF6E5BCA1}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{ABB21E31-5256-4A80-980A-61E2B595A98F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{B0BD7CBD-2F4E-4896-AAB2-D74AF13B9573}" = lport=139 | protocol=6 | dir=in | app=system | 
"{B2B01F12-25BE-4A03-A11E-60B50DDE836B}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{C2A2C434-E284-43EA-8741-7FE3860CD45E}" = rport=137 | protocol=17 | dir=out | app=system | 
"{C799FE23-7A5B-465F-A3B7-ECD534EB854C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{E1CFBAAF-B0D2-4A89-AB24-83243D8951B7}" = lport=137 | protocol=17 | dir=in | app=system | 
"{E8B53D79-1B84-4838-9CAA-4AFBAEB05B62}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{F27F8AB5-A59D-4CD5-A8A1-A4737CDFD352}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{F760A9B0-530C-488B-B7F2-2F5B622CB839}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{F8463F90-02CE-4B92-BE19-782359614930}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{F9339AC5-6849-4ECE-9581-C89B0990C39F}" = lport=445 | protocol=6 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{016E2900-F520-431C-9332-90CBF7A5981B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{071BAACC-4813-437C-A6C6-691C3C1A45D3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{1638ABE6-DB84-4DE1-B12A-EB9611638C5B}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{5E522E9B-978D-4EE1-AE07-1DC46C9C4C40}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{6471DFF0-E946-437E-91A9-A5135C65DDD1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{7F19417A-DDCA-4CBC-83EB-DDEFF20C4FC6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{8896CE0C-C26F-44A3-8A80-AAFCFE21700F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{AC58E4E0-F904-4763-AC29-A4DD2802A090}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{B14B6905-F8E3-410B-B061-5A4AC769FBE1}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{B9558CCB-0F2E-4EB9-A1BF-31DDE8FD6B01}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{BD435E12-C40B-4FFB-AA3E-48909138A208}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C79335DE-D08E-42A6-B8D9-A5DCAEDF7D1B}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{CAFE9DD2-D9E4-4096-BF7D-71E865FDA07C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{DAE65A1E-F66A-467A-9D3F-6144CDC29D38}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{DFE75A8F-51F6-4E5B-A3D2-2157D41A7FE3}" = protocol=6 | dir=out | app=system | 
"{FB56433E-7B8D-4679-8B67-3692BDB474C4}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"TCP Query User{4BF2BE01-3A4C-451A-A1F6-46B0BB324E76}C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe | 
"UDP Query User{EBFCD78B-6CD6-4D09-9DF6-C62463400187}C:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\ibm\spss\statistics\20\jre\bin\javaw.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{064A929A-4DE8-40CF-A901-BD40C14E4D25}" = PDF Architect
"{15C418EB-7675-42be-B2B3-281952DA014D}" = Sophos AutoUpdate
"{2AF8017B-E503-408F-AACE-8A335452CAD2}" = IBM SPSS Statistics 20
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics 2 Driver
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{9275F3B0-0FAC-4A40-9589-E2394FDF169A}" = Omnion
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9ACB414D-9347-40B6-A453-5EFB2DB59DFA}" = Sophos Anti-Virus
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"InstallShield_{9275F3B0-0FAC-4A40-9589-E2394FDF169A}" = Omnion
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox 21.0 (x86 de)" = Mozilla Firefox 21.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"ShadowExplorer_is1" = ShadowExplorer 0.9
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 02.08.2013 13:53:23 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
Error - 02.08.2013 13:53:26 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
Error - 02.08.2013 13:53:29 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
Error - 02.08.2013 13:53:31 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
Error - 02.08.2013 13:53:31 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
Error - 02.08.2013 13:53:32 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
Error - 02.08.2013 13:53:32 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
Error - 02.08.2013 13:53:33 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
Error - 02.08.2013 13:53:36 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
Error - 02.08.2013 13:53:38 | Computer Name = Turismo-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description = 
 
[ System Events ]
Error - 03.08.2013 04:36:28 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...7ae-04046e6cc752}] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess System, (Überprüfung des Zeitstempels
 [ 1ce90248c5ca6d6]).  
 
Error - 03.08.2013 04:36:28 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...7ae-04046e6cc752}] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess System, (Überprüfung des Zeitstempels
 [ 1ce90248c616b8a]).  
 
Error - 03.08.2013 04:36:28 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...7ae-04046e6cc752}] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess System, (Überprüfung des Zeitstempels
 [ 1ce90248c616b8a]).  
 
Error - 03.08.2013 04:36:28 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...7ae-04046e6cc752}] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess System, (Überprüfung des Zeitstempels
 [ 1ce90248c689298]).  
 
Error - 03.08.2013 04:36:53 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...Windows.Forms.dll] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess svchost.exe, (Überprüfung des Zeitstempels
 [ 1ce90249a73ecc0]).  
 
Error - 03.08.2013 04:36:57 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...ctoryServices.dll] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess svchost.exe, (Überprüfung des Zeitstempels
 [ 1ce90249c617386]).  
 
Error - 03.08.2013 04:36:58 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...\system32\mrt.exe] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess svchost.exe, (Überprüfung des Zeitstempels
 [ 1ce90249ddc896c]).  
 
Error - 03.08.2013 04:37:14 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...rviceModelReg.exe] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess svchost.exe, (Überprüfung des Zeitstempels
 [ 1ce9024a6dba908]).  
 
Error - 03.08.2013 04:37:49 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...\System.AddIn.dll] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess svchost.exe, (Überprüfung des Zeitstempels
 [ 1ce9024bc4c0e54]).  
 
Error - 03.08.2013 04:37:50 | Computer Name = Turismo-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [....30319\System.dll] wurde nach einer Zeitüberschreitung/Auslastung
 durchgeführt. Sie wird protokolliert. Prozess svchost.exe, (Überprüfung des Zeitstempels
 [ 1ce9024bc6fd19a]).  
 
 
< End of report >