Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   2 Probleme mit Alienware M17xR3 (https://www.trojaner-board.de/131786-2-probleme-alienware-m17xr3.html)

Darkshadow77 03.03.2013 21:16
2 Probleme mit Alienware M17xR3
 
Hoffe bin hier richtig. Ich habe mom 2 Probleme mit meinen Laptop, der jetze 1 Jahr alt ist.

1:Problem:
Ich habe nach unregelmäßigen Abständen Black screens beim spielen und wenn ich grad so nur rumsurfe (da eher sehr selten ). Da geht dann gar nichts mehr und muss neu gestartet werden werden. Beim Black screen wiederholt sich der letzte Ton, der grad abgespielt wurde.

Für den 23.02. habe ich folgenden Fehlercode bei AlienAutopsy stehen:
Code:
Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war:
 0x00000117 {0xfffffa80072e24e0, 0xfffff88006237198, 0x0000000000000000, 0x0000000000000000}
Und in der Ereignisanzeige steht folgendes:
Code:
- System

  - Provider

  [ Name]  Microsoft-Windows-Kernel-Power
  [ Guid]  {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
 
  EventID 41
 
  Version 2
 
  Level 1
 
  Task 63
 
  Opcode 0
 
  Keywords 0x8000000000000002
 
  - TimeCreated

  [ SystemTime]  2013-02-23T14:29:14.540024700Z
 
  EventRecordID 154210
 
  Correlation
 
  - Execution

  [ ProcessID]  4
  [ ThreadID]  8
 
  Channel System
 
  Computer Draco-PC
 
  - Security

  [ UserID]  S-1-5-18
 

- EventData

  BugcheckCode 0
  BugcheckParameter1 0x0
  BugcheckParameter2 0x0
  BugcheckParameter3 0x0
  BugcheckParameter4 0x0
  SleepInProgress false
  PowerButtonTimestamp 0
2. Problem:
Wenn ich mein Laptop anmache bootet er ganz normal bis zur eingabe des Passwortes. Dann kommt das Wilkommen Bild und dann nur noch für ca 3 Minuten ein schwarzer Bildschirm mit einem Mauszeiger, den ich übern Bildschirm wandern lassen kann. Wenn ich den Taskmanager öffne steht, dass der Prozess explorer.exe gestartet ist.

Habe schon folgendes gemacht:
- Hardware mit Furmark, AlienAutopsy und den Windows-Speicherdiagnose
- Bios, OSD, Soundkartentreiber, Grafikkartentreiber und Synaptics Pointing Device Driver aktualisiert
- Festplatte auf fehler überprüft
- mit HijackThis Laptop gescannt:

HiJackthis Logfile:
Code:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:48:32, on 03.03.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files (x86)\AlienRespawn\TOASTER.EXE
C:\Program Files (x86)\AlienRespawn\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Users\Draco\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Users\Draco\AppData\Roaming\Spotify\spotify.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
C:\Program Files\Alienware\Command Center\AlienFusionController.exe
C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
C:\Users\Draco\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Draco\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Draco\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe
C:\Users\Draco\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.de/alienware
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-search.com/?affID=119828&babsrc=HP_ss&mntrId=2a6fe892000000000000247703491961
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\prxtbXfir.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: ContentBlockerBrowserHelperObject - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
O2 - BHO: XfireXO - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\prxtbXfir.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: VirtualKeyboardBrowserHelperObject - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll
O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\prxtbXfir.dll
O3 - Toolbar: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe"
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [AlienwareOn-ScreenDisplay] C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
O4 - HKLM\..\Run: [Integrated Webcam Live! Central] "C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe" /mode2
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Draco\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [Spotify] "C:\Users\Draco\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-21-1503614190-581956262-4018303520-1019\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1503614190-581956262-4018303520-1019\..\Run: [EA Core] C:\Program Files (x86)\Electronic Arts\EA Link\Core.exe -silent (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1503614190-581956262-4018303520-1019\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1503614190-581956262-4018303520-1020\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'boinc_master')
O4 - HKUS\S-1-5-21-1503614190-581956262-4018303520-1020\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'boinc_master')
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O9 - Extra button: Virtuelle Tastatur - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Links untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.dell.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{1FA38330-5782-44DE-B030-C763F3C82E97}: NameServer = 10.111.81.129 10.129.32.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{7FA4BB78-8895-4C48-99B5-0D9DAE3F15EE}: NameServer = 10.74.210.210 10.74.210.211
O17 - HKLM\System\CCS\Services\Tcpip\..\{A22F4455-0746-4345-91CE-6829482F76A1}: NameServer = 10.129.32.1 10.111.81.129
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2763C48-FDE7-4683-8BB6-7D5C39768193}: NameServer = 10.129.32.1 10.111.81.129
O17 - HKLM\System\CS1\Services\Tcpip\..\{1FA38330-5782-44DE-B030-C763F3C82E97}: NameServer = 10.111.81.129 10.129.32.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{1FA38330-5782-44DE-B030-C763F3C82E97}: NameServer = 10.111.81.129 10.129.32.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Alienware Fusion Service (AlienFusionService) - Alienware - C:\Program Files\Alienware\Command Center\AlienFusionService.exe
O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
O23 - Service: BOINC - Space Sciences Laboratory - C:\Program Files\BOINC\boinc.exe
O23 - Service: CyberLink Product - 2012/02/28 09:48:47 (CLKMSVC10_9EC60124) - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: Desura Install Service - Desura Pty Ltd - C:\Program Files (x86)\Common Files\Desura\desura_service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HWDeviceService64.exe - Unknown owner - C:\ProgramData\DatacardService\HWDeviceService64.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Internet Manager. OUC (Internet Manager. RunOuc) - Unknown owner - C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Radio.fx Server (Radio.fx) - Unknown owner - C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\AlienRespawn\sftservice.EXE
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Druckwarteschlange (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 17671 bytes
--- --- ---

Kann mir jemand das mal erklären, denn ich kann damit nichts anfangen.

Darkshadow77 03.03.2013 21:21
- mit OTL Laptop gescannt

1. Logfile:

Code:
OTL logfile created on: 03.03.2013 14:04:18 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Draco\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 5,01 Gb Available Physical Memory | 62,73% Memory free
15,96 Gb Paging File | 12,57 Gb Available in Paging File | 78,76% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 688,86 Gb Total Space | 216,99 Gb Free Space | 31,50% Space Free | Partition Type: NTFS
 
Computer Name: DRACO-PC | User Name: Draco | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.03.03 14:02:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Draco\Desktop\OTL.exe
PRC - [2013.02.22 15:30:32 | 003,818,776 | ---- | M] () -- C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
PRC - [2013.02.21 16:32:15 | 004,484,504 | ---- | M] (Spotify Ltd) -- C:\Users\Draco\AppData\Roaming\Spotify\spotify.exe
PRC - [2013.02.21 16:32:15 | 001,103,768 | ---- | M] (Spotify Ltd) -- C:\Users\Draco\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2013.02.09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2013.01.31 16:42:54 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
PRC - [2013.01.26 20:48:45 | 000,743,424 | ---- | M] () -- C:\ProgramData\BOINC\projects\climateprediction.net\hadcm3n_6.07_windows_intelx86.exe
PRC - [2013.01.19 03:51:31 | 001,129,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
PRC - [2013.01.19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013.01.19 03:50:07 | 001,071,392 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
PRC - [2013.01.10 10:02:16 | 000,844,144 | ---- | M] (Samsung) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2012.12.18 06:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.12.02 16:58:00 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012.06.15 16:14:40 | 000,014,192 | ---- | M] (Alienware) -- C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
PRC - [2012.06.15 16:12:40 | 000,071,024 | ---- | M] (Alienware) -- C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
PRC - [2012.06.15 16:10:58 | 000,016,240 | ---- | M] (Alienware) -- C:\Program Files\Alienware\Command Center\AlienFusionController.exe
PRC - [2012.06.04 13:07:58 | 000,224,096 | ---- | M] () -- C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
PRC - [2012.03.10 10:18:15 | 000,406,016 | ---- | M] (Space Sciences Laboratory) -- C:\ProgramData\BOINC\projects\setiathome.berkeley.edu\setiathome_6.03_windows_intelx86.exe
PRC - [2011.09.22 17:21:38 | 000,315,712 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\AlienRespawn\Components\DSUpdate\DSUpd.exe
PRC - [2011.09.22 17:14:16 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe
PRC - [2011.09.22 17:06:12 | 001,692,480 | ---- | M] (SoftThinks SAS) -- C:\Program Files (x86)\AlienRespawn\SftService.exe
PRC - [2011.09.21 17:22:02 | 003,964,928 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\AlienRespawn\Toaster.exe
PRC - [2011.09.02 18:24:28 | 001,636,208 | ---- | M] () -- C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
PRC - [2011.03.25 13:20:59 | 004,757,504 | ---- | M] () -- C:\ProgramData\BOINC\projects\climateprediction.net\hadcm3n_um_6.07_windows_intelx86.exe
PRC - [2011.03.14 16:27:28 | 000,236,384 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe
PRC - [2010.11.17 10:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2010.09.14 01:32:32 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010.09.14 01:32:30 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.02.21 16:32:15 | 021,938,072 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\Spotify\Data\libcef.dll
MOD - [2013.02.14 20:33:04 | 001,358,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\9266d6e1f8057b5b62b460cbf33cda21\System.WorkflowServices.ni.dll
MOD - [2013.02.14 20:22:55 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\5ecf01964c70e453d71e5d7653912ff9\System.Web.ni.dll
MOD - [2013.02.14 20:22:46 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\cb562e2e4f74ae607f1186f6ec50cec7\System.Windows.Forms.ni.dll
MOD - [2013.02.14 20:09:19 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\e963e9f51746f8e23837be7760e187c6\System.Windows.Forms.ni.dll
MOD - [2013.01.31 15:31:29 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\5d5b1b0c6e8a714de39a06e3b61f35fe\System.Management.ni.dll
MOD - [2013.01.31 15:30:35 | 000,134,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\f47057832c213ae1ab6ecc1329ea4745\System.Data.DataSetExtensions.ni.dll
MOD - [2013.01.31 15:30:17 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\07753c0a8ed7f9bc61b0ee718f3c779d\System.Runtime.Remoting.ni.dll
MOD - [2013.01.31 15:28:15 | 001,812,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\40c7a89fe2cbf3c12a2c39e034da54cf\System.Xaml.ni.dll
MOD - [2013.01.31 15:27:33 | 001,707,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\1e04a5319c58010e945220af2751d34e\System.ServiceModel.Web.ni.dll
MOD - [2013.01.31 15:27:30 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\25cfdeaf091f16f3f3a7123a91a179ab\System.Xml.Linq.ni.dll
MOD - [2013.01.31 15:25:32 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\c24dc5c1953c9617b9529172e61ba202\IAStorCommon.ni.dll
MOD - [2013.01.31 15:25:31 | 000,475,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\01d0ecf3e47d2559aa403d296ad5320a\IAStorUtil.ni.dll
MOD - [2013.01.31 15:25:00 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\77dfcfed5fd5f67d0d3edc545935bb21\System.Core.ni.dll
MOD - [2013.01.31 14:51:08 | 017,478,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\3e79256ce40faa9682f9e3511ca115ea\System.ServiceModel.ni.dll
MOD - [2013.01.31 14:50:52 | 002,347,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\2ad51da1b752b19c992fcefd56eb7c01\System.Runtime.Serialization.ni.dll
MOD - [2013.01.31 14:50:46 | 001,084,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\219c68f83fa608b496b163fd6782e696\System.IdentityModel.ni.dll
MOD - [2013.01.31 14:50:45 | 000,256,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\eb33bf977e97e97b12e82c18e36fbaee\SMDiagnostics.ni.dll
MOD - [2013.01.31 14:50:33 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d7d20811a7ce7cc589153648cbb1ce5c\PresentationFramework.Aero.ni.dll
MOD - [2013.01.31 14:50:15 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\90b89f6e8032310e9ac72a309fd49e83\System.Runtime.Remoting.ni.dll
MOD - [2013.01.31 14:49:54 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ff7c9a4f41f7cccc47e696c11b9f8469\PresentationFramework.ni.dll
MOD - [2013.01.31 14:49:40 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll
MOD - [2013.01.31 14:49:35 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\19b3d17c3ce0e264c4fb62028161adf7\PresentationCore.ni.dll
MOD - [2013.01.31 14:49:27 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cf827fe7bc99d9bcf0ba3621054ef527\WindowsBase.ni.dll
MOD - [2013.01.31 14:49:22 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll
MOD - [2013.01.31 14:49:19 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\195a77fcc6206f8bb35d419ff2cf0d72\System.Configuration.ni.dll
MOD - [2013.01.31 14:49:18 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll
MOD - [2013.01.31 14:49:15 | 011,493,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll
MOD - [2013.01.31 14:06:31 | 018,022,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\b8e60f81fd56934c9f9da7b15bee3376\PresentationFramework.ni.dll
MOD - [2013.01.31 14:06:22 | 011,522,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\932901ff0ad5e365ffbe705d7459a37e\PresentationCore.ni.dll
MOD - [2013.01.31 14:06:20 | 006,841,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\564f737274f47efdfa212f8da43286e7\System.Data.ni.dll
MOD - [2013.01.31 14:06:16 | 007,070,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b519f42484e1d488662a9a8a87cb8849\System.Core.ni.dll
MOD - [2013.01.31 14:06:14 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\fc476bbac36944e352c2f547352ffa64\System.Xml.ni.dll
MOD - [2013.01.31 14:06:13 | 003,883,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\8abaedf6aecb073b22f8801aa0b8babf\WindowsBase.ni.dll
MOD - [2013.01.31 14:06:13 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\78ecbee4a7444353dce52afb9d9d795c\System.Drawing.ni.dll
MOD - [2013.01.31 14:06:12 | 000,982,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\7cd4aa51f6e6b9330b8f50bba8bb62c6\System.Configuration.ni.dll
MOD - [2013.01.31 14:06:10 | 009,095,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\f93dca0e4baa1dcb37cf75392b7c89da\System.ni.dll
MOD - [2013.01.31 14:06:07 | 000,145,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\221d903193177a76f68965e8ffb8cbb4\System.Numerics.ni.dll
MOD - [2013.01.31 14:06:06 | 014,416,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\6a1ccc1e1a79ce267d3d1808af382cd6\mscorlib.ni.dll
MOD - [2012.08.17 21:38:56 | 000,479,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
MOD - [2012.03.16 19:07:33 | 000,029,608 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Diagnostics.ServiceModelSink\3.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Diagnostics.ServiceModelSink.dll
MOD - [2012.02.28 17:44:55 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2011.09.22 17:14:16 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\AlienRespawn\Components\Scheduler\STService.exe
MOD - [2011.09.02 18:24:28 | 001,636,208 | ---- | M] () -- C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
MOD - [2010.11.24 22:44:02 | 000,375,280 | ---- | M] () -- c:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\SQLite352.dll
MOD - [2010.11.21 07:49:35 | 000,491,520 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ServiceModel.resources\3.0.0.0_de_b77a5c561934e089\System.ServiceModel.resources.dll
MOD - [2010.11.21 07:49:27 | 000,049,152 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Configuration.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.Configuration.resources.dll
MOD - [2010.11.21 07:49:25 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll
MOD - [2010.11.21 07:49:22 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2010.11.17 10:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
MOD - [2009.12.18 11:07:06 | 000,577,536 | ---- | M] () -- C:\Program Files (x86)\Alienware On-Screen Display\EMSC.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2012.06.15 16:10:58 | 000,014,704 | ---- | M] (Alienware) [Auto | Running] -- C:\Program Files\Alienware\Command Center\AlienFusionService.exe -- (AlienFusionService)
SRV:64bit: - [2012.05.15 15:01:54 | 001,194,672 | ---- | M] (Space Sciences Laboratory) [Auto | Running] -- C:\Program Files\BOINC\boinc.exe -- (BOINC)
SRV:64bit: - [2011.11.21 15:10:10 | 000,036,160 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV:64bit: - [2011.03.17 03:14:56 | 000,297,984 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
SRV:64bit: - [2011.01.05 20:41:38 | 001,515,792 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:64bit: - [2011.01.05 20:28:50 | 000,340,240 | ---- | M] () [On_Demand | Running] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2011.01.05 20:26:56 | 000,836,880 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2009.03.03 02:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters)
SRV - [2013.03.01 16:47:46 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.02.22 15:30:32 | 003,818,776 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe -- (Radio.fx)
SRV - [2013.02.09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2013.01.31 16:42:54 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe -- (AVP)
SRV - [2013.01.19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.12.18 06:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.12.13 20:55:34 | 000,541,168 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.12.02 16:58:00 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.11.30 15:40:53 | 000,131,912 | ---- | M] (Desura Pty Ltd) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Desura\desura_service.exe -- (Desura Install Service)
SRV - [2012.10.20 18:24:00 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.07.03 12:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.04 13:07:58 | 000,224,096 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe -- (Internet Manager. RunOuc)
SRV - [2012.03.08 18:59:06 | 000,607,040 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2011.11.21 15:12:56 | 001,403,200 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2011.11.21 15:10:04 | 000,030,016 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2011.09.22 17:06:12 | 001,692,480 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files (x86)\AlienRespawn\SftService.exe -- (SftService)
SRV - [2011.08.12 01:04:58 | 000,248,304 | ---- | M] (CyberLink) [On_Demand | Stopped] -- c:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124)
SRV - [2011.08.01 17:24:00 | 003,889,424 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2011.03.14 16:27:34 | 000,346,976 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\HWDeviceService64.exe -- (HWDeviceService64.exe)
SRV - [2010.11.25 05:34:18 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12)
SRV - [2010.11.25 05:33:18 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM)
SRV - [2010.09.14 01:32:32 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013.02.24 15:17:10 | 000,088,480 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2013.02.24 15:17:10 | 000,046,400 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2013.02.10 04:25:27 | 000,448,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvstusb.sys -- (NvStUSB)
DRV:64bit: - [2013.01.31 17:12:49 | 000,054,104 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi)
DRV:64bit: - [2013.01.31 17:12:48 | 000,029,528 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
DRV:64bit: - [2013.01.31 17:12:47 | 000,613,720 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
DRV:64bit: - [2013.01.31 17:12:47 | 000,029,016 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt)
DRV:64bit: - [2013.01.31 06:08:40 | 000,467,184 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2012.12.19 06:41:52 | 000,194,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012.11.28 11:04:16 | 000,047,240 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tbhsd.sys -- (tbhsd)
DRV:64bit: - [2012.11.28 11:04:11 | 000,037,480 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rrnetcap.sys -- (RRNetCapMP)
DRV:64bit: - [2012.11.28 11:04:11 | 000,037,480 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rrnetcap.sys -- (RRNetCap)
DRV:64bit: - [2012.09.20 05:35:36 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2012.09.20 05:35:36 | 000,102,368 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2012.08.23 15:12:16 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.08.13 16:49:40 | 000,178,008 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps)
DRV:64bit: - [2012.08.02 15:09:34 | 000,028,504 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
DRV:64bit: - [2012.06.19 17:28:12 | 000,458,584 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1)
DRV:64bit: - [2012.06.04 13:07:58 | 000,421,376 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbwwan.sys -- (ewusbmbb)
DRV:64bit: - [2012.06.04 13:07:58 | 000,222,464 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard)
DRV:64bit: - [2012.06.04 13:07:58 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV:64bit: - [2012.06.04 13:07:58 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV:64bit: - [2012.06.04 13:07:58 | 000,039,552 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tcpipBM.sys -- (tcpipBM)
DRV:64bit: - [2012.06.04 13:07:58 | 000,016,512 | ---- | M] (Bytemobile, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BMLoad.sys -- (BMLoad)
DRV:64bit: - [2012.06.04 13:07:58 | 000,013,952 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter)
DRV:64bit: - [2012.03.06 19:08:32 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.28 17:45:14 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2012.02.28 17:45:14 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.12.08 05:22:28 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
DRV:64bit: - [2011.12.08 05:22:28 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
DRV:64bit: - [2011.12.08 05:22:28 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV:64bit: - [2011.09.22 21:01:54 | 000,311,144 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\RsFx0105.sys -- (RsFx0105)
DRV:64bit: - [2011.05.04 01:35:08 | 000,337,512 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:64bit: - [2011.03.17 03:14:56 | 000,521,728 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2011.03.04 01:42:38 | 008,507,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
DRV:64bit: - [2011.03.04 01:18:22 | 000,181,760 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2011.03.04 01:18:22 | 000,082,432 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2011.01.20 18:20:46 | 000,176,096 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2010.11.30 14:48:38 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2010.11.21 04:23:48 | 000,168,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc60.sys -- (netvsc)
DRV:64bit: - [2010.11.21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:64bit: - [2010.11.21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:64bit: - [2010.11.21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010.11.21 04:23:48 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusVideoM.sys -- (SynthVid)
DRV:64bit: - [2010.11.21 04:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.11.21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.10.20 00:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010.09.14 01:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.09.07 14:41:14 | 000,027,760 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelern.sys -- (Acceler)
DRV:64bit: - [2010.08.20 11:05:12 | 000,021,616 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdcfltn.sys -- (stdcfltn)
DRV:64bit: - [2010.08.17 14:17:46 | 000,344,616 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl)
DRV:64bit: - [2010.08.17 14:17:46 | 000,135,720 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2010.08.17 14:17:46 | 000,021,544 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2010.03.19 10:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010.02.27 02:32:14 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2010.02.24 11:20:40 | 000,191,616 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\acedrv11.sys -- (acedrv11)
DRV:64bit: - [2009.12.30 12:21:26 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 01:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2009.06.26 22:43:42 | 000,016,752 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EMSC.sys -- (EMSC)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2006.11.01 19:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2013.01.23 07:12:38 | 000,013,368 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI Afterburner\RTCore64.sys -- (RTCore64)
DRV - [2011.06.04 22:51:52 | 000,009,728 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Games\ArtMoney\am73964.sys -- (am7pro)
DRV - [2009.10.14 08:24:44 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009.06.26 22:43:42 | 000,013,680 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysWOW64\drivers\EMSC.sys -- (EMSC)
DRV - [2005.01.01 10:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\prxtbXfir.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.de/alienware
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-search.com/?affID=119828&babsrc=HP_ss&mntrId=2a6fe892000000000000247703491961
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\prxtbXfir.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://www.delta-search.com/?q={searchTerms}&affID=119828&babsrc=SP_ss&mntrId=2a6fe892000000000000247703491961
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..\SearchScopes\{9B4A834C-9A9A-425B-845E-484412CF9332}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10395&src=kw&q={searchTerms}&locale=&apn_ptnrs=^ABT&apn_dtid=^YYYYYY^YY^DE&apn_uid=4081b162-03e1-44b8-b9b3-12b96dd7ec4b&apn_sauid=D55E0BAF-4CCA-4B19-A307-7611279EBCE9
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.de/alienware
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\prxtbXfir.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.de/alienware
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\prxtbXfir.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2682599&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "Delta Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.delta-search.com/?affID=119828&babsrc=HP_ss&mntrId=2a6fe892000000000000247703491961"
FF - prefs.js..extensions.enabledAddons: nasanightlaunch@example.com:0.6.20121115
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_171.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ff-bmboc@bytemobile.com: C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2013.01.31 17:12:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2013.01.31 17:12:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2013.01.31 17:12:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2013.01.31 17:12:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2013.01.31 17:12:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.10.20 18:24:00 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.10.20 18:24:00 | 000,000,000 | ---D | M]
 
[2012.03.12 15:37:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Draco\AppData\Roaming\Mozilla\Extensions
[2013.03.03 12:43:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions
[2013.02.23 19:59:46 | 000,000,000 | ---D | M] (XfireXO Community Toolbar) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
[2013.02.23 19:59:44 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013.02.23 20:00:02 | 000,000,000 | ---D | M] (InnoGames Community Toolbar) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\{c7478d43-2bd5-4844-98b8-c2a6aa9ed677}
[2013.02.23 19:59:14 | 000,000,000 | ---D | M] ("Default Theme Engine - Personas Interactive") -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\btpersonas@brandthunder.com
[2013.02.26 18:46:29 | 000,000,000 | ---D | M] ("SearchGBY") -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\plugin@searchgby.com
[2013.01.19 21:08:59 | 000,000,000 | ---D | M] ("Avira SearchFree Toolbar plus Web Protection") -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\toolbar@ask.com
[2012.07.05 16:56:13 | 000,123,385 | ---- | M] () (No name found) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\elemhidehelper@adblockplus.org.xpi
[2012.11.18 10:38:21 | 002,307,149 | ---- | M] () (No name found) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\nasanightlaunch@example.com.xpi
[2013.01.19 21:08:55 | 000,538,938 | ---- | M] () (No name found) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\toolbar@web.de.xpi
[2013.02.23 19:59:49 | 000,817,280 | ---- | M] () (No name found) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.03.03 12:43:40 | 000,269,007 | ---- | M] () (No name found) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2013.02.23 20:00:04 | 000,685,671 | ---- | M] () (No name found) -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi
[2013.03.02 17:04:57 | 000,000,766 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\searchplugins\11-suche.xml
[2013.02.27 18:57:07 | 000,002,834 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\searchplugins\askcom.xml
[2013.02.27 18:57:07 | 000,001,127 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\searchplugins\conduit.xml
[2013.02.27 18:59:10 | 000,001,294 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\searchplugins\delta.xml
[2013.03.02 17:04:57 | 000,002,111 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\searchplugins\englische-ergebnisse.xml
[2013.03.02 17:04:57 | 000,010,420 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\searchplugins\gmx-suche.xml
[2013.03.02 17:04:57 | 000,002,392 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\searchplugins\lastminute.xml
[2013.03.02 17:04:57 | 000,005,400 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\Mozilla\Firefox\Profiles\abt6zpny.default\searchplugins\webde-suche.xml
[2012.10.20 18:23:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012.10.20 18:23:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
[2012.10.20 18:23:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}
[2012.10.20 18:23:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012.10.20 18:24:00 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2013.03.02 17:04:57 | 000,001,400 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.03.02 17:04:57 | 000,001,679 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2013.03.02 17:04:57 | 000,000,947 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2013.03.02 17:04:57 | 000,006,818 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.02.27 18:57:07 | 000,001,278 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.03.02 17:04:57 | 000,000,903 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Bing ()
CHR - default_search_provider: search_url = hxxp://www.bing.com/search?setmkt=de-DE&q={searchTerms}
CHR - default_search_provider: suggest_url = hxxp://api.bing.com/osjson.aspx?query={searchTerms}&language={language}
CHR - homepage: hxxp://www.google.de/
CHR - Extension: SearchGBY = C:\Users\Draco\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmijdhkcgeclpfjmibnginbbkfcbpep\0.9.55_0\
 
O1 HOSTS File: ([2012.03.08 20:54:16 | 000,441,475 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        www.008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        www.00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        www.0scan.com
O1 - Hosts: 127.0.0.1        0scan.com
O1 - Hosts: 127.0.0.1        www.1000gratisproben.com
O1 - Hosts: 127.0.0.1        1000gratisproben.com
O1 - Hosts: 127.0.0.1        1001namen.com
O1 - Hosts: 127.0.0.1        www.1001namen.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        www.100888290cs.com
O1 - Hosts: 127.0.0.1        www.100sexlinks.com
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.10sek.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        www.1-2005-search.com
O1 - Hosts: 127.0.0.1        1-2005-search.com
O1 - Hosts: 127.0.0.1        www.123fporn.info
O1 - Hosts: 15172 more lines...
O2:64bit: - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
O2:64bit: - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2:64bit: - BHO: (Safe Money Plugin) - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
O2:64bit: - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O2:64bit: - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\prxtbXfir.dll (Conduit Ltd.)
O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Safe Money Plugin) - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files (x86)\XfireXO\prxtbXfir.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: []  File not found
O4:64bit: - HKLM..\Run: [boincmgr] C:\Program Files\BOINC\boincmgr.exe (Space Sciences Laboratory)
O4:64bit: - HKLM..\Run: [boinctray] C:\Program Files\BOINC\boinctray.exe (Space Sciences Laboratory)
O4:64bit: - HKLM..\Run: [Command Center Controllers] C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe (Alienware)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AlienwareOn-ScreenDisplay] C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe ()
O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [Integrated Webcam Live! Central] C:\Program Files (x86)\Integrated Webcam\Live! Central\WebcamInt.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000..\Run: [Spotify] C:\Users\Draco\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000..\Run: [Spotify Web Helper] C:\Users\Draco\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019..\Run: [Akamai NetSession Interface] C:\Users\Draco\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019..\Run: [EA Core] C:\Program Files (x86)\Electronic Arts\EA Link\Core.exe -silent File not found
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019..\Run: [Internet Manager] C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe ()
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019..\Run: [rfxsrvtray] C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe (Tobit.Software)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020..\Run: [Akamai NetSession Interface] C:\Users\Draco\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020..\Run: [EA Core] C:\Program Files (x86)\Electronic Arts\EA Link\Core.exe -silent File not found
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020..\Run: [Internet Manager] C:\Program Files (x86)\T-Mobile\InternetManager_H\Internet Manager.exe ()
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020..\Run: [rfxsrvtray] C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe (Tobit.Software)
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKLM..\RunOnce: [SpybotDeletingA6911] command.com /c del "C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml" File not found
O4 - HKLM..\RunOnce: [SpybotDeletingC8369] cmd.exe /c del "C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml" File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000..\RunOnce: [SpybotDeletingB9880] command.com /c del "C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml" File not found
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000..\RunOnce: [SpybotDeletingD9847] cmd.exe /c del "C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml" File not found
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found
O8:64bit: - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm ()
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm ()
O9:64bit: - Extra Button: Virtuelle Tastatur - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O9:64bit: - Extra Button: Links untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Virtuelle Tastatur - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Links untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..Trusted Domains: dell.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1000\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1019\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1503614190-581956262-4018303520-1020\..Trusted Domains: sony.com ([]* in Trusted sites)
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1FA38330-5782-44DE-B030-C763F3C82E97}: NameServer = 10.111.81.129 10.129.32.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{751CB4AC-2956-410B-B93C-68ED5ED03CBF}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7FA4BB78-8895-4C48-99B5-0D9DAE3F15EE}: NameServer = 10.74.210.210 10.74.210.211
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A22F4455-0746-4345-91CE-6829482F76A1}: NameServer = 10.129.32.1 10.111.81.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D2763C48-FDE7-4683-8BB6-7D5C39768193}: NameServer = 10.129.32.1 10.111.81.129
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) -  File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -  File not found
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29:64bit: - HKLM SecurityProviders - (credssp.dll) -  File not found
O29 - HKLM SecurityProviders - (credssp.dll) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{984133bc-afa5-11e1-916a-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{984133bc-afa5-11e1-916a-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c77b40a2-ae30-11e1-bb6d-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{c77b40a2-ae30-11e1-bb6d-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c77b40d3-ae30-11e1-bb6d-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{c77b40d3-ae30-11e1-bb6d-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c77b4104-ae30-11e1-bb6d-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{c77b4104-ae30-11e1-bb6d-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c77b4119-ae30-11e1-bb6d-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{c77b4119-ae30-11e1-bb6d-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c77b4126-ae30-11e1-bb6d-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{c77b4126-ae30-11e1-bb6d-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c77b4179-ae30-11e1-bb6d-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{c77b4179-ae30-11e1-bb6d-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c77b4192-ae30-11e1-bb6d-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{c77b4192-ae30-11e1-bb6d-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{f00001b4-abc6-11e1-a60b-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{f00001b4-abc6-11e1-a60b-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{f00001b9-abc6-11e1-a60b-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{f00001b9-abc6-11e1-a60b-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{f00001ca-abc6-11e1-a60b-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{f00001ca-abc6-11e1-a60b-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{f000028f-abc6-11e1-a60b-9cb70d52820c}\Shell - "" = AutoRun
O33 - MountPoints2\{f000028f-abc6-11e1-a60b-9cb70d52820c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.03.03 14:02:12 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Draco\Desktop\OTL.exe
[2013.03.03 14:00:43 | 010,156,344 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\Draco\Desktop\mbam-setup-1.70.0.1100.exe
[2013.03.03 13:25:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2013.03.03 13:25:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2013.03.03 11:23:01 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\Draco\Desktop\HijackThis.exe
[2013.03.02 18:23:30 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\Synaptics
[2013.03.01 20:34:40 | 006,393,120 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2013.03.01 20:34:40 | 003,472,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2013.03.01 20:34:40 | 002,555,680 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
[2013.03.01 20:34:40 | 000,237,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2013.03.01 20:34:40 | 000,063,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2013.03.01 20:33:51 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2013.03.01 20:32:30 | 026,947,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2013.03.01 20:32:30 | 020,534,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2013.03.01 20:32:30 | 015,275,744 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2013.03.01 20:32:30 | 012,862,400 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2013.03.01 20:32:30 | 007,569,184 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2013.03.01 20:32:30 | 006,267,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2013.03.01 20:32:30 | 001,510,328 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco6420103.dll
[2013.03.01 20:32:30 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvir3dgenco6420162.dll
[2013.03.01 20:32:30 | 000,448,288 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvstusb.sys
[2013.03.01 20:32:30 | 000,194,488 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
[2013.03.01 20:32:30 | 000,031,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
[2013.03.01 20:32:29 | 025,256,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2013.03.01 20:32:29 | 017,987,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2013.03.01 20:32:29 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2013.03.01 20:32:29 | 015,038,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2013.03.01 20:32:29 | 009,422,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2013.03.01 20:32:29 | 007,964,680 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2013.03.01 20:32:29 | 002,911,008 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2013.03.01 20:32:29 | 002,854,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2013.03.01 20:32:29 | 002,726,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2013.03.01 20:32:29 | 002,528,840 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2013.03.01 20:32:29 | 002,350,368 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2013.03.01 20:32:29 | 001,990,944 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2013.03.01 20:32:29 | 001,807,136 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6420294.dll
[2013.03.01 20:32:29 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6420162.dll
[2013.03.01 17:43:21 | 000,652,288 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapi64.dll
[2013.03.01 17:42:34 | 000,000,000 | ---D | C] -- C:\Program Files\IDT
[2013.02.27 20:16:11 | 002,776,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2013.02.27 20:16:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2013.02.27 20:16:11 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2013.02.27 20:16:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2013.02.27 20:16:08 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013.02.27 20:16:08 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013.02.27 20:16:05 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2013.02.27 20:16:05 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2013.02.27 20:16:05 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2013.02.27 20:16:05 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2013.02.27 20:16:05 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.02.27 20:16:05 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.02.27 20:16:05 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.02.27 20:16:05 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.02.27 20:16:05 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.02.27 20:16:05 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.02.27 20:16:05 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013.02.27 20:16:05 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013.02.27 20:16:05 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.02.27 20:16:05 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.02.27 20:16:05 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.02.27 20:16:04 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2013.02.27 20:16:04 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2013.02.27 20:16:04 | 001,682,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2013.02.27 20:16:04 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2013.02.27 20:16:04 | 001,504,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2013.02.27 20:16:04 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2013.02.27 20:16:04 | 001,238,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2013.02.27 20:16:04 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2013.02.27 20:16:04 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2013.02.27 20:16:04 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2013.02.27 20:16:04 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2013.02.27 20:16:04 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2013.02.27 20:16:04 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2013.02.27 20:16:04 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.02.27 20:16:04 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.02.27 20:16:04 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.02.27 20:16:04 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.02.27 20:16:04 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.02.27 20:16:04 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.02.27 20:16:04 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.02.27 19:00:18 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\JAM Software
[2013.02.27 18:57:07 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\Opera
[2013.02.27 18:56:59 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\OCS
[2013.02.26 17:09:49 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
[2013.02.26 17:09:32 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Local\Deployment
[2013.02.26 17:09:32 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Local\Apps
[2013.02.25 18:49:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Alienware On-Screen Display
[2013.02.25 16:58:41 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Secrets of Da Vinci
[2013.02.25 16:58:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secrets of Da Vinci
[2013.02.25 16:53:53 | 000,000,000 | ---D | C] -- C:\Windows\Secrets of Da Vinci
[2013.02.25 16:53:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Secrets of Da Vinci
[2013.02.24 21:53:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Uninstall
[2013.02.24 21:50:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\SureThing Shared
[2013.02.24 21:50:03 | 000,000,000 | ---D | C] -- C:\ProgramData\PhotoShow Shared Assets
[2013.02.24 21:49:56 | 000,000,000 | ---D | C] -- C:\Program Files\Roxio
[2013.02.24 21:49:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio Creator Starter
[2013.02.24 21:46:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine
[2013.02.24 21:46:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Sonic Shared
[2013.02.24 21:45:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Roxio
[2013.02.24 21:31:05 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\Roxio Log Files
[2013.02.24 15:17:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Tages
[2013.02.24 15:12:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Peter Games
[2013.02.24 15:10:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Peter Games
[2013.02.24 11:30:18 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Local\capcom
[2013.02.24 10:22:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CAPCOM
[2013.02.23 18:40:33 | 000,000,000 | ---D | C] -- C:\Users\Draco\Desktop\Neuer Ordner (3)
[2013.02.23 12:48:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor 2.5
[2013.02.23 12:48:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSI Kombustor 2.5
[2013.02.23 12:47:00 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
[2013.02.23 12:46:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSI Afterburner
[2013.02.23 12:20:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Tarma Installer
[2013.02.23 12:20:08 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\BrowserCompanion
[2013.02.21 18:24:56 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Local\NVIDIA
[2013.02.14 20:01:58 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.02.14 20:01:58 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.02.14 20:01:57 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.02.14 20:01:57 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.02.14 20:01:57 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.02.14 20:01:57 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.02.14 20:01:57 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.02.14 20:01:57 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.02.14 20:01:57 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.02.14 20:01:56 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.02.14 20:01:56 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.02.14 20:01:56 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.02.14 20:01:55 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.02.14 20:01:55 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.02.14 20:01:55 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.02.14 18:00:25 | 005,553,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013.02.14 18:00:25 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2013.02.14 18:00:24 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2013.02.14 18:00:15 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2013.02.14 18:00:15 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2013.02.14 18:00:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2013.02.14 18:00:15 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2013.02.14 18:00:15 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2013.02.14 18:00:15 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2013.02.14 18:00:05 | 000,288,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2013.02.12 18:01:42 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Local\EA Games
[2013.02.09 18:43:52 | 000,555,808 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvStreaming.exe
[2013.02.05 21:05:57 | 000,000,000 | ---D | C] -- C:\Users\Draco\Desktop\TheHunter2013
[2013.02.05 16:48:21 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Local\Nexway
[2013.02.02 14:25:50 | 000,000,000 | ---D | C] -- C:\Users\Draco\Documents\theHunter
[2013.02.02 14:23:46 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Local\theHunter
[2013.02.02 12:06:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2013.02.02 10:16:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Hunter
[2013.02.02 10:16:08 | 000,000,000 | ---D | C] -- C:\Users\Draco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\theHunter
[2013.02.02 10:15:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\theHunter
[7 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[5 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[5 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.03.03 14:02:15 | 010,156,344 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Users\Draco\Desktop\mbam-setup-1.70.0.1100.exe
[2013.03.03 14:02:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Draco\Desktop\OTL.exe
[2013.03.03 13:56:18 | 000,000,123 | ---- | M] () -- C:\Windows\wininit.ini
[2013.03.03 13:44:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.03.03 13:25:10 | 000,001,220 | ---- | M] () -- C:\Users\Draco\Desktop\Spybot - Search & Destroy.lnk
[2013.03.03 13:19:01 | 000,021,280 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.03.03 13:19:01 | 000,021,280 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.03.03 13:05:23 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.03.03 11:22:58 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\Draco\Desktop\HijackThis.exe
[2013.03.02 18:49:19 | 000,833,296 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.03.02 18:49:19 | 000,829,274 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2013.03.02 18:49:19 | 000,829,106 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat
[2013.03.02 18:49:19 | 000,827,238 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat
[2013.03.02 18:49:19 | 000,824,182 | ---- | M] () -- C:\Windows\SysNative\perfh010.dat
[2013.03.02 18:49:19 | 000,823,570 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2013.03.02 18:49:19 | 000,767,758 | ---- | M] () -- C:\Windows\SysNative\perfh00E.dat
[2013.03.02 18:49:19 | 000,751,156 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2013.03.02 18:49:19 | 000,745,532 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.03.02 18:49:19 | 000,691,950 | ---- | M] () -- C:\Windows\SysNative\perfh008.dat
[2013.03.02 18:49:19 | 000,591,980 | ---- | M] () -- C:\Windows\SysNative\perfh006.dat
[2013.03.02 18:49:19 | 000,576,832 | ---- | M] () -- C:\Windows\SysNative\perfh014.dat
[2013.03.02 18:49:19 | 000,564,294 | ---- | M] () -- C:\Windows\SysNative\perfh00B.dat
[2013.03.02 18:49:19 | 000,561,696 | ---- | M] () -- C:\Windows\SysNative\perfh001.dat
[2013.03.02 18:49:19 | 000,507,898 | ---- | M] () -- C:\Windows\SysNative\perfh012.dat
[2013.03.02 18:49:19 | 000,496,214 | ---- | M] () -- C:\Windows\SysNative\perfh011.dat
[2013.03.02 18:49:19 | 000,474,120 | ---- | M] () -- C:\Windows\SysNative\perfh00D.dat
[2013.03.02 18:49:19 | 000,218,416 | ---- | M] () -- C:\Windows\SysNative\perfc00E.dat
[2013.03.02 18:49:19 | 000,205,272 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat
[2013.03.02 18:49:19 | 000,202,488 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2013.03.02 18:49:19 | 000,199,210 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat
[2013.03.02 18:49:19 | 000,197,616 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.03.02 18:49:19 | 000,195,528 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2013.03.02 18:49:19 | 000,193,210 | ---- | M] () -- C:\Windows\SysNative\perfc010.dat
[2013.03.02 18:49:19 | 000,187,422 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2013.03.02 18:49:19 | 000,167,940 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.03.02 18:49:19 | 000,167,594 | ---- | M] () -- C:\Windows\SysNative\perfc011.dat
[2013.03.02 18:49:19 | 000,165,882 | ---- | M] () -- C:\Windows\SysNative\perfc012.dat
[2013.03.02 18:49:19 | 000,158,082 | ---- | M] () -- C:\Windows\SysNative\perfc008.dat
[2013.03.02 18:49:19 | 000,147,614 | ---- | M] () -- C:\Windows\SysNative\perfc00B.dat
[2013.03.02 18:49:19 | 000,144,818 | ---- | M] () -- C:\Windows\SysNative\perfc006.dat
[2013.03.02 18:49:19 | 000,140,976 | ---- | M] () -- C:\Windows\SysNative\perfc014.dat
[2013.03.02 18:49:19 | 000,140,190 | ---- | M] () -- C:\Windows\SysNative\perfc001.dat
[2013.03.02 18:49:19 | 000,130,300 | ---- | M] () -- C:\Windows\SysNative\perfc00D.dat
[2013.03.02 18:49:19 | 000,113,638 | ---- | M] () -- C:\Windows\SysNative\prfh0416.dat
[2013.03.02 18:49:19 | 000,113,400 | ---- | M] () -- C:\Windows\SysNative\prfh0816.dat
[2013.03.02 18:49:19 | 000,112,952 | ---- | M] () -- C:\Windows\SysNative\perfh019.dat
[2013.03.02 18:49:19 | 000,111,348 | ---- | M] () -- C:\Windows\SysNative\perfh01F.dat
[2013.03.02 18:49:19 | 000,111,012 | ---- | M] () -- C:\Windows\SysNative\perfh01D.dat
[2013.03.02 18:49:19 | 000,097,564 | ---- | M] () -- C:\Windows\SysNative\prfh0404.dat
[2013.03.02 18:49:19 | 000,096,906 | ---- | M] () -- C:\Windows\SysNative\prfh0804.dat
[2013.03.02 18:49:19 | 000,058,850 | ---- | M] () -- C:\Windows\SysNative\prfc0416.dat
[2013.03.02 18:49:19 | 000,058,716 | ---- | M] () -- C:\Windows\SysNative\prfc0816.dat
[2013.03.02 18:49:19 | 000,058,266 | ---- | M] () -- C:\Windows\SysNative\perfc019.dat
[2013.03.02 18:49:19 | 000,058,248 | ---- | M] () -- C:\Windows\SysNative\perfc01D.dat
[2013.03.02 18:49:19 | 000,058,184 | ---- | M] () -- C:\Windows\SysNative\perfc01F.dat
[2013.03.02 18:49:19 | 000,056,532 | ---- | M] () -- C:\Windows\SysNative\prfc0804.dat
[2013.03.02 18:49:19 | 000,056,532 | ---- | M] () -- C:\Windows\SysNative\prfc0404.dat
[2013.03.02 18:49:19 | 000,007,996 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.03.02 18:37:57 | 000,001,803 | ---- | M] () -- C:\Users\Public\Desktop\Alienware Command Center.lnk
[2013.03.02 15:45:04 | 000,467,968 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.03.01 21:10:53 | 000,005,037 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\EasyToolz.ini
[2013.03.01 16:47:46 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013.03.01 16:47:46 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013.02.26 19:10:18 | 000,066,155 | ---- | M] () -- C:\Users\Draco\Desktop\bluescreenview_147.zip
[2013.02.25 16:58:41 | 000,001,905 | ---- | M] () -- C:\Users\Draco\Desktop\The Secrets Of Da Vinci.lnk
[2013.02.24 21:49:38 | 000,002,124 | ---- | M] () -- C:\Users\Public\Desktop\Roxio Creator Starter.lnk
[2013.02.24 15:17:10 | 000,088,480 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys
[2013.02.24 15:17:10 | 000,046,400 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys
[2013.02.24 15:12:47 | 000,002,305 | ---- | M] () -- C:\Users\Draco\Desktop\Nostradamus - Die letzte Prophezeiung.lnk
[2013.02.24 11:29:58 | 000,001,672 | ---- | M] () -- C:\Users\Draco\Desktop\LPCLauncher.exe.lnk
[2013.02.22 19:28:17 | 000,504,922 | ---- | M] () -- C:\Users\Draco\Desktop\Crysis 3 v1.0 +6 Trainer.rar
[2013.02.19 17:45:42 | 003,325,720 | ---- | M] (Tobit.Software) -- C:\Windows\RXSUnins.exe
[2013.02.19 17:45:42 | 003,325,720 | ---- | M] (Tobit.Software) -- C:\Windows\RXCUnins.exe
[2013.02.14 17:52:17 | 000,547,804 | ---- | M] () -- C:\Users\Draco\Desktop\DEAD SPACE 3 (+5 TRAINER).zip
[2013.02.13 01:26:34 | 000,042,880 | ---- | M] () -- C:\Windows\SysWow64\xfcodec.dll
[2013.02.13 01:26:34 | 000,028,544 | ---- | M] () -- C:\Windows\SysNative\xfcodec64.dll
[2013.02.11 18:52:37 | 000,000,049 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\TheHunterSettings_live.cfg
[2013.02.10 21:56:26 | 000,628,127 | ---- | M] () -- C:\Users\Draco\Desktop\Dead Space Trainer +3 v1.0.0.222.zip
[2013.02.10 20:04:21 | 000,004,096 | ---- | M] () -- C:\Windows\d3dx.dat
[2013.02.10 19:34:26 | 000,007,598 | ---- | M] () -- C:\Users\Draco\AppData\Local\resmon.resmoncfg
[2013.02.10 04:25:27 | 026,947,360 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2013.02.10 04:25:27 | 025,256,736 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2013.02.10 04:25:27 | 020,534,560 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2013.02.10 04:25:27 | 017,987,192 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2013.02.10 04:25:27 | 017,560,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2013.02.10 04:25:27 | 015,275,744 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2013.02.10 04:25:27 | 015,038,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2013.02.10 04:25:27 | 012,862,400 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2013.02.10 04:25:27 | 009,422,672 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2013.02.10 04:25:27 | 007,964,680 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2013.02.10 04:25:27 | 007,569,184 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2013.02.10 04:25:27 | 006,267,240 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2013.02.10 04:25:27 | 002,911,008 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2013.02.10 04:25:27 | 002,854,344 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2013.02.10 04:25:27 | 002,726,176 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2013.02.10 04:25:27 | 002,528,840 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2013.02.10 04:25:27 | 002,350,368 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2013.02.10 04:25:27 | 001,990,944 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2013.02.10 04:25:27 | 001,807,136 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6420294.dll
[2013.02.10 04:25:27 | 001,510,176 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvir3dgenco6420162.dll
[2013.02.10 04:25:27 | 001,510,176 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6420162.dll
[2013.02.10 04:25:27 | 000,448,288 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvstusb.sys
[2013.02.10 04:25:27 | 000,017,738 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
[2013.02.10 02:04:31 | 006,393,120 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2013.02.10 02:04:31 | 003,472,672 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2013.02.10 02:04:29 | 002,555,680 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
[2013.02.10 02:04:29 | 000,237,856 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2013.02.10 02:04:29 | 000,063,776 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2013.02.09 18:43:52 | 000,555,808 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvStreaming.exe
[2013.02.07 16:34:50 | 000,101,548 | ---- | M] () -- C:\Users\Draco\Desktop\Drachenbaby.jpg
[2013.02.07 16:34:50 | 000,000,840 | ---- | M] () -- C:\Users\Draco\.recently-used.xbel
[2013.02.06 19:56:47 | 000,048,225 | ---- | M] () -- C:\Users\Draco\Desktop\Blackdragon.jpg
[2013.02.03 13:06:33 | 000,011,869 | ---- | M] () -- C:\Users\Draco\AppData\Roaming\TheHunterSettings_live.bin
[7 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[5 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[5 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.03.03 13:56:18 | 000,000,123 | ---- | C] () -- C:\Windows\wininit.ini
[2013.03.03 13:25:10 | 000,001,220 | ---- | C] () -- C:\Users\Draco\Desktop\Spybot - Search & Destroy.lnk
[2013.03.02 18:37:57 | 000,001,803 | ---- | C] () -- C:\Users\Public\Desktop\Alienware Command Center.lnk
[2013.03.01 20:32:29 | 000,017,738 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2013.02.26 19:10:21 | 000,066,155 | ---- | C] () -- C:\Users\Draco\Desktop\bluescreenview_147.zip
[2013.02.25 16:58:41 | 000,001,905 | ---- | C] () -- C:\Users\Draco\Desktop\The Secrets Of Da Vinci.lnk
[2013.02.24 21:49:38 | 000,002,124 | ---- | C] () -- C:\Users\Public\Desktop\Roxio Creator Starter.lnk
[2013.02.24 15:12:47 | 000,002,305 | ---- | C] () -- C:\Users\Draco\Desktop\Nostradamus - Die letzte Prophezeiung.lnk
[2013.02.24 14:47:59 | 000,088,480 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys
[2013.02.24 14:47:59 | 000,046,400 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys
[2013.02.24 11:29:58 | 000,001,672 | ---- | C] () -- C:\Users\Draco\Desktop\LPCLauncher.exe.lnk
[2013.02.22 19:28:09 | 000,504,922 | ---- | C] () -- C:\Users\Draco\Desktop\Crysis 3 v1.0 +6 Trainer.rar
[2013.02.14 17:52:22 | 000,547,804 | ---- | C] () -- C:\Users\Draco\Desktop\DEAD SPACE 3 (+5 TRAINER).zip
[2013.02.13 01:26:34 | 000,042,880 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
[2013.02.13 01:26:34 | 000,028,544 | ---- | C] () -- C:\Windows\SysNative\xfcodec64.dll
[2013.02.10 21:55:54 | 000,628,127 | ---- | C] () -- C:\Users\Draco\Desktop\Dead Space Trainer +3 v1.0.0.222.zip
[2013.02.10 20:04:21 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2013.02.07 16:34:50 | 000,000,840 | ---- | C] () -- C:\Users\Draco\.recently-used.xbel
[2013.02.06 20:00:02 | 000,048,225 | ---- | C] () -- C:\Users\Draco\Desktop\Blackdragon.jpg
[2013.02.06 19:55:44 | 000,101,548 | ---- | C] () -- C:\Users\Draco\Desktop\Drachenbaby.jpg
[2013.02.02 14:26:27 | 000,011,869 | ---- | C] () -- C:\Users\Draco\AppData\Roaming\TheHunterSettings_live.bin
[2013.02.02 14:23:15 | 000,000,049 | ---- | C] () -- C:\Users\Draco\AppData\Roaming\TheHunterSettings_live.cfg
[2012.10.28 20:26:16 | 000,005,632 | ---- | C] () -- C:\Users\Draco\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.10.28 17:59:09 | 000,007,598 | ---- | C] () -- C:\Users\Draco\AppData\Local\resmon.resmoncfg
[2012.09.28 20:45:06 | 000,247,296 | ---- | C] () -- C:\Windows\SysWow64\rtvcvfw32.dll
[2012.09.26 09:07:26 | 003,130,440 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_blr.exe
[2012.06.19 13:02:17 | 003,123,272 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2012.06.16 17:14:50 | 000,184,320 | ---- | C] () -- C:\Windows\SysWow64\miccyhook.dll
[2012.06.15 16:13:58 | 000,022,384 | ---- | C] () -- C:\Windows\SysWow64\LightFX.dll
[2012.05.22 16:47:02 | 000,113,180 | ---- | C] () -- C:\Users\Draco\AppData\Roaming\icarus-dxdiag.xml
[2012.04.06 22:12:01 | 000,000,000 | ---- | C] () -- C:\Users\Draco\hsqlprefs.dat
[2012.03.10 14:01:45 | 002,648,064 | ---- | C] () -- C:\Windows\SysWow64\dvmsg.dll
[2012.03.10 11:48:36 | 000,281,688 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.03.10 11:48:36 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.03.09 14:54:54 | 000,005,037 | ---- | C] () -- C:\Users\Draco\AppData\Roaming\EasyToolz.ini
[2012.03.08 22:21:48 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll
[2012.02.14 13:20:40 | 000,002,093 | ---- | C] () -- C:\ProgramData\ENGPOL.2012-02.pl.nicolasgames_4F1DC181-E82E-4492-94DF-511B0A5FD4C0.swidtag
[2012.01.31 17:15:44 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012.01.31 17:15:42 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2012.01.31 17:15:42 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2012.01.31 17:15:42 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2012.01.31 17:15:42 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011.09.28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.06.27 09:07:14 | 000,098,232 | ---- | C] () -- C:\Windows\SysWow64\CCBiosSupportAPI.dll
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2012.11.01 10:45:27 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Acreon
[2012.04.04 18:51:13 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Bioshock
[2012.10.05 20:50:33 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\BitTorrent
[2012.04.04 16:37:18 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\bizarre creations
[2013.03.02 17:25:19 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\BrowserCompanion
[2012.08.31 09:48:54 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Command & Conquer 3 Tiberium Wars
[2012.03.16 22:39:04 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Dev-Cpp
[2012.08.03 18:28:40 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\EoN
[2012.03.08 20:59:45 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\fltk.org
[2012.11.09 13:48:05 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Galaxy on Fire 2 Full HD
[2012.09.11 15:23:08 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\GetRightToGo
[2012.04.20 17:57:16 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\gnupg
[2012.12.10 00:01:35 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\gtk-2.0
[2012.03.09 19:29:21 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\IDT
[2013.02.27 19:09:50 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\JAM Software
[2012.03.12 15:43:21 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Media Finder
[2012.09.05 17:13:32 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\NCH Swift Sound
[2012.10.05 20:31:09 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Need for Speed World
[2013.03.02 17:05:30 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\OCS
[2013.02.27 18:57:07 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Opera
[2012.11.17 20:43:02 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Origin
[2012.03.10 18:44:37 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\PCDr
[2012.11.04 09:23:04 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\PlayFirst
[2012.11.08 19:04:37 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\ProtectDISC
[2012.04.01 19:27:37 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Samsung
[2012.10.26 10:35:25 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\six-updater
[2012.10.26 10:33:15 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\six-zsync
[2012.06.26 18:08:45 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Sports Interactive
[2013.03.03 14:16:31 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Spotify
[2013.03.02 18:23:30 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Synaptics
[2012.03.08 22:38:57 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\System
[2012.06.01 10:02:36 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\T-Mobile
[2012.06.09 11:40:27 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Temp
[2013.01.03 17:28:07 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\The Creative Assembly
[2012.03.20 21:07:19 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Tobit
[2012.10.26 12:40:44 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\ts3overlay
[2012.10.26 12:40:58 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\ts3overlay_hook_win64
[2012.03.08 17:46:12 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\TuneUp Software
[2012.10.31 17:44:24 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\Ubisoft
[2012.10.05 15:46:59 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\wargaming.net
[2012.08.18 20:17:21 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\WinBatch
[2012.03.08 22:40:03 | 000,000,000 | -HSD | M] -- C:\Users\Draco\AppData\Roaming\wyUpdate AU
[2012.05.13 10:49:37 | 000,000,000 | ---D | M] -- C:\Users\Draco\AppData\Roaming\XRay Engine
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:05EE1EEF

< End of report >
--- --- ---

Darkshadow77 03.03.2013 21:26
2. Logfile - Teil 1:
Code:
OTL Extras logfile created on: 03.03.2013 14:04:18 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Draco\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 5,01 Gb Available Physical Memory | 62,73% Memory free
15,96 Gb Paging File | 12,57 Gb Available in Paging File | 78,76% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 688,86 Gb Total Space | 216,99 Gb Free Space | 31,50% Space Free | Partition Type: NTFS
 
Computer Name: DRACO-PC | User Name: Draco | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
.reg [@ = regfile] -- regedit.exe "%1"
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.reg [@ = regfile] -- regedit.exe "%1"
 
[HKEY_USERS\S-1-5-21-1503614190-581956262-4018303520-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [open] -- regedit.exe "%1"
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V"
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [open] -- regedit.exe "%1"
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V"
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{031A122D-D577-4457-8F74-F67EE78B075C}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{04A6BF93-E3E6-4E5D-A508-10E8077287BE}" = lport=2869 | protocol=6 | dir=in | app=system |
"{0D0AF8D0-82BB-4E61-A244-2F4B267FC6BA}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{161374C6-F859-4E34-8C72-E4D85C29736D}" = lport=137 | protocol=17 | dir=in | app=system |
"{1A14FD92-3C3B-47DB-9E97-8EDE248931C6}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{22A37095-5C87-44B9-82DB-A54E2CFB425E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3A46C092-EE70-4821-8E85-AEE58D795993}" = rport=445 | protocol=6 | dir=out | app=system |
"{48A649C0-2128-474D-B36B-BEEB6E0EF8DB}" = rport=138 | protocol=17 | dir=out | app=system |
"{4B61FDB5-956B-4086-AEB6-539B0C36802A}" = rport=137 | protocol=17 | dir=out | app=system |
"{4E9258C8-7F61-4AFC-9DF0-F56D90A40871}" = lport=2869 | protocol=6 | dir=in | app=system |
"{4EBAEADA-0D0F-4BB8-84D7-0B075C858B2B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5EB614F0-2F7E-4B42-A387-0A8528D9FC22}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{63FE6E29-42E5-4C2A-B92A-FA1E96E39D42}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{74178DD1-8F02-4E59-A86C-FB8D3C010598}" = lport=12972 | protocol=6 | dir=in | name=audials localhttpserver 12972 |
"{75F5A15F-6DCC-4332-9A1E-50D9F81B22C7}" = lport=139 | protocol=6 | dir=in | app=system |
"{79339585-9BBD-47A1-B471-19A4AFD9AD11}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
"{84278F52-8EEF-403B-A6CA-C0E70375339B}" = rport=139 | protocol=6 | dir=out | app=system |
"{855CF942-D0C7-4916-B39B-30469289A45B}" = rport=10243 | protocol=6 | dir=out | app=system |
"{8E958C89-2E5A-46C9-8572-87401ED44BDB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9FFF4DD3-77B2-4996-A8DF-25AC3F6F53D7}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{B58296D2-FFC5-45E5-BF6C-8C8CC31B2A33}" = lport=10243 | protocol=6 | dir=in | app=system |
"{B981C0E7-C1D1-411A-ADB0-A5C346207EB5}" = rport=2869 | protocol=6 | dir=out | app=system |
"{CA6F956F-6232-4B02-8217-CF5BE533847F}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CE937B43-648D-4E7F-80F3-5C102794EB13}" = lport=31931 | protocol=6 | dir=in | name=audials localhttpserver 31931 |
"{D0D90C1E-0777-4B8C-A289-B656B9BC366F}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DAA3D0C6-689F-4B4F-84E7-05683614BC6E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DDD7A515-D1D9-4DC0-862F-A254E03101B0}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E02EA900-914F-4C5C-A853-FB1F9C50570E}" = lport=445 | protocol=6 | dir=in | app=system |
"{F3BDE11A-960A-420D-ADEF-05E7C39AE409}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{F3E6979C-EA8B-48D5-9B55-5BA000CC884A}" = lport=14714 | protocol=6 | dir=in | name=audials localhttpserver 14714 |
"{F3ED5832-E5AA-4D14-AB0C-2C882AD995AD}" = lport=138 | protocol=17 | dir=in | app=system |
"{F79F2FB6-F8D4-4B1C-B55A-2D8626728EE7}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{FB53CEAD-9546-4989-AE95-556A580160D4}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0005199B-61E7-4705-BE0A-D0D2BF04B3A0}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\metro 2033\metro2033.exe |
"{001BB54A-881D-4FED-9B95-8E016601444C}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe |
"{00476C33-4FD6-4683-8346-E9F62C329658}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{006AB649-D405-44A3-9C66-71280F2C33E5}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe |
"{00A78A9D-2DE7-4DBE-A677-255581206C3F}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\jedi academy\gamedata\jasp.exe |
"{01307B1E-6CBC-49B1-9356-5D398857F71F}" = protocol=17 | dir=in | app=c:\program files (x86)\bitcomposer games\s.t.a.l.k.e.r. - call of pripyat\bin\xrengine.exe |
"{01D4D293-BE2B-4667-BCF6-F6E950DCC12A}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\euro truck simulator 2\bin\win_x86\eurotrucks2.exe |
"{025B81A9-62F4-4B32-A3D8-8902245D7C0D}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\x-tension\runme.exe |
"{0403E16C-13E4-4A92-8539-C572673C6E57}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe |
"{04EB1409-5590-4C43-844C-79232FB4736A}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{055EFF4B-AD6D-421C-9A35-45FFB6F5EE2E}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars empire at war\runme.exe |
"{05AE9777-CF9D-4EEC-A152-DB3F7A55965B}" = protocol=17 | dir=in | app=c:\program files (x86)\bitcomposer games\s.t.a.l.k.e.r. - call of pripyat\bin\dedicated\xrengine.exe |
"{06329662-7183-45CE-AD76-8D6B3AEC90A8}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dead island\deadislandgame.exe |
"{081AB853-E201-4DE8-8770-A4BCF0322D30}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars jedi knight\jk.exe |
"{0842B766-CBF6-4473-BAEE-1C1DF01F6EDE}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia forgotten sands\prince of persia.exe |
"{0852EE52-9E70-4E0B-9548-CCC967056052}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\resident evil operation raccoon city\raccooncity.exe |
"{095041F1-25B4-4562-88E6-3EAE0ED6BA7D}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd9.exe |
"{09E93C40-6D03-492F-B1BD-0435D3349D7C}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hitman blood money\configure.exe |
"{0A9C9163-434F-45E1-8068-9D8FE5031BF7}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 3 tiberium wars\support\ea help\electronic_arts_technical_support.htm |
"{0B1973D4-F273-4464-8A5E-C1F9F0F2ACCD}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{0C4EC097-2DD3-4687-9628-8ADCE51F2044}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\deus ex - human revolution\dxhr.exe |
"{0CCD3B67-1D26-463C-9C7E-56E647E00687}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dragon age ii\dragonage2launcher.exe |
"{0D2984F3-0580-4C08-9CBE-8F60FF52B1BF}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hitman 2 silent assassin\hitman2.exe |
"{0D6B4511-9E04-419C-9770-8B42404EE3DF}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\prototype\prototypef.exe |
"{0E06F769-CFD2-4249-9FEE-A76B52C30DD2}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\grid\grid.exe |
"{0E2AFA9C-9433-457E-AB19-77122ADB3C18}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"{0F0A8A97-D3ED-4B03-AF43-2B01E59B490A}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\rage\rage64.exe |
"{0F6E6BD7-0C39-4C9A-B0E8-50319433A2E2}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\arma 2\arma2.exe |
"{0FA3EFA2-8079-4F89-9E88-088B7FE561A9}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\amnesia the dark descent\launcher.exe |
"{0FC5D3DD-9303-483B-842C-F628AE587D39}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\binaries\eacoreserver.exe |
"{0FD417D2-FDCE-40D8-ADF3-6AC28A58E4CA}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\the walking dead\walkingdead101.exe |
"{104A9E35-BF78-482A-B229-784D5E9F4C83}" = protocol=17 | dir=in | app=c:\program files (x86)\capcom\lostplanetcolonies\lostplanetcoloniesdx9.exe |
"{11811AA6-3F45-4B71-B71A-1755581DC18C}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{11ACF068-7F07-42C3-8FA5-4395282420A0}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{12E500C8-22BF-4A6F-B454-1F47D5938CC7}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\silent hunter 5\sh5.exe |
"{12FF6C2C-8544-44AA-81DE-2B85EE239FA9}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{1309D072-EF06-414C-A574-7DF930802182}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\lucius\lucius.exe |
"{140BFA87-F4C6-4980-A839-BCBBEFF303F5}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hitman absolution\hma.exe |
"{156A7F32-05FC-467A-87A2-03BFC72AA663}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\far cry 3\bin\farcry3.exe |
"{157F0DCC-0DDF-4138-B491-1EA26097526B}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dishonored\binaries\win32\dishonored.exe |
"{15ECD15E-5895-4803-9963-EF63980BEC67}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dirt 3\dirt3.exe |
"{1772AB71-1874-4674-B3ED-03E3FA93C474}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dc universe online\launchpad.exe |
"{182A3EF6-7DBF-40A2-9C52-7101A6CAEB42}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hitman blood money\hitmanbloodmoney.exe |
"{191A34BD-0F2D-4263-BD85-0861596535AF}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\two worlds ii\twoworlds2.exe |
"{1965B235-95FE-4085-940C-01D846B3FEF8}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\kings bounty crossworlds\kb.exe |
"{197475C9-420C-4053-A366-1537045B24F3}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dungeon siege 2\dungeonsiege2.exe |
"{19B073D6-95C9-4C04-AF24-DCE907F7B20A}" = protocol=6 | dir=in | app=c:\program files (x86)\tobit radio.fx\client\rfx-client.exe |
"{1A0F2B6F-4DCF-443D-BE00-1536740C22E1}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\dead space 3\deadspace3.exe |
"{1A54E10D-D9E4-408A-B6DB-C0C563DBBF8C}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\x3 - reunion\x3.exe |
"{1AF0EB77-E73E-4C28-A7D7-C19084F77008}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hitman blood money\hitmanbloodmoney.exe |
"{1B869E5F-A8B0-4AA7-818F-7589C97F144E}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe |
"{1C5EA78B-DC44-4512-B7A6-03698FFE2C2D}" = protocol=17 | dir=in | app=c:\program files (x86)\even balance, inc\punkbuster\pb\pnkbstra.exe |
"{1C6E91C6-EE17-4EEC-8A82-383F471F195A}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\saints row the third\game_launcher.exe |
"{1CD2501B-4D32-4E1A-82C5-F915CE37C593}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars battlefront ii\gamedata\battlefrontii.exe |
"{1CF68C2D-97E4-4CAC-9376-245E8FE6993F}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\prototype 2\prototype2.exe |
"{1CF8D43B-A5F9-4F00-9ED8-1E83E7F550A4}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\jedi outcast\gamedata\jk2sp.exe |
"{1D83F3B9-1A04-4EA1-9A59-F25BF759B2D6}" = dir=in | app=c:\program files (x86)\audials\audials 10\audials.exe |
"{1E90071C-A4C4-4058-A1A3-0546A062DA84}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{1EC7AC50-F7F0-4624-8F7C-F529259DD8EB}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2\bin32\crysis2.exe |
"{1F1D2304-7BDA-42D9-A568-60CF2B8D4F6E}" = protocol=17 | dir=in | app=c:\program files (x86)\capcom\lostplanetcolonies\lostplanetcoloniesdx10.exe |
"{201DE1F4-C37A-4D4D-92B2-ACA862F7420C}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\jedi knight mysteries of the sith\jkm.exe |
"{2038D4E5-E2A4-48B7-A606-2E6AEA375865}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\silent hunters wolves of the pacific\sh4.exe |
"{21367C60-50A4-4D8E-8777-6263A0AEBC69}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\prototype\prototypef.exe |
"{213A5BE8-434D-4D71-BD22-5A919B46A003}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2\support\ea help\electronic_arts_technical_support.htm |
"{2143CEC2-7368-4A8B-B77B-55ED872E83FF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{22033114-4994-45F6-ADE1-DDAC4B797398}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia forgotten sands\prince of persia.exe |
"{22A01BDA-4E0D-445C-A1B7-FAF9EE0DF2E7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{22AB7F95-3F83-43BD-8365-8691A67121F4}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\x3 - reunion\x3_reunion_manual_steam_english.pdf |
"{22CA7F78-3280-4352-BEAD-D3AC72A57267}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{23DD576F-1899-40A5-8ABF-65E44F959AE6}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{2404FF06-DBD3-49E8-A12B-2A291A44F193}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\cities xl 2011\citiesxl_2011.exe |
"{25A5E09A-89B5-40CA-89CD-006768CAD406}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{25BD2DB4-98F4-4173-A882-A5C7236A26D0}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe |
"{25E64B1C-E93E-4E52-A2E6-3536A05CA43A}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\rage\rage64.exe |
"{2655B255-6315-4A10-AD60-2D9CC482429D}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{274919AB-DE77-470C-926C-7BE387EFAF63}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{27A07BE4-1BA0-40C9-84EB-C99E368466A8}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{28107610-8E17-4649-8D5E-EEFC78C53F84}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\galaxy on fire 2 hd\gof2launcher.exe |
"{29A7E14F-88A0-4476-9287-D79B3676438F}" = protocol=17 | dir=in | app=c:\games\world_of_warplanes\worldofwarplanes.exe |
"{2A209977-8334-430A-A61D-1E93DCD3BD34}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\batman2\binaries\win32\batmanac.exe |
"{2C33CDE3-92F0-46FE-9A1D-0B9021C116C4}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\swkotor\swkotor.exe |
"{2C9D0E66-212F-4867-AB1C-6E3D9E37C00F}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\need for speed(tm) most wanted\nfs13.exe |
"{2CE4033D-DE68-40AB-A28A-23B66513D57C}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\x beyond the frontier\runme.exe |
"{2D457D65-D070-48C5-A716-63B31C8D6E59}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dirt 2\dirt2.exe |
"{2EB9B223-0D07-4CA4-8457-B3C5EC074E86}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia two thrones\princeofpersia.exe |
"{2EDFDC84-E709-47DA-BE8C-6134FD552013}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\football manager 2012\fm.exe |
"{2F3893D5-5A13-4FD1-B9AF-1C1040A08BA2}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\anno 2070\anno5.exe |
"{2FAC8E1F-F6FE-441D-80C7-FD7647E6E3BE}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hitman codename 47\setup.exe |
"{2FDF9AC1-E42A-43A6-BA1B-8F5000D37541}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 3 tiberium wars\support\ea help\electronic_arts_technical_support.htm |
"{3025D0A5-03F8-4E3A-985C-DE18C8B9D8D4}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{3090CA08-346A-4888-A399-1FAEB7724805}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\blacklightretribution\blacklight retribution.exe |
"{30AE04E9-6682-495B-B8B1-A3BEE87C3294}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\binary domain\binarydomainconfiguration.exe |
"{30B430E4-DC2A-4D4A-82F3-37C9BCB5852E}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\alan wake\alanwake.exe |
"{30E3F543-1BAB-473F-9816-1041E80F8409}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\cities xl 2012\citiesxl_2012.exe |
"{30F18C47-20DB-49BC-B60E-BEFB5A8EAE12}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\x2 - the threat\x2.exe |
"{31404D38-6179-4398-8509-61DD95759447}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\lucius\lucius.exe |
"{32988458-C5EC-4298-BCF7-CC6DA462DFEF}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\kings bounty crossworlds\kb.exe |
"{337B8A28-EC57-4B35-97EE-7F370F716EB2}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dragon age ultimate edition\daoriginslauncher.exe |
"{34201C8C-9484-48DD-B422-BDF0FF84E5FC}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars republic commando\gamedata\system\swrepubliccommando.exe |
"{348E6CE4-4267-4304-A7F2-B920D118C30E}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 3 - kane's wrath\cnc3ep1.exe |
"{34E5CEC7-806A-4890-B10A-35B17253CE94}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{350A004B-9737-4D2C-B7F2-1801D938D48B}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\assassins creed brotherhood\acbsp.exe |
"{3559A233-CDCF-46D3-873D-D4BFBC281370}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\assassin's creed revelations\acrsp.exe |
"{35A4BBAD-9C81-4916-AFC0-8021F26BB145}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star trek online\star trek online.exe |
"{37BBD6B8-B926-46C8-AB1D-7D016045C4C2}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hitman codename 47\setup.exe |
"{37C732D2-1EC2-4317-B9C8-936FE71EB91B}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hacker evolution untold\hacker evolution untold.exe |
"{37E619ED-1A27-45E0-8B3E-5141B75036A8}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\fallen earth f2p\feupdater.exe |
"{3854FC8F-5EFB-42F2-A26F-1F84C5D317E3}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{38BBF434-28D2-4DF8-BF97-BCE47C87C3E9}" = protocol=6 | dir=in | app=c:\program files (x86)\capcom\lostplanetcolonies\lostplanetcoloniesdx9.exe |
"{39A7C048-7F18-4C1A-9E81-4B0850961035}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\binaries\masseffect2.exe |
"{39B110E1-BD87-4BE4-A900-8096BCDE4475}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\need for speed(tm) most wanted\nfs13.exe |
"{39C40299-0459-4514-8D46-98D715A69969}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\doom 3\doom3.exe |
"{39EC9888-6B75-4C4F-A8D0-AE851E1F5D47}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\arma 2\arma2.exe |
"{3A2B7DAD-0CB2-4B3F-BDAC-8A7DA7826562}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{3A6E96DA-DE58-49B7-A6B2-FAC4B3A3F9C3}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia\launcher\launcher.exe |
"{3B160422-945F-4AA1-911A-C8443E8655BD}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\king's bounty - the legend\save_fixer.exe |
"{3B529433-C380-49AB-B81A-0151BA3D7F82}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{3C2F2BE8-255A-4024-BC7B-57CF80A67411}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\railworks\railworks.exe |
"{3C7E3EC4-8D16-481A-A9D4-13C8EBD888EA}" = protocol=17 | dir=in | app=c:\program files (x86)\thehunter\launcher\launcher.exe |
"{3CBEA6CB-9C0B-4F0C-A654-601F8F276BD1}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\doom 3\doom3ded.exe |
"{3CC861CA-A741-4DC3-8C7B-613F813C5811}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars republic commando\gamedata\system\swrepubliccommando.exe |
"{3DA6E0D8-1198-43DE-A12A-510C0F72A71B}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\tom clancys endwar\binaries\endwar.exe |
"{3E3AA642-7A7C-4B17-A7FB-52F09E66BFB5}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\arma 2\arma2.exe |
"{3E42C78E-8D53-43EB-B7C7-CB7D8E83F9BA}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"{3E561655-A34F-4BA7-BD3F-4C5C3AFE0C14}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\medal of honor warfighter\mohw.exe |
"{3ECAFEE8-4371-46E2-90DC-5578759812FF}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{3F2A21C6-D9E9-4D5E-A59F-BB4A1AFD3C19}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{3FAE244C-CE99-431C-883C-D7C7001A882A}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\just cause\jcsetup.exe |
"{400C3EC8-DB04-47E0-AC98-4EBF47EA5927}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\swkotor\swkotor.exe |
"{40402A9C-DF2E-4C39-A1F6-E692E560455D}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\rage\rage.exe |
"{404FED56-F543-4723-AFFC-FF26A477F7E9}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{40785032-F602-45B5-B7C5-D3F3071FC7D7}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars starfighter\starfighter.exe |
"{409F831F-7D67-4C43-B3C8-EDD3C41F426B}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe |
"{410D4188-6CA7-4C5F-A3D0-7D37E3253C0E}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dear esther\dearesther.exe |
"{41175034-7858-47AF-9F47-A40449F8A467}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 4 tiberian twilight\support\ea help\electronic_arts_technical_support.htm |
"{414D6AA4-BA38-4AE0-B654-A2D642276B02}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\king's bounty - the legend\save_fixer.exe |
"{424D6B87-B709-4EC3-A65E-B9DAE5393E6C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{42E1CE44-C9C9-462C-BFB4-CCE09D108F89}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\left 4 dead\left4dead.exe |
"{433B54A1-B27B-4FD1-80C5-DEF24FFBAB0D}" = protocol=6 | dir=in | app=c:\program files (x86)\tobit radio.fx\server\rfx-server.exe |
"{43BF24FF-6C05-4D8E-9FDD-976B4CDCE782}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{43C7F827-7E3D-4D0F-8424-01F5A30B3033}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe |
"{44568AAB-33C3-45C0-89A9-71F47B596FF7}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\anno 2070\anno5.exe |
"{45500D88-C1D7-4E83-B91C-7D093F8C0E38}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars jedi knight\jk.exe |
"{46291583-2A40-467A-9E35-7A6BCBC382F9}" = protocol=17 | dir=in | app=c:\program files (x86)\tobit radio.fx\client\rfx-client.exe |
"{47A716A3-2A1F-4FF1-84F1-2060AD0FBC64}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\anno 2070\anno5.exe |
"{47AF2989-BC62-4A1A-A7CF-10B30041DE54}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\euro truck simulator 2\bin\win_x86\eurotrucks2.exe |
"{48B75A47-A732-4873-B32B-9C9C0C35551A}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\kings bounty armored princess\kb.exe |
"{4931DA18-088B-4886-BF50-9477572FC51A}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\duke nukem forever\system\dukeforever.exe |
"{4A6BF722-A12F-481F-BB2A-751CD0915DB6}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\alien swarm\swarm.exe |
"{4B480C56-0BC5-4D21-9D01-2B0461D87FC0}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\crysis\bin32\crysis.exe |
"{4C292199-EB55-40F0-BE88-3081D4F21DA0}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\gotham city impostors\engine.exe |
"{4CC8D551-DAA0-4437-94DE-7BC7C5098B78}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{4CF95AFD-F6E1-4E88-BB8E-00E347DBA4F3}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\specops_theline\binaries\win32\specopstheline.exe |
"{4D2AC204-000A-4986-93D3-6BD71755B618}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dragon age ii\docs\ea help\electronic_arts_technical_support.htm |
"{4E05C6C9-CE2C-441B-AC84-86014D52A846}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dirt 3\dirt3.exe |
"{4EB210B9-DAFD-45EE-A8A5-0F2008594691}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\blur\blur.exe |
"{4ECFDC37-43CE-4F8C-827E-5D51EAFA5A24}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hitman 2 silent assassin\config.exe |
"{4FCE064E-F6EC-4A52-B982-3E8DB960B2B8}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\just cause 2\justcause2.exe |
"{4FD2C342-736A-47C5-9307-DC3612AD3E28}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\forsaken world\patcher.exe |
"{51BC240F-59ED-430B-927E-5C3BBDB6CB0F}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\king's bounty - the legend\kb.exe |
"{524040D2-D300-4A33-8D37-0CB3F649FF69}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hitman absolution\hma.exe |
"{52EABBDD-5CFE-4A2B-8CA7-5C43A738261C}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{536BC1CF-3F8D-4DCD-8E34-6B64396D1B19}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dungeon siege 2\dungeonsiege2.exe |
"{54538C36-A89D-4BB6-91BB-DB384DA648A3}" = protocol=17 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"{557AFAB5-C980-48DE-8BF6-76EF9C4B88A6}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\masseffect2launcher.exe |
"{55B7D1B2-BED1-408F-BF3F-E8E2624EE63E}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\crysis 3\bin32\crysis3.exe |
"{55F6C247-2956-4D5E-BF69-E79C5479BD2A}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\lucius\lucius.exe |
"{5608F3A9-657D-4620-9C8F-1A391BA8FA6D}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 3 - kane's wrath\support\ea help\electronic_arts_technical_support.htm |
"{567F48A3-A71E-4427-BE8A-BE900CD6C2EF}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\fifa 13\game\fifa13.exe |
"{56984E15-4737-4DD3-B964-1722088B4B10}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\crysis\bin32\crysis.exe |
"{56BEBF10-A87A-476F-8EFF-00921BA70DDD}" = protocol=17 | dir=in | app=c:\program files (x86)\anno 1701\anno1701.exe |
"{571D2B5C-30E1-4DA3-9080-BBD418D7572C}" = protocol=6 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"{575043C1-309B-470C-BC33-E8EF8E24153F}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\left 4 dead\left4dead.exe |
"{57550CEE-68E4-4ED8-9424-26B24E72F591}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\x3 - reunion\x3_reunion_quickstart.pdf |
"{57D1A672-DE44-4443-815B-A6650458FAA4}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2launcher.exe |
"{57D2C5C1-A29F-4C79-90B7-71A99C303E8A}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2\support\ea help\electronic_arts_technical_support.htm |
"{57F1F316-2ECF-4919-9625-81B78A3FA9B6}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{58D56CA0-08DB-40EC-8348-B8D03FCC4B7A}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\x beyond the frontier\runme.exe |
"{58FED743-E05D-4A13-B5EB-5252EB1D48C8}" = protocol=6 | dir=in | app=c:\program files (x86)\thehunter\launcher\launcher.exe |
"{5925ED27-1639-490A-A49C-6A9CD2B20D38}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{5966D115-EB31-47F0-95C0-8834E7A96D66}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\gotham city impostors\engine.exe |
"{59F6358C-45A1-4B50-8867-B1001D96001F}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\prototype\prototypef.exe |
"{5B855C3F-BFB7-4E0A-81B6-2A95A9424736}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\swkotor\swkotor.exe |
"{5C3D4833-6D48-4E52-8462-F0456C61A20A}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars the force unleashed\swtfu launcher.exe |
"{5C64FA7A-491E-45A9-B5B8-D9AB035C21B4}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\tom clancys endwar\binaries\endwar.exe |
"{5CAAF40B-E44D-45E7-8FD6-4F954F9301E8}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\il 2 sturmovik 1946\il2fb.exe |
"{5CEFB284-5640-4782-889D-FC0E95865250}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dirt\dirt.exe |
"{5D5E9F4B-20DA-46EF-A93E-9C5C8A6B5E4D}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{5DDF9F19-F2EE-4D3B-8333-ABFAC68C1F26}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\silent hunter 5\sh5.exe |
"{5EF75B10-6A46-4E88-88CE-2013EE3437DF}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3sp.exe |
"{5F3C8FAC-BEFE-4E04-AA6E-41D89BA1B3D7}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{5FE9A2AB-0A76-465F-8A69-C1776BAFA38B}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\jedi academy\gamedata\jasp.exe |
"{6174CE27-DC88-46AE-8FAD-3B1C861B5A2A}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hacker evolution untold\hacker evolution untold.exe |
"{618582E1-B241-40C1-8C1B-EB28F35D6203}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\assassins creed brotherhood\acbsp.exe |
"{61D74160-959F-4ACF-BF52-B060AD8D5027}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 4 tiberian twilight\cnc4.exe |
"{61DD734E-9E59-4AB4-9CA1-00E964FA0C07}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars the force unleashed\swtfu launcher.exe |
"{61E71B24-19F2-4F3A-BD14-00B1856DD3B6}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe |
"{61EE9212-4268-4CC2-9AA7-699C7961AD66}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\swkotor\swkotor.exe |
"{6294C92E-0FF4-4263-B14D-063ABD6EA792}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\sniper elite v2\bin\sniperelitev2.exe |
"{629E2C9B-A9F8-4980-B33C-4F6D7BBE2199}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\bioshock 2\mp\builds\binaries\bioshock2launcher.exe |
"{63D6AA9E-CC89-4DAA-AB24-C3A713DCF014}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\fear2\fear2.exe |
"{64080B4C-17F0-4F78-A719-6699EE3B9846}" = protocol=6 | dir=in | app=e:\program files\steam\steam.exe |
"{6448DF68-659D-4652-8FFC-4B45F6AC2B68}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dear esther\dearesther.exe |
"{644BA9D0-3401-4302-AB3E-4E58C458203E}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia two thrones\princeofpersia.exe |
"{65D60EE8-D750-4E15-8D5B-A03F88BF7F9D}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\assassin's creed 2\assassinscreediigame.exe |
"{66DE1C26-299F-49ED-A16B-CE70CE98E538}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{6752EB2A-20F1-437A-B447-CEF402B954FE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6821A65A-4F50-4864-BAC3-DFC21D8942C8}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\lucius\lucius.exe |
"{68D40232-B05F-48AF-9D67-DCAEE41296BF}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\x3 - reunion\x3_reunion_quickstart.pdf |
"{695B67A2-0406-4E6F-891B-AE98C126EAA8}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\jedi academy\gamedata\jamp.exe |
"{69AAFA0F-EADC-42B6-9F01-6EEE91E420A0}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe |
"{69BC2594-E2EC-4715-9F98-0F22147EDAC7}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\just cause\justcause.exe |
"{6A8A4DD0-D57C-447F-B0B8-14701830AC1F}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 3 tiberium wars\cnc3.exe |
"{6B7E353D-D70C-45DB-B789-EBD193F12A86}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\gotham city impostors\impostors.exe |
"{6C417E9A-9E1E-4CB5-92E2-BE77DDDCF1D0}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\batman2\runlauncher.bat |
"{6CC04617-1752-47C0-812F-C2F133DE0F8D}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\blacklightretribution\blacklight retribution.exe |
"{6DA06335-4D55-444E-B870-317E1E28B46C}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3mp.exe |
"{6DA83543-0D05-4F1D-9092-CA6281D158DB}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{6E75ED3E-0AEB-42A3-A35B-542BFA29940B}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\rage\rage.exe |
"{6F5B4947-CF69-4C85-B492-A9956D9035ED}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{6FB0D582-2460-437C-AAB7-0B25960CFAAE}" = protocol=6 | dir=in | app=e:\program files\world of warcraft\wow-x.x.x.x-4.0.0.12911-eu-downloader.exe |
"{700611A6-F179-4A90-A1F2-4F7A04C69FAF}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe |
"{7144F433-A9B0-44F0-A647-586A743105A3}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7157FD99-1F23-4252-8AA5-1A320F6CB4C2}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{71CFAEAE-A4A9-42F8-9FDA-688928E78D46}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{7228AD5B-ED1A-4FBD-9BA3-675F90DD5F6A}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\football manager 2012\fm.exe |
"{723BE436-6D09-4222-ACB5-DDCA49BA2AE9}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{7291DC1C-927C-492B-9262-E084C32543D9}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{72A3B311-DCD6-4F19-B5DA-14FAE41048A1}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\il 2 sturmovik 1946\il2fb.exe |
"{72B0FB25-E8DD-40ED-9DCA-6944E8D5E984}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{72C47E9B-22BF-4154-9A2E-9DAB13F2D98C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{735667C0-0B44-4C38-A63F-06AD8A03E6DC}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\kings bounty armored princess\kb.exe |
"{745C34C6-19A2-457C-A4BE-12E36C314D6E}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\the walking dead\walkingdead101.exe |
"{7479B5A5-36EC-4C9C-9A16-62A91AFB9E4C}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{74DEF0D8-D2FC-4242-8837-91D0FF307C0D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{754D4024-2747-401D-BACF-28AD33A9C522}" = protocol=17 | dir=in | app=c:\program files (x86)\tobit radio.fx\server\rfx-server.exe |
"{75EAE5D2-4C59-4027-B773-A35198B969A1}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\sniper elite v2\bin\sniperelitev2.exe |
"{7607BE5F-58DD-4198-8E4A-55DD1206DCDE}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{76A7A948-2024-473B-AD56-AB3F4683CE6F}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\kings bounty crossworlds\kb.exe |
"{773002E2-BA95-4690-A260-2FF387F08275}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\mass effect\binaries\masseffect.exe |
"{78205BA6-298C-45E3-AE7E-986C584A5B33}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\fifa 13\game\fifa13.exe |
"{795E6324-8669-4AB0-8B5C-D6086764DA22}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\jedi academy\gamedata\jamp.exe |
"{7A79ECAB-B6CB-4E71-8A40-B9B049C39C95}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{7A7D27B8-CA40-4EB0-92A0-E35CE0069E30}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars starfighter\starfighter.exe |
"{7ACAE226-169C-4A1E-9341-2964C2294DBA}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\fallen earth f2p\feupdater.exe |
"{7BC45D5D-8DEF-4438-9CD9-32F9060D4439}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe |
"{7C94A669-784F-408C-94DF-D8772F39F448}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{7C968DD7-2B51-481A-A60F-EABA7363101D}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\forsaken world\patcher.exe |
"{7CB29FC8-6656-44B2-BD5B-F628BB5B48D3}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{7D41855E-81B3-4C39-95D2-4E1F338B6816}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |
"{7DB62827-B542-4EC7-BE36-10179CBEFF44}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dungeon siege 1\dungeonsiege.exe |
"{7DB80AF2-5A65-49FB-8E6B-A2B84D27566E}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\amnesia the dark descent\launcher.exe |
"{7DD45EAD-B50C-432E-946B-1A5E6EF16471}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\stalker clear sky\bin\xrengine.exe |
"{7E3EFA6A-90FF-4819-93CC-8FAD65C647DF}" = protocol=6 | dir=in | app=c:\program files (x86)\even balance, inc\punkbuster\pb\pnkbstra.exe |
"{7E8209EF-1810-4EE7-9FBE-B058E14C62AB}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dragon age ii\docs\ea help\electronic_arts_technical_support.htm |
"{7EB415B8-E607-4024-9454-71DDCC963E88}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars empire at war\gamedata\sweaw.exe |
"{7FD7238F-F4AF-401A-A623-40220251D27B}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars the force unleashed 2\swtfu2.exe |
"{8039EFAF-FB48-425C-85C8-85236625A497}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2launcher.exe |
"{8068AD1F-C315-439F-9257-9B8C444DC800}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{80D4152F-FD50-40BE-981F-1B1343B7A8F7}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\two worlds ii\twoworlds2_dx10.exe |
"{81063D41-1D8F-426F-A108-9D68EC6D2553}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\x2 - the threat\x2.exe |
"{8153EFE3-2123-48DA-ADC1-39A08EC5A3D0}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{818CCC15-1CBD-4CF8-9721-628347948106}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 3 - kane's wrath\cnc3ep1.exe |
"{81F2D4F5-C259-4240-A25F-6CF25221BEC6}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\prototype\prototypef.exe |
"{823B0724-08CE-4ACB-A8F0-853C8302EA0A}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\crysis 3\bin32\crysis3.exe |
"{825F783F-F8AA-4F06-8744-0598317ACAD9}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\binaries\eacoreserver.exe |
"{82BCCA73-6ADA-409A-B535-ED852B0F3FE2}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars empire at war\gamedata\sweaw.exe |
"{83635242-A23B-46F1-9678-428BCAC97029}" = protocol=17 | dir=in | app=c:\program files (x86)\funcom\the secret world\clientpatcher.exe |
"{8457FA17-26F8-481B-B16F-B4602FA69138}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\magicka176\half-life\hl.exe |
"{84CCF60B-1DE1-4B00-80B4-C3F96AC610A6}" = protocol=17 | dir=in | app=c:\program files (x86)\ccp\eve\bin\exefile.exe |
"{851D359F-9DDF-43BB-AA5D-D7F6CF82BB2E}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe |
"{8604AC7B-5346-4576-9791-01D18B0D7519}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia the warrior within\princeofpersia.exe |
"{87F8C3F0-C207-423F-8082-028CD4E9E60D}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\mafia ii\pc\mafia2.exe |
"{883E72AD-824A-439A-9D7F-CB5FB92D6D0C}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\lunar flight\lunarflight.exe |
"{885CEFDE-9CEE-4504-8C46-9FD5D08A3B16}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\duke nukem forever\system\dukeforever.exe |
"{89B7BC94-334F-4490-9DDD-44A7ED0B67CC}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\doom 3 bfg edition\doom3bfg.exe |
"{89EC1AB5-3F3A-4E2F-AA9D-79C1B35FFB16}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hacker evolution untold\hacker evolution mod editor.exe |
"{89ECE401-36EE-4BEF-A84F-CFF0C7ED9ED9}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{8B54FDD3-C40D-4F43-A423-3E4C026E9678}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\alien swarm\swarm.exe |
"{8B717D70-64AB-49FD-8948-FE5C16B5D481}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\prototype 2\prototype2.exe |
"{8C5F4FE6-F81B-47B8-8070-696B6598A31D}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\railworks\railworks.exe |
"{8C6716FF-B31E-4DC2-8933-557ED1B5F80B}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{8CA9BDA4-192F-4EFA-9D7B-F54FF3362F76}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars starfighter\starfighter.exe |
"{8CBD406A-A19F-4D2C-8D7A-E305E13F50EE}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2\bin32\crysis2.exe |
"{8CE9144B-0435-4430-B9D0-1B99434BAFD8}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\binary domain\binarydomainconfiguration.exe |
"{8D187419-B784-4788-A7DC-E78EA8D22A2E}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{8E88A0CA-2A8B-47DE-B387-83DC4807B590}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia the sands of time\princeofpersia.exe |
"{8E8BCAD2-E96D-43E5-84F2-5D26B8D52C7E}" = protocol=17 | dir=in | app=e:\program files\steam\steam.exe |
"{8F3FBC89-2704-4324-A9A9-E98071CF1A1F}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{8F7BC98B-EBF7-4D62-8038-3AED45DB7799}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\portal 2\portal2.exe |
"{8FCE11F8-4508-46D8-9498-7B32D9D30E47}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia the warrior within\princeofpersia.exe |
"{90851732-5010-48EA-80C7-D2A547CFE229}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{91AAF204-0CEC-46DC-8FF5-C0B085F42C18}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\two worlds ii\twoworlds2.exe |
"{92E70224-DDDB-42D9-B04F-1DA68794019A}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\x3 - reunion\x3_reunion_manual_steam_english.pdf |
"{92F39774-CF62-4EE2-96BB-910D64211B06}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\tom clancy's ghost recon future soldier\future soldier.exe |
"{933CCFCA-49BD-4096-BE9B-0F3AC860B27E}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\alan wakes american nightmare\alan_wakes_american_nightmare.exe |
"{948A23F4-2539-4377-B4C7-3BEE371492C9}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\wheelman\run_game.bat |
"{95173B12-81F3-4FE9-BF52-98A5EB4DDEAE}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\jedi outcast\gamedata\jk2mp.exe |
"{95A50196-334D-44CB-863B-0AECB52D9E52}" = protocol=6 | dir=out | app=system |
"{96B3E449-D761-48D7-877D-38712B02C8C2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{97707860-B5CE-44EC-B471-E869310BFF3F}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\mass effect\masseffectlauncher.exe |
"{97E4F8A7-676D-46D5-8CEA-BE16B86968F8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{981B5EDD-3516-448D-A34C-E81D733A4518}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\cities xl 2012\citiesxl_2012.exe |
"{98AEFD09-D5FE-4D20-A018-90D6794DC885}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\planetside 2\launchpad.exe |
"{99069BB2-B93C-42FB-9E11-D74F3240F1D4}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{993E89E8-2485-4A3E-8B5B-93E7F1C619C5}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{9A39C3C6-A53A-4A67-8F80-B786A25AA343}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{9A9854E8-9378-40AA-B206-055A627671AC}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{9B3CB2E4-3C79-4E68-B6DE-792CD91A9254}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\sleepingdogs\hkship.exe |
"{9BCD949C-681D-4876-B433-3571771CA406}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\doom 3 bfg edition\doom3bfg.exe |
"{9C42A1C4-0139-4616-BC22-3A73D83769DD}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\tom clancy's ghost recon future soldier\future soldier.exe |
"{9C9C9134-E6FC-4EBE-BE52-8357FAEFAEA6}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\cities xl 2011\citiesxl_2011.exe |
"{9DC825EB-148E-4A2C-A665-9A852CE7B337}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{9E1C6226-C48B-466D-A54B-963E8B78BCD6}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{9E6B898A-A540-41F6-AE7D-73576E5AF562}" = protocol=6 | dir=in | app=c:\program files (x86)\bitcomposer games\s.t.a.l.k.e.r. - call of pripyat\bin\dedicated\xrengine.exe |
"{9F6A3357-4A99-40D7-A72A-4E28DBFA27E5}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\jedi outcast\gamedata\jk2mp.exe |
"{A0280690-7D98-48C0-8B2D-6DBCCB78F9CC}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\just cause\jcsetup.exe |
"{A0A76E1F-4019-4842-9297-6987F06BFF94}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{A1F54308-2953-415E-83C8-B8E5B324AE9E}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A20BE125-4AFD-4AFC-8FCE-32EEACAF09C6}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\x-tension\runme.exe |
"{A311A3A1-3407-4C8F-BF49-93A3E74152B0}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\railworks\railworks.exe |
"{A37BEB2E-9EC0-472C-95EE-4704174B4BDA}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\magicka176\half-life\hl.exe |
"{A39E6F88-EB34-4500-AE80-0518296B4126}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\jabia\jaggedalliancebia.exe |
"{A3D82F24-D1A2-449F-AC1D-390F47DA1E41}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\magicka176\half-life\hl.exe |
"{A43017B2-F655-45CE-BADE-C163987A45DA}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\fallout 3\fallout3.exe |
"{A4F4EE6E-87B6-4B4C-B563-B2AE998D16AA}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia the sands of time\princeofpersia.exe |
"{A52079AF-B592-46CC-8DE3-D25B09E6F796}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\jabia\jaggedalliancebia.exe |
"{A5226264-B1BE-49DD-8A0C-2B0404690235}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{A61E3BF1-91F6-4852-A650-A58A83B061EE}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hitman 2 silent assassin\hitman2.exe |
"{A67213EF-EBB6-4851-ABD4-CE5727D36B37}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\assassin's creed revelations\acrsp.exe |
"{A6A8C694-D605-43FC-BD7F-8F3B38F33078}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dungeon siege 1\dungeonsiege.exe |
"{A71C6F12-6B45-4C41-AF37-BC103D4ECA61}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hunted\binaries\win32\hunted.exe |
"{A72413FD-352C-4AFE-81CA-19D3E0A3CD2E}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{A7A226E9-78AD-40DE-A6A0-EE9B144BD096}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hitman blood money\configure.exe |
"{A7D9FFE6-94D1-40F6-B5CE-0A97CB760127}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hitman sniper challenge\hmsc.exe |
"{A856E752-4820-4267-9140-35B8B58D46CD}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\empire total war\empire.exe |
"{A889EE57-9BF6-49CE-A145-323611796FB5}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\tom clancy's ghost recon future soldier\future soldier.exe |
"{A893DC1A-57BC-4CD5-9AC6-970B0BB8FAEC}" = protocol=6 | dir=in | app=c:\games\world_of_warplanes\worldofwarplanes.exe |
"{A8C27824-B0AE-4D4C-A629-D3B5E886BFD0}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\medal of honor airborne\unrealengine3\binaries\moha.exe |
"{A94550F3-D722-4EAD-A374-7A99F7F610D2}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars the force unleashed 2\swtfu2.exe |
"{AAB92FFC-923A-49EF-AC30-EB0298B76814}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dc universe online\launchpad.exe |
"{AAD48257-2D39-4380-B022-BE33943E969B}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\kings bounty crossworlds\kb.exe |
"{AC25438E-B74B-47BD-8B9B-D6FB0AB8212E}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{AD15B6AF-173D-4CF3-8C1E-EFFC70EA5B9B}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\alan wake\alanwake.exe |
"{AD2D26A5-CA37-4EB1-98C5-3CD1D154DBF7}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\mass effect 3\binaries\win32\masseffect3.exe |
"{AD82787D-4B42-4278-9610-F51C21C0954B}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\wormsxhd\launcher.exe |
"{AE1CB414-1683-4C11-A40B-BD2FA1D18B9F}" = protocol=6 | dir=in | app=c:\program files (x86)\ccp\eve\bin\exefile.exe |
"{AEC34EF0-7B22-453D-B1EE-74AA5A991900}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\anno 2070\anno5.exe |
"{AF82478E-5627-4920-80CE-C6F1943B4933}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\metro 2033\metro2033.exe |
"{B07E4209-E8FC-419E-8ADD-0507DE7E01DB}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\deus ex - human revolution\dxhr.exe |
"{B2D3D211-84E3-4EF5-AAA2-B43CA3853F02}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 3 - kane's wrath\support\ea help\electronic_arts_technical_support.htm |
"{B2D8174C-B06E-43A1-A65C-DFBE8951663E}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{B34B05B4-95E7-4602-BF39-D32437E6E121}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\tom clancy's ghost recon future soldier\future soldier.exe |
"{B4199823-E381-41B1-98CC-E947D7EE84F4}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2launcher.exe |
"{B47CFC6C-3DF4-43AF-8194-BBFC9D295D4B}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\postal iii\p3.exe |
"{B4B75B40-7382-48AB-9508-EA9918334671}" = protocol=6 | dir=in | app=c:\program files (x86)\funcom\the secret world\clientpatcher.exe |
"{B558C4F3-D88D-47D3-A291-2B65F47ED48E}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dirt 2\dirt2.exe |
"{B60633FD-6F29-40A3-A737-E774DE85ECFA}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{B629522E-BDB4-4965-90FF-2A0A4872100F}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\binary domain\binarydomain.exe |
"{B650749C-C923-4FAE-945F-2A47837D63CC}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\railworks\railworks.exe |
"{B669FD6D-44A7-439A-92DC-73BBC151E841}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\wheelman\run_game.bat |
"{B71CE41C-E00E-48FC-BC9F-8F854D7CA431}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\x3 - reunion\x3.exe |
"{B816E5F3-CF30-4DCF-B6D0-E1F04CA63B24}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\postal iii\p3.exe |
"{B84288EB-FE7E-4C4B-98E0-26BBB3BA8078}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe |
"{B8A192BA-3FB2-4DFC-815B-B2FEEC6F21B6}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hitman sniper challenge\hmsc.exe |
"{B8A8BE35-C6A1-42F3-BEAB-3CCFD36CA60E}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\king's bounty - the legend\kb.exe |
"{B997F2BD-6AA3-4818-815E-62D8ADB3E9B5}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\homefront\binaries\homefront.exe |
"{BA1E7CE2-ECD8-4A19-BD1B-9B028B341A61}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\stalker clear sky\bin\xrengine.exe |
"{BB842FEC-0620-45C6-8587-072567FAAB53}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\magicka176\half-life\hl.exe |
"{BD09B25E-3CD2-431D-9A3C-0EC16C267AE7}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe |
"{BD91671E-85A0-44ED-B3C4-DA6AC92E51F5}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\crysis warhead\bin32\crysis.exe |
"{BEB1C7F3-7732-4781-A20B-EA40832AD80F}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{BEE62A15-5FE7-48A7-94CD-5BBAA46C55D8}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hacker evolution untold\hacker evolution mod editor.exe |
"{BF726503-B38F-4E8B-AB96-88D9AF8CC3A8}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hitman codename 47\hitman.exe |
"{C05DABF1-CB9C-4385-96A8-419567ABC756}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C10BF412-DD22-4269-AD76-A5B267EAC818}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dishonored\binaries\win32\dishonored.exe |
"{C153957F-E448-4B49-9837-92A19D4012F2}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\forsaken world\patcher.exe |
"{C18A2EE8-C3EE-4412-954A-2AA921743FE2}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{C1C25F15-6AF5-4910-9EB1-344793DDBAB8}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\crysis wars\bin32\crysis.exe |
"{C335A27F-B0B0-4A6B-BD7B-8169E2E8DCFC}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\jedi outcast\gamedata\jk2sp.exe |
"{C393F614-EBC8-4671-BE70-492BF640BDDE}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hunted\binaries\win32\hunted.exe |
"{C43F8002-65E1-4DD4-9023-EBE8FBEEC08F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C4B84154-9834-4C94-A047-A387CA5FA72C}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star trek online\star trek online.exe |
"{C4E5B2FC-3AA4-446F-BD7A-939B70C5B566}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\fifa 12\game\fifa.exe |
"{C4F62AD2-C7BE-4C39-8C8D-7FDD4D67BBE2}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\dead space 3\deadspace3.exe |
"{C554D49D-A466-4ACC-A19E-CB1C6C3CF0AF}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\crysis wars\bin32\crysis.exe |
"{C6BFED14-BE47-4455-845B-CDC3DE48E5A5}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\specops_theline\binaries\win32\specopstheline.exe |
"{C721D6C3-A95C-45F5-BDC8-24C563292927}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\batman2\binaries\win32\batmanac.exe |
"{C756D1CE-2C6A-4FB6-8D5D-ADEBC09DEB0D}" = protocol=6 | dir=in | app=c:\program files (x86)\bitcomposer games\s.t.a.l.k.e.r. - call of pripyat\bin\xrengine.exe |
"{C853C729-D5D4-4005-BF89-F0BEE455CB48}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2launcher.exe |
"{C8D418E1-5347-48A7-B36C-4C7B6E637CD0}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\silent hunters wolves of the pacific\sh4.exe |
"{C92228BE-68C9-4DDE-8E73-AB22DBAA34FA}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe |
"{C944B391-C23A-4BB6-9AF1-EC9E2238435F}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{CB1AA9DB-C8DB-4D48-A9F7-72D349444A48}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\alan wakes american nightmare\alan_wakes_american_nightmare.exe |
"{CB4410B4-345E-40D3-859C-C8513D9A6AF0}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\batman2\runlauncher.bat |
"{CBA281DE-8934-46D5-A055-F8EAB9B1BA81}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\doom 3\doom3ded.exe |
"{CD3EDAE7-C0FC-4990-94D2-64F59E1B62C0}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\assassins creed\assassinscreed_game.exe |
"{CDB35261-B5AD-4350-9A0D-D75C35EC9D26}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{CDBB2E16-C903-402A-AC80-A6090ED62988}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{CE5270AC-DE42-4FB1-8731-A6ECAEEB0013}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\fear2\fear2.exe |
"{CE8EC5EA-A5EF-4372-A20C-8D9CF20F1417}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\mass effect\binaries\masseffect.exe |
"{CEC2D5C2-859C-46B8-893C-E230BE8682C9}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\far cry 3\bin\farcry3.exe |
"{CF0C20D1-DFFC-4948-B1E9-19B09750B043}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\assassin's creed 2\assassinscreediigame.exe |
"{CF123C6C-77CA-4572-ADE2-839E3F93193A}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hitman 2 silent assassin\config.exe |
"{D24F516D-42A9-46A7-A54A-F1E3CC9ECC69}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\planetside 2\launchpad.exe |
"{D35FC4AD-5ACE-434E-B7E4-618DCAC3F9C6}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars the clone wars\republicheroeslauncher.exe |
"{D3BBA142-80A2-4CEA-951A-202C2ACB9F33}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\kane & lynch 2 - dog days\kl2.exe |
"{D4E9CDD2-0A90-4650-82A6-0F5AD58B1249}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\grid\grid.exe |
"{D54917BD-9285-42A3-852F-BC534A70FDEF}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars starfighter\starfighter.exe |
"{D5F361C2-08A1-471A-8DF8-1D7D3E32C65C}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{D607705F-C056-468A-A3B5-34F6A51885E7}" = protocol=6 | dir=in | app=c:\program files (x86)\capcom\lostplanetcolonies\lostplanetcoloniesdx10.exe |
"{D688EDE5-B283-483D-859F-FDF046F4EEDF}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{D6CC04A9-FFE1-4E34-9CC8-7F5502D13419}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{D81EF250-5708-4F54-92CC-9E23093B7596}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\assassins creed\assassinscreed_game.exe |
"{D81FA579-0912-4D3A-857E-79ECF3DAE1B1}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\resident evil operation raccoon city\raccooncity.exe |
"{D85D2991-C915-4699-98C1-5197F5E48415}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dark forces\dosbox\dosbox.exe |
"{D918E22E-E8E6-47D4-A2B8-127D6020DB3A}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\homefront\binaries\homefront.exe |
"{D98095A4-6FDC-4468-A42C-36452FA07EC3}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\medal of honor warfighter\mohw.exe |
"{D99BD79C-1381-4925-AAD8-3AFBC314D5C1}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\mass effect\masseffectlauncher.exe |
"{DAB463C2-B155-43E5-B55F-E1B4587816B7}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars battlefront ii\gamedata\battlefrontii.exe |
"{DC1A35D7-FAE2-4429-9335-1B4467D407F4}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\crysis warhead\bin32\crysis.exe |
"{DC962AF6-1EDC-4868-8449-D07387052D27}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\fallout 3\fallout3.exe |
"{DD5BA7C3-017F-4C8C-876E-2D543695D07A}" = protocol=17 | dir=in | app=e:\program files\world of warcraft\wow-x.x.x.x-4.0.0.12911-eu-downloader.exe |
"{DD62092C-4B98-4E24-B707-CBEE7C0C8207}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia\launcher\launcher.exe |
"{DD8292E9-2918-47EC-89C3-22C50B195E3F}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\jedi knight mysteries of the sith\jkm.exe |
"{DDDF570A-410C-4F71-ACC5-BBD07512A9D2}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\assassinscreed3.exe |
"{DE31E92F-E7B3-44C0-9F1C-283C1E1E8C1D}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\kane & lynch 2 - dog days\kl2.exe |
"{DF4AFB2F-9C8A-4F1A-B3BC-3BF5B2EDD37E}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\gotham city impostors\impostors.exe |
"{DFE0F1C1-3970-444F-99F4-44B32A736773}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\left 4 dead\left4dead.exe |
"{E0095224-5F96-4789-BD58-B3E551E87E83}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\masseffect2launcher.exe |
"{E05E993C-808C-4BC8-A179-C23EDCCE147F}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\call of duty black ops\blackops.exe |
"{E0CF994B-0BEF-444C-A537-0623348E7F0A}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\fifa 12\game\fifa.exe |
"{E0DE1F38-19FA-46B5-9A95-A3575B5EC3AD}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\galaxy on fire 2 hd\gof2launcher.exe |
"{E11822EF-6352-4F35-94EC-DA38BC342A07}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{E1BA03AF-3B25-4F66-A5DB-FB0D194BC658}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"{E1E1C56B-A4FA-4F48-BDA1-F1CD11078001}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 4 tiberian twilight\support\ea help\electronic_arts_technical_support.htm |
"{E207E445-49A1-4BCF-A9B3-6A6DF00D001A}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\binaries\masseffect2.exe |
"{E2449A6C-66C1-4823-B47B-6D9068EF3AB4}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\mafia ii\pc\mafia2.exe |
"{E25A02CE-3A04-4076-A0AA-A1FACF77B30F}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\arma 2\arma2.exe |
"{E2841B64-DB33-481B-B6F5-D5E6FD7935F6}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\two worlds ii\twoworlds2_dx10.exe |
"{E4DB74A4-83BE-4D7D-9DA7-CD6FFDBE8143}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\just cause\justcause.exe |
"{E55E0353-3B40-4670-8D53-FF4CF9E96476}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars the clone wars\republicheroeslauncher.exe |
"{E570DFD8-B49D-462C-B214-13702B3C54E3}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{E674FA1C-BBAE-465D-8F23-C6B35E0BC9DD}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E686A738-41D9-45DE-89EA-8CE76B4B3F2F}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\empire total war\empire.exe |
"{E70F06AF-C49C-422C-8CFA-0E250E105EAC}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\doom 3\doom3.exe |
"{E8D6CBAB-4A40-473A-84AB-5B491FBA28ED}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{EA0EF0EC-4E6E-4909-86D7-0F92ACDAE64F}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe |
"{EA5024AD-4F90-41B7-BACA-08FFEE38D3CE}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{EBBEAB8B-F775-4117-80DB-2246E993CDE4}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\sleepingdogs\hkship.exe |
"{EC0AF835-0F43-46BE-97D3-2BB4298AF9B1}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{EC6528A2-458D-474F-9961-4DCB6104D936}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{EDC6A4F1-F5C0-4197-9667-632ECAFE5061}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\wormsxhd\launcher.exe |
"{EDCB73D1-24B2-4258-9C09-3B5FA944DD8D}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\bioshock 2\mp\builds\binaries\bioshock2launcher.exe |
"{EDE7105F-7FD3-4031-A526-5C1CF5CD3B7B}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 3 tiberium wars\cnc3.exe |
"{EDEBC216-422C-4543-A413-256B9AFDAAC1}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{EE0A3FB1-D0B1-46E7-9B8B-DD3291264B30}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dark forces\dosbox\dosbox.exe |
"{EE182A68-B492-4F7F-AD29-A644C36A159B}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3sp.exe |
"{EE256266-1BB8-4167-A9C9-4DEC627A6B86}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe |
"{EEE61653-9644-47FF-AA7B-EA13F5ABB1DF}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars empire at war\runme.exe |
"{EEF1BF04-639E-45CB-8220-573981E7414F}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{F04B6E7A-2BD9-4729-A626-B25831BCF83D}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\hacker evolution duality\hacker evolution duality.exe |
"{F07C3EB5-FC57-4723-930F-42D9201B5E08}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\ac3mp.exe |
"{F143E7DF-F38B-43AF-AD69-A0D9E4C68D72}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\cities xl 2011\citiesxl_2011.exe |
"{F15C8F61-F5FF-4EBC-B812-D337ADA92A85}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\saints row the third\game_launcher.exe |
"{F1F57F93-7534-40A0-9E02-82780E9BA428}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"{F34C4C8E-26CB-4E09-B1D0-26B46FAA22F2}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\medal of honor airborne\unrealengine3\binaries\moha.exe |
"{F379D869-B11F-4110-992B-03FC2A52ABAA}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hacker evolution duality\hacker evolution duality.exe |
"{F3B3AFCA-296F-44A5-A771-B63F8194F52E}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\portal 2\portal2.exe |
"{F3C29F88-C1B0-41A1-A82F-5D9F1DA7A57C}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dirt\dirt.exe |
"{F3E42161-C6ED-4977-90DB-57E5676F1181}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dungeon siege iii\dungeon siege iii.exe |
"{F49B04B6-2E7D-4742-A734-15E311BE03EB}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars empire at war\runme2.exe |
"{F4F40162-7B4D-4C13-945C-6EB401D57270}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\lunar flight\lunarflight.exe |
"{F4F500C2-BE91-4ADC-B3D8-DAF04E8A5785}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\forsaken world\patcher.exe |
"{F5FB7B81-DCE6-4F63-A62A-CE9C7A0F0BF4}" = protocol=6 | dir=in | app=c:\program files (x86)\anno 1701\anno1701.exe |
"{F66C8134-0A10-4DC3-BFEE-AB88E756D22A}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dungeon siege iii\dungeon siege iii.exe |
"{F68ED6B8-26E4-4A64-B37B-44BF3D26C3E3}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{F69F3857-DB19-4A7F-94B6-64633C2683C7}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{F6AAF860-2AD6-4950-8608-609057654F07}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd cinema\powerdvdcinema.exe |
"{F74A9EA9-D31D-40E1-9384-0487E820C63B}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\just cause 2\justcause2.exe |
"{F984E775-4C59-4D75-BC43-11BC812742E3}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\mass effect 3\binaries\win32\masseffect3.exe |
"{FA0A0948-4D14-4043-B11F-B88679B85899}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars empire at war\runme2.exe |
"{FA6CD65B-568E-4446-AC71-0D638ECBC0A4}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\cities xl 2011\citiesxl_2011.exe |
"{FABBEF7B-2BF2-4969-AFD0-C908D4A26A4B}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\left 4 dead\left4dead.exe |
"{FB96DB58-E20E-48AD-BBCC-C87DB3CA8B18}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dragon age ultimate edition\daoriginslauncher.exe |
"{FBBA73E1-4B53-4B67-AF03-3D36031DE606}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{FBD7B31D-698B-455A-9BA9-545B946662A8}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\assassin's creed iii\assassinscreed3.exe |
"{FC07C49F-D6C9-4C4C-9C9B-A1EEC7BB5365}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{FC799C28-466C-4083-B7A2-7F795275790E}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\hitman codename 47\hitman.exe |
"{FC80AE2A-1656-4D60-A048-8149A2C770F3}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\command and conquer 4 tiberian twilight\cnc4.exe |
"{FCDD9EF0-5AFB-4FFE-9C28-3DD4A5AFCCD8}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\call of duty black ops\blackops.exe |
"{FD5FFD40-D38C-4D8D-948B-B458423AD962}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\binary domain\binarydomain.exe |
"{FDBC7A71-2192-454A-91DD-BDFE33A2C8F1}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{FE4FFF51-99C9-4387-BA1F-4AFE8AD78257}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dead island\deadislandgame.exe |
"{FE59A130-DDAC-4D21-95CC-7C2E770E9FE9}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe |
"{FE5E185B-E966-4C2D-853D-90D2095F0B0D}" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dragon age ii\dragonage2launcher.exe |
"{FF256B60-1F9B-4288-9517-C50994A0B0EC}" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\blur\blur.exe |
"{FFED22C0-B921-41FD-A331-B209736729E5}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"TCP Query User{0954A83D-C8BB-424F-BB2A-1C80B22A6A02}C:\program files (x86)\six projects\six updater\tools\bin\rsync.exe" = protocol=6 | dir=in | app=c:\program files (x86)\six projects\six updater\tools\bin\rsync.exe |
"TCP Query User{29E1B067-074D-4D07-9B6F-09342393B67B}E:\program files\steam\steamapps\common\star wars empire at war\gamedata\sweaw.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars empire at war\gamedata\sweaw.exe |
"TCP Query User{2A963726-9AD8-48BC-BA1A-D8A6D9A02BE4}E:\program files\steam\steamapps\common\alien swarm\swarm.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\alien swarm\swarm.exe |
"TCP Query User{2DC5A5BB-6212-4099-A68C-A09F0E84B517}E:\program files\steam\steamapps\common\planetside 2\planetside2.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\planetside 2\planetside2.exe |
"TCP Query User{3316B72E-EF35-499D-A213-7CA1D96883AD}E:\program files\steam\steamapps\common\assassins creed brotherhood\acbsp.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\assassins creed brotherhood\acbsp.exe |
"TCP Query User{370B7E45-8835-4ECB-89BE-CDAF75281EE7}C:\users\draco\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\draco\appdata\local\akamai\netsession_win.exe |
"TCP Query User{3BE0E3A6-9C6B-48E0-91F5-6196C9E72570}E:\program files\steam\steamapps\common\dirt 3\dirt3_game.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dirt 3\dirt3_game.exe |
"TCP Query User{41FA0981-B33A-443E-9602-5EEA44FF66A5}C:\users\draco\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\draco\appdata\roaming\spotify\spotify.exe |
"TCP Query User{45DE586C-C373-4497-86E0-3EF0987E7599}E:\program files\steam\steamapps\magicka176\bloody good time\bgt.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\magicka176\bloody good time\bgt.exe |
"TCP Query User{49C43912-683B-405C-B47D-B8E52093DA52}E:\program files\steam\steamapps\common\dead space\dead space.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dead space\dead space.exe |
"TCP Query User{4A7461FE-30E2-411D-9AEA-51428E3969C7}C:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"TCP Query User{614386CB-3B93-4F8E-B592-99D20305A9F2}C:\program files (x86)\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files (x86)\xfire\xfire.exe |
"TCP Query User{63BB87DE-02E1-4F65-AC6D-9522BBCBBE54}E:\program files\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe |
"TCP Query User{64190DC8-318C-4AD9-9472-B724369CDC16}C:\games\world_of_warplanes\worldofwarplanes.exe" = protocol=6 | dir=in | app=c:\games\world_of_warplanes\worldofwarplanes.exe |
"TCP Query User{65CFA57F-7005-4620-BE46-FFD252CFDD70}C:\users\draco\desktop\cryengine 3 sdk 3.4\bin64\launcher.exe" = protocol=6 | dir=in | app=c:\users\draco\desktop\cryengine 3 sdk 3.4\bin64\launcher.exe |
"TCP Query User{6B140A01-CE32-4930-B70B-CA4E6FA47E41}E:\program files\steam\steamapps\common\dead island\deadislandgame.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dead island\deadislandgame.exe |
"TCP Query User{6D4C7A45-297B-4B76-85BA-13F2454C07C9}E:\program files\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe |
"TCP Query User{726CBA58-89B8-483D-B5B5-C02EA3565A96}E:\program files\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe |
"TCP Query User{7689BE45-915B-40F3-B175-7672C5582D62}C:\program files (x86)\ccp\eve\bin\exefile.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ccp\eve\bin\exefile.exe |
"TCP Query User{8C77E464-F08C-490F-B224-C31402ACAABD}E:\program files\steam\steamapps\common\far cry 2\bin\farcry2.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\far cry 2\bin\farcry2.exe |
"TCP Query User{9A001E02-C7B2-4B03-9A57-F81DC45A6EFE}C:\program files (x86)\origin games\mass effect 2\binaries\masseffect2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\binaries\masseffect2.exe |
"TCP Query User{A250A574-A5EF-4003-B703-99543CFD60B8}E:\program files\steam\steamapps\common\dirt 2\dirt2_game.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\dirt 2\dirt2_game.exe |
"TCP Query User{AB791726-0EDE-41A9-A56F-89285FFFFF38}E:\program files\steam\steamapps\common\crysis 2\bin32\crysis2.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2\bin32\crysis2.exe |
"TCP Query User{B36A6543-9276-4486-8AF3-9D11FA685455}E:\program files\steam\steamapps\common\prince of persia forgotten sands\prince of persia.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia forgotten sands\prince of persia.exe |
"TCP Query User{B3E51F87-8359-4F91-8C43-4D8FEE523D8D}C:\users\draco\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\draco\appdata\local\akamai\netsession_win.exe |
"TCP Query User{B52B462F-332E-4051-AF25-D3407C6AD6DD}E:\program files\steam\steamapps\common\star wars battlefront ii\gamedata\battlefrontii.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\star wars battlefront ii\gamedata\battlefrontii.exe |
"TCP Query User{B73C7770-646E-4728-976A-7AAD935B12C4}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"TCP Query User{C002445D-40D3-4332-9575-583D194FE6ED}E:\program files\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"TCP Query User{CF97E4E0-3675-4952-8A84-46659ACE42A3}C:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"TCP Query User{D86A901B-C476-4548-82E0-D19FB3BBBC7E}C:\users\draco\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\draco\appdata\roaming\spotify\spotify.exe |
"TCP Query User{D8FCCCC5-1DC2-41EF-9125-0017CB4AFEAB}C:\program files (x86)\origin games\mass effect 2\binaries\eacoreserver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\binaries\eacoreserver.exe |
"TCP Query User{DABA8BA8-79E7-472F-98DF-D6F35EAAE412}C:\program files (x86)\origin games\need for speed(tm) most wanted\nfs13.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\need for speed(tm) most wanted\nfs13.exe |
"TCP Query User{DCE54A92-A0C2-48BA-8098-2069D2F00ADC}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe |
"TCP Query User{DF40B489-81F9-45AB-AD7E-2FEA9555BBDD}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"TCP Query User{E13C120A-FAEB-4FD6-B417-FA4E8FF8C211}E:\program files\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe |
"TCP Query User{E272FFAD-F111-46C8-903D-A860074E319F}C:\program files (x86)\the witcher 2\bin\witcher2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\the witcher 2\bin\witcher2.exe |
"TCP Query User{E5FF6490-D078-418B-9CE0-F0B088261DD2}E:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe" = protocol=6 | dir=in | app=e:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe |
"UDP Query User{00E3E705-492C-438E-85D8-613C6CD1757E}E:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\shippingpc-bmgame.exe |
"UDP Query User{103995B8-7D18-446F-9E1A-C6053C8B4CCF}E:\program files\steam\steamapps\common\star wars battlefront ii\gamedata\battlefrontii.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars battlefront ii\gamedata\battlefrontii.exe |
"UDP Query User{19D7A50F-6062-449E-BE2C-B402854DB4F3}E:\program files\steam\steamapps\common\dirt 3\dirt3_game.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dirt 3\dirt3_game.exe |
"UDP Query User{2AD50B8A-6132-4CB0-93E1-562397549027}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"UDP Query User{2BD84AF5-A49E-416B-A18A-C7E8BEBBACF9}E:\program files\steam\steamapps\common\dirt 2\dirt2_game.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dirt 2\dirt2_game.exe |
"UDP Query User{30D7E996-BE38-4491-9346-C26238626553}E:\program files\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2.exe |
"UDP Query User{38DDB46E-C26F-4615-B5BF-1EC9341D70F8}C:\users\draco\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\draco\appdata\local\akamai\netsession_win.exe |
"UDP Query User{3A26147C-AEB6-4284-8B0C-993B1D45C29F}C:\users\draco\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\draco\appdata\roaming\spotify\spotify.exe |
"UDP Query User{43157D76-B9F2-407A-82D9-59F6EBCA85C9}E:\program files\steam\steamapps\common\star wars empire at war\gamedata\sweaw.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star wars empire at war\gamedata\sweaw.exe |
"UDP Query User{451D7B67-AE65-4EA9-A240-F92B6105C590}C:\program files (x86)\ccp\eve\bin\exefile.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ccp\eve\bin\exefile.exe |
"UDP Query User{45413323-BBD7-4A5F-9577-F1AC5122BE96}E:\program files\steam\steamapps\common\dead island\deadislandgame.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dead island\deadislandgame.exe |
"UDP Query User{497E4F62-631B-4164-B773-59759295C6EB}C:\program files (x86)\origin games\need for speed(tm) most wanted\nfs13.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\need for speed(tm) most wanted\nfs13.exe |
"UDP Query User{4A3261E2-FF5D-44FE-8E88-CDF6B28C0585}E:\program files\steam\steamapps\common\dead space\dead space.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dead space\dead space.exe |
"UDP Query User{591D84AC-0AD7-4CBA-8F83-F70251BDFB6F}E:\program files\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe |
"UDP Query User{5D068C57-EDB5-4DAB-AFF9-DF5F834CB92E}E:\program files\steam\steamapps\common\far cry 2\bin\farcry2.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\far cry 2\bin\farcry2.exe |
"UDP Query User{5F5EC564-C0B4-4876-AEFB-43396EEC1958}E:\program files\steam\steamapps\common\crysis 2\bin32\crysis2.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\crysis 2\bin32\crysis2.exe |
"UDP Query User{6A7C7EA3-D62B-48AB-BAC4-EA0A74269792}E:\program files\steam\steamapps\common\planetside 2\planetside2.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\planetside 2\planetside2.exe |
"UDP Query User{7094C5FF-A33B-4AC0-98A2-9152CA61E696}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"UDP Query User{70E2565D-8932-430A-8BB3-C0D2905D0A7B}E:\program files\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"UDP Query User{7483AF6A-92EF-4D46-8656-3DC7A92402AB}C:\program files (x86)\six projects\six updater\tools\bin\rsync.exe" = protocol=17 | dir=in | app=c:\program files (x86)\six projects\six updater\tools\bin\rsync.exe |
"UDP Query User{7A47E55C-539C-4177-A3F9-03D60686CC38}C:\program files (x86)\origin games\mass effect 2\binaries\eacoreserver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\binaries\eacoreserver.exe |
"UDP Query User{7E5ED55A-B5A9-44B3-A27D-E6E3A4A7E984}E:\program files\steam\steamapps\magicka176\bloody good time\bgt.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\magicka176\bloody good time\bgt.exe |
"UDP Query User{973678C7-F6DF-4E6A-B1E3-A2FD66A81AFC}E:\program files\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe |
"UDP Query User{A33788E4-AD24-4A7C-8530-90361FCF9236}E:\program files\steam\steamapps\common\prince of persia forgotten sands\prince of persia.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\prince of persia forgotten sands\prince of persia.exe |
"UDP Query User{A4BE9A8F-373D-4895-9285-97D407BA75AC}C:\program files (x86)\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files (x86)\xfire\xfire.exe |
"UDP Query User{B61E330C-2000-45F0-9A68-18C58CADC23E}E:\program files\steam\steamapps\common\assassins creed brotherhood\acbsp.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\assassins creed brotherhood\acbsp.exe |
"UDP Query User{BEACF1B4-9A52-465F-B6CC-F3BB2AB50E45}C:\users\draco\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\draco\appdata\roaming\spotify\spotify.exe |
"UDP Query User{C4C1AFF8-1673-49FF-A934-D1CDCF7B9056}C:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"UDP Query User{C6C678CB-7FC9-4BB1-961B-3740CBFC80E3}C:\games\world_of_warplanes\worldofwarplanes.exe" = protocol=17 | dir=in | app=c:\games\world_of_warplanes\worldofwarplanes.exe |
"UDP Query User{DA50E369-370C-47B8-B7BE-909B5224B4BB}C:\program files (x86)\origin games\mass effect 2\binaries\masseffect2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\mass effect 2\binaries\masseffect2.exe |
"UDP Query User{DE30B194-7C42-454E-B7B4-9A0378A8C525}C:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"UDP Query User{E9477DA0-4373-45D8-B514-531A796344E1}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe |
"UDP Query User{EB6ED69C-9FC2-4605-86D0-FB57F67CF031}E:\program files\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe |
"UDP Query User{EE742119-94BF-4B69-9313-C22622A18F3F}C:\program files (x86)\the witcher 2\bin\witcher2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\the witcher 2\bin\witcher2.exe |
"UDP Query User{F03E08D9-BB5D-4115-B26B-234FC87193EB}C:\users\draco\desktop\cryengine 3 sdk 3.4\bin64\launcher.exe" = protocol=17 | dir=in | app=c:\users\draco\desktop\cryengine 3 sdk 3.4\bin64\launcher.exe |
"UDP Query User{F27CB184-B6FC-44FF-BA6F-96937E3228FD}C:\users\draco\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\draco\appdata\local\akamai\netsession_win.exe |
"UDP Query User{FEFF9867-4887-49A9-AB06-1B087FE7F7FE}E:\program files\steam\steamapps\common\alien swarm\swarm.exe" = protocol=17 | dir=in | app=e:\program files\steam\steamapps\common\alien swarm\swarm.exe |

Darkshadow77 03.03.2013 21:28
2. Logfile - Teil 2:
Code:

========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02382870-19C7-3ACD-BBAE-F6E3760947DC}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{09782D89-1CA6-4B7D-82C5-2DE01AF5601B}" = Microsoft SQL Server 2008 Common Files
"{0ADF605D-2D94-4467-91F7-D75C71CF328D}" = Microsoft SQL Server 2008 Database Engine Shared
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{12FE6AA6-65D2-40EE-B925-62193128A0E6}" = Microsoft SQL Server 2008 Native Client
"{1927E640-A2C6-4BA7-8F43-FFD2AE3DFCF3}" = Intel(R) PROSet/Wireless WiFi-Software
"{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}" = Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86416031FF}" = Java(TM) 6 Update 31 (64-bit)
"{28D06854-572C-4A65-83E5-F8CAF26B9FDC}" = Microsoft SQL Server VSS Writer
"{2DF4C5DD-7417-301D-935D-939D3B7B5997}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{2F14965D-567B-4E59-ADEB-0A2CC1E3ADDF}" = Sql Server Customer Experience Improvement Program
"{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}" = Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU
"{440668AA-7524-40DB-966A-60BE535E1B3F}" = Microsoft SQL Server 2008 Database Engine Services
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5340A3B5-3853-4745-BED2-DD9FF5371331}" = Microsoft SQL Server 2008 Common Files
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.5.3
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0407-1000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-1000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-1000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-1000-0000000FF1CE}_Office14.PROPLUS_{70A3169E-288F-454F-A08D-20DF66639B50}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUS_{0242505C-4E90-407F-9299-B5B275F50D86}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-1000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUS_{B51389C8-2890-4633-81D8-47D2A7402274}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-1000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-1000-0000000FF1CE}_Office14.PROPLUS_{3013A793-10A7-4D1F-B8B4-2FAA82F4D259}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-1000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-1000-0000000FF1CE}_Office14.PROPLUS_{98782D5D-A9EE-43C6-88AD-B50AD8530E78}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0407-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (German) 2010
"{90140000-0043-0407-1000-0000000FF1CE}_Office14.PROPLUS_{8DFD91C7-66AE-4E54-9901-5D5F401AD329}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0407-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-1000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-1000-0000000FF1CE}_Office14.PROPLUS_{8299B64F-1537-4081-974C-033EAB8F098E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0407-1000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{90140000-00BA-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}" = RBVirtualFolder64Inst
"{A140A094-942E-4F76-B8F4-850EC146170F}" = Alienware M17x Manual
"{AA72DFB8-BA38-49C9-B5A4-A95FD62641F8}" = BOINC
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{ADBD6E65-46CB-4A97-9AFB-64963FEACC40}" = Microsoft SQL Server 2008 RsFx Driver
"{B143BE44-8723-315E-9413-011C55873C0E}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.0.1 (BETA)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 2.47.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.23.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B9E62002-BD74-30EC-9049-93E0E003C736}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU
"{C214301F-F5D7-36D9-B3A2-1467C5586495}" = Microsoft Help Viewer 1.1 Language Pack - DEU
"{C3EAE456-7E7A-451F-80EF-F34C7A13C558}" = Microsoft SQL Server Compact 3.5 SP2 x64 DEU
"{CC8BA866-16A7-4667-BA0C-C494A1E7B2BF}" = Microsoft SQL Server 2008 Database Engine Shared
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240C9}" = WinZip 16.0
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D8125A39-ADEE-4187-B04D-DB6CF489AF61}" = Unterstützungsdateien für Microsoft SQL Server 2008-Setup
"{E5748D30-7E6D-3A8E-BFE6-C1D02C6DDABB}" = Microsoft Help Viewer 1.1
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FBD367D1-642F-47CF-B79B-9BE48FB34007}" = Microsoft SQL Server 2008 Database Engine Services
"{FD1AE10F-163C-4D4B-9FCE-AC667AF1DC6E}" = Alienware Command Center
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft Help Viewer 1.1" = Microsoft Help Viewer 1.1
"Microsoft Help Viewer 1.1 Language Pack - DEU" = Microsoft Help Viewer 1.1 Language Pack - DEU
"Microsoft SQL Server 10" = Microsoft SQL Server 2008 (64-bit)
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008 (64-bit)
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU" = Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"PC-Doctor for Windows" = AlienAutopsy
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = Synaptics Pointing Device Driver
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1" = MSI Kombustor 2.5.0
"{0D69462F-99CC-4F8D-942E-666E21CE59F8}" = Alienware On-Screen Display
"{0DFDF745-3163-4C2F-8E6B-81CA5F297A1E}" = EasyToolz
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = AlienRespawn
"{1040143F-FEFB-4B90-8E51-E47D40E14C4E}" = Medal of Honor™ Warfighter
"{1B0FBB9A-995D-47CD-87CD-13E68B676E4F}" = Mass Effect
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C813}_is1" = World of Warplanes
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{25F28E39-FDBB-11DB-8314-0800200C9A66}" = Medal of Honor Airborne
"{26A24AE4-039D-4CA4-87B4-2F83216025F0}" = Java(TM) 6 Update 25
"{26A24AE4-039D-4CA4-87B4-2F83216034FF}" = Java(TM) 6 Update 35
"{2A0CC26E-6FC8-46FF-989D-335B7E1712E2}" = Afterfall InSanity
"{2D8CED57-CCDB-4D86-9087-3BBCAE8F8F22}" = Six Updater
"{2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}" = Microsoft Visual C++  Compilers 2010 Standard - enu - x86
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3250260C-7A95-4632-893B-89657EB5545B}" = PhotoShowExpress
"{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}" = Microsoft XNA Framework Redistributable 3.0
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{406FB8A4-F539-48A9-809C-F94706F9C9F6}_is1" = S.T.A.L.K.E.R. - Call Of Pripyat [v1.6.01]
"{4198AE83-A3C6-4C41-85C8-EC63E990696E}" = Crysis®3
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008 Browser
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4D87DC92-C328-46EC-A7B4-9C88129DC696}" = Dead Space™
"{4EAE665D-957A-4D04-9679-3AD582008877}" = NVIDIA PhysX
"{528145C0-462A-11E1-B8B4-B8AC6F97B88E}" = Google Earth
"{534A31BD-20F4-46b0-85CE-09778379663C}" = Mass Effect™ 3
"{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Internet Security 2013
"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync
"{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack
"{5AB7D739-1735-3A9E-BE73-C43507CB4E6F}" = Microsoft Visual Studio 2010 Service Pack 1
"{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}" = Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219
"{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}" = GameSpy Comrade
"{616C6F39-4CE1-3434-A665-2F6A04C09A7F}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{67711EE7-BC7C-4FF1-BBC1-733C38D93F7E}_is1" = Windows Movie Maker 6.0.6000.16386
"{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}" = Roxio Creator Starter
"{6FCFA783-CE7B-4018-AC48-0E6EEAAEA322}" = LOST PLANET COLONIES
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{75D84EF7-0D8C-4E70-B3FA-7B42A5D4E0EB}" = Mass Effect 2
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{7746BFAA-2B5D-4FFD-A0E8-4558F4668105}" = Roxio Burn
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{820B6609-4C97-3A2B-B644-573B06A0F0CC}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{9116E9E6-E1F9-4835-95B8-31E7F158E9F7}" = Audials
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A00EC4E-27E1-42C4-98DD-662F32AC8870}" = Sonic CinePlayer Decoder Pack
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}" = Assassin's Creed III 1.01
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A0111B84-718C-4016-94DA-0EFC1FD65EFC}" = Aeria Ignite
"{A121EEDE-C68F-461D-91AA-D48BA226AF1C}" = Roxio Activation Module
"{A2433A63-5F5D-40E5-B529-9123C2B3E734}" = Anno 1701
"{A29E18C2-7AB1-4b6b-848C-5D5E2C85F0C0}" = FIFA 13
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A7496F46-78AE-4DB2-BCF5-95F210FA6F96}" = Windows Live Movie Maker
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = AlienRespawn - Support Software
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X (10.1.6) MUI
"{AF4D3C63-009B-4A17-B02E-D395065DD3F0}" = Dell Stage Remote
"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{C668416A-9213-4058-B7F2-01A42D85559D}" = Microsoft SQL Server System CLR Types
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCAC7E52-ECCE-3C4D-B1BE-BC2ACF1C1C0E}" = Microsoft Visual Basic 2010 Express - DEU
"{CFCB8616-A5D1-4281-80E8-389F685BFAE2}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D08A5DFE-F0C2-74FC-DD56-A3B371E9344D}" = EA Shared Game Component: Activation
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D4329609-4102-4F8C-B83F-7FE024EEA314}" = Dead Space™ 3
"{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh
"{DE042823-C359-4B87-B66B-308057E8B6AF}" = Camtasia Studio 7
"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E9089B6A-1FDE-47F3-8D29-175F5B7A0722}" = Microsoft SQL Server 2008 R2 Management Objects
"{EA8ADAA9-6671-4839-A51E-0C6792B78F3E}" = FIFA 12
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EF56258E-0326-48C5-A86C-3BAC26FC15DF}" = Roxio Creator Starter
"{EFF1798F-4286-406E-B48D-BF7F6102E644}" = PunkBuster
"{F06B5C4C-8D2E-4B24-9D43-7A45EEC6C878}" = Roxio Creator Starter
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{FB0127F3-985B-44CE-AE29-378CAF60B361}" = Need for Speed™ Most Wanted
"{FEF06E73-A519-4510-8CF3-B66041B91D8A}" = EMSC
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Aeria Ignite 1.6.1062" = Aeria Ignite
"Afterburner" = MSI Afterburner 2.3.1
"ArtMoney PRO_is1" = ArtMoney PRO v7.39.3
"ArtMoney SE_is1" = ArtMoney SE v7.40.2
"Battlelog Web Plugins" = Battlelog Web Plugins
"BattlEye for OA" = BattlEye for OA Uninstall
"BitTorrent" = BitTorrent
"Bridge Constructor_is1" = Bridge Constructor v1.2
"Cheat Engine 5.6_is1" = Cheat Engine 5.6
"com.ea.Activation.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Shared Game Component: Activation
"Desura" = Desura
"Desura_72481868087328" = Desura: Alien Shooter
"Desura_80590766342176" = Desura: 2012
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"DFHEXEditor 1.1_is1" = DF HEXEditor 1.1
"ESN Sonar-0.70.4" = ESN Sonar
"EVE" = [translation missing: EVERemoveOnly]
"FormatFactory" = FormatFactory 2.50
"Fraps" = Fraps (remove only)
"FUSSBALL MANAGER 12" = FUSSBALL MANAGER 12
"HD Tune_is1" = HD Tune 2.55
"HyperCam 3" = HyperCam 3
"InstallShield_{0D69462F-99CC-4F8D-942E-666E21CE59F8}" = Alienware On-Screen Display
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{A140A094-942E-4F76-B8F4-850EC146170F}" = Alienware M17x Manual
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"InstallShield_{FD1AE10F-163C-4D4B-9FCE-AC667AF1DC6E}" = Alienware Command Center
"InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Internet Security 2013
"Integrated Webcam Live! Central" = Integrated Webcam Live! Central
"Internet Manager" = Internet Manager
"IsoBuster_is1" = IsoBuster 3.1
"MegaTrainer eXperience_is1" = MegaTrainer eXperience V1.1.2.6c
"Microsoft Visual Basic 2010 Express - DEU" = Microsoft Visual Basic 2010 Express - DEU
"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU
"Microsoft Visual Studio 2010 Service Pack 1" = Microsoft Visual Studio 2010 Service Pack 1
"Mozilla Firefox 15.0.1 (x86 de)" = Mozilla Firefox 15.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Nostradamus - Die letzte Prophezeiung_is1" = Nostradamus - Die letzte Prophezeiung
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"Origin" = Origin
"Pathologic_is1" = Pathologic
"PC Wizard 2010_is1" = PC Wizard 2010.1.94
"ProjectZomboid" = Project Zomboid (remove only)
"ProtectDisc Driver 11" = ProtectDisc Driver, Version 11
"PunkBusterSvc" = PunkBuster Services
"Secrets of Da Vinci" = Secrets of Da Vinci
"Steam App 10220" = Postal 3
"Steam App 10500" = Empire: Total War
"Steam App 108800" = Crysis 2 Maximum Edition
"Steam App 113420" = Fallen Earth
"Steam App 11440" = DiRT
"Steam App 115320" = PROTOTYPE 2
"Steam App 12750" = GRID
"Steam App 12840" = DiRT 2
"Steam App 15320" = IL-2 Sturmovik: 1946
"Steam App 201760" = Cities XL 2012
"Steam App 202170" = Sleeping Dogs™
"Steam App 202750" = Alan Wake's American Nightmare
"Steam App 203140" = Hitman: Absolution
"Steam App 203750" = Binary Domain
"Steam App 203810" = Dear Esther
"Steam App 205100" = Dishonored
"Steam App 205930" = Hitman: Sniper Challenge
"Steam App 207610" = The Walking Dead
"Steam App 208200" = DOOM 3: BFG Edition
"Steam App 208600" = Lunar Flight
"Steam App 209100" = Resident Evil™: Operation Raccoon City
"Steam App 209870" = Blacklight: Retribution
"Steam App 212010" = Galaxy on Fire 2™ Full HD
"Steam App 212630" = Tom Clancy's Ghost Recon Future Soldier
"Steam App 218" = Source SDK Base 2007
"Steam App 218230" = PlanetSide 2
"Steam App 218640" = Lucius
"Steam App 219540" = ARMA 2: Operation Arrowhead Beta
"Steam App 220240" = Far Cry® 3
"Steam App 226470" = Far Cry 3 - Map Editor
"Steam App 227300" = Euro Truck Simulator 2
"Steam App 24010" = Train Simulator 2012
"Steam App 24200" = DC Universe Online
"Steam App 2450" = Bloody Good Time
"Steam App 25900" = King's Bounty: The Legend
"Steam App 3170" = King's Bounty: Armored Princess
"Steam App 32350" = Star Wars Starfighter
"Steam App 32370" = Star Wars: Knights of the Old Republic
"Steam App 32380" = Star Wars Jedi Knight: Dark Forces II
"Steam App 32390" = Star Wars - Jedi Knight: Mysteries of the Sith
"Steam App 32400" = Star Wars: Dark Forces
"Steam App 32420" = Star Wars The Clone Wars: Republic Heroes
"Steam App 32430" = Star Wars: The Force Unleashed
"Steam App 32470" = Star Wars: Empire at War Gold
"Steam App 32500" = Star Wars: The Force Unleashed II
"Steam App 33905" = ARMA 2 Dedicated Server
"Steam App 33910" = ARMA 2
"Steam App 33930" = ARMA 2: Operation Arrowhead
"Steam App 35140" = Batman: Arkham Asylum GOTY Edition
"Steam App 44320" = DiRT 3
"Steam App 47700" = Command and Conquer 4: Tiberian Twilight
"Steam App 49520" = Borderlands 2
"Steam App 50300" = Spec Ops: The Line
"Steam App 55230" = Saints Row: The Third
"Steam App 57400" = Batman: Arkham City™
"Steam App 57900" = Duke Nukem Forever
"Steam App 6000" = Star Wars Republic Commando
"Steam App 6020" = Star Wars Jedi Knight: Jedi Academy
"Steam App 6030" = Star Wars - Jedi Knight II: Jedi Outcast
"Steam App 6060" = Star Wars - Battlefront II
"Steam App 630" = Alien Swarm
"Steam App 63380" = Sniper Elite V2
"Steam App 63910" = King's Bounty: Crossworlds
"Steam App 6850" = Hitman 2: Silent Assassin
"Steam App 6860" = Hitman: Blood Money
"Steam App 6880" = Just Cause
"Steam App 6900" = Hitman: Codename 47
"Steam App 70120" = Hacker Evolution Duality
"Steam App 71270" = Football Manager 2012
"Steam App 8190" = Just Cause 2
"Steam App 8980" = Borderlands
"Steam App 9050" = DOOM 3
"The Secret World_is1" = The Secret World
"The Witcher 2 Enhanced Edition_is1" = The Witcher 2 Enhanced Edition Version 3.0
"theHunter" = theHunter (remove only)
"Tobit Radio.fx Server" = Radio.fx
"TuneUp Utilities" = TuneUp Utilities
"Uplay" = Uplay
"VLC media player" = VLC media player 0.9.4
"WavePad" = WavePad Audiobearbeitungs-Software
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite_Wave3" = Windows Live Essentials
"World of Warcraft" = World of Warcraft
"Xfire" = Xfire (remove only)
"XfireXO Toolbar" = XfireXO Toolbar
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-1503614190-581956262-4018303520-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Avira SearchFree Toolbar plus Web Protection Updater
"9204f5692a8faf3b" = Dell System Detect
"Akamai" = Akamai NetSession Interface
"Google Chrome" = Google Chrome
"Mozilla Firefox 16.0.1 (x86 de)" = Mozilla Firefox 16.0.1 (x86 de)
"MyFreeCodec" = MyFreeCodec
"Spotify" = Spotify
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-1503614190-581956262-4018303520-1019\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Google Chrome" = Google Chrome
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-1503614190-581956262-4018303520-1020\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Google Chrome" = Google Chrome
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 02.03.2013 13:49:16 | Computer Name = Draco-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 02.03.2013 13:49:16 | Computer Name = Draco-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 02.03.2013 13:49:16 | Computer Name = Draco-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 02.03.2013 13:49:16 | Computer Name = Draco-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren
 für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 
Error - 03.03.2013 05:41:35 | Computer Name = Draco-PC | Source = WinMgmt | ID = 10
Description =
 
Error - 03.03.2013 06:38:13 | Computer Name = Draco-PC | Source = WinMgmt | ID = 10
Description =
 
Error - 03.03.2013 06:50:31 | Computer Name = Draco-PC | Source = WinMgmt | ID = 10
Description =
 
Error - 03.03.2013 07:36:43 | Computer Name = Draco-PC | Source = WinMgmt | ID = 4
Description =
 
Error - 03.03.2013 08:25:11 | Computer Name = Draco-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile  8.  Die
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
Error - 03.03.2013 08:26:28 | Computer Name = Draco-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile  8.  Die
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
Error - 03.03.2013 08:26:29 | Computer Name = Draco-PC | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
 "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile  8.  Die
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
[ FxaaToolError Events ]
Error - 31.01.2013 14:39:59 | Computer Name = Draco-PC | Source = FxaaToolError | ID = 0
Description = System.IO.DirectoryNotFoundException: Ein Teil des Pfades "E:\Program
 Files\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\injFX_Settings\injFxaaTemp.tmp"
 konnte nicht gefunden werden.    bei System.IO.__Error.WinIOError(Int32 errorCode,
 String maybeFullPath)    bei System.IO.FileStream.Init(String path, FileMode mode,
 FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize,
 FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy,
 Boolean useLongPath)    bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)    bei
 System.IO.StreamWriter.CreateFile(String path, Boolean append)    bei System.IO.StreamWriter..ctor(String
 path, Boolean append, Encoding encoding, Int32 bufferSize)    bei System.IO.StreamWriter..ctor(String
 path)    bei FXAA_Tool.FxaaWriter.WriteFxaaSettings()
 
[ System Events ]
Error - 03.03.2013 07:26:22 | Computer Name = Draco-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers
 nicht gestartet:  %%1053
 
Error - 03.03.2013 07:29:07 | Computer Name = Draco-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Gemeinsame Nutzung der Internetverbindung" wurde nicht
 richtig gestartet.
 
Error - 03.03.2013 07:54:12 | Computer Name = Draco-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Art*Money*Pro7.39.3" wurde aufgrund folgenden Fehlers
nicht gestartet:  %%577
 
Error - 03.03.2013 07:54:28 | Computer Name = Draco-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 Internet Manager. OUC erreicht.
 
Error - 03.03.2013 07:54:28 | Computer Name = Draco-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers
 nicht gestartet:  %%1053
 
Error - 03.03.2013 08:05:27 | Computer Name = Draco-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?03.?03.?2013 um 13:03:49 unerwartet heruntergefahren.
 
Error - 03.03.2013 08:07:57 | Computer Name = Draco-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Art*Money*Pro7.39.3" wurde aufgrund folgenden Fehlers
nicht gestartet:  %%577
 
Error - 03.03.2013 08:08:16 | Computer Name = Draco-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 Internet Manager. OUC erreicht.
 
Error - 03.03.2013 08:08:16 | Computer Name = Draco-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers
 nicht gestartet:  %%1053
 
Error - 03.03.2013 08:11:00 | Computer Name = Draco-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Gemeinsame Nutzung der Internetverbindung" wurde nicht
 richtig gestartet.
 
 
< End of report >
Meine Hardware:
Prozessor: Intel Core i7 2860QM
Arbeitsspeicher:8 GB
Grafikkarte: NVIDIA Geforce GTX 580M
Beetriebssystem: Windows 7 Ultimate Edition 64-Bit SP1

Darkshadow77 06.03.2013 19:58
Keiner Ratschläge, wie ich die Probleme lösen kann?

Hab grad herausgefunden, dass ich in den abgesicherten Modus starten kann, ohne das ich das Problem mit dem schwarzen BIldschirm nach dem anmelden habe.


Alle Zeitangaben in WEZ +1. Es ist jetzt 22:03 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131