kugelfisch | 12.07.2012 21:58 | mbam (hat 1 datei angezeigt und erfolgreich gelöscht) Code:
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org
Datenbank Version: v2012.07.12.09
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Kugelfisch :: KUGELFISCH-PC [Administrator]
12.07.2012 22:00:16
mbam-log-2012-07-12 (22-00-16).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 403696
Laufzeit: 48 Minute(n), 53 Sekunde(n)
Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel: 1
HKLM\SOFTWARE\Google\chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki (PUP.Funmoods) -> Erfolgreich gelöscht und in Quarantäne gestellt.
Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)
(Ende) OTL: Code:
OTL logfile created on: 12.07.2012 22:03:06 - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Kugelfisch\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,99 Gb Total Physical Memory | 1,75 Gb Available Physical Memory | 43,85% Memory free
7,98 Gb Paging File | 5,30 Gb Available in Paging File | 66,38% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 436,37 Gb Total Space | 243,40 Gb Free Space | 55,78% Space Free | Partition Type: NTFS
Drive D: | 29,30 Gb Total Space | 20,15 Gb Free Space | 68,79% Space Free | Partition Type: NTFS
Computer Name: KUGELFISCH-PC | User Name: Kugelfisch | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Kugelfisch\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Programme\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
PRC - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Logitech\G35\G35.exe (Logitech(c))
PRC - C:\Program Files (x86)\ASRock Utility\IES\AsrIes.exe ()
PRC - C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe ()
========== Modules (No Company Name) ==========
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
MOD - C:\Program Files (x86)\Steam\bin\libcef.dll ()
MOD - C:\Program Files (x86)\Steam\bin\chromehtml.DLL ()
MOD - C:\Program Files (x86)\Steam\bin\avutil-51.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avformat-53.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avcodec-53.dll ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll ()
MOD - C:\Program Files (x86)\ASRock Utility\IES\AsrIes.exe ()
MOD - C:\Program Files (x86)\MOUSE Editor\Win32Share.dll ()
MOD - C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe ()
MOD - C:\Program Files (x86)\MOUSE Editor\Resource.dll ()
========== Win32 Services (SafeList) ==========
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (avast! Antivirus) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (LVUVC64) Logitech Webcam 300(UVC) -- C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\drivers\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (LADF_SBVM) -- C:\Windows\SysNative\drivers\ladfSBVMamd64.sys (Logitech)
DRV:64bit: - (LADF_DHP2) -- C:\Windows\SysNative\drivers\ladfDHP2amd64.sys (Logitech)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (irda) -- C:\Windows\SysNative\drivers\irda.sys (Microsoft Corporation)
DRV:64bit: - (VIAHdAudAddService) -- C:\Windows\SysNative\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (irsir) -- C:\Windows\SysNative\drivers\irsir.sys (Microsoft Corporation)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C1 03 58 57 BF D3 CC 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {DEC6B8C8-51CF-4B5B-8EB8-C0316900FF70}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{DEC6B8C8-51CF-4B5B-8EB8-C0316900FF70}: "URL" = hxxp://start.funmoods.com/results.php?f=4&a=ddrnw&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.110.0: C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.116.0: C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.07.11 19:38:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.06.17 03:13:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2012.01.15 21:56:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kugelfisch\AppData\Roaming\mozilla\Extensions
[2012.07.05 23:28:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kugelfisch\AppData\Roaming\mozilla\Firefox\Profiles\hf0otfzf.default\extensions
[2012.07.05 23:28:17 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Kugelfisch\AppData\Roaming\mozilla\Firefox\Profiles\hf0otfzf.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012.02.05 18:18:56 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Users\Kugelfisch\AppData\Roaming\mozilla\Firefox\Profiles\hf0otfzf.default\extensions\ffxtlbr@funmoods.com
[2012.07.04 11:07:00 | 000,000,000 | ---D | M] (Ghostery) -- C:\Users\Kugelfisch\AppData\Roaming\mozilla\Firefox\Profiles\hf0otfzf.default\extensions\firefox@ghostery.com
[2012.05.18 10:18:00 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\Kugelfisch\AppData\Roaming\mozilla\Firefox\Profiles\hf0otfzf.default\extensions\ich@maltegoetz.de
[2012.02.05 18:18:52 | 000,001,799 | ---- | M] () -- C:\Users\Kugelfisch\AppData\Roaming\Mozilla\Firefox\Profiles\hf0otfzf.default\searchplugins\funmoods.xml
[2012.04.24 22:37:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.07.11 19:38:01 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2012.06.17 03:13:42 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.06.08 14:03:33 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.06.08 14:03:33 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.06.08 14:03:33 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.08 14:03:33 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.06.08 14:03:33 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.08 14:03:33 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [Logitech G35] C:\Program Files (x86)\Logitech\G35\G35.exe (Logitech(c))
O4 - HKCU..\Run: [ASRockIES] File not found
O4 - HKCU..\Run: [ICQ] C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [OscarEditor] C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe ()
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.0)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4B2F1D91-8795-4461-B52D-AEE5AE28115D}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{6e6ef1fa-4291-11e1-91da-001966fd760e}\Shell - "" = AutoRun
O33 - MountPoints2\{6e6ef1fa-4291-11e1-91da-001966fd760e}\Shell\AutoRun\command - "" = G:\PreyLauncher.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2012.07.12 22:04:43 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Desktop\logs
[2012.07.12 20:41:31 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\AppData\Roaming\Malwarebytes
[2012.07.12 20:41:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.07.12 20:41:23 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.07.12 20:41:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.07.12 20:41:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.07.11 23:27:39 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012.07.11 23:27:39 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012.07.11 23:27:38 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012.07.11 23:27:38 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012.07.11 23:27:37 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012.07.11 23:27:37 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012.07.11 23:27:37 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.07.11 23:27:37 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.07.11 23:27:35 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012.07.11 23:27:35 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012.07.11 23:27:35 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012.07.11 23:27:34 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012.07.11 23:27:34 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012.07.11 20:00:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2012.07.11 20:00:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2012.07.11 19:59:54 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2012.07.11 19:59:48 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2012.07.11 19:59:45 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2012.07.11 18:43:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2012.07.11 18:42:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache
[2012.07.09 14:20:00 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Desktop\Dungeoneer
[2012.07.09 12:58:22 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Desktop\Neuer Ordner (2)
[2012.07.09 12:48:53 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Desktop\mama hnörbuch
[2012.07.08 23:21:56 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Desktop\Neuer Ordner
[2012.07.08 21:32:27 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Desktop\SCP-087-B
[2012.07.06 21:23:55 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Documents\ArmA 2 Other Profiles
[2012.07.05 00:22:41 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Desktop\dasdas
[2012.06.21 12:08:55 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2012.06.21 12:08:55 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2012.06.21 12:08:55 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2012.06.21 12:08:19 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2012.06.21 12:08:19 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2012.06.21 12:08:19 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2012.06.21 12:08:00 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2012.06.21 12:08:00 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2012.06.20 17:30:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012.06.20 17:30:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oracle
[2012.06.20 17:30:02 | 000,772,504 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll
[2012.06.20 17:30:02 | 000,227,720 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2012.06.20 17:29:46 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2012.06.20 17:29:46 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2012.06.20 16:36:42 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\AppData\Local\ArmA 2 OA
[2012.06.20 13:14:25 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\AppData\Local\Macromedia
[2012.06.19 19:19:07 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Documents\ArmA 2
[2012.06.19 19:19:07 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\AppData\Local\ArmA 2
[2012.06.19 19:19:02 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
[2012.06.19 19:19:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
[2012.06.19 13:47:39 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Desktop\Prey
[2012.06.19 13:46:34 | 000,000,000 | ---D | C] -- C:\Users\Kugelfisch\Desktop\Mirrors Edge
[2012.06.19 13:26:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2012.06.19 13:08:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Solidshield
[2012.06.13 11:45:35 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2012.06.13 11:45:35 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2012.06.13 11:45:35 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2012.06.13 11:45:29 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012.06.13 11:45:28 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012.06.13 11:45:27 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012.06.13 11:45:23 | 001,112,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2012.06.13 11:45:22 | 003,216,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2012.06.13 11:45:17 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2012.06.13 11:45:15 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.07.12 21:58:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.07.12 20:43:13 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.07.12 17:58:49 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012.07.12 17:58:49 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012.07.12 17:17:58 | 000,014,736 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.12 17:17:58 | 000,014,736 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.12 17:10:14 | 000,275,200 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.07.12 17:10:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.07.12 17:09:36 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs
[2012.07.12 17:09:27 | 3214,188,544 | -HS- | M] () -- C:\hiberfil.sys
[2012.07.11 19:38:01 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012.07.09 12:51:34 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.07.09 12:51:34 | 000,654,150 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.07.09 12:51:34 | 000,616,032 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.07.09 12:51:34 | 000,130,022 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.07.09 12:51:34 | 000,106,412 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.07.03 18:21:52 | 000,958,400 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012.07.03 18:21:52 | 000,355,856 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012.07.03 18:21:52 | 000,071,064 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012.07.03 18:21:52 | 000,059,728 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012.07.03 18:21:52 | 000,054,072 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012.07.03 18:21:51 | 000,025,232 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012.07.03 18:21:32 | 000,041,224 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.07.03 18:21:28 | 000,227,648 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012.07.03 18:21:18 | 000,285,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.07.02 21:31:45 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012.07.02 21:31:45 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.07.02 21:31:24 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012.06.25 14:53:45 | 000,000,229 | ---- | M] () -- C:\Users\Kugelfisch\Desktop\Bewerbung.rtf
[2012.06.20 17:29:29 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2012.06.20 17:29:28 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.07.12 20:41:24 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.07.11 18:43:54 | 000,002,537 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Excel Viewer.lnk
[2012.07.09 12:58:00 | 000,330,933 | ---- | C] () -- C:\Users\Kugelfisch\Desktop\Ein Moment fürs Leben (01).mp3
[2012.04.29 01:50:06 | 000,004,416 | ---- | C] () -- C:\Users\Kugelfisch\AppData\Roaming\CamStudio.cfg
[2012.04.10 03:43:09 | 000,000,408 | ---- | C] () -- C:\Users\Kugelfisch\AppData\Roaming\CamShapes.ini
[2012.04.10 03:43:09 | 000,000,408 | ---- | C] () -- C:\Users\Kugelfisch\AppData\Roaming\CamLayout.ini
[2012.04.10 03:43:09 | 000,000,096 | ---- | C] () -- C:\Users\Kugelfisch\AppData\Roaming\Camdata.ini
[2012.02.29 13:26:56 | 000,416,064 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2012.01.25 03:26:11 | 002,010,284 | ---- | C] () -- C:\Users\Kugelfisch\ts3_recording_12_01_25_2_26_7.wav
[2012.01.18 06:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2012.01.18 06:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2012.01.18 06:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2012.01.15 22:33:01 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.01.15 22:33:00 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
< End of report > OTL EXtra Code:
OTL Extras logfile created on: 12.07.2012 22:03:06 - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Kugelfisch\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,99 Gb Total Physical Memory | 1,75 Gb Available Physical Memory | 43,85% Memory free
7,98 Gb Paging File | 5,30 Gb Available in Paging File | 66,38% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 436,37 Gb Total Space | 243,40 Gb Free Space | 55,78% Space Free | Partition Type: NTFS
Drive D: | 29,30 Gb Total Space | 20,15 Gb Free Space | 68,79% Space Free | Partition Type: NTFS
Computer Name: KUGELFISCH-PC | User Name: Kugelfisch | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0E55D446-B61E-47F1-972B-43FCCCC9AE63}" = lport=137 | protocol=17 | dir=in | app=system |
"{0EE985E6-304D-45B7-AF81-9B132A675510}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{14CDD124-47D8-46DD-AE78-6715E32438BA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{23EA8725-CFA7-43CA-AED5-66734BB4D8C4}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3889A37B-9180-423D-BBCF-4D9CD8BE1DB9}" = rport=138 | protocol=17 | dir=out | app=system |
"{4089A3A0-6CEE-40CD-A01B-85BC3FFEEF0C}" = lport=10243 | protocol=6 | dir=in | app=system |
"{49E05FA3-4C78-4A47-B522-45DF2129DE14}" = rport=445 | protocol=6 | dir=out | app=system |
"{4AE1C08A-0C05-4184-B777-C0977A8E8349}" = lport=57779 | protocol=6 | dir=in | name=pando media booster |
"{4D95A586-3864-418C-B56E-FEFBFD85F0A5}" = lport=138 | protocol=17 | dir=in | app=system |
"{6F655BCD-4C5A-4F00-878A-7823D09D2EA5}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{75890052-5024-4BC7-A985-E1BE1D73F7CF}" = rport=137 | protocol=17 | dir=out | app=system |
"{76FD0E0A-C7F7-4587-81FE-4D461A4387C0}" = lport=139 | protocol=6 | dir=in | app=system |
"{777C887F-CF3A-44C3-8C44-FCD2C3741F89}" = lport=2869 | protocol=6 | dir=in | app=system |
"{812E8D22-869C-4EAE-890A-1C378166301C}" = lport=57779 | protocol=6 | dir=in | name=pando media booster |
"{951CE7C5-3FAB-4DF2-9F45-26BA502B7A60}" = lport=57779 | protocol=17 | dir=in | name=pando media booster |
"{A5EB3A0E-E140-4570-8172-0F9E4B92A135}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{B64E90A1-3AD4-4D8F-85DC-B5879CA8A8BC}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{BAB54A3A-48DF-42FD-B471-F247D93F4F4F}" = lport=57779 | protocol=17 | dir=in | name=pando media booster |
"{C03E8232-7C30-42DC-8C4B-48A14E173F1C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C3A57167-C5D6-404A-96CD-F13A8D3CCB4A}" = rport=139 | protocol=6 | dir=out | app=system |
"{CF06C7BA-E100-4EB4-8F1C-5F49ADF0E9E2}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{D31BF0DF-94D8-4E5B-ADAE-C868CDC9C702}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{DBC52A16-032A-4FF4-B915-0BC10F17260B}" = rport=10243 | protocol=6 | dir=out | app=system |
"{E707CDFF-59A7-4A95-9838-765B130695D6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{EC97ABD5-CF8E-498A-8D28-DAE06021D0DE}" = lport=445 | protocol=6 | dir=in | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0370B593-76D5-46A1-A3A0-ABA0F249A0A2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{039F06CD-54B8-4414-A21F-98965101C95A}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.515\agent.exe |
"{053B6564-3F9B-4610-A887-1C820A5B2CF2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{05C97C16-636F-473B-8F96-1F0DB5FB0E86}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.868\agent.exe |
"{064B37A2-A4C6-4919-B8F5-4CFD6FB41574}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe |
"{07774687-17FD-4BEB-A30D-CA0964614F56}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{07BBD656-F145-4457-8B63-7DC3E99E0347}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{098C0637-B67D-457C-B7DA-61841FEA84BD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2\arma2.exe |
"{0CA6487D-3738-4BDC-8D43-4EF263CC96E1}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii beta\diablo iii.exe |
"{0EADE48A-A8DD-4A6F-B7A0-93B8F3D6FF7A}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"{0F728F17-3ED9-4EE5-B3FC-38F38384EAA7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{12AF781A-3E72-429B-B7F3-43FE54ACA46F}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-x.x.x.x-4.0.0.12911-eu-downloader.exe |
"{166BE01F-9A36-4286-A259-AB784F39C4FD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{176C8227-539E-4455-B4F7-0D4B566F7F9F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{18450E74-18E3-4AC3-B6FE-FA3E6EC37FF3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"{196BCD3C-F031-45BA-83B6-D974E0A7BF3B}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{1CB2A93B-EA75-4387-8568-7C671945BF81}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1F2EC7EC-E6E1-4190-823F-B9A66CD503F7}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"{20FFED47-F917-49D1-B316-E7FC57F9D081}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{2665B51A-5295-4465-833B-5F0F188AAD12}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{2ED873CD-FDCD-41AC-BE98-870A2072B728}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{2EFAD003-8CCE-4754-A694-1B41DA52B601}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{31195052-F16A-4046-855E-D7F6E93D12A1}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.515\agent.exe |
"{389A3E00-6A6C-4DE7-A704-63F80482D2FB}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{3A8877AE-16F0-4D56-A0C0-BE8DCBCC9DEF}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{3C8BEABF-4E90-49C4-B594-0312827F531B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3F3082CB-BB69-4992-A7C9-25F402A417F5}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\******\counter-strike source\hl2.exe |
"{404A75F6-60A6-41E0-A5DC-AF1ACDDE0453}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{45BF0AED-E273-478C-8CA7-A9153C02423D}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{46B5435F-6C66-4E69-ADF1-7493DC5CC45D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{47D3F1B6-B505-49D3-BDD6-F336FFCEDBF6}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe |
"{4BEEF44B-C493-49BB-8634-DF1CA23C3781}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe |
"{4FADF585-09A6-4CB6-A725-672DC1E889E7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien breed 2 assault\binaries\alienbreed2assault.exe |
"{504BFE82-66CC-43A5-A249-7E0EE3B766B3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{507BCCE9-EE98-4DF3-B5D4-39B768C7AF49}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"{5CF5954F-B2D4-4FDC-89B0-8C6E46E95124}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{5DD9D7EE-7E29-4EBE-904F-AA0C48725113}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{631A4AB1-CC96-48EB-A6F3-84D8DD74DB13}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{63FE9958-D774-4831-9B23-CBDD7AA61F19}" = protocol=6 | dir=in | app=c:\program files (x86)\blastshark\lunia\blastshark.exe |
"{648A1242-58E2-4F40-8698-ABA73B3C3ED4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{662FBC65-8EF5-4BEA-9F86-6CC288DD2B1E}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe |
"{6BEF749F-C606-40AC-87F5-893B1DB9AA8F}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{6E2B8FF2-A33E-4B42-A220-E394CE4173FD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{702649E8-BA5D-4E68-AEE6-40B3B02EEF02}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"{7838EC50-5822-4420-940E-0D8DFB10D83D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{7B8767DA-DC19-42D2-97F3-5117846FE1C9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{7CD4BEC5-250B-49DD-A437-5DDC6B9950E5}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{80B25A5B-59AA-4232-B995-6F1D86704881}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{830F07AD-E7E2-4301-9F8E-26E8682256C5}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe |
"{873D1DC1-7A38-4906-A607-005AECCF65AE}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{8C54F163-C899-4FC7-A706-E24A18798B1C}" = dir=in | app=c:\brickforce\brickforce.exe |
"{8CA239E9-241C-4D37-A1F2-18CA79FB2E95}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{92FD63F0-8E0E-44B5-A9EC-EDB9DE16FEF3}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"{933D7595-0E2C-409C-BFED-F25C103EA984}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien breed 3 descent\binaries\alienbreed3descent.exe |
"{942B044A-E6CD-42C2-9D26-60AC2BE06C9A}" = protocol=17 | dir=in | app=c:\program files (x86)\blastshark\lunia\blastshark.exe |
"{95A9DB34-8983-4FFF-8F01-377F8D8F8A98}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2\arma2.exe |
"{96EA25F1-9880-42BF-8CAB-82148D144EEA}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\******\counter-strike source\hl2.exe |
"{987DDA8A-7CC7-4793-8C12-D02BD338E5A2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien breed 3 descent\binaries\alienbreed3descent.exe |
"{9BB465FA-0FCB-4660-9970-475070C64078}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{9D68691E-0E16-419D-89F7-6BA43C93B564}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{9FE836AE-5095-4EE6-9054-8F06999D07AB}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{A0CC346E-DD58-45D8-96D2-420EA943F37F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A3343C25-8209-4BD8-9910-B16B63AD5FDA}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |
"{A4412E59-BC7D-49CF-98DC-AEE62AD08428}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{AD732A1A-B2B0-449C-AE21-BCBF66043C07}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien breed 2 assault\binaries\alienbreed2assault.exe |
"{B4024383-8AD5-4E03-A8D0-69211CD71B58}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{B822B7C1-8022-4DDE-AD38-237C2C117218}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-x.x.x.x-4.0.0.12911-eu-downloader.exe |
"{BC6C515E-F846-4E9C-93A4-334618999536}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{C37FC6A1-5F6F-4D2E-B396-E9B00672D3CC}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |
"{C48C0590-3B15-4CE7-9F4E-68B2A115B5DB}" = protocol=6 | dir=out | app=system |
"{C5D98338-C2C2-4668-A790-AC46730DB04E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{C8773170-F020-4D56-A61F-A3CC2263C519}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the binding of isaac\isaac.exe |
"{C924F6E3-8E39-442F-9D8E-0DBACC0043D9}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"{C993B28A-AA73-4B64-8937-A0107F22726E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{CA172549-8DF0-426B-AC26-43A59C08CBB2}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{CA5AB451-2813-4250-81BB-2E2598CDBA52}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D673A40A-3A52-43D2-B23D-A58AC5C16DCF}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{D7E4DB75-8FCD-4F5E-A189-EF8D8621A6F4}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe |
"{DD21BCFB-99E6-4DCF-8257-D8FA7A428456}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe |
"{DE45B28D-4901-44D5-92D0-8FC8D3B76D73}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe |
"{E4FD8B71-72E1-4FC8-93D4-9182190C300E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the binding of isaac\isaac.exe |
"{E50BB0BA-D177-4A77-9C49-EC77BBB1005F}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{EC0866D8-5164-48A0-98C6-B7D084C007F3}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii beta\diablo iii.exe |
"{F1A0D631-ADF2-4061-A8DA-6A094FAB0611}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{F375B3C2-A6E0-4622-A37B-4125436A58EB}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{F8AB2C40-0219-46B4-A551-AEED33E67DDC}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{F9EBA01A-054B-4FDA-B98E-4A425564D78A}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.868\agent.exe |
"{FB2620EA-03D0-4DF0-BF9A-E9A0FFD85040}" = dir=in | app=c:\brickforce\bflauncher.exe |
"{FB5C4D78-874E-493A-B064-EDC771064DE8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"TCP Query User{0E3A51AC-3352-4A8C-973D-4F4F553FC62F}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe |
"TCP Query User{1C6C8AEF-EC8F-445B-8C5F-1D14EB317C54}C:\users\public\games\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe |
"TCP Query User{2FD3BFF9-731A-4F02-A778-9DE07FFA263A}C:\program files (x86)\heroes of newerth\hon.exe" = protocol=6 | dir=in | app=c:\program files (x86)\heroes of newerth\hon.exe |
"TCP Query User{48D7E20A-46DF-4DBA-94A5-F0BD1C8D5BC3}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |
"TCP Query User{4A34959C-F4B8-4554-BC13-55514A676E99}C:\users\kugelfisch\downloads\diablo-iii-8370-dede-installer-downloader(1).exe" = protocol=6 | dir=in | app=c:\users\kugelfisch\downloads\diablo-iii-8370-dede-installer-downloader(1).exe |
"TCP Query User{52C4C3AB-80D9-4DC4-84CA-25BD7E4A9B11}C:\users\kugelfisch\desktop\gw2.exe" = protocol=6 | dir=in | app=c:\users\kugelfisch\desktop\gw2.exe |
"TCP Query User{5EE4D663-DF68-4A94-9186-88F468951C5E}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{848A3352-F63F-4F1F-84E5-739143D821A5}C:\users\kugelfisch\desktop\gw2.exe" = protocol=6 | dir=in | app=c:\users\kugelfisch\desktop\gw2.exe |
"TCP Query User{98ED87B2-DB77-40F9-89B1-39602DB52AFE}C:\users\public\games\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe |
"TCP Query User{9952B96C-5277-497B-8D27-9E7B5D833C67}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"TCP Query User{A220A6D9-453A-4DA2-B9E5-04C09D1419D1}C:\program files (x86)\steam\steamapps\rav_en\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\rav_en\counter-strike source\hl2.exe |
"TCP Query User{D28C21B9-D1D3-45CC-BA68-8037F673531B}C:\users\kugelfisch\desktop\gw 2\gw2.exe" = protocol=6 | dir=in | app=c:\users\kugelfisch\desktop\gw 2\gw2.exe |
"UDP Query User{022BC0AB-7BD0-4F3F-80E3-8ECD92F9DAF7}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"UDP Query User{2D3982C7-B96C-4755-9DAF-F1AD1C4E3D06}C:\program files (x86)\heroes of newerth\hon.exe" = protocol=17 | dir=in | app=c:\program files (x86)\heroes of newerth\hon.exe |
"UDP Query User{3300CDD6-BA93-41DC-BEF5-B84FEE25548F}C:\users\kugelfisch\desktop\gw2.exe" = protocol=17 | dir=in | app=c:\users\kugelfisch\desktop\gw2.exe |
"UDP Query User{33455BD9-36CE-499A-B124-8B1B8DDFB2CC}C:\program files (x86)\steam\steamapps\rav_en\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\rav_en\counter-strike source\hl2.exe |
"UDP Query User{4E2F861E-C24C-473C-B226-F09CA5101714}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe |
"UDP Query User{9131EF53-8FFB-46CD-A562-FAE01978DDF0}C:\users\public\games\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe |
"UDP Query User{9794367C-0D4C-4E3C-9821-A441C0E7CF8C}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |
"UDP Query User{B408A9C8-20EF-4313-BA4B-277B59CBB22B}C:\users\kugelfisch\downloads\diablo-iii-8370-dede-installer-downloader(1).exe" = protocol=17 | dir=in | app=c:\users\kugelfisch\downloads\diablo-iii-8370-dede-installer-downloader(1).exe |
"UDP Query User{B651FB55-BBDC-44DB-A2E2-C70C3483477C}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{E5209B95-E471-47E8-A431-AF7ED662E81C}C:\users\kugelfisch\desktop\gw 2\gw2.exe" = protocol=17 | dir=in | app=c:\users\kugelfisch\desktop\gw 2\gw2.exe |
"UDP Query User{FCE33B76-3015-4230-9C58-99E59432FB3D}C:\users\kugelfisch\desktop\gw2.exe" = protocol=17 | dir=in | app=c:\users\kugelfisch\desktop\gw2.exe |
"UDP Query User{FF71346D-9465-4D1D-81EE-6B6285650713}C:\users\public\games\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86416031FF}" = Java(TM) 6 Update 31 (64-bit)
"{26A24AE4-039D-4CA4-87B4-2F86417003FF}" = Java(TM) 7 Update 3 (64-bit)
"{27607A94-33AC-4AA7-AACE-95AF6ACA3E30}" = Logitech G35
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}" = Paint.NET v3.5.10
"{6F42AB02-6626-45DE-AA69-E141FDB82CDF}" = Vegas Pro 9.0 (64-bit)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.7.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 4.01 (64-Bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam(TM)
"{08F8FD7C-44A5-4423-B87C-EBD3D94C9F87}" = Vampire - The Masquerade Bloodlines
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{21FFDD40-F6B9-4609-B1C9-514E0A342BFA}" = MOUSE Editor
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{45410935-B52C-468A-A836-0D1000018201}" = BulletStorm
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{6033673D-2530-4587-8AD0-EB059FC263F9}" = Crysis® 2
"{6530FDAA-5B1F-4830-95BB-650E9804D239}" = UE3Redist
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}" = ICQ7.7
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable
"{95120000-003F-0409-0000-0000000FF1CE}" = Microsoft Office Excel Viewer
"{9580813D-94B1-4C28-9426-A441E2BB29A5}" = Counter-Strike: Source
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Deutsch
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"ASRock IES_is1" = ASRock IES v1.92
"avast" = avast! Free Antivirus
"Battlelog Web Plugins" = Battlelog Web Plugins
"BattlEye for A2" = BattlEye Uninstall
"BattlEye for OA" = BattlEye for OA Uninstall
"DAEMON Tools Lite" = DAEMON Tools Lite
"Diablo III" = Diablo III
"ESN Sonar-0.70.4" = ESN Sonar
"Fraps" = Fraps (remove only)
"hon" = Heroes of Newerth
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"InstallShield_{21FFDD40-F6B9-4609-B1C9-514E0A342BFA}" = MOUSE Editor
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300
"Mozilla Firefox 13.0.1 (x86 de)" = Mozilla Firefox 13.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Origin" = Origin
"Polipo" = Polipo 1.0.4.1
"PunkBusterSvc" = PunkBuster Services
"Steam App 10180" = Call of Duty: Modern Warfare 2
"Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer
"Steam App 113200" = The Binding Of Isaac
"Steam App 22650" = Alien Breed 2: Assault
"Steam App 22670" = Alien Breed 3: Descent
"Steam App 33910" = ARMA 2
"Steam App 33930" = ARMA 2: Operation Arrowhead
"Steam App 570" = Dota 2
"Tor" = Tor 0.2.2.35
"Vidalia" = Vidalia 0.2.15
"VLC media player" = VLC media player 1.1.11
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"InstallShield_{6530FDAA-5B1F-4830-95BB-650E9804D239}" = UE3Redist
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 23.06.2012 09:36:52 | Computer Name = Kugelfisch-PC | Source = Application Hang | ID = 1002
Description = Programm ArmA2OA.exe, Version 1.60.93.965 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: ee0 Startzeit:
01cd514500d98489 Endzeit: 332 Anwendungspfad: c:\program files (x86)\steam\steamapps\common\arma
2 operation arrowhead\ArmA2OA.exe Berichts-ID:
Error - 23.06.2012 09:38:37 | Computer Name = Kugelfisch-PC | Source = Application Hang | ID = 1002
Description = Programm ArmA2OA.exe, Version 1.60.93.965 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 175c Startzeit:
01cd514546e37d2b Endzeit: 141 Anwendungspfad: c:\program files (x86)\steam\steamapps\common\arma
2 operation arrowhead\ArmA2OA.exe Berichts-ID:
Error - 23.06.2012 09:38:58 | Computer Name = Kugelfisch-PC | Source = Application Hang | ID = 1002
Description = Programm ArmA2OA.exe, Version 1.60.93.965 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 16c4 Startzeit:
01cd514583c666cd Endzeit: 2 Anwendungspfad: c:\program files (x86)\steam\steamapps\common\arma
2 operation arrowhead\ArmA2OA.exe Berichts-ID: c5e7a1bb-bd38-11e1-b9bc-001966fd760e
Error - 24.06.2012 12:17:51 | Computer Name = Kugelfisch-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: ArmA2OA.exe, Version: 1.60.93.965,
Zeitstempel: 0x4fe1e393 Name des fehlerhaften Moduls: ArmA2OA.exe, Version: 1.60.93.965,
Zeitstempel: 0x4fe1e393 Ausnahmecode: 0xc0000005 Fehleroffset: 0x006abce5 ID des fehlerhaften
Prozesses: 0xc44 Startzeit der fehlerhaften Anwendung: 0x01cd5222c2861560 Pfad der
fehlerhaften Anwendung: c:\program files (x86)\steam\steamapps\common\arma 2 operation
arrowhead\ArmA2OA.exe Pfad des fehlerhaften Moduls: c:\program files (x86)\steam\steamapps\common\arma
2 operation arrowhead\ArmA2OA.exe Berichtskennung: 252c65fd-be18-11e1-a4d0-001966fd760e
Error - 27.06.2012 07:53:22 | Computer Name = Kugelfisch-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: ArmA2OA.exe, Version: 1.60.93.965,
Zeitstempel: 0x4fe1e393 Name des fehlerhaften Moduls: ArmA2OA.exe, Version: 1.60.93.965,
Zeitstempel: 0x4fe1e393 Ausnahmecode: 0xc0000005 Fehleroffset: 0x002a1f63 ID des fehlerhaften
Prozesses: 0x4d4 Startzeit der fehlerhaften Anwendung: 0x01cd54563ae2415d Pfad der
fehlerhaften Anwendung: c:\program files (x86)\steam\steamapps\common\arma 2 operation
arrowhead\ArmA2OA.exe Pfad des fehlerhaften Moduls: c:\program files (x86)\steam\steamapps\common\arma
2 operation arrowhead\ArmA2OA.exe Berichtskennung: b1806ba7-c04e-11e1-8a7d-001966fd760e
Error - 27.06.2012 09:42:35 | Computer Name = Kugelfisch-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: GameOverlayUI.exe, Version: 1.32.20.50,
Zeitstempel: 0x4f46a9bf Name des fehlerhaften Moduls: libcef.dll, Version: 1.989.464.0,
Zeitstempel: 0x4f84df8b Ausnahmecode: 0x80000003 Fehleroffset: 0x00852267 ID des fehlerhaften
Prozesses: 0x78c Startzeit der fehlerhaften Anwendung: 0x01cd545b826dfac2 Pfad der
fehlerhaften Anwendung: C:\Program Files (x86)\Steam\GameOverlayUI.exe Pfad des
fehlerhaften Moduls: C:\Program Files (x86)\Steam\bin\libcef.dll Berichtskennung:
f321f62a-c05d-11e1-8a7d-001966fd760e
Error - 28.06.2012 12:43:12 | Computer Name = Kugelfisch-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_3_300_262.exe,
Version: 11.3.300.262, Zeitstempel: 0x4fe20fae Name des fehlerhaften Moduls: NPSWF32_11_3_300_262.dll,
Version: 11.3.300.262, Zeitstempel: 0x4fe21212 Ausnahmecode: 0xc0000005 Fehleroffset:
0x00490fb1 ID des fehlerhaften Prozesses: 0x13cc Startzeit der fehlerhaften Anwendung:
0x01cd552af18fc19e Pfad der fehlerhaften Anwendung: C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
Pfad
des fehlerhaften Moduls: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll
Berichtskennung:
5941ba76-c140-11e1-a19f-001966fd760e
Error - 02.07.2012 10:54:54 | Computer Name = Kugelfisch-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: ArmA2OA.exe, Version: 1.60.93.965,
Zeitstempel: 0x4fe1e393 Name des fehlerhaften Moduls: ArmA2OA.exe, Version: 1.60.93.965,
Zeitstempel: 0x4fe1e393 Ausnahmecode: 0xc0000005 Fehleroffset: 0x002a1f63 ID des fehlerhaften
Prozesses: 0x1b6c Startzeit der fehlerhaften Anwendung: 0x01cd585e0fe5ad5a Pfad der
fehlerhaften Anwendung: c:\program files (x86)\steam\steamapps\common\arma 2 operation
arrowhead\ArmA2OA.exe Pfad des fehlerhaften Moduls: c:\program files (x86)\steam\steamapps\common\arma
2 operation arrowhead\ArmA2OA.exe Berichtskennung: e1768e85-c455-11e1-8e1f-001966fd760e
Error - 05.07.2012 16:07:36 | Computer Name = Kugelfisch-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_3_300_262.exe,
Version: 11.3.300.262, Zeitstempel: 0x4fe20fae Name des fehlerhaften Moduls: NPSWF32_11_3_300_262.dll,
Version: 11.3.300.262, Zeitstempel: 0x4fe21212 Ausnahmecode: 0xc0000005 Fehleroffset:
0x00490fb1 ID des fehlerhaften Prozesses: 0x13d4 Startzeit der fehlerhaften Anwendung:
0x01cd5ae4f135acb5 Pfad der fehlerhaften Anwendung: C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
Pfad
des fehlerhaften Moduls: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll
Berichtskennung:
1008b768-c6dd-11e1-9536-001966fd760e
Error - 06.07.2012 20:14:53 | Computer Name = Kugelfisch-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4febb13c Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4ff1ec29 Ausnahmecode: 0xc0000005 Fehleroffset: 0x727fe279
ID
des fehlerhaften Prozesses: 0xee4 Startzeit der fehlerhaften Anwendung: 0x01cd5bd4c3420fef
Pfad
der fehlerhaften Anwendung: c:\program files (x86)\steam\steamapps\*******\counter-strike
source\hl2.exe Pfad des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung:
c5f4353d-c7c8-11e1-b832-001966fd760e
[ System Events ]
Error - 23.02.2012 07:16:50 | Computer Name = Kugelfisch-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error - 03.03.2012 07:37:06 | Computer Name = Kugelfisch-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows Update" wurde nicht richtig gestartet.
Error - 09.03.2012 11:12:26 | Computer Name = Kugelfisch-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal
passiert.
Error - 09.03.2012 14:41:49 | Computer Name = Kugelfisch-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?09.?03.?2012 um 19:37:19 unerwartet heruntergefahren.
Error - 23.03.2012 08:32:25 | Computer Name = Kugelfisch-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error - 29.03.2012 18:36:35 | Computer Name = Kugelfisch-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 01.04.2012 08:08:24 | Computer Name = Kugelfisch-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies
ist bereits 1 Mal passiert.
Error - 01.04.2012 08:08:40 | Computer Name = Kugelfisch-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal
passiert.
Error - 11.04.2012 10:14:24 | Computer Name = Kugelfisch-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
Steam Client Service erreicht.
Error - 11.04.2012 10:14:24 | Computer Name = Kugelfisch-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers
nicht gestartet: %%1053
< End of report > CCleaner - install Code:
Adobe Flash Player 11 ActiveX Adobe Systems Incorporated 10.07.2012 6,00MB 11.3.300.265
Adobe Flash Player 11 Plugin Adobe Systems Incorporated 11.07.2012 6,00MB 11.3.300.265
Adobe Reader X (10.1.3) - Deutsch Adobe Systems Incorporated 11.04.2012 121,5MB 10.1.3
Alien Breed 2: Assault 15.01.2012
Alien Breed 3: Descent 15.01.2012
ARMA 2 Bohemia Interactive 19.06.2012
ARMA 2: Operation Arrowhead Bohemia Interactive 19.06.2012
ASRock IES v1.92 14.01.2012
avast! Free Antivirus AVAST Software 10.07.2012 7.0.1456.0
Battlefield 3™ Electronic Arts 14.01.2012 1.0.0.0
Battlelog Web Plugins EA Digital Illusions CE AB 09.06.2012 1.122.0
BattlEye for OA Uninstall 19.06.2012
BattlEye Uninstall 18.06.2012
Call of Duty: Modern Warfare 2 Infinity Ward 29.05.2012
Call of Duty: Modern Warfare 2 - Multiplayer Infinity Ward 29.05.2012
CCleaner Piriform 22.01.2012 3.14
Counter-Strike: Source Valve 14.01.2012 3.844MB 1.0.0.0
Crysis® 2 Electronic Arts 18.06.2012 11,2MB 1.0.0.0
DAEMON Tools Lite DT Soft Ltd 18.01.2012 4.45.1.0236
Diablo III Blizzard Entertainment 27.06.2012 1.0.3.10235
Dota 2 15.01.2012
ESN Sonar ESN Social Software AB 16.01.2012 0.70.4
Fraps (remove only) 28.02.2012
Heroes of Newerth S2 Games 15.01.2012 2.3.0
ICQ7.7 ICQ 15.01.2012 7.7
Java(TM) 6 Update 31 Oracle 20.04.2012 95,1MB 6.0.310
Java(TM) 6 Update 31 (64-bit) Oracle 20.04.2012 91,8MB 6.0.310
Java(TM) 7 Update 3 (64-bit) Oracle 20.04.2012 93,7MB 7.0.30
Java(TM) 7 Update 5 Oracle 19.06.2012 99,3MB 7.0.50
JavaFX 2.1.1 Oracle Corporation 19.06.2012 20,9MB 2.1.1
JDownloader 0.9 AppWork GmbH 04.02.2012 0.9
Logitech G35 Logitech 14.01.2012 5,17MB 1.1.178
Malwarebytes Anti-Malware Version 1.62.0.1300 Malwarebytes Corporation 11.07.2012 18,8MB 1.62.0.1300
Microsoft .NET Framework 4 Client Profile Microsoft Corporation 16.01.2012 38,8MB 4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 16.01.2012 2,94MB 4.0.30319
Microsoft Games for Windows - LIVE Microsoft Corporation 04.05.2012 7,86MB 3.3.24.0
Microsoft Games for Windows - LIVE Redistributable Microsoft Corporation 04.05.2012 32,3MB 3.2.3.0
Microsoft Office Excel Viewer Microsoft Corporation 10.07.2012 71,0MB 12.0.6219.1000
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 29.05.2012 2,70MB 8.0.59193
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 21.01.2012 0,25MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Corporation 17.01.2012 0,77MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Corporation 07.02.2012 1,42MB 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 18.06.2012 0,23MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 14.01.2012 0,58MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 15.01.2012 0,58MB 9.0.30729.4148
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 Microsoft Corporation 14.01.2012 13,8MB 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 14.01.2012 11,1MB 10.0.40219
Microsoft XNA Framework Redistributable 3.1 Microsoft Corporation 22.02.2012 7,55MB 3.1.10527.0
MOUSE Editor Ihr Firmenname 14.01.2012 25,5MB 4.31.0000
Mozilla Firefox 13.0.1 (x86 de) Mozilla 16.06.2012 35,8MB 13.0.1
Mozilla Maintenance Service Mozilla 16.06.2012 0,30MB 13.0.1
NVIDIA 3D Vision Controller-Treiber 296.10 NVIDIA Corporation 20.04.2012 296.10
NVIDIA 3D Vision Treiber 296.10 NVIDIA Corporation 20.04.2012 296.10
NVIDIA Grafiktreiber 296.10 NVIDIA Corporation 20.04.2012 296.10
NVIDIA PhysX-Systemsoftware 9.12.0213 NVIDIA Corporation 20.04.2012 9.12.0213
NVIDIA Update 1.7.11 NVIDIA Corporation 20.04.2012 1.7.11
Origin Electronic Arts, Inc. 10.03.2012 8.5.0.4554
Paint.NET v3.5.10 dotPDN LLC 01.03.2012 10,7MB 3.60.0
Pando Media Booster Pando Networks Inc. 11.03.2012 5,47MB 2.6.0.6
Polipo 1.0.4.1 22.01.2012
PunkBuster Services Even Balance, Inc. 14.01.2012 0.991
Skype™ 5.10 Skype Technologies S.A. 01.07.2012 19,4MB 5.10.114
Steam(TM) Valve 14.01.2012 16,6MB 1.0.0.0
TeamSpeak 3 Client TeamSpeak Systems GmbH 21.01.2012
The Binding Of Isaac 15.01.2012
Tor 0.2.2.35 22.01.2012
UE3Redist Epic Games 12.03.2012 1,65MB 1.00.0000
Vegas Pro 9.0 (64-bit) Sony 17.01.2012 368MB 9.0.1132
VIA Plattform-Geräte-Manager VIA Technologies, Inc. 14.01.2012 2,62MB 1.34
Vidalia 0.2.15 22.01.2012
VLC media player 1.1.11 VideoLAN 18.01.2012 1.1.11
WinRAR 4.01 (64-Bit) win.rar GmbH 15.01.2012 4.01.0 Danke für die Hilfe
MFG Kugel |