| CloudStrifeX | 13.07.2012 18:19 |
Liste der Anhänge anzeigen (Anzahl: 1) Hallo t'john,
erst mal vielen Dank für die schnelle und kompetente Unterstützung.
Ich habe die Scans laufen lassen und anbei findest du die Logdateien.
Hinweis: Nachdem Malwarebytes lief und ich die infizierten Dateien gelöscht habe kann ich meinen Rechner wieder uneingeschränkt nutzen.
Sorry aber die Dateien von dem OLT scan sind zu groß um sie als Datei anzuhängen deshalb direkt hier:
OLT.txt Code:
OTL logfile created on: 13.07.2012 19:02:18 - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Administrator\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
8,00 Gb Total Physical Memory | 6,20 Gb Available Physical Memory | 77,55% Memory free
16,00 Gb Paging File | 14,13 Gb Available in Paging File | 88,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,21 Gb Total Space | 131,39 Gb Free Space | 67,30% Space Free | Partition Type: NTFS
Drive D: | 292,97 Gb Total Space | 193,82 Gb Free Space | 66,16% Space Free | Partition Type: NTFS
Drive E: | 97,66 Gb Total Space | 80,10 Gb Free Space | 82,02% Space Free | Partition Type: NTFS
Drive K: | 3,74 Gb Total Space | 3,73 Gb Free Space | 99,69% Space Free | Partition Type: FAT32
Drive L: | 195,31 Gb Total Space | 88,67 Gb Free Space | 45,40% Space Free | Partition Type: NTFS
Drive M: | 150,26 Gb Total Space | 109,50 Gb Free Space | 72,87% Space Free | Partition Type: NTFS
Computer Name: DESKTOP | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Administrator\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe ()
PRC - C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
PRC - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - E:\Messenger Plus! Live\PlusService.exe (Yuna Software)
PRC - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe (Yuna Software)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - E:\Microsoft Office 2010\Office14\MSOSYNC.EXE (Microsoft Corporation)
PRC - C:\Program Files (x86)\Logitech\G930\G930.exe (Logitech(c))
PRC - E:\GnuPG\dirmngr.exe ()
PRC - E:\LogiTech\SetPoint\x86\SetPoint32.exe ()
PRC - C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE ()
PRC - C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
PRC - C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE (SEIKO EPSON CORPORATION)
========== Modules (No Company Name) ==========
MOD - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\SiteSafety.dll ()
MOD - C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - E:\LogiTech\SetPoint\x86\SetPoint32.exe ()
========== Win32 Services (SafeList) ==========
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (vToolbarUpdater11.2.0) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe ()
SRV - (AVGIDSAgent) -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (SkypeUpdate) -- E:\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (avgwd) -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (MsgPlusService) -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe (Yuna Software)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Microsoft SharePoint Workspace Audit Service) -- E:\Microsoft Office 2010\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (wlidsvc) -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
SRV - (MSCamSvc) -- C:\Programme\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
SRV - (DirMngr) -- E:\GnuPG\dirmngr.exe ()
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (osppsvc) -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
SRV - (LBTServ) -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (ES lite Service) -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE ()
SRV - (AAV UpdateService) -- C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE (SEIKO EPSON CORPORATION)
SRV - (KMService) -- C:\Windows\SysWOW64\srvany.exe ()
========== Driver Services (SafeList) ==========
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (AVGIDSHA) -- C:\Windows\SysNative\drivers\avgidsha.sys (AVG Technologies CZ, s.r.o. )
DRV:64bit: - (Avgtdia) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (Avgldx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (Avgrkx64) -- C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgmfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AVGIDSFilter) -- C:\Windows\SysNative\drivers\avgidsfiltera.sys (AVG Technologies CZ, s.r.o. )
DRV:64bit: - (AVGIDSDriver) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys (AVG Technologies CZ, s.r.o. )
DRV:64bit: - (Netaapl) -- C:\Windows\SysNative\drivers\netaapl64.sys (Apple Inc.)
DRV:64bit: - (LADF_BakerCOnly) -- C:\Windows\SysNative\drivers\ladfBakerCamd64.sys (Logitech)
DRV:64bit: - (LADF_BakerROnly) -- C:\Windows\SysNative\drivers\ladfBakerRamd64.sys (Logitech)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (MSHUSBVideo) -- C:\Windows\SysNative\drivers\nx6000.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (xusb21) -- C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidEqd) -- C:\Windows\SysNative\drivers\LHidEqd.sys (Logitech, Inc.)
DRV:64bit: - (LEqdUsb) -- C:\Windows\SysNative\drivers\LEqdUsb.sys (Logitech, Inc.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV - (gdrv) -- C:\Windows\gdrv.sys (Windows (R) Server 2003 DDK provider)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ig
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C9 CF 81 36 67 68 CA 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={54C23F43-C664-4E6C-9FAA-5F287EC91CD8}&mid=f7a43f114e66f5040f40812066352bfe-637d6a73afd20a12afa4173526a35b8c65ad3f5b&lang=de&ds=AVG&pr=fr&d=2012-07-06 14:33:26&v=11.1.0.12&sap=dsp&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "www.google.de/ig"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 9
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: foxmarks@kei.com:3.9.9
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:2.9.3
FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1319
FF - prefs.js..keyword.URL: "hxxp://isearch.avg.com/search?cid=%7Bd90f9f8b-4525-4405-b293-702402075f47%7D&mid=f7a43f114e66f5040f40812066352bfe-637d6a73afd20a12afa4173526a35b8c65ad3f5b&ds=AVG&v=10.2.0.3&lang=de&pr=fr&d=2012-02-19%2020%3A13%3A38&sap=ku&q="
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: E:\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: E:\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: E:\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: E:\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/vbp;version=0.9.17: E:\Veetle\VLCBroadcast\npvbp.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: E:\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: E:\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\ [2012.07.06 14:33:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\11.1.0.12\ [2012.07.06 14:33:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack\ [2012.07.06 14:32:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: E:\Mozilla Firefox\components [2012.07.08 15:57:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: E:\Mozilla Firefox\plugins [2012.07.07 10:14:43 | 000,000,000 | ---D | M]
[2009.11.07 11:35:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Administrator\AppData\Roaming\mozilla\Extensions
[2009.11.07 11:35:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Administrator\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2012.07.06 14:28:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\athoc651.default\extensions
[2012.05.24 18:40:26 | 000,000,000 | ---D | M] (Garmin Communicator) -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\athoc651.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2011.06.05 22:30:36 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\athoc651.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2009.12.08 22:04:16 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\athoc651.default\extensions\firefox@tvunetworks.com
[2012.07.04 07:51:30 | 000,000,000 | ---D | M] ("Xmarks") -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\athoc651.default\extensions\foxmarks@kei.com
[2012.07.06 14:32:22 | 000,000,000 | ---D | M] (AVG Do Not Track) -- C:\PROGRAM FILES (X86)\AVG\AVG2012\FIREFOX\DONOTTRACK
[2012.05.21 09:02:32 | 000,697,058 | ---- | M] () (No name found) -- C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ATHOC651.DEFAULT\EXTENSIONS\{DC572301-7619-498C-A57D-39143191B318}.XPI
[2012.03.28 12:13:06 | 000,685,019 | ---- | M] () (No name found) -- C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ATHOC651.DEFAULT\EXTENSIONS\{EF4E370E-D9F0-4E00-B93E-A4F274CFDD5A}.XPI
[2012.02.10 15:37:39 | 000,246,025 | ---- | M] () (No name found) -- C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ATHOC651.DEFAULT\EXTENSIONS\AMZNUWL2@AMAZON.COM.XPI
[2011.05.17 16:58:22 | 000,001,239 | ---- | M] () (No name found) -- C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ATHOC651.DEFAULT\EXTENSIONS\GLASSWINDOWDOWNLOAD@GMAIL.COM.XPI
O1 HOSTS File: ([2011.02.28 21:26:42 | 000,000,822 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\Microsoft Office 2010\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - E:\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - E:\Microsoft Office 2010\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Sun\JavaRE\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4:64bit: - HKLM..\Run: [EPSON Stylus DX4000 Series] C:\Windows\SysNative\spool\DRIVERS\x64\3\E_FATIBEE.EXE (SEIKO EPSON CORPORATION)
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4:64bit: - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Logitech G930] C:\Program Files (x86)\Logitech\G930\G930.exe (Logitech(c))
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [MessengerPlusForSkypeService] C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe (Yuna Software)
O4 - HKLM..\Run: [PlusService] E:\Messenger Plus! Live\PlusService.exe (Yuna Software)
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O4 - HKCU..\Run: [OfficeSyncProcess] E:\Microsoft Office 2010\Office14\MSOSYNC.EXE (Microsoft Corporation)
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: An OneNote s&enden - res://E:\MICROS~3\Office14\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Administrator\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Administrator\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://E:\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://E:\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: An OneNote s&enden - res://E:\MICROS~3\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Free YouTube Download - C:\Users\Administrator\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Administrator\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://E:\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://E:\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\Microsoft Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\Microsoft Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - E:\Microsoft Office 2010\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - E:\Microsoft Office 2010\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - E:\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - E:\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - E:\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - E:\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Microsoft Office 2007\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe ()
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe ()
O9 - Extra Button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Users\Administrator\Desktop\PartyPoker.net.lnk File not found
O9 - Extra 'Tools' menuitem : PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Users\Administrator\Desktop\PartyPoker.net.lnk File not found
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 82.212.62.62 78.42.43.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{071D82D2-61AC-4FB6-BD20-1D7BDCD635B4}: DhcpNameServer = 10.129.32.1 10.111.81.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4273BB23-DA0B-4C49-8EB8-D80E59962DA1}: DhcpNameServer = 82.212.62.62 78.42.43.62
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - E:\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll ()
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - E:\Microsoft Office 2010\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{0de5a5d0-4363-11e0-a167-00241d892d3a}\Shell - "" = AutoRun
O33 - MountPoints2\{0de5a5d0-4363-11e0-a167-00241d892d3a}\Shell\AutoRun\command - "" = N:\autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2012.07.13 17:05:34 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Administrator\Desktop\OTL.exe
[2012.07.13 16:43:01 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{9E5CAD97-8D63-4763-80C0-8E51D2B8BBA0}
[2012.07.13 16:41:56 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Malwarebytes
[2012.07.13 16:41:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.07.13 16:41:53 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.07.13 16:41:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.07.13 16:41:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.07.13 16:41:24 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{77F04E8D-022A-49C7-8BE5-21825EF78B3C}
[2012.07.12 22:05:16 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{18CB70EA-559A-4E62-8F79-40D866F3EB17}
[2012.07.12 22:04:53 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{80B6EFB7-678F-47AB-9650-756B7E093FDC}
[2012.07.12 00:07:00 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\Macromedia
[2012.07.11 23:45:19 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012.07.11 23:45:19 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012.07.11 23:45:19 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012.07.11 23:45:19 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012.07.11 23:45:18 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012.07.11 23:45:18 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012.07.11 23:45:18 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.07.11 23:45:18 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.07.11 23:45:17 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012.07.11 23:45:16 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012.07.11 23:45:16 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012.07.11 23:45:16 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012.07.11 23:45:16 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012.07.11 23:43:50 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2012.07.11 23:43:50 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2012.07.11 23:36:01 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2012.07.11 23:36:01 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2012.07.11 23:35:55 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2012.07.11 23:35:52 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2012.07.11 23:35:52 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2012.07.11 23:30:16 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{2DE962A3-E609-4204-BC36-851211A3438F}
[2012.07.11 23:30:04 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{6588497C-3377-4827-9DC2-45B632202DCF}
[2012.07.10 17:55:04 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{D355F168-40F5-4757-85F0-07988FCA43E6}
[2012.07.10 17:54:52 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{9291AFDA-BA36-42BF-ADFF-A98E6DF6B01F}
[2012.07.09 16:53:10 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{F48C7FBE-DF36-417B-A3FA-2EF949204922}
[2012.07.09 16:52:46 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{16361BD5-D418-462F-AA94-9134D733420A}
[2012.07.08 21:29:08 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs
[2012.07.08 15:44:36 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{F448DC16-8DC4-4909-8B2D-DAFE7CD5CA83}
[2012.07.08 15:44:11 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{B58634A1-016D-48A7-BDE4-B6E01C7F187F}
[2012.07.07 10:17:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.07.07 10:17:12 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.07.07 10:17:12 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.07.07 10:14:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012.07.07 10:14:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2012.07.07 09:03:10 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{9DAE75F5-EE81-4A73-B7C7-EC6CBDBBDDE3}
[2012.07.07 09:02:47 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{C2BCC8A1-D5FD-41FA-9625-338ED95046C4}
[2012.07.06 15:30:05 | 000,000,000 | ---D | C] -- C:\Users\Administrator\Documents\Diablo III
[2012.07.06 15:17:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2012.07.06 15:14:31 | 025,743,168 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2012.07.06 15:14:31 | 019,607,872 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2012.07.06 15:14:31 | 000,949,056 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2012.07.06 15:14:31 | 000,818,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2012.07.06 15:14:31 | 000,246,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2012.07.06 15:14:31 | 000,202,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2012.07.06 15:14:30 | 018,044,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2012.07.06 15:14:30 | 000,364,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdecodemft.dll
[2012.07.06 15:14:30 | 000,301,376 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvdecodemft.dll
[2012.07.06 15:14:29 | 008,139,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2012.07.06 15:14:29 | 005,982,528 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2012.07.06 15:14:29 | 002,881,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2012.07.06 15:14:29 | 002,681,664 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2012.07.06 15:14:29 | 002,524,992 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2012.07.06 15:14:29 | 002,445,120 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2012.07.06 15:14:28 | 025,248,064 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2012.07.06 15:14:28 | 017,551,680 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2012.07.06 15:14:28 | 002,368,832 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2012.07.06 14:49:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
[2012.07.06 14:49:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Diablo III
[2012.07.06 14:49:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment
[2012.07.06 14:49:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment
[2012.07.06 14:48:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Battle.net
[2012.07.06 14:46:49 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
[2012.07.06 14:46:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Logitech
[2012.07.06 14:44:30 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{716A4D46-840C-40EC-A3D8-8DBCE6B6E713}
[2012.07.06 14:44:18 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{3EEFF43F-3287-489F-AB6B-AC67BE85E81B}
[2012.07.06 14:33:47 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\AVG Secure Search
[2012.07.06 14:33:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2012.07.06 14:33:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG Secure Search
[2012.07.06 14:28:47 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\AVG
[2012.07.06 09:52:59 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{335DDC6A-3CFC-413A-A9A1-60972196B7A7}
[2012.07.04 15:28:41 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{1392678C-2154-45CF-BDEC-90829E570285}
[2012.07.03 23:28:39 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{0039A564-CE71-43AA-85AF-10D74D070B3B}
[2012.07.03 22:57:31 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2012.07.03 22:57:31 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2012.07.03 22:57:31 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2012.07.03 22:57:24 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012.07.03 22:57:23 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012.07.03 22:57:23 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012.07.03 22:57:20 | 003,216,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2012.07.03 22:57:12 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2012.07.03 22:57:11 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2012.07.03 21:39:53 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2012.07.03 21:39:53 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2012.07.03 21:39:53 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2012.07.03 21:39:43 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2012.07.03 21:39:43 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2012.07.03 21:39:43 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2012.07.03 21:39:29 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2012.07.03 21:39:29 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2012.07.03 16:17:16 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\{0843FA45-D29C-443D-8921-E91D75AA038F}
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.07.13 19:00:27 | 000,017,648 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.13 19:00:27 | 000,017,648 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.13 18:57:19 | 001,536,340 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.07.13 18:57:19 | 000,668,128 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.07.13 18:57:19 | 000,627,704 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.07.13 18:57:19 | 000,135,796 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.07.13 18:57:19 | 000,111,282 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.07.13 18:53:08 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.07.13 18:53:07 | 000,023,080 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys
[2012.07.13 18:53:07 | 000,000,022 | ---- | M] () -- C:\Windows\S.dirmngr
[2012.07.13 18:53:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.07.13 18:51:09 | 000,103,865 | ---- | M] () -- C:\Users\Administrator\Desktop\Scan Result Malwarebytes.JPG
[2012.07.13 18:48:11 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.07.13 16:46:16 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Administrator\Desktop\OTL.exe
[2012.07.13 16:44:27 | 004,503,728 | ---- | M] () -- C:\ProgramData\go_0molg.pad
[2012.07.13 16:41:54 | 000,001,114 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.07.13 07:03:45 | 000,427,312 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.07.12 23:59:54 | 082,452,480 | ---- | M] () -- C:\Users\Administrator\Desktop\avg_arl_cdi_all_120_120126a4867.iso
[2012.07.12 22:37:42 | 000,010,505 | ---- | M] () -- C:\Users\Administrator\Desktop\Unbenannt.JPG
[2012.07.12 22:07:08 | 101,389,091 | ---- | M] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm
[2012.07.11 23:54:41 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012.07.11 23:54:41 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012.07.10 22:07:24 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012.07.10 22:07:24 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.07.09 20:44:43 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.07.09 20:44:35 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012.07.09 18:33:26 | 000,313,002 | ---- | M] () -- C:\Windows\SysNative\drivers\AVG\iavichjg.avm
[2012.07.06 15:21:22 | 000,033,758 | ---- | M] () -- C:\Users\Administrator\AppData\Local\dt.dat
[2012.07.06 14:28:47 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\AVG\incavi.avm
[2012.07.06 14:28:47 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\AVG\iavichjw.avm
[2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.07.13 18:53:07 | 000,000,022 | ---- | C] () -- C:\Windows\S.dirmngr
[2012.07.13 18:51:09 | 000,103,865 | ---- | C] () -- C:\Users\Administrator\Desktop\Scan Result Malwarebytes.JPG
[2012.07.13 16:41:54 | 000,001,114 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.07.13 00:12:04 | 082,452,480 | ---- | C] () -- C:\Users\Administrator\Desktop\avg_arl_cdi_all_120_120126a4867.iso
[2012.07.12 23:21:46 | 004,503,728 | ---- | C] () -- C:\ProgramData\go_0molg.pad
[2012.07.12 22:37:42 | 000,010,505 | ---- | C] () -- C:\Users\Administrator\Desktop\Unbenannt.JPG
[2012.07.08 19:28:39 | 002,621,723 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
[2012.07.06 15:21:22 | 000,033,758 | ---- | C] () -- C:\Users\Administrator\AppData\Local\dt.dat
[2012.07.06 14:28:47 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\AVG\incavi.avm
[2012.07.06 14:28:47 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\AVG\iavichjw.avm
[2012.05.15 02:21:50 | 000,423,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011.12.17 20:45:53 | 000,013,776 | ---- | C] () -- C:\Users\Administrator\overlay.ini
[2011.12.17 20:45:53 | 000,000,000 | ---- | C] () -- C:\Users\Administrator\vorlagen.ini
[2011.11.29 09:59:54 | 000,000,246 | ---- | C] () -- C:\Users\Administrator\medcd.ini
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.03.15 19:34:25 | 000,000,126 | ---- | C] () -- C:\Windows\wiso.ini
[2011.02.03 20:50:06 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2010.12.06 20:42:52 | 000,000,023 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2010.12.06 19:25:08 | 000,000,013 | ---- | C] () -- C:\Users\Administrator\dlmgr_.pro
[2010.10.10 11:45:40 | 000,038,436 | ---- | C] () -- C:\Users\Administrator\AppData\Roaming\Microsoft Excel 97-2003.ADR
[2010.10.10 11:34:02 | 000,037,057 | ---- | C] () -- C:\Users\Administrator\AppData\Roaming\Kommagetrennte Werte (Windows).ADR
[2010.07.22 13:34:07 | 000,000,162 | ---- | C] () -- C:\Windows\ODBC.INI
[2010.07.22 12:35:31 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe
[2010.05.12 09:53:41 | 000,003,584 | ---- | C] () -- C:\Users\Administrator\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.15 15:26:56 | 000,000,218 | ---- | C] () -- C:\Users\Administrator\.recently-used.xbel
[2009.11.20 01:03:36 | 000,000,083 | -HS- | C] () -- C:\ProgramData\.zreglib
========== Alternate Data Streams ==========
@Alternate Data Stream - 48 bytes -> C:\Windows:39CE0412CCB07F6D
< End of report >
Extra.txt Code:
OTL Extras logfile created on: 13.07.2012 19:02:18 - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Administrator\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
8,00 Gb Total Physical Memory | 6,20 Gb Available Physical Memory | 77,55% Memory free
16,00 Gb Paging File | 14,13 Gb Available in Paging File | 88,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,21 Gb Total Space | 131,39 Gb Free Space | 67,30% Space Free | Partition Type: NTFS
Drive D: | 292,97 Gb Total Space | 193,82 Gb Free Space | 66,16% Space Free | Partition Type: NTFS
Drive E: | 97,66 Gb Total Space | 80,10 Gb Free Space | 82,02% Space Free | Partition Type: NTFS
Drive K: | 3,74 Gb Total Space | 3,73 Gb Free Space | 99,69% Space Free | Partition Type: FAT32
Drive L: | 195,31 Gb Total Space | 88,67 Gb Free Space | 45,40% Space Free | Partition Type: NTFS
Drive M: | 150,26 Gb Total Space | 109,50 Gb Free Space | 72,87% Space Free | Partition Type: NTFS
Computer Name: DESKTOP | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- E:\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- "E:\Microsoft Office 2007\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "E:\Microsoft Office 2007\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- "E:\Microsoft Office 2007\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "E:\Microsoft Office 2007\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0A68E226-475C-4BBA-BD7A-B9DD26F8166F}" = rport=138 | protocol=17 | dir=out | app=system |
"{0B9BA2D1-4296-4781-8DD5-91B99E3C8824}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{0E70DE35-4672-4D73-BAEB-FE2749FE34E1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{175F7AF1-635A-4CB1-B152-8BE1AC55124B}" = lport=138 | protocol=17 | dir=in | app=system |
"{1F0861A7-A601-44F6-B494-98510CC87BE5}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{277B29DB-62A1-4DC9-8B35-1D532590BDD7}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{2BEAC40F-7262-4E6F-A559-DFC2DED387E6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3303639D-D357-4AB2-AC34-744B9E3DC04C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{3490C03E-0299-4B0A-91D8-B3108329B7F1}" = lport=6004 | protocol=17 | dir=in | app=e:\microsoft office 2007\office12\outlook.exe |
"{34F0E1F9-0D37-456B-A448-37043774CF84}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3A6E31F3-99B7-4FA7-940B-70C21967BFED}" = rport=445 | protocol=6 | dir=out | app=system |
"{423C2E2B-67A1-482D-9360-F63505534774}" = rport=139 | protocol=6 | dir=out | app=system |
"{48798003-F401-4014-940D-4F206083AA8A}" = lport=2869 | protocol=6 | dir=in | app=system |
"{4F19F868-572E-4EEC-853D-EAD082B5AD62}" = rport=137 | protocol=17 | dir=out | app=system |
"{58579848-CD0F-496C-9F90-2239396DFBF1}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5C245A5C-7E75-4F2E-A2C9-2189B2B73688}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{5F71620D-0E6A-4C4B-BBD4-A74B3852F030}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{60FC8177-E798-43C6-B9FD-92C5BD9D77D4}" = lport=445 | protocol=6 | dir=in | app=system |
"{6959303C-DD5D-436A-9EDB-87D0981657EA}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{7443B432-4C30-4C5A-80DE-A038EAF90EF7}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{77AFD7CF-19D6-496C-9E70-CAA129A526C6}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7CF68ADB-93CC-4F38-921F-B9B44CCF6ABA}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7FD73695-AE32-43C5-A98E-C46E94C30651}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{8130E5C4-F753-419D-841D-047D5E53F0E9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{85306312-843A-411E-B28C-DCC34C85FEF6}" = lport=139 | protocol=6 | dir=in | app=system |
"{93E05A60-6D5F-4208-A99B-0A7D763B504B}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{A0FE6DFB-2D31-43FE-AEF3-5322A5D93276}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A12774E5-206D-4394-821A-ABFF2A477FE2}" = rport=10243 | protocol=6 | dir=out | app=system |
"{A86F8BF9-4CDF-4542-84CD-1927564A5B77}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{AF30BE39-66DE-4ACB-A964-19B9F7209695}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{BF2BC166-703E-49D3-8B85-946ACA8060AD}" = lport=10243 | protocol=6 | dir=in | app=system |
"{CFE60D39-2EF8-45E5-B48B-9C3616FBF969}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{D4B800DF-FE54-4A98-B731-D87FD9BEC373}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{DF9F7784-6AFF-4138-B264-B0554E24B164}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{ECE41D60-0D28-48C8-AB33-F7D7180B3303}" = lport=137 | protocol=17 | dir=in | app=system |
"{F442DCE5-4063-4B9B-AEDF-50628F150251}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0108821E-5AD7-40B6-9FF6-17E8BE53EDC3}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{01292A3E-73C4-4816-8169-CBCBCB2D8F84}" = protocol=6 | dir=in | app=l:\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"{04769D7E-11B9-4189-8B92-8FA94D508691}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{0A036E02-605C-4D9E-928F-2EE329B1B0F9}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{0A1C106E-C378-4216-83C4-FB969BF8CB60}" = protocol=6 | dir=in | app=l:\call of duty 4 - modern warfare\iw3mp.exe |
"{0D62434E-8D48-4C68-BFC7-B322B4933873}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{0F8B5F19-B450-4E82-A716-4B625CC1CD84}" = protocol=17 | dir=in | app=e:\icq7.0\icq.exe |
"{120F7CC7-CBBB-4A23-8F61-6CFEAF6A1BD2}" = protocol=6 | dir=in | app=c:\users\administrator\appdata\roaming\dropbox\bin\dropbox.exe |
"{1292853D-50FE-4F76-93A6-66CE0BB60DEC}" = protocol=17 | dir=in | app=l:\pro evolution soccer 2010\pes2010.exe |
"{13523A5D-0060-4A64-9A3C-7B3011F8AED3}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"{13C48629-4D8E-4AE6-981C-DB630DD6F8C7}" = protocol=6 | dir=in | app=l:\battlefield bad company 2\bfbc2updater.exe |
"{15278762-363A-4C6C-900B-F648B39E85D8}" = dir=in | app=e:\avg8\avgupd.exe |
"{1AF035D2-7D51-471E-8DC8-5558A708A45F}" = protocol=6 | dir=in | app=e:\icq7.0\icq.exe |
"{1E3502C8-12C9-44AB-B91C-FB2F74D4EB64}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1EA82E62-C947-4C7B-BDA1-491EF5864CDD}" = dir=in | app=e:\skype\phone\skype.exe |
"{1EB9460C-20F2-453F-8C91-9B251B67FA16}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{1F067F44-5BDF-494D-85B6-F82C6744673C}" = protocol=6 | dir=in | app=l:\fear\fearxp\fearxp.exe |
"{1FA5EF23-2711-4750-ABB4-C42CE255CD0F}" = protocol=6 | dir=in | app=l:\fear\fear.exe |
"{20A9D00A-D711-4919-BC5E-272A926BBA3D}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{26010CAC-42AD-4B36-8824-0F9ECE2852CF}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{26678111-3A65-4A54-87E4-A61A36C13DE4}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{27589190-E303-4162-A318-9085122D675A}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2DDCF7F7-BEC0-4776-BF1F-D42F5EB438EF}" = protocol=17 | dir=in | app=e:\icq7.0\aolload.exe |
"{2E61DC4F-A4C1-490A-A79F-E697A47FD3F5}" = protocol=6 | dir=in | app=e:\avg\avg10\avgdiagex.exe |
"{3086AFE3-289E-4B22-A8A1-647DF169DF27}" = protocol=6 | dir=in | app=l:\street fighter iv\streetfighteriv.exe |
"{352CADF6-8FAE-4B63-91E1-9C7204F08696}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{35878EDF-469B-4833-8F71-6A2E4A99E19F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3720074B-20D7-45C9-9ADE-4BD4B09951F5}" = protocol=17 | dir=in | app=e:\avg\avg10\avgdiagex.exe |
"{38E458FB-F056-4DE7-97CD-9DD9B9567EA8}" = protocol=17 | dir=in | app=e:\icq7.0\icq.exe |
"{39CCBC96-B35D-4F06-86D9-05F2070D04B5}" = protocol=17 | dir=in | app=c:\users\administrator\appdata\roaming\dropbox\bin\dropbox.exe |
"{3BE26D63-3692-4803-850A-447DAB576441}" = protocol=6 | dir=in | app=e:\avg 2011\avgmfapx.exe |
"{3CA934A1-C9EB-4665-9B3F-B80CDB97E534}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{3DC28B22-19E0-4BB3-9834-C8C007ABDF1D}" = protocol=17 | dir=in | app=l:\battlefield 3\battlefield 3\bf3.exe |
"{3DD07F5B-7833-4562-B471-869E7742BFE9}" = dir=in | app=e:\itunes\itunes.exe |
"{4184B07F-904E-4403-8C69-61B895966C21}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{4213BD2A-7FA9-4851-BC36-D5AB124BC045}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{42E33C11-D24D-42C2-996D-E630734AB4B4}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{45152C80-E4C9-49DE-B4BA-EC750FC027C7}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgmfapx.exe |
"{46F71623-CBBC-44F1-A047-DB57545FBDC0}" = dir=in | app=e:\skype\phone\skype.exe |
"{48BEB2A8-23EA-4A4D-B751-72F0F565C6D3}" = protocol=6 | dir=in | app=e:\icq7.0\icq.exe |
"{4BEB002A-FC42-4B11-B630-09AFDED16AAE}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{4C32BB26-E2FA-4CBE-A5C8-D4BDA5953CCB}" = protocol=17 | dir=in | app=e:\4dayforecast\4-day forecast.exe |
"{4CBC1597-84CB-4939-82EE-44F5E7DBF520}" = protocol=17 | dir=in | app=e:\avg\avg10\avgdiagex.exe |
"{4DFD1665-9B08-4C0E-958B-1F054027F8F8}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{4E281CB6-FBAB-4D60-947E-910638723D0E}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"{4F9BED36-D9F4-4CA8-9E94-F16EBDDA0D2E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{50646972-44F1-469D-8F24-ED5B83336C31}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgmfapx.exe |
"{54F92BC8-1C0C-43F6-B11A-C96E983BE995}" = protocol=17 | dir=in | app=l:\fear\fearxp\fearxp.exe |
"{57001658-993F-4910-84F0-38BDB18029F3}" = protocol=6 | dir=in | app=e:\icq7.0\aolload.exe |
"{5A66BE7F-62D8-48F7-BF12-05F239E33D8F}" = protocol=17 | dir=in | app=l:\call of duty 5 - world at war\codwaw.exe |
"{5C16FCD8-1AFF-4C28-AEDA-DF533DCB3931}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |
"{5D1874B3-A8B4-4A18-A776-2FD6FD974CC8}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{5E904759-96E7-464F-911E-3C6984398DB5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5FD95F4F-0CF9-4026-AAC2-5BEB8989878F}" = protocol=17 | dir=in | app=l:\ut2004\system\ut2004.exe |
"{613C4F3E-A8C4-4707-AA54-990E26A3C885}" = dir=in | app=e:\skype\phone\skype.exe |
"{65247627-1F01-4DF6-B4C9-5BF5747B531A}" = protocol=6 | dir=in | app=e:\steam\steamapps\cloudstrifexvi\counter-strike\hl.exe |
"{6B0D0066-7DC4-45DC-B7D0-5A68F158C7FC}" = protocol=17 | dir=in | app=l:\fear\fear.exe |
"{6B6DEFEB-4AE2-4142-BB0B-75B4D4F62EA6}" = dir=in | app=e:\skype\phone\skype.exe |
"{6BAF8B57-2255-4BC2-AB83-29F4A987F2FF}" = protocol=17 | dir=in | app=e:\limewire\limewire.exe |
"{6BB1ADBB-4282-4293-882D-954093A23A32}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6D8CAB6B-F017-4BD7-8BE2-C7C28D485313}" = protocol=6 | dir=in | app=l:\ut2004\system\ut2004.exe |
"{6DAB6B59-CB2F-4685-8673-C396763EED2D}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{72A9A096-43C4-4F4D-B772-EF6F763B78D5}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{737FF662-38A8-4E01-87D7-8BD46EFB4EC7}" = protocol=17 | dir=in | app=e:\steam\steamapps\cloudstrifexvi\counter-strike\hl.exe |
"{74595B37-8F77-4F2B-AC30-CC2A563590AF}" = protocol=17 | dir=in | app=l:\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"{763CA663-14B3-4AE3-96DE-881CFAD9E16F}" = protocol=6 | dir=in | app=e:\avg\avg10\avgemca.exe |
"{78DAE34A-B9BB-4A16-8EEE-66DCE0A974C6}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{7AF3BAB0-9119-409B-BA73-D2C3CB142232}" = protocol=6 | dir=in | app=l:\steam\steam.exe |
"{7DBE7FE6-2BF0-46B0-912B-AA0A0A625601}" = protocol=6 | dir=in | app=l:\pro evolution soccer 2010\pes2010.exe |
"{7F554CB6-6EBD-4635-BFEE-CDB3407CDB9B}" = protocol=17 | dir=in | app=e:\avg\avg10\avgmfapx.exe |
"{7F932AD1-B14A-4C22-BC9F-5FD79C111C31}" = protocol=17 | dir=in | app=e:\avg 2011\avgmfapx.exe |
"{80D9EE75-FDE1-4966-9CFD-41F18A25D9FF}" = protocol=17 | dir=in | app=l:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{85E707E8-D4C4-4A51-8C63-3B9F00442171}" = dir=in | app=l:\cnc 3 - kane edition\retailexe\1.9\cnc3game.dat |
"{8AD25669-ABD7-46C8-9187-6E60EAFA4499}" = protocol=6 | dir=in | app=e:\avg\avg10\avgnsa.exe |
"{8B2969F4-7DE2-4241-AF70-ADF5EF3738D1}" = protocol=17 | dir=in | app=e:\avg\avg10\avgemca.exe |
"{8DBCEC2E-DEF4-48F0-85C2-2782D9CAFEA0}" = dir=in | app=e:\skype\phone\skype.exe |
"{8EF253BB-2989-4806-8297-8B7AE235B5B2}" = protocol=6 | dir=in | app=l:\call of duty 5 - world at war\codwaw.exe |
"{8FC27BBC-9D3E-4EFE-9F7F-494AD937BC08}" = protocol=17 | dir=in | app=l:\call of duty 5 - world at war\codwawmp.exe |
"{90485A24-5CDA-435E-8A6B-D0D7B2A545EC}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |
"{9303DD3D-9D3D-4871-BB7D-11B71553D750}" = protocol=17 | dir=in | app=e:\microsoft office 2010\office14\groove.exe |
"{95F82E62-7296-4DE4-94B7-F476F48EB9AB}" = protocol=6 | dir=in | app=e:\microsoft office 2010\office14\groove.exe |
"{968CB1AA-350A-4BB2-86FD-6C3BE565B8A4}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{97F1E5F3-8E38-43AE-B78B-0FBF058EB7E7}" = protocol=17 | dir=in | app=l:\battlefield bad company 2\bfbc2updater.exe |
"{99B2F142-C171-4C0F-98AF-3283B5E377EF}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{9A3A0EE1-3CA3-4A31-B7C7-D35C37E7481F}" = protocol=6 | dir=out | app=system |
"{9F1718DA-9DD2-438C-9B65-D51D1825CEB3}" = protocol=17 | dir=in | app=l:\pro evolution soccer 2010\pes2010.exe |
"{A0200204-4D95-4175-8919-1F7A5C887E82}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A04C2A58-4CE1-4CAD-8B90-F7BD5082EF04}" = protocol=17 | dir=in | app=e:\avg\avg10\avgnsa.exe |
"{A07C996F-EF99-4648-BE29-3A41FF162086}" = protocol=17 | dir=in | app=l:\half life 2 deathmatch\half-life 2 deathmatch\hl2.exe |
"{A0DA4C6F-5295-43A7-B492-4BE4AF3D92F7}" = dir=in | app=e:\avg8\avgnsa.exe |
"{A14C8FCB-E4B1-469D-B37A-74D1719AC335}" = protocol=17 | dir=in | app=l:\street fighter iv\streetfighteriv.exe |
"{A20A305E-6470-424D-8E09-241D41336A4F}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |
"{A3FA9E17-6EE2-4F66-8353-2258D2D5B70E}" = protocol=17 | dir=in | app=e:\microsoft office 2010\office14\onenote.exe |
"{AAE39062-E804-4515-91D8-86EAB7896763}" = protocol=17 | dir=in | app=l:\ut2004\system\ut2004.exe |
"{AB9B4A23-8ED6-4530-9020-490078753060}" = protocol=6 | dir=in | app=l:\ut2004\system\ut2004.exe |
"{ADE98A86-D380-4B14-B879-9149FFBC0208}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{AE3DBA0C-A7E7-4358-A9C1-B558E1E0866D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{AF2B9A51-F9D3-45D4-B8B2-43464FA1B917}" = protocol=6 | dir=in | app=e:\microsoft office 2010\office14\onenote.exe |
"{B4D89CC2-0996-4468-8773-B098A48565C8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{B5E22CB8-114B-4BC2-9DFB-99F757800612}" = dir=in | app=e:\skype\phone\skype.exe |
"{B74B193E-4276-40BB-BA3B-A5E018FC11DA}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{B890572D-9A62-4143-AAD4-A795AEC75250}" = protocol=17 | dir=in | app=l:\steam\steamapps\cloudstrifexvi\counter-strike\hl.exe |
"{B9405E06-D3BB-427B-A5C9-C0566D8E3A35}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{B9E6009E-2930-46BE-A06D-1D93871A4E9E}" = dir=in | app=e:\skype\plugin manager\skypepm.exe |
"{BA33CADE-AD59-42AD-9445-10E850E3268F}" = protocol=6 | dir=in | app=e:\icq7.0\aolload.exe |
"{BA49B0BD-ADF2-40C4-A2B3-03D5D2A19061}" = protocol=17 | dir=in | app=l:\steam\steam.exe |
"{BC7B51FC-7774-4A43-A4A3-153EC344DF62}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgemca.exe |
"{BE22B33F-13F7-4CF4-B583-EF0D5AD1DACC}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{BF1D8F95-373D-4E8A-A270-003025C57A81}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{C273B82E-9F95-4C41-8C8B-BA5D39DBCB53}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{C339D169-7A25-417B-90EA-CBBB2BA60315}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{C4E1154E-286E-46F5-8315-06AC1C18F839}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{C5BAC811-C585-4CD5-9715-A564F97737AD}" = protocol=6 | dir=in | app=e:\limewire\limewire.exe |
"{CA250FCE-9BDD-40A0-BFF3-9157F64C43A7}" = protocol=17 | dir=in | app=e:\steam\steam.exe |
"{CE1CE04A-F48C-4FE8-91BF-9AB3D560D929}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |
"{CF2B818A-6671-4633-9B93-C4DA88CA95F6}" = protocol=6 | dir=in | app=l:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"{D15D1D2B-D67F-4BEA-BAF3-EC9D41FA6EE4}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |
"{D5F96768-09FE-4728-B8AA-BCFA98C4D514}" = protocol=6 | dir=in | app=l:\steam\steamapps\cloudstrifexvi\counter-strike\hl.exe |
"{D6E09EB3-2CEB-4ADE-AECA-CDDC3B37C755}" = dir=in | app=e:\powerdirector\powerdirector\pdr.exe |
"{D7D8D23D-87E4-4B9C-B8A2-737ABC6ECA7B}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{DC24F398-F206-41EE-B7DE-4A6C8D207D30}" = protocol=17 | dir=in | app=e:\skype\plugin manager\skypepm.exe |
"{DD66204E-4264-4D7D-A144-9F469633B395}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DD88FF63-B1DA-4DC1-87F6-30DAB9BA470D}" = protocol=17 | dir=in | app=l:\fear\fearmp.exe |
"{DE49E3EB-5C6F-4076-9792-7411BA4651EE}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{DF1DD918-783E-4F95-B0E6-7E3617934A31}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{E0115FC8-2EF9-4B92-8C64-8AD3E3618556}" = protocol=6 | dir=in | app=l:\half life 2 deathmatch\half-life 2 deathmatch\hl2.exe |
"{E0978D81-EAD7-4BE5-9F9E-66191B8901F9}" = protocol=6 | dir=in | app=l:\call of duty 5 - world at war\codwawmp.exe |
"{E13CEC43-3363-4D22-AE61-74B26B3403DD}" = protocol=6 | dir=in | app=l:\pro evolution soccer 2010\pes2010.exe |
"{E83256A8-BDEF-4D15-8399-AFEB1E73D392}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E8A9A08E-F19C-4B45-B60F-F21376A6839F}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{E9A2861E-E451-49D6-8231-404165F7EE41}" = protocol=17 | dir=in | app=l:\call of duty 4 - modern warfare\iw3mp.exe |
"{E9F45085-DE40-429B-AA2E-544912DA1090}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{EA077C68-CFC0-4D1E-B213-057F8C1E542A}" = protocol=17 | dir=in | app=e:\avg\avg10\avgemca.exe |
"{EAD8DA83-EAE0-466E-951C-FD9A71CFEA05}" = protocol=6 | dir=in | app=e:\avg\avg10\avgnsa.exe |
"{EB37BB62-C8EC-452E-8012-EAB1CBA60090}" = protocol=6 | dir=in | app=e:\4dayforecast\4-day forecast.exe |
"{EB876DF0-1C50-4FA2-A9BB-7BF633ACBFAE}" = protocol=6 | dir=in | app=e:\avg2011\avgmfapx.exe |
"{ECA4C42C-F439-4411-AEEB-DE731ECBE047}" = protocol=6 | dir=in | app=l:\battlefield 3\battlefield 3\bf3.exe |
"{EDA48B22-0E29-4DD4-BEEB-C04B81C26C1A}" = protocol=6 | dir=in | app=e:\avg\avg10\avgmfapx.exe |
"{EF5CD1B4-DC6A-485F-8EF8-9DA9856A65E9}" = protocol=17 | dir=in | app=e:\avg\avg10\avgnsa.exe |
"{F00E000D-D21A-4AEB-8828-37D8217B2E1A}" = protocol=6 | dir=in | app=e:\avg\avg10\avgemca.exe |
"{F0864688-E3ED-4AFB-B96C-08B179413810}" = protocol=17 | dir=in | app=e:\icq7.0\aolload.exe |
"{F18D9C08-D91A-4D58-8EA5-8152295D3153}" = protocol=6 | dir=in | app=e:\steam\steam.exe |
"{F2EFAB7F-BC7D-4110-AD55-5CEE155B3418}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{F4F778DE-BB41-4758-9DF8-C407434C6953}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{F5CABA06-9962-46BB-8E5B-ADA30A1E2DC5}" = protocol=17 | dir=in | app=e:\avg2011\avgmfapx.exe |
"{F82A9C64-E979-4A0B-8D90-EF3C7A63E2F4}" = protocol=6 | dir=in | app=e:\avg\avg10\avgdiagex.exe |
"{F84DCED2-9DCA-4044-B196-354300ADDF4F}" = protocol=6 | dir=in | app=l:\fear\fearmp.exe |
"{F972641D-1ED9-4A19-9B82-533D45AFF2B1}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |
"{FA75BF5B-7A31-4B79-86AC-61DD3C009665}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{FD27B479-8721-4B7B-A39A-623D606B07E9}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgemca.exe |
"{FDC0C683-FC46-49ED-8963-9E6BEE3662A4}" = protocol=6 | dir=in | app=e:\skype\plugin manager\skypepm.exe |
"TCP Query User{3E9A0DCD-F456-4E97-8E68-BC0F7AD7B944}L:\battlefield bad company 2\bfbc2game.exe" = protocol=6 | dir=in | app=l:\battlefield bad company 2\bfbc2game.exe |
"TCP Query User{59172136-C9B1-48D2-A8DB-0AAC754CB86C}E:\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=e:\mozilla firefox\firefox.exe |
"TCP Query User{5AA7072B-2544-4DB7-871E-DF7EA18547AF}E:\ibm\ds2.2\jdk\jre\bin\javaw.exe" = protocol=6 | dir=in | app=e:\ibm\ds2.2\jdk\jre\bin\javaw.exe |
"TCP Query User{5CFECAEF-CD7A-4502-A43D-85272344D8EC}L:\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=l:\team fortress 2\hl2.exe |
"TCP Query User{5E22C15B-F359-4E17-848B-F72310423C18}E:\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=e:\mozilla firefox\firefox.exe |
"TCP Query User{6B744E0E-BEEA-4309-92BE-F4F1DF3C34E2}E:\sopcast\sopcast.exe" = protocol=6 | dir=in | app=e:\sopcast\sopcast.exe |
"TCP Query User{6FCD5A4C-7DE4-4C39-A5E4-402CB0DE5E5E}L:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe" = protocol=6 | dir=in | app=l:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"TCP Query User{7016D4BE-5EF4-4469-9A96-11DA1B441F65}C:\users\alexundjane\temp\teamviewer3\teamviewer.exe" = protocol=6 | dir=in | app=c:\users\alexundjane\temp\teamviewer3\teamviewer.exe |
"TCP Query User{705B9EEE-BD6A-4C9F-BE18-33761F548E3C}E:\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=e:\sopcast\adv\sopadver.exe |
"TCP Query User{770D25D3-14B4-4179-BEA7-1B82E3C7671A}C:\users\administrator\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\administrator\appdata\roaming\dropbox\bin\dropbox.exe |
"TCP Query User{7D8573FB-0B2A-4238-941E-968DDB3983CD}L:\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe" = protocol=6 | dir=in | app=l:\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"TCP Query User{8E97DC7A-38AA-441A-AC2D-C5A77182C5AD}E:\limewire\limewire.exe" = protocol=6 | dir=in | app=e:\limewire\limewire.exe |
"TCP Query User{A273D1FF-C791-4C9D-8A75-24F0494AE769}L:\street fighter iv\streetfighteriv.exe" = protocol=6 | dir=in | app=l:\street fighter iv\streetfighteriv.exe |
"TCP Query User{AF49AF52-05B4-4CA2-BDA2-30495D31DBE4}E:\icq6.5\icq.exe" = protocol=6 | dir=in | app=e:\icq6.5\icq.exe |
"TCP Query User{B1682292-8F0F-4A54-99A6-B772D03E1E39}L:\steamless counterstrikesource pack\hl2.exe" = protocol=6 | dir=in | app=l:\steamless counterstrikesource pack\hl2.exe |
"TCP Query User{C81E7A95-74FE-4851-8A83-5198465FCFEF}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"TCP Query User{C9ACDDC7-9DEE-4F26-B691-6E67F3BE1E29}C:\program files (x86)\gigabyte\easysaver\updexe.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gigabyte\easysaver\updexe.exe |
"TCP Query User{CA0FBA20-F7EB-473E-AA23-97FD76B259D9}E:\icq7.0\icq.exe" = protocol=6 | dir=in | app=e:\icq7.0\icq.exe |
"TCP Query User{DC72249C-0E6B-446B-B19C-AF3855F641C8}E:\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=e:\sopcast\adv\sopadver.exe |
"TCP Query User{DF51E714-DDA7-4472-B4B4-7A7535629841}L:\call of duty modern warfare 2 alteriwnet\iw4mp.exe" = protocol=6 | dir=in | app=l:\call of duty modern warfare 2 alteriwnet\iw4mp.exe |
"TCP Query User{E4464D85-6F0F-4DAF-B810-A9FDF069E051}L:\half life 2 deathmatch\half-life 2 deathmatch\hl2.exe" = protocol=6 | dir=in | app=l:\half life 2 deathmatch\half-life 2 deathmatch\hl2.exe |
"TCP Query User{E8787494-266F-4986-B56C-630FEA395CB0}L:\steamless counterstrikesource pack\hl2.exe" = protocol=6 | dir=in | app=l:\steamless counterstrikesource pack\hl2.exe |
"TCP Query User{F119DD0B-B0B0-4C78-8579-A9DCBC28E6E4}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"TCP Query User{F739C075-0C44-4351-BC45-FDA36F6D0343}E:\sopcast\sopcast.exe" = protocol=6 | dir=in | app=e:\sopcast\sopcast.exe |
"UDP Query User{0C65D19F-B2DE-4245-848E-C29E88AF79C1}E:\limewire\limewire.exe" = protocol=17 | dir=in | app=e:\limewire\limewire.exe |
"UDP Query User{16B0CE7C-52ED-4A80-83A5-E939ED8638CE}L:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe" = protocol=17 | dir=in | app=l:\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe |
"UDP Query User{1820F2CD-BF03-46DE-91DD-06A887A2E93F}E:\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=e:\mozilla firefox\firefox.exe |
"UDP Query User{26A344B1-8536-4255-8C01-115D23AEC5FA}E:\icq7.0\icq.exe" = protocol=17 | dir=in | app=e:\icq7.0\icq.exe |
"UDP Query User{383CD8AE-5221-4F85-97C9-DC317DF7B8E9}E:\sopcast\sopcast.exe" = protocol=17 | dir=in | app=e:\sopcast\sopcast.exe |
"UDP Query User{3871C96A-0EA8-46DF-AA64-9B18FE6E789E}C:\users\alexundjane\temp\teamviewer3\teamviewer.exe" = protocol=17 | dir=in | app=c:\users\alexundjane\temp\teamviewer3\teamviewer.exe |
"UDP Query User{3C2E0CAB-5F45-4619-835E-81604DD0BB89}E:\icq6.5\icq.exe" = protocol=17 | dir=in | app=e:\icq6.5\icq.exe |
"UDP Query User{3DD590F0-0795-47EA-98E1-004FEA872AA9}L:\steamless counterstrikesource pack\hl2.exe" = protocol=17 | dir=in | app=l:\steamless counterstrikesource pack\hl2.exe |
"UDP Query User{42AE9331-55B9-4F5C-8C40-70E2912E97FA}C:\users\administrator\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\administrator\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{444C6EDB-665E-46CF-A7C1-632F6EAE0D90}L:\battlefield bad company 2\bfbc2game.exe" = protocol=17 | dir=in | app=l:\battlefield bad company 2\bfbc2game.exe |
"UDP Query User{5885A35E-CC7D-4CF1-AB1E-C0F3F78B3CDF}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"UDP Query User{6752ECCF-9ACD-42EC-B13F-4947CADD2886}L:\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe" = protocol=17 | dir=in | app=l:\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"UDP Query User{6843D29A-1527-4C38-8CDA-E5C6964E850A}E:\ibm\ds2.2\jdk\jre\bin\javaw.exe" = protocol=17 | dir=in | app=e:\ibm\ds2.2\jdk\jre\bin\javaw.exe |
"UDP Query User{6B621706-1F24-4C58-A883-608C4B4CF330}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{7B161E04-C48B-4E4F-B7EB-6335245B75A9}L:\street fighter iv\streetfighteriv.exe" = protocol=17 | dir=in | app=l:\street fighter iv\streetfighteriv.exe |
"UDP Query User{7B882BD3-7E86-42F0-90F2-B7935F915D95}E:\sopcast\sopcast.exe" = protocol=17 | dir=in | app=e:\sopcast\sopcast.exe |
"UDP Query User{8C3CDED4-B099-43E9-B6AF-502B4BE1AA87}E:\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=e:\mozilla firefox\firefox.exe |
"UDP Query User{8E3DBDCF-103A-419C-AFB4-B566F90C89B3}C:\program files (x86)\gigabyte\easysaver\updexe.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gigabyte\easysaver\updexe.exe |
"UDP Query User{A174D475-0292-4F82-87DD-063123046F1C}L:\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=l:\team fortress 2\hl2.exe |
"UDP Query User{B8032382-0F60-424B-A6A0-2783B288C5E2}L:\call of duty modern warfare 2 alteriwnet\iw4mp.exe" = protocol=17 | dir=in | app=l:\call of duty modern warfare 2 alteriwnet\iw4mp.exe |
"UDP Query User{D68BB472-4DF4-49A0-83AF-90D49976D732}L:\half life 2 deathmatch\half-life 2 deathmatch\hl2.exe" = protocol=17 | dir=in | app=l:\half life 2 deathmatch\half-life 2 deathmatch\hl2.exe |
"UDP Query User{DC115173-057C-49BB-966D-99C22DF86517}E:\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=e:\sopcast\adv\sopadver.exe |
"UDP Query User{EA8453FC-186B-4B5E-8919-C4EE4E133901}L:\steamless counterstrikesource pack\hl2.exe" = protocol=17 | dir=in | app=l:\steamless counterstrikesource pack\hl2.exe |
"UDP Query User{F657FD2E-7719-4528-94F4-8B5907E8A801}E:\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=e:\sopcast\adv\sopadver.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{3C8159DD-1890-4625-A5B2-E3D8D78D4486}" = AVG 2012
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{5CE7E3F5-9803-4F32-AA89-2D8848A80109}" = Microsoft LifeCam
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}" = Apple Mobile Device Support
"{6B9CE44B-52D0-4B2F-BDFA-56FF4977A790}" = AVG 2012
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}" = iTunes
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010
"{903029FE-FA82-427B-916C-AD08185DA3C2}" = Microsoft Xbox 360 Accessories 1.1
"{91C4D79C-3579-48E8-ADFA-8818042AEB73}" = Logitech G930
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.8.15
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F3F18612-7B5D-4C05-86C9-AB50F6F71727}" = KhalInstallWrapper
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"AVG" = AVG 2012
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{021C4C4F-C93C-4425-BFFD-C2D16776BFAE}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07300F01-89CA-4CF8-92BD-2A605EB83C95}" = EasySaver B9.0205.1
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0E806605-5B82-4A4F-BC31-AA4FADA03C42}" = t@x 2012
"{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support
"{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}" = Windows Live Messenger
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 19
"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in
"{2B653229-9854-4989-B780-D978F5F13EAB}" = FEAR
"{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{510D2239-6C2E-457B-9590-485EC552D94D}" = Garmin USB Drivers
"{59ABBDF0-E1E5-48AF-85FB-F523A08C3490}" = STREET FIGHTER IV
"{6530EB5E-F2BE-45D3-906B-E4AFFF2D1588}" = Windows Live-Geräte-Manager
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8795CBED-55E2-4693-9F14-84EC446935BE}" = SpeechRedist
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}" = Thrustmaster Force Feedback Driver
"{90120000-001A-0000-0000-0000000FF1CE}" = Microsoft Office Outlook 2007
"{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_OUTLOOK_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_OUTLOOK_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}_VISPRO_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_OUTLOOK_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}_VISPRO_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_OUTLOOK_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}_VISPRO_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_OUTLOOK_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}_VISPRO_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_OUTLOOK_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_VISPRO_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0407-1000-0000000FF1CE}_OUTLOOK_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0407-1000-0000000FF1CE}_VISPRO_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0051-0000-0000-0000000FF1CE}" = Microsoft Office Visio Professional 2007
"{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}" = Microsoft Office Visio 2007 Service Pack 3 (SP3)
"{90120000-0054-0407-0000-0000000FF1CE}" = Microsoft Office Visio MUI (German) 2007
"{90120000-0054-0407-0000-0000000FF1CE}_VISPRO_{3CB0380B-0413-4C44-A63B-DCD6369EAF4E}" = Microsoft Office Visio 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_OUTLOOK_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}_VISPRO_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.PROPLUSR_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{594128C9-2CDF-43CE-8103-DC100CF013B6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{909BBDB7-BABE-434C-9124-863A9F8D1CF8}" = FEAR Extraction Point
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{92A70E71-4F0E-4C05-A777-16424E89F162}" = Garmin Communicator Plugin with myGarmin Agent
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Deutsch
"{B0414A3B-3AE3-47B8-8FC0-2129781FF425}" = t@x 2011
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C40C3C3D-97CF-44B5-836C-766E374464B3}" = 3DMark Vantage
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D36DD326-7280-11D8-97C8-000129760CBE}" = CyberLink PhotoNow
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E8AEA11B-E60A-455E-B008-E4E763604612}" = Browser Configuration Utility
"{E8C23EBE-EE3C-4299-9DB9-601AB3751454}" = AAVUpdateManager
"{EBD36172-D298-434E-AA0E-22690459F3EA}_is1" = Call of Duty Modern Warfare 2 AlterIWnet 1.3.37a++
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables
"{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.9
"Battlelog Web Plugins" = Battlelog Web Plugins
"DAEMON Tools Lite" = DAEMON Tools Lite
"Diablo II" = Diablo II
"Diablo III" = Diablo III
"EPSON Scanner" = EPSON Scan
"ESN Sonar-0.70.4" = ESN Sonar
"Free Studio_is1" = Free Studio version 5.0.10
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.14.1206
"Google Calendar Sync" = Google Calendar Sync
"GPG4Win" = Gpg4win (2.0.2)
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = CyberLink PhotoNow
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300
"Messenger Plus!" = Messenger Plus! 5
"Messenger Plus! for Skype" = Messenger Plus! for Skype
"Mozilla Firefox 13.0.1 (x86 de)" = Mozilla Firefox 13.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"Origin" = Origin
"OUTLOOK" = Microsoft Office Outlook 2007
"PartyPoker" = PartyPoker
"PartyPokerNet" = PartyPoker.net
"Picasa 3" = Picasa 3
"PunkBusterSvc" = PunkBuster Services
"SopCast" = SopCast 3.2.4
"Steam App 10" = Counter-Strike
"Steam App 10180" = Call of Duty: Modern Warfare 2
"Steamless Counter Strike Source Pack" = Steamless Counter Strike Source Pack
"Steamless Team Fortress 2 Pack" = Steamless Team Fortress 2 Pack
"UT2004" = Unreal Tournament 2004
"Veetle TV" = Veetle TV 0.9.18
"VISPRO" = Microsoft Office Visio Professional 2007
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"WinLiveSuite" = Windows Live Essentials
"WinUAE" = WinUAE 2.3.0
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 08.02.2011 14:30:18 | Computer Name = DESKTOP | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 09.02.2011 12:24:44 | Computer Name = DESKTOP | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Die Daten sind unzulässig. .
Error - 09.02.2011 12:49:50 | Computer Name = DESKTOP | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Die Daten sind unzulässig. .
Error - 10.02.2011 12:55:48 | Computer Name = DESKTOP | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Die Daten sind unzulässig. .
Error - 10.02.2011 13:21:34 | Computer Name = DESKTOP | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 10.02.2011 15:23:41 | Computer Name = DESKTOP | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Die Daten sind unzulässig. .
Error - 10.02.2011 17:31:01 | Computer Name = DESKTOP | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Die Daten sind unzulässig. .
Error - 11.02.2011 11:48:04 | Computer Name = DESKTOP | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Die Daten sind unzulässig. .
Error - 11.02.2011 17:07:54 | Computer Name = DESKTOP | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Die Daten sind unzulässig. .
Error - 12.02.2011 04:53:09 | Computer Name = DESKTOP | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Die Daten sind unzulässig. .
[ Media Center Events ]
Error - 10.09.2010 10:12:55 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 16:12:54 - MCEClientUX konnte nicht abgerufen werden (Fehler: Die
zugrunde liegende Verbindung wurde geschlossen: Für den geschützten SSL/TLS-Kanal
konnte keine Vertrauensstellung hergestellt werden..)
Error - 10.09.2010 10:14:35 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 16:14:35 - Broadband konnte nicht abgerufen werden (Fehler: Timeout
für Vorgang überschritten)
Error - 11.09.2010 13:46:35 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 19:46:34 - Fehler beim Herstellen der Internetverbindung. 19:46:34
- Serververbindung konnte nicht hergestellt werden..
Error - 11.09.2010 13:47:08 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 19:47:04 - Fehler beim Herstellen der Internetverbindung. 19:47:04
- Serververbindung konnte nicht hergestellt werden..
Error - 12.09.2010 08:37:01 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 14:37:01 - Fehler beim Herstellen der Internetverbindung. 14:37:01
- Serververbindung konnte nicht hergestellt werden..
Error - 12.09.2010 08:37:34 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 14:37:30 - Fehler beim Herstellen der Internetverbindung. 14:37:30
- Serververbindung konnte nicht hergestellt werden..
Error - 13.09.2010 08:10:18 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 14:10:18 - Fehler beim Herstellen der Internetverbindung. 14:10:18
- Serververbindung konnte nicht hergestellt werden..
Error - 13.09.2010 08:10:26 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 14:10:23 - Fehler beim Herstellen der Internetverbindung. 14:10:23
- Serververbindung konnte nicht hergestellt werden..
Error - 27.10.2011 11:07:10 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 17:07:10 - Fehler beim Herstellen der Internetverbindung. 17:07:10
- Serververbindung konnte nicht hergestellt werden..
Error - 27.10.2011 11:07:50 | Computer Name = DESKTOP | Source = MCUpdate | ID = 0
Description = 17:07:39 - Fehler beim Herstellen der Internetverbindung. 17:07:39
- Serververbindung konnte nicht hergestellt werden..
[ OSession Events ]
Error - 07.11.2009 04:56:55 | Computer Name = DESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1
seconds with 0 seconds of active time. This session ended with a crash.
Error - 21.11.2009 07:53:06 | Computer Name = DESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2
seconds with 0 seconds of active time. This session ended with a crash.
Error - 22.07.2010 07:27:50 | Computer Name = DESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 258
seconds with 240 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 13.07.2012 10:39:54 | Computer Name = DESKTOP | Source = sptd | ID = 262148
Description = Der Treiber hat einen internen Fehler in seinen Datenstrukturen für
festgestellt.
Error - 13.07.2012 10:40:45 | Computer Name = DESKTOP | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
sptd
Error - 13.07.2012 10:41:25 | Computer Name = DESKTOP | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk5\DR5 gefunden.
Error - 13.07.2012 10:41:26 | Computer Name = DESKTOP | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk5\DR5 gefunden.
Error - 13.07.2012 10:41:27 | Computer Name = DESKTOP | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk5\DR5 gefunden.
Error - 13.07.2012 12:52:40 | Computer Name = DESKTOP | Source = sptd | ID = 262148
Description = Der Treiber hat einen internen Fehler in seinen Datenstrukturen für
festgestellt.
Error - 13.07.2012 12:53:16 | Computer Name = DESKTOP | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
sptd
Error - 13.07.2012 12:56:18 | Computer Name = DESKTOP | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk5\DR5 gefunden.
Error - 13.07.2012 12:56:19 | Computer Name = DESKTOP | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk5\DR5 gefunden.
Error - 13.07.2012 12:56:20 | Computer Name = DESKTOP | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk5\DR5 gefunden.
< End of report >
Gruß
Alex |
