| DocBrown_86 | 12.05.2013 21:08 |
Hier die EXTRAS Logfile: Code:
OTL Extras logfile created on: 12.05.2013 21:49:40 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Marty McFly\Downloads
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16540)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
7,71 Gb Total Physical Memory | 4,99 Gb Available Physical Memory | 64,75% Memory free
9,02 Gb Paging File | 5,91 Gb Available in Paging File | 65,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 146,39 Gb Total Space | 50,08 Gb Free Space | 34,21% Space Free | Partition Type: NTFS
Drive E: | 762,22 Gb Total Space | 517,16 Gb Free Space | 67,85% Space Free | Partition Type: NTFS
Drive F: | 465,75 Gb Total Space | 220,00 Gb Free Space | 47,24% Space Free | Partition Type: NTFS
Computer Name: MCFLY | User Name: Marty McFly | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- Reg Error: Key error. File not found
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- Reg Error: Key error. File not found
[HKEY_USERS\S-1-5-21-4287803700-2118566070-1682595541-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = CE 37 E6 AF FF 6A CD 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{2286093B-5327-4363-9A46-E9706B2F8547}" = rport=139 | protocol=6 | dir=out | app=system |
"{2A273D84-C3B6-4168-AB08-F1C1B75B5998}" = lport=139 | protocol=6 | dir=in | app=system |
"{2F620410-9929-4086-B7D8-43D394ADC0BA}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{39C94CE3-418C-4346-BD7E-6223FB7BC76B}" = lport=2869 | protocol=6 | dir=in | app=system |
"{466C2B42-9723-4EAF-927F-7AAA41226B45}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{49080687-5372-4AEB-A0B4-049A66133240}" = lport=137 | protocol=17 | dir=in | app=system |
"{4EB066D5-9220-4DA8-BC3D-145CA162FDD8}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{64DCA737-770C-43B7-8A90-29365341C093}" = lport=7935 | protocol=6 | dir=in | name=adobe flash builder 4.6 |
"{67892684-AE1D-4A85-B546-6ACBD3A91138}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{71443BA8-EA16-472E-A99C-F71F8B4F0690}" = rport=138 | protocol=17 | dir=out | app=system |
"{7896FC8A-2A4B-440B-9DF6-4D03ED3AC548}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{9C8D6049-2794-4B0F-8F0B-6CBB4E415A18}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B25C3E72-A910-4CC4-B870-2BAA36036E99}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B8F8A62B-B34B-48AF-81B9-580DB3F06AFE}" = rport=137 | protocol=17 | dir=out | app=system |
"{BA13E02F-CB16-4B25-BF2B-38F5187D6A21}" = rport=445 | protocol=6 | dir=out | app=system |
"{BAADD52A-0B6B-43D4-9E86-DA363B9D00BD}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{C74FE4F3-4FC0-45DC-968E-6DC86562EBBE}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C7954F30-DD19-467C-8F65-7229003718DC}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{C806A2B7-F038-4D4E-872F-554A95F7B72C}" = lport=10243 | protocol=6 | dir=in | app=system |
"{D183144D-BA6B-4187-8483-2E8488124706}" = rport=10243 | protocol=6 | dir=out | app=system |
"{F565AE8B-B39A-4588-B518-9DB97FEADD27}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{F889C306-4C11-4177-A5B4-D1AECD38AE8D}" = lport=138 | protocol=17 | dir=in | app=system |
"{F955FC98-563F-48EA-BEEF-7F10F56C2245}" = lport=445 | protocol=6 | dir=in | app=system |
"{FF101045-6D0C-4A10-9C1F-0CADEE9DF434}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03E996DC-FBD7-4BC6-BBF6-EA4755967988}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{067B303E-067B-40EC-AC14-2732723D6576}" = dir=out | name=@{microsoft.bingtravel_1.7.0.26_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} |
"{0E47C5D3-E55E-448A-AC9D-980BFAC27C17}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{12C875C3-7489-4D56-912E-7A2805755EFD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{1B6CEB15-057D-4155-8237-59528F1E6C13}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{1EB08F94-3DD8-4E31-B4A6-ABDD85BDBFF9}" = protocol=6 | dir=in | app=c:\program files (x86)\sybase\sql anywhere 9\win32\dbsrv9.exe |
"{20B15EF2-CB68-46D2-81A3-791DEDCAFBA0}" = dir=out | name=evernote touch |
"{236AD457-3A87-48DE-BA84-F1759D3F4265}" = dir=out | name=@{microsoft.microsoftskydrive_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} |
"{2C809D0E-A3CF-4B23-821E-7F73107EC43A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{2D672356-E0F3-4C70-A2C1-9B0471FF688D}" = protocol=6 | dir=in | app=c:\users\marty mcfly\appdata\roaming\dropbox\bin\dropbox.exe |
"{3554F0A5-3637-4AD3-9160-5DC56666322B}" = protocol=6 | dir=out | app=system |
"{3CDB42EF-DC90-45AD-89FD-72EC8B9C60DF}" = dir=out | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{3E925ACF-A095-4F7A-B4FD-EAA6CD1AE3BF}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{48201B09-CA60-4844-864F-8DCB5E1D8089}" = dir=in | name=@{microsoft.skypeapp_1.6.0.114_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} |
"{4AF3F0D9-88E2-43DA-B652-4E2FFAA90DB1}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{4B14EEDB-3320-40C2-80BF-10851BF40FBD}" = dir=out | name=@{microsoft.bingnews_1.7.0.38_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} |
"{4E361CD9-5EE7-4F9D-9FAE-658FD1FDED1F}" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\adobe flash builder 4.6\flashbuilder.exe |
"{565C49D0-CF08-49C5-9234-7707AE3ADFB6}" = dir=out | name=gmail calendar |
"{5BAF74C4-88EC-4AC9-8C39-6B0F59810D29}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{5CAB60B5-C213-4B05-9DD7-B9A8BF1FA99C}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd cinema\powerdvdcinema10.exe |
"{5F895558-7413-41EC-9562-17840DAE29F6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{649EFF78-E684-4DB6-A512-3C3DFB4AC780}" = protocol=17 | dir=in | app=c:\program files\condusiv technologies\intellimemory\intellimem.exe |
"{6B890F0C-F230-4125-9566-596A3FE5CC8C}" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\adobe flash builder 4.6\flashbuilder.exe |
"{6F527AB1-EF56-465A-AF18-FF8AB045DBF5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{78AEBA7C-A7DC-442E-8B90-34D11A04CBA8}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{7C486A89-95A4-41A6-86A8-1D15C763CC30}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{7D98D45F-3C2B-4B60-91CE-C736530324CC}" = dir=in | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{7EA6C3DA-708A-44F1-9A1B-402EE62B0F23}" = dir=out | name=s camera |
"{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{811F6110-F96E-454A-AC77-8C7A2D9DDE22}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd10.exe |
"{826C6CC3-BCC0-4F41-B017-186587AFEA86}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{82A762B2-7368-4498-81D5-E8B5B8C47E71}" = protocol=6 | dir=in | app=c:\program files (x86)\adawaretb\dtuser.exe |
"{82C7D8D2-867C-4CC3-A781-202618A65A3E}" = dir=in | app=c:\program files\intel corporation\intel widi\widiapp.exe |
"{8750B1F6-638A-4178-A25D-6C9E0956BEF4}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{8931A0B4-0C2D-4AED-A124-7F847A705CF3}" = dir=out | name=@{microsoft.bingweather_1.7.0.26_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} |
"{8C2A6744-2343-43B2-AC68-F3AD4124CA90}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{8C2B3751-B762-4F81-A99F-8071C84CFCEB}" = dir=out | name=@{microsoft.bingmaps_1.5.1.240_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{969D8D30-24A1-493E-8516-8CA17F1C7797}" = dir=in | name=evernote touch |
"{9946786A-1A13-4455-8D03-7355BE9461B9}" = dir=out | name=fresh paint |
"{999C072B-C833-4738-A8A2-90AB0D9BFDCB}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{A6EDE1B2-BD46-4499-AE52-442BF8711001}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AB9E8A57-346F-45E7-8D73-C5ED714DFE9D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{AF0F91CE-8A29-4638-BF3F-434FB6453B5F}" = protocol=17 | dir=in | app=c:\program files (x86)\sybase\sql anywhere 9\win32\dbsrv9.exe |
"{C1C5E7EA-427D-4F17-BE2F-66B90222DC3D}" = protocol=17 | dir=in | app=c:\program files (x86)\adawaretb\dtuser.exe |
"{C22BAEC8-E546-47CC-BF19-43807D4FBF82}" = protocol=17 | dir=in | app=c:\users\marty mcfly\appdata\roaming\dropbox\bin\dropbox.exe |
"{C369C0FA-092E-434F-84DA-129653FD2703}" = protocol=6 | dir=in | app=c:\program files\condusiv technologies\intellimemory\intellimem.exe |
"{C38774F6-1125-4F75-B3FB-A40919C98E1E}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C50EDD8B-5A5D-4BAF-A381-88FF423F6EA9}" = dir=out | name=s gallery |
"{C90631A2-F698-4AA6-A372-B7C083B66568}" = dir=in | app=c:\users\marty mcfly\appdata\local\microsoft\skydrive\skydrive.exe |
"{CBFAB6CE-F76C-4075-9331-FBDEF714B4AC}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{DEB192E1-1EF5-4E16-9335-D9CBE377ADF5}" = dir=out | name=windows_ie_ac_001 |
"{E2257C07-E6C6-43AF-8122-03FD574581F2}" = dir=out | name=@{microsoft.zunevideo_1.2.150.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/33270} |
"{E3F8431F-6F63-4277-AF19-AEE9D7B443AE}" = dir=out | name=@{microsoft.zunemusic_1.2.150.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/33273} |
"{E690FAD3-6FA1-4430-98C9-796FAC524491}" = dir=out | name=@{microsoft.skypeapp_1.6.0.114_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} |
"{E70DEB46-7BB5-4DDB-8A5A-CC4D7B537B15}" = dir=in | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{EB4CFA42-D77B-4663-AAB4-5798241EFCA2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{ED627610-BCCC-4986-9642-DF77110EA4DF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F396F9E1-D0C0-4406-BEF1-B9285F470CE1}" = dir=out | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{F6F9975F-E93D-4C5C-82F5-9C2A02D0A121}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FEE0CF36-54BA-40AF-8E99-A362B39E3895}" = dir=out | name=@{microsoft.xboxlivegames_1.2.143.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"TCP Query User{3FAB2825-D432-4D5F-9AB8-D5309C3F195A}C:\users\marty mcfly\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\marty mcfly\appdata\roaming\dropbox\bin\dropbox.exe |
"TCP Query User{F131DEC1-B94A-43C1-ACAA-420563F77BE0}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\intel\intelappstore\bin\ismagent.exe |
"UDP Query User{04F37FCA-1E2F-458B-8677-44AE95D744CD}C:\users\marty mcfly\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\marty mcfly\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{32739615-331B-490D-843E-7ED2A4CE3ED3}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\intel\intelappstore\bin\ismagent.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0728A184-F899-4356-B93D-8228674F0DEB}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP3500_series" = Canon iP3500 series
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4803" = CanoScan 4400F
"{1593C708-5535-47A4-8C0F-F8D4BE2B4560}" = Intel® PROSet/Wireless WiFi Software
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{3D85CD3F-00E0-4E14-82D6-1F9397DDD09B}" = Help Desk
"{3EB3E946-FB88-45C2-A19B-410D254657D9}" = Support Center
"{40320F22-7D70-49DB-9D66-B6FAE5F36B47}" = IntelliMemory
"{467D5E81-8349-4892-9E81-C3674ED8E451}" = Cisco Systems VPN Client 5.0.07.0290
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6097158B-0184-4140-BEC3-7885794D2571}" = Intel(R) WiDi
"{77A7CE43-5A1E-8282-931B-E0CC4C075793}" = AMD Catalyst Install Manager
"{860203FC-987D-4429-8A08-8332B21AD90E}" = S Agent
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{DC985990-9908-CDA9-36A4-6E5143036819}" = AMD Accelerated Video Transcoding
"{E77289CF-12B9-4CAB-A49E-FEAE947F4D95}" = Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed
"{F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}" = Intel® Trusted Connect Service Client
"{F7E844CD-70C0-B342-400B-9E59C75ADCA4}" = ccc-utility64
"{F842F8B0-6942-4930-821F-543E976B2C66}" = MSVCRT110_amd64
"9F04C462DAB591BDCCE784F77E4D4F1736010B92" = Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735)
"Elantech" = ETDWare X64 11.7.5.5_WHQL
"ProInst" = Intel PROSet Wireless
"VLC media player" = VLC media player 2.0.6
"WinRAR archiver" = WinRAR 4.20 (64-Bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04E1BCB9-38C2-BF35-207D-EC0860FF693C}" = CCC Help Hungarian
"{08C39CFD-D68C-D2DE-22B1-7005D15DF6E9}" = PX Profile Update
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0DAF670C-1020-7EB5-0179-D7F9DDC13094}" = CCC Help Korean
"{1057511B-F8FE-4230-9ED3-AB949A57EE4A}" = Windows Live PIMT Platform
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Recovery
"{185F9795-9663-4F13-9EF9-307A282ADB5A}" = ph
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{204B7FA8-7886-CBC0-D12D-CAE23D37355A}" = CCC Help Japanese
"{233B918E-99FD-4643-BEDD-A9855A56FC3A}" = Windows Live UX Platform Language Pack
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 21
"{29315CEC-E6CE-4394-84DC-6F862E8D9A52}" = Windows Live UX Platform
"{2A075BB4-E976-4278-BF3F-E5C6945D84C0}" = bl
"{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}" = CyberLink Power2Go 8
"{2AC3D7FE-8389-F716-7C37-22AC5290BDEF}" = CCC Help Danish
"{2FAFE37E-D796-47B8-BA8F-D09819B12DF6}" = Windows Live Essentials
"{3192AA4F-095C-015A-657E-E7886810316B}" = CCC Help Finnish
"{35BD47F4-C19B-474F-AACC-E8C0BE38148A}" = Photo Common
"{3657EBC3-6A34-FBB2-3E1A-DD5543BD7F74}" = CCC Help English
"{3A11EFD3-9734-660E-4FB9-C0BA174556D7}" = CCC Help Russian
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3F36FD8B-3AEC-C37D-F9B9-72D35844E000}" = CCC Help Greek
"{448DA1AD-D1CA-4967-8EFA-9482F31E7BFD}" = Lexware Datenbank plus 2012
"{4689F012-C8E3-4F6E-BDEF-13671D53A6DC}" = Windows Live UX Platform Language Pack
"{49BE4966-3255-B02D-51DD-BBE07BA45933}" = Catalyst Control Center Profiles Mobile
"{4C04B7F1-4FA8-1C6A-EF60-2C1BD75CEE9B}" = Catalyst Control Center Localization All
"{4C0D8B3E-63F0-4773-83F5-C5B7795B0FB8}" = Photo Gallery
"{4F9A382F-4478-4036-905C-F77DF2EA0370}" = Windows Live SOXE
"{4FA8F084-C42F-45E1-B7E5-E0C8A1083DC5}" = Windows Live SOXE Definitions
"{51FDC2DE-0917-46B7-EAEC-5377504701DE}" = PowerXpressHybrid
"{57EC0BAF-E65F-4758-A6AB-586535C870A2}" = Windows Live Essentials
"{61889FC7-9738-439A-96B3-17AF981BDDEF}" = Movie Maker
"{618F39BD-9720-47CF-A89C-108AB41B1493}" = Windows Live UX Platform Language Pack
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{64DF7404-9D46-44AF-AFA1-A2F8D5648C2D}" = Windows Live Photo Common
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{66172F70-0BDE-4BAB-A973-E2E4EF501F6D}" = User Guide
"{6AB4E5CD-0062-48E8-96A3-E5B4486DFCB3}" = Lexware buchhalter 2013
"{6B54B1AE-EBCA-48BE-92AF-61D02118F093}" = Lexware online banking
"{6C7E1175-AB07-29B3-0EF9-85D3A181B20F}" = CCC Help French
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{718D79FF-A370-5B34-B150-FE1A8E14F385}" = CCC Help Czech
"{741ECBB6-1A0B-42F1-A7BF-76222734A63A}" = Movie Maker
"{76EE8FE7-1957-4C51-9074-4930A8CFB1AF}" = Windows Live Installer
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{789B9797-97E1-79D0-DFF0-450E04F3CB0F}" = CCC Help Chinese Traditional
"{78F35489-621D-4FFD-BCE7-2C7C3897E47C}" = Windows Live
"{7F682A00-6497-4551-A2A6-063AE667D1CF}" = Movie Maker
"{81A64EDE-4A31-7B6B-0B0C-F871A941541A}" = CCC Help Chinese Standard
"{86CAC8DE-288A-410D-A4A4-0190060E69AE}" = Raccolta foto
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{88B11576-F9D6-5E0D-0C0A-7A50571D7D76}" = Catalyst Control Center InstallProxy
"{8AE7E507-BC49-4DF0-A236-26878691AB53}" = Lexware Info Service
"{8C78F0B2-6AAB-3BFA-3E84-EB488890DC6E}" = CCC Help Thai
"{8CB5C357-12E5-41B1-A024-D57D4E6F32D9}" = Settings
"{8CEEF998-3A9F-C288-2EEE-BA049A961FB7}" = CCC Help Norwegian
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{9478A3AA-4C2C-4104-97D7-32C7EEB32F59}" = Support Center FAQ
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office
"{9846E46F-07E0-4BDF-985A-E3FBA8C15877}" = Movie Maker
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B2E55F8-5BA8-4A45-9682-ACB6F2CC0DA5}" = Photo Gallery
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F6BFB0F-6B1F-4D1A-A9DA-42F6794C9188}" = Lexware Elster
"{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR
"{A33F6654-CC13-BC9E-94FD-617EC7894172}" = CCC Help Italian
"{A5BB842D-4333-9C2C-B0AC-0911F016BEF0}" = CCC Help Swedish
"{A6C48A9F-694A-4234-B3AA-62590B668927}" = Intel(R) Manageability Engine Firmware Recovery Agent
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-1033-F400-7760-000000000005}" = Adobe Acrobat X Pro - English, Français, Deutsch
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X (10.1.6) MUI
"{ACD7FD17-14CD-406D-A9DC-28EF5961FD7C}" = Catalyst Control Center - Branding
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager
"{B19E03EA-067C-412F-A81E-271720E601AB}" = Fotogalerie
"{B27FA0A3-D80F-41A9-8BAD-C5F2D859AB22}" = Photo Common
"{B6829511-95BB-46FC-9030-957D54B8EFE2}" = Windows Live UX Platform Language Pack
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{BA73469B-D8C7-4FE3-B33C-1340D09F0709}" = Windows Live Communications Platform
"{BE672587-331F-42F7-BC38-D59759311C75}" = Lexware reisekosten plus 2012
"{BEFC2B04-60C4-0637-DCD7-E46BC8008024}" = CCC Help Turkish
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C42DAFDB-C364-59CA-8B75-74C3CF8AB76D}" = CCC Help Dutch
"{CBCB2BBE-2CD0-C08E-5616-77F5E23164EC}" = CCC Help German
"{D0534307-9661-2B86-9D12-F8F268629556}" = Catalyst Control Center
"{D34A78EB-78F2-48ab-8CAE-5D4DC255A491}" = Lexware reisekosten plus 2012
"{D531FC91-6F4E-49A7-B912-15289D05B6F8}" = Photo Common
"{D71BC54E-A4E6-4E06-866C-FD6EE16EA187}" = Movie Maker
"{DC2CB432-D3B9-4F81-8ACB-7775FD5202E5}" = Photo Common
"{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E11ED5C7-D1A4-DFBC-F9DC-6FEC2EE68881}" = CCC Help Portuguese
"{E37D03AC-8190-91C3-5BE8-486751D0567A}" = CCC Help Polish
"{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}" = Adobe Creative Suite 6 Master Collection
"{EBFCBD05-77A3-4FC3-A6D2-27218B61D957}" = Windows Live Essentials
"{EE55B368-EBDF-98F3-CFE7-7CE4ADBC4553}" = OEM Application Profile
"{EFBE6DD5-B224-96E5-72B9-68D328CB12A6}" = Adobe Widget Browser
"{F075020E-43B2-4F2C-9723-C81CE162E7B6}" = Ad-Aware Antivirus
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F289D934-2224-473B-B57E-0040D2693F83}" = TAXMAN 2013
"{F5266D28-E0B2-4130-BFC5-EE155AD514DC}" = Apple Application Support
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
"{FCB75DFB-8E5B-C4BD-AF16-16FEF8C58659}" = CCC Help Spanish
"{FE8DFDD0-A543-4A83-B7A9-C411138194D5}" = Galerie de photos
"adawaretb" = Ad-Aware Security Add-on
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager
"com.adobe.WidgetBrowser" = Adobe Widget Browser
"EaseUS Partition Master Home Edition_is1" = EaseUS Partition Master 9.2.1 Home Edition
"Free YouTube Download_is1" = Free YouTube Download version 3.2.1.320
"Freemake Video Converter_is1" = Freemake Video Converter Version 4.0.0
"Google Chrome" = Google Chrome
"HandBrake" = HandBrake 0.9.8
"InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}" = CyberLink Power2Go 8
"InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"Juniper_Setup_Client Activex Control" = Juniper Networks, Inc. Setup Client Activex Control
"Mozilla Firefox 20.0.1 (x86 de)" = Mozilla Firefox 20.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"WinLiveSuite" = Windows Live Essentials
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-4287803700-2118566070-1682595541-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Juniper_Setup_Client" = Juniper Networks, Inc. Setup Client
"Neoteris_Host_Checker" = Juniper Networks Host Checker
"SkyDriveSetup.exe" = Microsoft SkyDrive
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 27.03.2013 12:12:50 | Computer Name = McFly | Source = Microsoft-Windows-Immersive-Shell | ID = 2486
Description = Die App „Microsoft.Reader_8wekyb3d8bbwe!Microsoft.Reader“ wurde nicht
innerhalb der vorgesehenen Zeit gestartet.
Error - 27.03.2013 21:33:37 | Computer Name = McFly | Source = ATIeRecord | ID = 16388
Description = ATI EEU Client event error
Error - 07.04.2013 17:11:07 | Computer Name = McFly | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: glcnd.exe, Version: 6.2.9200.20623,
Zeitstempel: 0x510c9a4f Name des fehlerhaften Moduls: glcnd.exe, Version: 6.2.9200.20623,
Zeitstempel: 0x510c9a4f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000001e774d
ID
des fehlerhaften Prozesses: 0x15a4 Startzeit der fehlerhaften Anwendung: 0x01ce33d139d74f74
Pfad
der fehlerhaften Anwendung: C:\Program Files\WindowsApps\Microsoft.Reader_6.2.9200.20623_x64__8wekyb3d8bbwe\glcnd.exe
Pfad
des fehlerhaften Moduls: C:\Program Files\WindowsApps\Microsoft.Reader_6.2.9200.20623_x64__8wekyb3d8bbwe\glcnd.exe
Berichtskennung:
a98d0f91-9fc7-11e2-be7e-50b7c38b4817 Vollständiger Name des fehlerhaften Pakets:
Microsoft.Reader_6.2.9200.20623_x64__8wekyb3d8bbwe Anwendungs-ID, die relativ zum
fehlerhaften Paket ist: Microsoft.Reader
Error - 07.04.2013 17:26:59 | Computer Name = McFly | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: DVDFab.exe, Version: 8.2.2.8, Zeitstempel:
0x512c618f Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel:
0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0xa281cd03 ID des fehlerhaften Prozesses:
0x2c Startzeit der fehlerhaften Anwendung: 0x01ce33d6a32f908a Pfad der fehlerhaften
Anwendung: C:\Program Files (x86)\DVDFab 8 Qt\DVDFab.exe Pfad des fehlerhaften Moduls:
unknown Berichtskennung: e131f238-9fc9-11e2-be7e-50b7c38b4817 Vollständiger Name
des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error - 07.04.2013 17:27:04 | Computer Name = McFly | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: DVDFab.exe, Version: 8.2.2.8, Zeitstempel:
0x512c618f Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel:
0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0xa281cd03 ID des fehlerhaften Prozesses:
0x868 Startzeit der fehlerhaften Anwendung: 0x01ce33d6a602029a Pfad der fehlerhaften
Anwendung: C:\Program Files (x86)\DVDFab 8 Qt\DVDFab.exe Pfad des fehlerhaften Moduls:
unknown Berichtskennung: e3b0f0d5-9fc9-11e2-be7e-50b7c38b4817 Vollständiger Name
des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error - 07.04.2013 17:32:55 | Computer Name = McFly | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: DVDFab.exe, Version: 8.2.2.8, Zeitstempel:
0x512c618f Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel:
0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0xa281cd03 ID des fehlerhaften Prozesses:
0xd10 Startzeit der fehlerhaften Anwendung: 0x01ce33d76ff31271 Pfad der fehlerhaften
Anwendung: C:\Program Files (x86)\DVDFab 8 Qt\DVDFab.exe Pfad des fehlerhaften Moduls:
unknown Berichtskennung: b4f1af6c-9fca-11e2-be7f-50b7c38b4817 Vollständiger Name
des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error - 07.04.2013 17:36:10 | Computer Name = McFly | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: DVDFab.exe, Version: 8.2.2.8, Zeitstempel:
0x512c618f Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel:
0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0xa281cd03 ID des fehlerhaften Prozesses:
0x974 Startzeit der fehlerhaften Anwendung: 0x01ce33d7eb56edcc Pfad der fehlerhaften
Anwendung: C:\Program Files (x86)\DVDFab 8 Qt\DVDFab.exe Pfad des fehlerhaften Moduls:
unknown Berichtskennung: 291db3b5-9fcb-11e2-be7f-50b7c38b4817 Vollständiger Name
des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error - 08.04.2013 03:09:55 | Computer Name = McFly | Source = ESENT | ID = 489
Description = taskhostex (4824) Versuch, Datei "C:\Users\Marty McFly\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat"
für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess
kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet
wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
Error - 08.04.2013 14:35:38 | Computer Name = McFly | Source = Microsoft-Windows-Immersive-Shell | ID = 2484
Description = Das Paket „BRICKMAKERS.gmailcalendar_1.0.0.14_neutral__wps5hyj3streg“
wurde beendet, da das Anhalten zu lange dauerte.
Error - 08.04.2013 14:36:05 | Computer Name = McFly | Source = Application Hang | ID = 1002
Description = Programm wwahost.exe, Version 6.2.9200.16420 kann nicht mehr unter
Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
zu suchen. Prozess-ID: 1c24 Startzeit: 01ce347db89330d5 Endzeit: 4294967295 Anwendungspfad:
C:\windows\system32\wwahost.exe Berichts-ID: 20373bd7-a07b-11e2-be80-50b7c38b4817
Vollständiger
Name des fehlerhaften Pakets: BRICKMAKERS.gmailcalendar_1.0.0.14_neutral__wps5hyj3streg
Anwendungs-ID,
die relativ zum fehlerhaften Paket ist: App
[ System Events ]
Error - 04.03.2013 15:23:35 | Computer Name = McFly | Source = DCOM | ID = 10016
Description =
Error - 04.03.2013 15:23:35 | Computer Name = McFly | Source = DCOM | ID = 10016
Description =
Error - 04.03.2013 15:23:35 | Computer Name = McFly | Source = DCOM | ID = 10016
Description =
Error - 04.03.2013 20:13:07 | Computer Name = McFly | Source = DCOM | ID = 10010
Description =
Error - 07.04.2013 16:23:49 | Computer Name = McFly | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?07.?04.?2013 um 21:44:21 unerwartet heruntergefahren.
Error - 07.04.2013 17:31:44 | Computer Name = McFly | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde
mit folgendem Fehler beendet: %%2147770990
Error - 08.04.2013 11:13:02 | Computer Name = McFly | Source = Service Control Manager | ID = 7030
Description = Der Dienst "Cisco Systems, Inc. VPN Service" ist als interaktiver
Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive
Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error - 08.04.2013 11:55:20 | Computer Name = McFly | Source = NetBT | ID = 4311
Description = Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht
erstellt werden konnte. Verwenden Sie die Zeichenfolge "C8F733582CD6", um die Schnittstelle
zu identifizieren, die nicht initialisiert werden konnte. Sie stellt die MAC-Adresse
der Schnittstelle mit dem Initialisierungsfehler oder die GUID (Globally Unique
Interface Identifier) dar, wenn NetBT keine Zuordnung von der GUID zur MAC-Adresse
herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar waren, dann
stellt die Zeichenfolge einen Clustergerätenamen dar.
Error - 08.04.2013 11:55:20 | Computer Name = McFly | Source = NetBT | ID = 4311
Description = Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht
erstellt werden konnte. Verwenden Sie die Zeichenfolge "C8F733582CD6", um die Schnittstelle
zu identifizieren, die nicht initialisiert werden konnte. Sie stellt die MAC-Adresse
der Schnittstelle mit dem Initialisierungsfehler oder die GUID (Globally Unique
Interface Identifier) dar, wenn NetBT keine Zuordnung von der GUID zur MAC-Adresse
herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar waren, dann
stellt die Zeichenfolge einen Clustergerätenamen dar.
Error - 08.04.2013 13:23:02 | Computer Name = McFly | Source = DCOM | ID = 10016
Description =
< End of report >
--- --- ---
Hier der Inhalt aus der defogger_disable.log:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 22:14 on 12/05/2013 (Marty McFly)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Hier die Logdatei von Gmer:
GMER Logfile: Code:
GMER 2.1.19163 - GMER - Rootkit Detector and Remover
Rootkit scan 2013-05-12 22:27:18
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\0000003e rev. 0,00MB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Marty McFly\AppData\Local\Temp\fxloypod.sys
---- Kernel code sections - GMER 2.1 ----
.text C:\windows\System32\win32k.sys!W32pServiceTable fffff96000238d00 7 bytes [40, A9, 82, 01, 00, 51, F2]
.text C:\windows\System32\win32k.sys!W32pServiceTable + 8 fffff96000238d08 7 bytes [01, BA, C1, FF, 00, 58, DC]
---- Threads - GMER 2.1 ----
Thread C:\windows\System32\svchost.exe [824:1312] 000007f8a68b97dc
Thread C:\windows\System32\svchost.exe [824:1316] 000007f8a679c0f0
Thread C:\windows\System32\svchost.exe [824:1416] 000007f8a522ba00
Thread C:\windows\System32\svchost.exe [824:1420] 000007f8a683c138
Thread C:\windows\System32\svchost.exe [824:3260] 000007f8a7313fd0
Thread C:\windows\System32\svchost.exe [824:4208] 000007f89f99d438
Thread C:\windows\System32\svchost.exe [824:5052] 000007f89f994140
Thread C:\windows\System32\svchost.exe [824:4572] 000007f8a6852d80
Thread C:\windows\System32\svchost.exe [824:7252] 000007f8a6856588
Thread C:\windows\System32\svchost.exe [824:7556] 000007f8a6852d80
Thread C:\windows\System32\svchost.exe [824:3068] 000007f8a6856588
Thread C:\windows\system32\svchost.exe [976:3180] 000007f8a1235c38
Thread C:\windows\system32\svchost.exe [976:7984] 000007f89fd010f0
Thread C:\windows\system32\svchost.exe [976:6116] 000007f8a55016b0
Thread C:\windows\SYSTEM32\ntdll.dll [1864:1868] 0000000000300635
Thread C:\windows\SYSTEM32\ntdll.dll [1916:1920] 00000000004b9b92
Thread [3384:2496] 000007f8acaa38c0
Thread [3384:3232] 000007f8acaa38c0
Thread C:\windows\SYSTEM32\ntdll.dll [4492:4496] 0000000000db1f13
Thread C:\windows\SYSTEM32\ntdll.dll [4492:5024] 00000000741597fe
Thread [1060:4648] 000007f8acaa38c0
Thread [1060:1476] 000007f8acaa38c0
Thread [2012:4964] 000007f8a2ba1b94
Thread [2012:4804] 000007f8acaa38c0
Thread [2012:2664] 000007f8acae57ac
Thread [2012:1156] 000007f8acaa38c0
Thread [5184:4176] 000007f8acaa38c0
Thread [5184:7348] 000007f8acaa38c0
Thread C:\windows\SYSTEM32\ntdll.dll [5392:5396] 0000000000408417
Thread C:\windows\SYSTEM32\ntdll.dll [5392:5428] 00000000004066c0
Thread C:\windows\SYSTEM32\ntdll.dll [5472:5476] 0000000000402c61
Thread C:\windows\SYSTEM32\ntdll.dll [5656:5660] 000000000046e040
Thread C:\windows\SYSTEM32\ntdll.dll [5656:5688] 000000000042ef20
Thread C:\windows\SYSTEM32\ntdll.dll [5656:5692] 000000000042ef20
Thread C:\windows\SYSTEM32\ntdll.dll [5812:5816] 0000000000971b05
Thread C:\windows\SYSTEM32\ntdll.dll [1332:3252] 00000000000ee362
Thread C:\windows\SYSTEM32\ntdll.dll [4152:4148] 0000000001108fb2
Thread C:\windows\system32\wwahost.exe [2004:1192] 000007f89320efe4
Thread C:\windows\system32\wwahost.exe [2004:4040] 000007f8932c09a0
Thread C:\windows\system32\wwahost.exe [2004:2856] 000007f8932c09a0
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
Disk \Device\Harddisk0\DR0 sector 0: rootkit-like behavior
---- EOF - GMER 2.1 ----
--- --- --- |
GMER herunter: (Dateiname zufällig) 
Tauchen Probleme auf?