| KingOrhan |  22.12.2010 14:17 |        habs doch geschafft, dass MBAM scannt - ich warte noch bis er fertig ist... poste die logs und mache dann OTL... danke schonmal  
edit1: MBAM Log   Code:  
 Malwarebytes' Anti-Malware 1.50 
www.malwarebytes.org   
Datenbank Version: 5344   
Windows 6.1.7600 
Internet Explorer 8.0.7600.16385   
22.12.2010 14:32:51 
mbam-log-2010-12-22 (14-32-51).txt   
Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|F:\|G:\|) 
Durchsuchte Objekte: 440392 
Laufzeit: 36 Minute(n), 24 Sekunde(n)   
Infizierte Speicherprozesse: 1 
Infizierte Speichermodule: 0 
Infizierte Registrierungsschlüssel: 6 
Infizierte Registrierungswerte: 5 
Infizierte Dateiobjekte der Registrierung: 0 
Infizierte Verzeichnisse: 2 
Infizierte Dateien: 25   
Infizierte Speicherprozesse: 
c:\Users\Celli22\AppData\Local\Temp\Jx1.exe (Trojan.FakeAlert) -> 3688 -> Unloaded process successfully.   
Infizierte Speichermodule: 
(Keine bösartigen Objekte gefunden)   
Infizierte Registrierungsschlüssel: 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor (Trojan.FakeAlert) -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\SOFTWARE\JP595IR86O (Trojan.FakeAlert) -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\SOFTWARE\NtWqIVLZEWZU (Trojan.FakeAlert) -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ (Hijack.Zones) -> Quarantined and deleted successfully.   
Infizierte Registrierungswerte: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\onrcsmweax.exe (Trojan.FakeAlert) -> Value: onrcsmweax.exe -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{B707525A-5540-D0B1-20A8-D7E39C98A125} (Trojan.Dropper) -> Value: {B707525A-5540-D0B1-20A8-D7E39C98A125} -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ccpatch700core.exe (Trojan.FakeAlert) -> Value: ccpatch700core.exe -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{A3303364-11B3-313E-E553-EF8C8697110B} (Trojan.Dropper) -> Value: {A3303364-11B3-313E-E553-EF8C8697110B} -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\JP595IR86O (Trojan.FakeAlert) -> Value: JP595IR86O -> Quarantined and deleted successfully.   
Infizierte Dateiobjekte der Registrierung: 
(Keine bösartigen Objekte gefunden)   
Infizierte Verzeichnisse: 
c:\programdata\microsoft\Windows\start menu\Programs\antimalware doctor (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Roaming\microsoft\Windows\start menu\Programs\antimalware doctor (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.   
Infizierte Dateien: 
c:\Users\Celli22\AppData\Local\Temp\onrcsmweax.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Roaming\Obaphe\ybve.exe (Trojan.Dropper) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Roaming\ebaf99d05735c065bdb2e051f2a06490\ccpatch700core.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Roaming\Emno\byce.exe (Trojan.Dropper) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\8Z4DMWQ3\ccpatch700core[2].exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\W1GQE4YV\sjnlgn[1].htm (Trojan.Downloader) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Local\Temp\Jx3.exe (Trojan.Downloader) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Local\Temp\Jx4.exe (Trojan.Downloader) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Local\Temp\vvifjepc.exe (Trojan.FraudPack) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\LocalLow\Sun\Java\deployment\cache\6.0\59\7e1029bb-19890f16 (Trojan.Dropper) -> Quarantined and deleted successfully. 
c:\Windows\Jbuvya.exe (Trojan.Downloader) -> Quarantined and deleted successfully. 
c:\Users\Celli22\Desktop\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. 
c:\Users\postgres\Desktop\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Roaming\microsoft\internet explorer\quick launch\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. 
c:\Users\postgres\AppData\Roaming\microsoft\internet explorer\quick launch\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Roaming\microsoft\Windows\start menu\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\antimalware doctor.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully. 
c:\Windows\System32\1.exe (Backdoor.Bot) -> Quarantined and deleted successfully. 
c:\Windows\SysWOW64\1.exe (Backdoor.Bot) -> Quarantined and deleted successfully. 
c:\Windows\Tasks\{22116563-108c-42c0-a7ce-60161b75e508}.job (Trojan.Downloader) -> Quarantined and deleted successfully. 
c:\Windows\Tasks\{62c40aa6-4406-467a-a5a5-dfdf1b559b7a}.job (Trojan.FakeAlert) -> Quarantined and deleted successfully. 
c:\Windows\Tasks\{bbaeaeaf-1275-40e2-bd6c-bc8f88bd114a}.job (Trojan.Downloader) -> Quarantined and deleted successfully. 
c:\Users\Celli22\AppData\Local\Temp\Jx1.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. 
c:\programdata\microsoft\Windows\start menu\Programs\antimalware doctor\antimalware doctor.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully. 
c:\programdata\microsoft\Windows\start menu\Programs\antimalware doctor\uninstall.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.   
__________________   OTL läuft gerade, logs folgen demnächst  
edit2: OTL logs  
otl.txt   Code:  
 OTL logfile created on: 22.12.2010 14:36:32 - Run 3 
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Users\Celli22\Downloads 
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation 
Internet Explorer (Version = 8.0.7600.16385) 
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 
  
8,00 Gb Total Physical Memory | 5,00 Gb Available Physical Memory | 65,00% Memory free 
16,00 Gb Paging File | 13,00 Gb Available in Paging File | 80,00% Paging File free 
Paging file location(s): ?:\pagefile.sys [binary data] 
  
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) 
Drive C: | 116,44 Gb Total Space | 36,17 Gb Free Space | 31,07% Space Free | Partition Type: NTFS 
Drive D: | 329,79 Gb Total Space | 117,68 Gb Free Space | 35,68% Space Free | Partition Type: NTFS 
Drive E: | 5,40 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS 
Drive F: | 232,88 Gb Total Space | 231,37 Gb Free Space | 99,35% Space Free | Partition Type: NTFS 
Drive G: | 232,88 Gb Total Space | 232,78 Gb Free Space | 99,96% Space Free | Partition Type: NTFS 
Drive I: | 960,72 Mb Total Space | 909,64 Mb Free Space | 94,68% Space Free | Partition Type: FAT 
  
Computer Name: CELLIN22 | User Name: Celli22 | Logged in as Administrator. 
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans 
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days 
   ========== Processes (SafeList) ========== 
  
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) 
PRC - D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) 
PRC - C:\Program Files (x86)\Tunngle\TnglCtrl.exe (Tunngle.net GmbH) 
PRC - C:\Users\Celli22\Downloads\OTL(2).exe (OldTimer Tools) 
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) 
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) 
PRC - D:\Program Files (x86)\SensorsViewPro41\svservice.exe () 
PRC - C:\Windows\SysWOW64\PnkBstrA.exe () 
PRC - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) 
PRC - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe () 
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS) 
PRC - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) 
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) 
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) 
PRC - C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe (PostgreSQL Global Development Group) 
PRC - C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe (PostgreSQL Global Development Group) 
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) 
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ASUS) 
PRC - C:\Program Files (x86)\Dell Photo AIO Printer 926\memcard.exe () 
  
   ========== Modules (SafeList) ========== 
  
MOD - C:\Users\Celli22\Downloads\OTL(2).exe (OldTimer Tools) 
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation) 
MOD - C:\Windows\SysWOW64\wtsapi32.dll (Microsoft Corporation) 
MOD - C:\Windows\SysWOW64\winsta.dll (Microsoft Corporation) 
MOD - C:\Windows\SysWOW64\normaliz.dll (Microsoft Corporation) 
  
   ========== Win32 Services (SafeList) ========== 
  
SRV:64bit: - (PnkBstrA) -- C:\Windows\SysNative\PnkBstrA.exe File not found 
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) 
SRV:64bit: - (AFBAgent) -- C:\Windows\SysNative\FBAgent.exe (ASUSTeK Computer Inc.) 
SRV:64bit: - (TurboBoost) -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel(R) Corporation) 
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) 
SRV:64bit: - (dlcx_device) -- C:\Windows\SysNative\dlcxcoms.exe ( ) 
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) 
SRV - (TunngleService) -- C:\Program Files (x86)\Tunngle\TnglCtrl.exe (Tunngle.net GmbH) 
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) 
SRV - (SensorsVService) -- D:\Program Files (x86)\SensorsViewPro41\svservice.exe () 
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe () 
SRV - (Creative ALchemy AL6 Licensing Service) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe (Creative Labs) 
SRV - (Creative Audio Engine Licensing Service) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe (Creative Labs) 
SRV - (ATKGFNEXSrv) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS) 
SRV - (UNS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) 
SRV - (LMS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) 
SRV - (HPSLPSVC) -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.) 
SRV - (postgresql-8.4) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe (PostgreSQL Global Development Group) 
SRV - (ASLDRService) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) 
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) 
SRV - (dlcx_device) -- C:\Windows\SysWow64\dlcxcoms.exe ( ) 
  
   ========== Driver Services (SafeList) ========== 
  
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) 
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys () 
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) 
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) 
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) 
DRV:64bit: - (L1C) -- C:\Windows\SysNative\drivers\L1C62x64.sys (Atheros Communications, Inc.) 
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH) 
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.) 
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated) 
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.) 
DRV:64bit: - (HECIx64) Intel(R) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation) 
DRV:64bit: - (tap0901t) TAP-Win32 Adapter V9 (Tunngle) -- C:\Windows\SysNative\drivers\tap0901t.sys (Tunngle.net) 
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation) 
DRV:64bit: - (TurboB) -- C:\Windows\SysNative\drivers\TurboB.sys () 
DRV:64bit: - (kbfiltr) -- C:\Windows\SysNative\drivers\kbfiltr.sys ( ) 
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) 
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) 
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) 
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) 
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) 
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) 
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation) 
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () 
DRV:64bit: - (SiSGbeLH) -- C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.) 
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) 
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) 
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) 
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) 
DRV:64bit: - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) -- C:\Windows\SysNative\drivers\snp2uvc.sys () 
DRV:64bit: - (RTHDMIAzAudService) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys (Realtek Semiconductor Corp.) 
DRV:64bit: - (MTsensor) -- C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS) 
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation) 
DRV:64bit: - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation) 
DRV - ({B154377D-700F-42cc-9474-23858FBDF4BD}) -- C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl (CyberLink Corp.) 
DRV - (ASMMAP64) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASUS) 
DRV - (sensorsview64) -- C:\Windows\SysWOW64\sensorsview32_64.sys (OpenLibSys.org) 
DRV - (sensorsview) -- D:\Program Files (x86)\SensorsViewPro41\drv\sensorsview32_64.sys (OpenLibSys.org) 
  
   ========== Standard Registry (SafeList) ========== 
  
   ========== Internet Explorer ========== 
  
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm 
  
  
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
  
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
  
  
  
IE - HKU\S-1-5-21-2416166752-3120119939-1990265985-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com 
IE - HKU\S-1-5-21-2416166752-3120119939-1990265985-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com 
IE - HKU\S-1-5-21-2416166752-3120119939-1990265985-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 
IE - HKU\S-1-5-21-2416166752-3120119939-1990265985-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local> 
IE - HKU\S-1-5-21-2416166752-3120119939-1990265985-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:8074 
  
   ========== FireFox ========== 
  
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.4 
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.51 
  
  
FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.11.26 22:41:01 | 000,000,000 | ---D | M] 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.12.11 00:31:40 | 000,000,000 | ---D | M] 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.12.11 00:31:40 | 000,000,000 | ---D | M] 
  
[2010.05.09 19:21:38 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\mozilla\Extensions 
[2010.12.22 13:26:26 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\mozilla\Firefox\Profiles\0br2hzwj.default\extensions 
[2010.07.06 10:54:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Celli22\AppData\Roaming\mozilla\Firefox\Profiles\0br2hzwj.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} 
[2010.07.22 18:41:32 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Celli22\AppData\Roaming\mozilla\Firefox\Profiles\0br2hzwj.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} 
[2010.12.22 13:26:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions 
[2010.07.20 10:00:41 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} 
[2010.06.29 20:26:00 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml 
[2010.06.29 20:26:00 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml 
[2010.06.29 20:26:00 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml 
[2010.06.29 20:26:00 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml 
[2010.06.29 20:26:00 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml 
  
O1 HOSTS File: ([2010.11.11 00:14:16 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts 
O1 - Hosts: 127.0.0.1       localhost 
O1 - Hosts: ::1       localhost 
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) 
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) 
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.) 
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) 
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. 
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) 
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) 
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) 
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.) 
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) 
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) 
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. 
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) 
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. 
O4:64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe () 
O4:64bit: - HKLM..\Run: [dlcxmon.exe] C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxmon.exe () 
O4:64bit: - HKLM..\Run: [MemoryCardManager] C:\Program Files (x86)\Dell Photo AIO Printer 926\memcard.exe () 
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) 
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) 
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) 
O4 - HKU\.DEFAULT..\Run: [C:\PROGRAM FILE] Reg Error: Value error. File not found 
O4 - HKU\S-1-5-18..\Run: [C:\PROGRAM FILE] Reg Error: Value error. File not found 
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) 
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) 
O4 - HKU\S-1-5-21-2416166752-3120119939-1990265985-1001..\Run: [aytsrcdi] C:\Users\Celli22\AppData\Local\Temp\ryipvqqqn\cuxgmeslajb.exe () 
O4 - HKU\S-1-5-21-2416166752-3120119939-1990265985-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) 
O4 - HKU\S-1-5-21-2416166752-3120119939-1990265985-1001..\Run: [ssnvhfhl] C:\Users\Celli22\AppData\Local\Temp\bxcpvxqyk\cmtigrjlajb.exe () 
O4 - HKU\S-1-5-21-2416166752-3120119939-1990265985-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) 
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found 
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found 
O4 - HKU\S-1-5-21-2416166752-3120119939-1990265985-1003..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 
O7 - HKU\S-1-5-21-2416166752-3120119939-1990265985-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Celli22\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm () 
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Celli22\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm () 
O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Program Files (x86)\ICQ7.1\ICQ.exe (ICQ, LLC.) 
O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Program Files (x86)\ICQ7.1\ICQ.exe (ICQ, LLC.) 
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) 
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) 
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) 
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe () 
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe () 
O9 - Extra Button: HP Smart Web Printing ein- oder ausblenden - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) 
O13 - gopher Prefix: missing 
O13 - gopher Prefix: missing 
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) 
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) 
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) 
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icqde.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host) 
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found 
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found 
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found 
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found 
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found 
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found 
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) 
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) 
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) 
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) 
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) 
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) 
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) 
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) 
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found 
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) 
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found 
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. 
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. 
O32 - HKLM CDRom: AutoRun - 1 
O32 - AutoRun File - [2010.02.10 02:55:59 | 000,423,304 | R--- | M] (Electronic Arts) - E:\AutoRun.exe -- [ CDFS ] 
O32 - AutoRun File - [2010.02.10 07:21:09 | 000,000,000 | ---D | M] - E:\Autorun -- [ CDFS ] 
O32 - AutoRun File - [2010.01.31 09:21:13 | 000,367,686 | R--- | M] () - E:\Autorun.ico -- [ CDFS ] 
O32 - AutoRun File - [2010.02.10 03:55:03 | 009,965,568 | R--- | M] () - E:\autorun.dat -- [ CDFS ] 
O32 - AutoRun File - [2010.02.10 03:54:55 | 000,000,155 | R--- | M] () - E:\autorun.inf -- [ CDFS ] 
O33 - MountPoints2\{0cf7e3bf-3739-11df-8f06-806e6f6e6963}\Shell - "" = AutoRun 
O33 - MountPoints2\{0cf7e3bf-3739-11df-8f06-806e6f6e6963}\Shell\AutoRun\command - "" = E:\D-Link.exe -- File not found 
O33 - MountPoints2\{81a76a6e-b539-11df-8c9c-485b3927fffb}\Shell - "" = AutoRun 
O33 - MountPoints2\{81a76a6e-b539-11df-8c9c-485b3927fffb}\Shell\AutoRun\command - "" = H:\Autorun.exe -- File not found 
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found 
O35:64bit: - HKLM\..comfile [open] -- "%1" %* 
O35:64bit: - HKLM\..exefile [open] -- "%1" %* 
O35 - HKLM\..comfile [open] -- "%1" %* 
O35 - HKLM\..exefile [open] -- "%1" %* 
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* 
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* 
O37 - HKLM\...com [@ = comfile] -- "%1" %* 
O37 - HKLM\...exe [@ = exefile] -- "%1" %* 
  
  
MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk - C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe - () 
MsConfig:64bit - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) 
MsConfig:64bit - StartUpReg: AmIcoSinglun64 - hkey= - key= - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.) 
MsConfig:64bit - StartUpReg: ASUS Screen Saver Protector - hkey= - key= - C:\Windows\AsScrPro.exe (ASUS) 
MsConfig:64bit - StartUpReg: ATKMEDIA - hkey= - key= - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) 
MsConfig:64bit - StartUpReg: ATKOSD2 - hkey= - key= - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) 
MsConfig:64bit - StartUpReg: BDRegion - hkey= - key= - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe (cyberlink) 
MsConfig:64bit - StartUpReg: CLMLServer - hkey= - key= - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) 
MsConfig:64bit - StartUpReg: HControlUser - hkey= - key= - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) 
MsConfig:64bit - StartUpReg: RemoteControl9 - hkey= - key= - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.) 
MsConfig:64bit - StartUpReg: RtHDVCpl - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) 
MsConfig:64bit - StartUpReg: RunDLLEntry - hkey= - key= - C:\Windows\system32\AmbRunE.DLL File not found 
MsConfig:64bit - StartUpReg: Sidebar - hkey= - key= - C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) 
MsConfig:64bit - StartUpReg: StartCCC - hkey= - key= - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) 
MsConfig:64bit - StartUpReg: UpdateLBPShortCut - hkey= - key= - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) 
MsConfig:64bit - StartUpReg: UpdateP2GoShortCut - hkey= - key= - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) 
MsConfig:64bit - StartUpReg: UpdReg - hkey= - key= - C:\Windows\Updreg.EXE (Creative Technology Ltd.) 
MsConfig:64bit - StartUpReg: VolPanel - hkey= - key= - C:\Program Files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe (Creative Technology Ltd) 
MsConfig:64bit - State: "startup" - Reg Error: Key error. 
  
SafeBootMin:64bit: AppMgmt - Service 
SafeBootMin:64bit: Base - Driver Group 
SafeBootMin:64bit: Boot Bus Extender - Driver Group 
SafeBootMin:64bit: Boot file system - Driver Group 
SafeBootMin:64bit: File system - Driver Group 
SafeBootMin:64bit: Filter - Driver Group 
SafeBootMin:64bit: HelpSvc - Service 
SafeBootMin:64bit: PCI Configuration - Driver Group 
SafeBootMin:64bit: PNP Filter - Driver Group 
SafeBootMin:64bit: Primary disk - Driver Group 
SafeBootMin:64bit: sacsvr - Service 
SafeBootMin:64bit: SCSI Class - Driver Group 
SafeBootMin:64bit: System Bus Extender - Driver Group 
SafeBootMin:64bit: vmms - Service 
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) 
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers 
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive 
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive 
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller 
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc 
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard 
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse 
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters 
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter 
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System 
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive 
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy 
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers 
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume 
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices 
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices 
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices 
SafeBootMin: AppMgmt - Service 
SafeBootMin: Base - Driver Group 
SafeBootMin: Boot Bus Extender - Driver Group 
SafeBootMin: Boot file system - Driver Group 
SafeBootMin: File system - Driver Group 
SafeBootMin: Filter - Driver Group 
SafeBootMin: HelpSvc - Service 
SafeBootMin: PCI Configuration - Driver Group 
SafeBootMin: PNP Filter - Driver Group 
SafeBootMin: Primary disk - Driver Group 
SafeBootMin: sacsvr - Service 
SafeBootMin: SCSI Class - Driver Group 
SafeBootMin: System Bus Extender - Driver Group 
SafeBootMin: vmms - Service 
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers 
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive 
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive 
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller 
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc 
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard 
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse 
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters 
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter 
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System 
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive 
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy 
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers 
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume 
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices 
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices 
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices 
  
SafeBootNet:64bit: AppMgmt - Service 
SafeBootNet:64bit: Base - Driver Group 
SafeBootNet:64bit: Boot Bus Extender - Driver Group 
SafeBootNet:64bit: Boot file system - Driver Group 
SafeBootNet:64bit: File system - Driver Group 
SafeBootNet:64bit: Filter - Driver Group 
SafeBootNet:64bit: HelpSvc - Service 
SafeBootNet:64bit: Messenger - Service 
SafeBootNet:64bit: NDIS Wrapper - Driver Group 
SafeBootNet:64bit: NetBIOSGroup - Driver Group 
SafeBootNet:64bit: NetDDEGroup - Driver Group 
SafeBootNet:64bit: Network - Driver Group 
SafeBootNet:64bit: NetworkProvider - Driver Group 
SafeBootNet:64bit: PCI Configuration - Driver Group 
SafeBootNet:64bit: PNP Filter - Driver Group 
SafeBootNet:64bit: PNP_TDI - Driver Group 
SafeBootNet:64bit: Primary disk - Driver Group 
SafeBootNet:64bit: rdsessmgr - Service 
SafeBootNet:64bit: sacsvr - Service 
SafeBootNet:64bit: SCSI Class - Driver Group 
SafeBootNet:64bit: Streams Drivers - Driver Group 
SafeBootNet:64bit: System Bus Extender - Driver Group 
SafeBootNet:64bit: TDI - Driver Group 
SafeBootNet:64bit: vmms - Service 
SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) 
SafeBootNet:64bit: WudfUsbccidDriver - Driver 
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers 
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive 
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive 
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller 
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc 
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard 
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse 
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net 
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient 
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService 
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans 
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters 
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter 
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System 
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive 
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers 
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy 
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers 
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume 
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices 
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices 
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices 
SafeBootNet: AppMgmt - Service 
SafeBootNet: Base - Driver Group 
SafeBootNet: Boot Bus Extender - Driver Group 
SafeBootNet: Boot file system - Driver Group 
SafeBootNet: File system - Driver Group 
SafeBootNet: Filter - Driver Group 
SafeBootNet: HelpSvc - Service 
SafeBootNet: Messenger - Service 
SafeBootNet: NDIS Wrapper - Driver Group 
SafeBootNet: NetBIOSGroup - Driver Group 
SafeBootNet: NetDDEGroup - Driver Group 
SafeBootNet: Network - Driver Group 
SafeBootNet: NetworkProvider - Driver Group 
SafeBootNet: PCI Configuration - Driver Group 
SafeBootNet: PNP Filter - Driver Group 
SafeBootNet: PNP_TDI - Driver Group 
SafeBootNet: Primary disk - Driver Group 
SafeBootNet: rdsessmgr - Service 
SafeBootNet: sacsvr - Service 
SafeBootNet: SCSI Class - Driver Group 
SafeBootNet: Streams Drivers - Driver Group 
SafeBootNet: System Bus Extender - Driver Group 
SafeBootNet: TDI - Driver Group 
SafeBootNet: vmms - Service 
SafeBootNet: WudfUsbccidDriver - Driver 
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers 
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive 
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive 
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller 
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc 
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard 
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse 
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net 
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient 
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService 
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans 
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters 
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter 
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System 
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive 
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers 
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy 
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers 
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume 
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices 
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices 
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices 
  
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll 
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack 
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE 
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx 
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help 
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools 
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements 
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player 
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access 
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll 
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings 
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install 
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding 
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts 
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help 
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface 
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework 
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP 
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig 
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework 
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll 
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack 
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE 
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx 
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help 
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 
ActiveX: {5A604D2C-E968-429B-8327-62B5CE52126D} - .NET Framework 
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools 
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements 
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player 
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access 
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework 
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll 
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings 
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install 
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding 
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts 
ActiveX: {CE4BC71D-A88B-4943-BB3D-AF9C0E7D4387} - .NET Framework 
ActiveX: {D0A35A58-08B0-B8CA-5AC8-CB4A40D1A578} - Browser Customizations 
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player 
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help 
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface 
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP 
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig 
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP 
  
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) 
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) 
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.) 
  
CREATERESTOREPOINT 
Restore point Set: OTL Restore Point 
   ========== Files/Folders - Created Within 30 Days ========== 
  
[2010.12.22 12:53:59 | 000,000,000 | ---D | C] -- C:\Users\Celli22\AppData\Roaming\Ihfawu 
[2010.12.22 12:53:59 | 000,000,000 | ---D | C] -- C:\Users\Celli22\AppData\Roaming\Emno 
[2010.12.22 12:53:51 | 000,000,000 | ---D | C] -- C:\Users\Celli22\AppData\Roaming\EBAF99D05735C065BDB2E051F2A06490 
[2010.12.22 12:35:37 | 000,000,000 | ---D | C] -- C:\Windows\Minidump 
[2010.12.18 15:02:14 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Tunngle 
[2010.12.18 15:02:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tunngle 
[2010.12.16 19:43:34 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll 
[2010.12.16 19:43:34 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll 
[2010.12.16 19:43:34 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll 
[2010.12.16 19:43:34 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll 
[2010.12.16 19:43:34 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe 
[2010.12.16 19:43:34 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll 
[2010.12.16 19:43:34 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe 
[2010.12.16 19:43:34 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe 
[2010.12.16 19:43:24 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll 
[2010.12.16 19:43:24 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll 
[2010.12.16 19:43:24 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll 
[2010.12.16 19:43:24 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll 
[2010.12.16 19:43:13 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll 
[2010.12.16 19:43:13 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll 
[2010.12.16 19:43:13 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe 
[2010.12.16 19:43:07 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll 
[2010.12.16 19:43:06 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll 
[2010.12.16 19:43:06 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec 
[2010.12.16 19:43:06 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec 
[2010.12.16 19:43:06 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll 
[2010.12.16 19:43:06 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll 
[2010.12.16 19:43:06 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll 
[2010.12.16 19:43:06 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll 
[2010.12.16 19:43:06 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll 
[2010.12.16 19:43:06 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll 
[2010.12.16 19:43:06 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll 
[2010.12.16 19:43:06 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll 
[2010.12.16 19:43:06 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe 
[2010.12.16 19:43:06 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe 
[2010.12.16 15:55:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\windows 
[2010.12.12 17:53:29 | 000,000,000 | ---D | C] -- C:\Users\Celli22\Desktop\372677001-908-321402-5d58663a7f08aa5d0a7e7a8e21f03c26-Dateien 
[2010.11.30 21:17:59 | 000,000,000 | ---D | C] -- C:\Program Files\dl_cats 
[2010.11.30 21:17:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dell 
[2010.11.30 21:17:39 | 000,000,000 | ---D | C] -- C:\Program Files\Dell Photo AIO Printer 926 
[2010.11.30 21:17:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dell Photo AIO Printer 926 
[2010.11.30 21:17:35 | 000,983,107 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dlcxgf.dll 
[2010.11.30 21:17:35 | 000,643,072 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxpmui.dll 
[2010.11.30 21:17:35 | 000,413,696 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxinpa.dll 
[2010.11.30 21:17:35 | 000,397,312 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxiesc.dll 
[2010.11.30 21:17:34 | 001,224,704 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxserv.dll 
[2010.11.30 21:17:34 | 000,991,232 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxusb1.dll 
[2010.11.30 21:17:34 | 000,696,320 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxhbn3.dll 
[2010.11.30 21:17:34 | 000,684,032 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxcomc.dll 
[2010.11.30 21:17:34 | 000,585,728 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxlmpm.dll 
[2010.11.30 21:17:34 | 000,532,480 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxcoms.exe 
[2010.11.30 21:17:34 | 000,421,888 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxcomm.dll 
[2010.11.30 21:17:34 | 000,381,832 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxcfg.exe 
[2010.11.30 21:17:34 | 000,380,928 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxih.exe 
[2010.11.30 21:17:34 | 000,176,128 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxppls.exe 
[2010.11.30 21:17:34 | 000,163,840 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxprox.dll 
[2010.11.30 21:17:34 | 000,094,208 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxpplc.dll 
[2010.11.30 21:17:24 | 001,417,728 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxserv.dll 
[2010.11.30 21:17:24 | 001,099,264 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxusb1.dll 
[2010.11.30 21:17:24 | 000,487,424 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxlmpm.dll 
[2010.11.30 21:17:24 | 000,409,600 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxpmui.dll 
[2010.11.30 21:17:24 | 000,305,152 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxhcp.dll 
[2010.11.30 21:17:24 | 000,238,592 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxinpa.dll 
[2010.11.30 21:17:24 | 000,228,352 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxih.exe 
[2010.11.30 21:17:24 | 000,226,816 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxiesc.dll 
[2010.11.30 21:17:24 | 000,035,328 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxprox.dll 
[2010.11.30 21:17:24 | 000,010,752 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxpplc.dll 
[2010.11.30 21:17:23 | 000,983,107 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dlcxgf.dll 
[2010.11.30 21:17:23 | 000,695,808 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxcomc.dll 
[2010.11.30 21:17:23 | 000,659,456 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxhbn3.dll 
[2010.11.30 21:17:23 | 000,561,152 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxcoms.exe 
[2010.11.30 21:17:23 | 000,249,856 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxcomm.dll 
[2010.11.30 21:17:23 | 000,235,912 | ---- | C] ( ) -- C:\Windows\SysNative\dlcxcfg.exe 
[2010.11.30 20:50:49 | 000,000,000 | ---D | C] -- C:\dell 
[2010.11.29 17:12:15 | 000,076,912 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\L1C62x64.sys 
[2010.11.29 17:11:27 | 000,000,000 | ---D | C] -- C:\Users\Celli22\AppData\Roaming\Download Manager 
[2010.11.28 14:13:54 | 000,000,000 | ---D | C] -- C:\Users\Celli22\AppData\Local\PokerStrategy 
[2010.11.28 13:15:46 | 000,000,000 | ---D | C] -- C:\Users\Celli22\AppData\Local\Equilator 
[2010.11.28 13:15:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PokerStrategy.com 
[2010.11.26 22:44:01 | 000,000,000 | ---D | C] -- C:\ProgramData\WEBREG 
[2010.11.26 22:44:01 | 000,000,000 | ---D | C] -- C:\Users\Celli22\AppData\Roaming\HP 
[2010.11.26 22:42:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard 
[2010.11.26 22:39:47 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant 
[2010.11.26 22:39:30 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool 
[2010.11.26 22:38:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\HP 
[2010.11.26 22:38:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Hewlett-Packard 
[2010.11.26 22:37:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP 
[2010.11.26 22:37:45 | 000,000,000 | -H-D | C] -- C:\Config.Msi 
[2010.11.26 22:36:59 | 000,000,000 | ---D | C] -- C:\ProgramData\HP 
[2010.11.26 22:36:53 | 000,938,496 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpowiax5.dll 
[2010.11.26 22:36:53 | 000,540,672 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hppldcoi.dll 
[2010.11.26 22:36:53 | 000,505,344 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\SysNative\hpovst12.dll 
[2010.11.26 22:36:52 | 001,403,904 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\SysNative\hpotiop5.dll 
[2010.11.22 19:35:31 | 000,000,000 | ---D | C] -- C:\Users\Celli22\Desktop\Neuer Ordner (3) 
   ========== Files - Modified Within 30 Days ========== 
  
[2010.12.22 14:35:39 | 005,764,430 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI 
[2010.12.22 14:35:39 | 000,686,904 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat 
[2010.12.22 14:35:39 | 000,684,260 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat 
[2010.12.22 14:35:39 | 000,682,914 | ---- | M] () -- C:\Windows\SysNative\perfh010.dat 
[2010.12.22 14:35:39 | 000,672,988 | ---- | M] () -- C:\Windows\SysNative\prfh0816.dat 
[2010.12.22 14:35:39 | 000,647,376 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat 
[2010.12.22 14:35:39 | 000,610,094 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat 
[2010.12.22 14:35:39 | 000,544,056 | ---- | M] () -- C:\Windows\SysNative\perfh008.dat 
[2010.12.22 14:35:39 | 000,349,578 | ---- | M] () -- C:\Windows\SysNative\perfh00D.dat 
[2010.12.22 14:35:39 | 000,134,548 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat 
[2010.12.22 14:35:39 | 000,131,430 | ---- | M] () -- C:\Windows\SysNative\prfc0816.dat 
[2010.12.22 14:35:39 | 000,130,452 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat 
[2010.12.22 14:35:39 | 000,127,404 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat 
[2010.12.22 14:35:39 | 000,124,850 | ---- | M] () -- C:\Windows\SysNative\perfc010.dat 
[2010.12.22 14:35:39 | 000,104,412 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat 
[2010.12.22 14:35:39 | 000,086,764 | ---- | M] () -- C:\Windows\SysNative\perfc008.dat 
[2010.12.22 14:35:39 | 000,067,118 | ---- | M] () -- C:\Windows\SysNative\perfc00D.dat 
[2010.12.22 13:40:00 | 000,001,122 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job 
[2010.12.22 13:21:52 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 
[2010.12.22 13:21:52 | 000,010,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 
[2010.12.22 13:15:57 | 000,002,454 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini 
[2010.12.22 13:15:50 | 000,001,118 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job 
[2010.12.22 13:14:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat 
[2010.12.22 13:14:29 | 2088,144,895 | -HS- | M] () -- C:\hiberfil.sys 
[2010.12.22 13:13:53 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\Access.dat 
[2010.12.22 12:35:31 | 531,989,384 | ---- | M] () -- C:\Windows\MEMORY.DMP 
[2010.12.19 17:57:31 | 000,215,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr 
[2010.12.19 17:57:31 | 000,215,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe 
[2010.12.18 15:04:04 | 000,450,032 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT 
[2010.12.18 15:02:22 | 000,000,935 | ---- | M] () -- C:\Users\Public\Desktop\Tunngle beta.lnk 
[2010.12.17 20:22:44 | 000,000,118 | ---- | M] () -- C:\Windows\SysNative\MRT.INI 
[2010.12.12 17:53:29 | 000,005,561 | ---- | M] () -- C:\Users\Celli22\Desktop\372677001-908-321402-5d58663a7f08aa5d0a7e7a8e21f03c26.html 
[2010.12.01 08:50:27 | 000,001,404 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini 
[2010.11.30 21:22:32 | 000,017,952 | ---- | M] () -- C:\Windows\SysNative\LexFiles.ulf 
[2010.11.29 17:42:18 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys 
[2010.11.29 17:42:06 | 000,024,152 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys 
[2010.11.28 13:15:10 | 000,002,287 | ---- | M] () -- C:\Users\Public\Desktop\PokerStrategy.com Equilator.lnk 
[2010.11.26 22:43:50 | 000,234,884 | ---- | M] () -- C:\Windows\hpoins21.dat 
[2010.11.26 22:39:25 | 000,002,101 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk 
[2010.11.22 19:37:14 | 000,083,120 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys 
   ========== Files Created - No Company Name ========== 
  
[2010.12.22 12:35:31 | 531,989,384 | ---- | C] () -- C:\Windows\MEMORY.DMP 
[2010.12.18 15:02:22 | 000,000,935 | ---- | C] () -- C:\Users\Public\Desktop\Tunngle beta.lnk 
[2010.12.17 20:22:44 | 000,000,118 | ---- | C] () -- C:\Windows\SysNative\MRT.INI 
[2010.12.12 17:53:29 | 000,005,561 | ---- | C] () -- C:\Users\Celli22\Desktop\372677001-908-321402-5d58663a7f08aa5d0a7e7a8e21f03c26.html 
[2010.11.30 21:17:35 | 000,532,462 | ---- | C] () -- C:\Windows\SysWow64\dlcxhelp.chm 
[2010.11.30 21:17:35 | 000,454,656 | ---- | C] () -- C:\Windows\SysWow64\dlcxutil.dll 
[2010.11.30 21:17:35 | 000,274,432 | ---- | C] () -- C:\Windows\SysWow64\dlcxinst.dll 
[2010.11.30 21:17:35 | 000,176,128 | ---- | C] () -- C:\Windows\SysWow64\dlcxinsb.dll 
[2010.11.30 21:17:35 | 000,176,128 | ---- | C] () -- C:\Windows\SysWow64\dlcxins.dll 
[2010.11.30 21:17:35 | 000,139,264 | ---- | C] () -- C:\Windows\SysWow64\dlcxjswr.dll 
[2010.11.30 21:17:35 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\dlcxinsr.dll 
[2010.11.30 21:17:35 | 000,086,016 | ---- | C] () -- C:\Windows\SysWow64\dlcxcub.dll 
[2010.11.30 21:17:35 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\dlcxcu.dll 
[2010.11.30 21:17:35 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\dlcxcur.dll 
[2010.11.30 21:17:34 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\DLCXcfg.dll 
[2010.11.30 21:17:34 | 000,001,840 | ---- | C] () -- C:\Windows\SysWow64\dlcx.loc 
[2010.11.30 21:17:24 | 000,642,560 | ---- | C] () -- C:\Windows\SysNative\dlcxutil.dll 
[2010.11.30 21:17:24 | 000,532,462 | ---- | C] () -- C:\Windows\SysNative\dlcxhelp.chm 
[2010.11.30 21:17:24 | 000,235,008 | ---- | C] () -- C:\Windows\SysNative\dlcxins.dll 
[2010.11.30 21:17:24 | 000,194,048 | ---- | C] () -- C:\Windows\SysNative\dlcxinst.dll 
[2010.11.30 21:17:24 | 000,158,208 | ---- | C] () -- C:\Windows\SysNative\dlcxinsb.dll 
[2010.11.30 21:17:24 | 000,122,368 | ---- | C] () -- C:\Windows\SysNative\dlcxjswr.dll 
[2010.11.30 21:17:24 | 000,090,112 | ---- | C] () -- C:\Windows\SysNative\dlcxinsr.dll 
[2010.11.30 21:17:23 | 000,256,512 | ---- | C] () -- C:\Windows\SysNative\dlcxgrd.dll 
[2010.11.30 21:17:23 | 000,095,744 | ---- | C] () -- C:\Windows\SysNative\dlcxcu.dll 
[2010.11.30 21:17:23 | 000,068,096 | ---- | C] () -- C:\Windows\SysNative\dlcxcub.dll 
[2010.11.30 21:17:23 | 000,064,000 | ---- | C] () -- C:\Windows\SysNative\DLCXcfg.dll 
[2010.11.30 21:17:23 | 000,022,016 | ---- | C] () -- C:\Windows\SysNative\dlcxcur.dll 
[2010.11.30 21:17:23 | 000,017,952 | ---- | C] () -- C:\Windows\SysNative\LexFiles.ulf 
[2010.11.30 21:17:23 | 000,001,840 | ---- | C] () -- C:\Windows\SysNative\dlcx.loc 
[2010.11.30 20:50:51 | 000,732,160 | ---- | C] () -- C:\Windows\SysNative\dlcxdrs.dll 
[2010.11.30 20:50:51 | 000,054,784 | ---- | C] () -- C:\Windows\SysNative\dlcxcnv4.dll 
[2010.11.30 20:50:51 | 000,024,576 | ---- | C] () -- C:\Windows\SysNative\dlcxcaps.dll 
[2010.11.28 13:15:10 | 000,002,287 | ---- | C] () -- C:\Users\Public\Desktop\PokerStrategy.com Equilator.lnk 
[2010.11.26 22:39:25 | 000,002,101 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk 
[2010.11.26 22:37:05 | 000,234,884 | ---- | C] () -- C:\Windows\hpoins21.dat 
[2010.11.26 22:37:05 | 000,005,474 | ---- | C] () -- C:\Windows\hpomdl21.dat 
[2010.11.26 22:37:05 | 000,000,836 | ---- | C] () -- C:\ProgramData\hpzinstall.log 
[2010.09.12 19:51:34 | 005,813,720 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI 
[2010.05.28 16:49:01 | 000,000,000 | ---- | C] () -- C:\Windows\HMHud.INI 
[2010.05.28 16:45:24 | 000,067,638 | ---- | C] () -- C:\Program Files (x86)\hminstalllog.txt 
[2010.05.18 17:53:24 | 000,000,026 | ---- | C] () -- C:\Windows\neosetup.INI 
[2010.03.24 13:41:23 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\LogonStart.dll 
[2010.03.24 13:39:02 | 000,000,735 | ---- | C] () -- C:\Windows\FF05_Render_Spk_Hp.ini 
[2010.03.24 13:39:02 | 000,000,508 | ---- | C] () -- C:\Windows\FF05_not_Spk_Hp.ini 
[2010.03.24 13:36:46 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL 
[2010.03.24 13:36:46 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL 
[2010.03.24 13:23:12 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe 
[2010.03.24 12:58:50 | 000,000,105 | ---- | C] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 
[2010.03.24 12:58:33 | 000,000,107 | ---- | C] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log 
[2009.08.19 09:33:09 | 000,000,035 | ---- | C] () -- C:\Windows\OOBEPlayer.ini 
[2009.07.29 06:20:40 | 000,000,010 | ---- | C] () -- C:\Windows\SysWow64\ABLKSR.ini 
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll 
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll 
[2008.12.02 02:32:32 | 000,362,029 | ---- | C] () -- C:\Windows\SysWow64\sqlite3.dll 
   ========== LOP Check ========== 
  
[2010.05.09 19:19:09 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Asus WebStorage 
[2010.12.17 20:47:47 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Avise 
[2010.09.24 21:28:36 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\B3724E9D4C919B44D4DD89EA449BE980 
[2010.08.31 20:56:10 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\DAEMON Tools Lite 
[2010.07.06 10:54:03 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\DVDVideoSoftIEHelpers 
[2010.12.22 14:32:51 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\EBAF99D05735C065BDB2E051F2A06490 
[2010.12.22 14:32:51 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Emno 
[2010.12.22 13:41:13 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Fuwoh 
[2010.12.21 19:57:08 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\ICQ 
[2010.12.22 13:42:26 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Ihfawu 
[2010.07.19 20:22:34 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\LolClient 
[2010.12.22 14:32:51 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Obaphe 
[2010.07.14 20:02:31 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\STV Software 
[2010.08.06 13:39:19 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\TS3Client 
[2010.12.21 19:59:34 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Tunngle 
[2010.12.17 21:14:09 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Wawac 
[2010.11.13 09:11:28 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT 
   ========== Purity Check ========== 
  
  
   ========== Custom Scans ========== 
  
   < %ALLUSERSPROFILE%\Application Data\*. > 
   < %ALLUSERSPROFILE%\Application Data\*.exe /s > 
   < %APPDATA%\*. > 
[2010.07.19 19:37:10 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Adobe 
[2010.05.09 19:19:09 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Asus WebStorage 
[2010.05.09 19:12:00 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\ATI 
[2010.05.12 17:57:45 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Avira 
[2010.12.17 20:47:47 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Avise 
[2010.09.24 21:28:36 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\B3724E9D4C919B44D4DD89EA449BE980 
[2010.07.07 08:48:26 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Creative 
[2010.08.19 13:41:21 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\CyberLink 
[2010.08.31 20:56:10 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\DAEMON Tools Lite 
[2010.11.29 17:12:04 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Download Manager 
[2010.09.01 00:24:49 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\dvdcss 
[2010.07.06 10:54:03 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\DVDVideoSoftIEHelpers 
[2010.12.22 14:32:51 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\EBAF99D05735C065BDB2E051F2A06490 
[2010.12.22 14:32:51 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Emno 
[2010.12.22 13:41:13 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Fuwoh 
[2010.11.26 22:44:13 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\HP 
[2010.12.21 19:57:08 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\ICQ 
[2010.05.09 19:11:29 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Identities 
[2010.12.22 13:42:26 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Ihfawu 
[2010.07.19 20:22:34 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\LolClient 
[2010.05.09 19:16:13 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Macromedia 
[2010.05.28 16:23:55 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Malwarebytes 
[2009.07.14 08:44:38 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Media Center Programs 
[2010.11.28 14:13:54 | 000,000,000 | --SD | M] -- C:\Users\Celli22\AppData\Roaming\Microsoft 
[2010.05.09 19:21:38 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Mozilla 
[2010.10.31 11:21:09 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Mozilla-Cache 
[2010.12.22 14:32:51 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Obaphe 
[2010.07.20 19:34:12 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Skype 
[2010.07.20 10:08:10 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\skypePM 
[2010.07.14 20:02:31 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\STV Software 
[2010.08.06 13:39:19 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\TS3Client 
[2010.12.21 19:59:34 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Tunngle 
[2010.12.20 23:48:14 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\vlc 
[2010.12.17 21:14:09 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\Wawac 
[2010.05.12 08:16:03 | 000,000,000 | ---D | M] -- C:\Users\Celli22\AppData\Roaming\WinRAR 
   < %APPDATA%\*.exe /s > 
[2010.11.10 19:35:34 | 000,388,096 | R--- | M] (Trend Micro Inc.) -- C:\Users\Celli22\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 
   < %SYSTEMDRIVE%\*.exe > 
  
   < MD5 for: AGP440.SYS  > 
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys 
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys 
   < MD5 for: ATAPI.SYS  > 
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys 
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys 
   < MD5 for: CNGAUDIT.DLL  > 
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll 
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll 
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll 
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll 
   < MD5 for: EXPLORER.EXE  > 
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe 
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe 
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe 
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe 
[2010.03.24 13:12:05 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe 
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\explorer.exe 
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe 
[2010.07.21 20:08:12 | 000,363,520 | ---- | M] () MD5=9FAAB868CD5E13205758F8CAFCD7D9FA -- C:\Users\Celli22\Desktop\entfernen\eXplorer.exe 
[2010.03.24 13:12:05 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe 
[2009.10.31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe 
[2010.03.24 13:12:05 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe 
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe 
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe 
[2010.03.24 13:12:05 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe 
   < MD5 for: IASTOR.SYS  > 
[2009.08.06 22:24:13 | 000,408,600 | ---- | M] (Intel Corporation) MD5=BBB3B6DF1ABB0FE35802EDE85CC1C011 -- C:\Windows\SysWow64\DriverStore\FileRepository\iaahci.inf_amd64_neutral_4fa22a1c88c09097\iaStor.sys 
[2009.08.06 22:24:13 | 000,408,600 | ---- | M] (Intel Corporation) MD5=BBB3B6DF1ABB0FE35802EDE85CC1C011 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastor.inf_amd64_neutral_9071cf01e963be0e\iaStor.sys 
   < MD5 for: IASTORV.SYS  > 
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys 
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys 
   < MD5 for: NETLOGON.DLL  > 
[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll 
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll 
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll 
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll 
   < MD5 for: NVSTOR.SYS  > 
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys 
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys 
   < MD5 for: SCECLI.DLL  > 
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll 
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll 
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll 
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll 
   < MD5 for: USER32.DLL  > 
[2009.07.14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll 
[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\SysWOW64\user32.dll 
[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\SysWOW64\user32.dll 
[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll 
   < MD5 for: USERINIT.EXE  > 
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe 
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe 
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe 
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe 
   < MD5 for: WINLOGON.EXE  > 
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe 
[2009.10.28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe 
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe 
   < MD5 for: WS2IFSL.SYS  > 
[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys 
   < %systemroot%\system32\drivers\*.sys /lockedfiles > 
   < %systemroot%\System32\config\*.sav > 
   < %systemroot%\*. /mp /s > 
   < %systemroot%\system32\*.dll /lockedfiles >   
< End of report >   extras.txt   Code:  
 OTL Extras logfile created on: 22.12.2010 14:36:32 - Run 3 
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Users\Celli22\Downloads 
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation 
Internet Explorer (Version = 8.0.7600.16385) 
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 
  
8,00 Gb Total Physical Memory | 5,00 Gb Available Physical Memory | 65,00% Memory free 
16,00 Gb Paging File | 13,00 Gb Available in Paging File | 80,00% Paging File free 
Paging file location(s): ?:\pagefile.sys [binary data] 
  
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) 
Drive C: | 116,44 Gb Total Space | 36,17 Gb Free Space | 31,07% Space Free | Partition Type: NTFS 
Drive D: | 329,79 Gb Total Space | 117,68 Gb Free Space | 35,68% Space Free | Partition Type: NTFS 
Drive E: | 5,40 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS 
Drive F: | 232,88 Gb Total Space | 231,37 Gb Free Space | 99,35% Space Free | Partition Type: NTFS 
Drive G: | 232,88 Gb Total Space | 232,78 Gb Free Space | 99,96% Space Free | Partition Type: NTFS 
Drive I: | 960,72 Mb Total Space | 909,64 Mb Free Space | 94,68% Space Free | Partition Type: FAT 
  
Computer Name: CELLIN22 | User Name: Celli22 | Logged in as Administrator. 
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans 
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days 
   ========== Extra Registry (SafeList) ========== 
  
   ========== File Associations ========== 
   64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] 
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) 
  
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] 
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) 
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) 
  
[HKEY_USERS\S-1-5-21-2416166752-3120119939-1990265985-1001\SOFTWARE\Classes\<extension>] 
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) 
   ========== Shell Spawning ========== 
   64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] 
batfile [open] -- "%1" %* File not found 
cmdfile [open] -- "%1" %* File not found 
comfile [open] -- "%1" %* File not found 
exefile [open] -- "%1" %* File not found 
helpfile [open] -- Reg Error: Key error. 
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) 
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) 
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) 
piffile [open] -- "%1" %* File not found 
regfile [merge] -- Reg Error: Key error. 
scrfile [config] -- "%1" File not found 
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) 
scrfile [open] -- "%1" /S File not found 
txtfile [edit] -- Reg Error: Key error. 
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found 
Directory [AddToPlaylistVLC] -- "D:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () 
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) 
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) 
Directory [PlayWithVLC] -- "D:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () 
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) 
Folder [explore] -- Reg Error: Value error. 
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) 
  
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] 
batfile [open] -- "%1" %* 
cmdfile [open] -- "%1" %* 
comfile [open] -- "%1" %* 
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) 
exefile [open] -- "%1" %* 
helpfile [open] -- Reg Error: Key error. 
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) 
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) 
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) 
piffile [open] -- "%1" %* 
regfile [merge] -- Reg Error: Key error. 
scrfile [config] -- "%1" 
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) 
scrfile [open] -- "%1" /S 
txtfile [edit] -- Reg Error: Key error. 
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 
Directory [AddToPlaylistVLC] -- "D:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () 
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) 
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) 
Directory [PlayWithVLC] -- "D:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () 
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) 
Folder [explore] -- Reg Error: Value error. 
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) 
   ========== Security Center Settings ========== 
   64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] 
"cval" = 1 
"AutoUpdateDisableNotify" = 1 
   64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 
   64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] 
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data] 
"AntiVirusOverride" = 0 
"AntiSpywareOverride" = 0 
"FirewallOverride" = 0 
   64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] 
  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] 
  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] 
   ========== Firewall Settings ========== 
  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] 
"DisableNotifications" = 0 
"EnableFirewall" = 0 
  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 
"DisableNotifications" = 0 
"EnableFirewall" = 0 
  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] 
"DisableNotifications" = 0 
"EnableFirewall" = 0 
   ========== Authorized Applications List ========== 
  
   ========== HKEY_LOCAL_MACHINE Uninstall List ========== 
  
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] 
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64 
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot 
"{3768263E-8BE8-4CEF-9463-6D36F731824B}" = Windows Live Family Safety 
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel(R) Turbo Boost Technology Monitor 
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 
"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer 
"{90120000-0028-0404-1000-0000000FF1CE}" = Microsoft Office IME (Chinese (Traditional)) 2007 
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 
"{90120000-002A-0404-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Chinese (Traditional)) 2007 
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007 
"{90120000-002A-0408-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Greek) 2007 
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007 
"{90120000-002A-040C-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (French) 2007 
"{90120000-002A-040D-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Hebrew) 2007 
"{90120000-002A-0410-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Italian) 2007 
"{90120000-002A-0413-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Dutch) 2007 
"{90120000-002A-0816-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Portuguese (Portugal)) 2007 
"{90120000-002A-0C0A-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Spanish) 2007 
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 
"{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}" = ASUS Power4Gear Hybrid 
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting 
"{988329F4-A1A1-4D51-803C-EF2725A97627}" = HP Photosmart All-In-One Driver Software 13.0 Rel. 2 
"{AF81FB63-8419-35A3-D9B1-BAFB441C81DE}" = ccc-utility64 
"{F634E9C2-5D00-3A4B-5AB0-148C431BBDD5}" = ATI AVIVO64 Codecs 
"{F8597D20-ACC7-FD03-56FA-23894108BA06}" = ATI Catalyst Install Manager 
"ASUS WebStorage" = ASUS WebStorage 
"Dell Photo AIO Printer 926" = Dell Photo AIO Printer 926 
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0 
"HP Photosmart Essential" = HP Photosmart Essential 3.5 
"HP Smart Web Printing" = HP Smart Web Printing 4.51 
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0 
"HPExtendedCapabilities" = HP Customer Participation Program 13.0 
"HPOCR" = OCR Software by I.R.I.S. 13.0 
"Shop for HP Supplies" = Shop for HP Supplies 
"SynTPDeinstKey" = Synaptics Pointing Device Driver 
"TeamSpeak 3 Client" = TeamSpeak 3 Client 
"USB 2.0 2.0M UVC WebCam" = USB 2.0 2.0M UVC WebCam 
"WinRAR archiver" = WinRAR 
  
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] 
"{045A9539-37B6-464D-94F9-E4ADFA856903}" = PokerStrategy.com Equilator 
"{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}" = ASUS AI Recovery 
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology 
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status 
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan 
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch 
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer 
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3 
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp 
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool 
"{20EFC9AA-BBC1-4DFD-81FF-99654F71CBF8}" = HPPhotoSmartDiscLabel_PrintOnDisc 
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3 
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT 
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer 
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17 
"{2822F016-69E9-A368-B612-685CCF4A9B83}" = CCC Help English 
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010 
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com 
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart 
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm 
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery 
"{38F8D823-008D-4E5A-BBCE-867A86C2BF2B}" = Sound Blaster Audigy HD 
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2 
"{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy 
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX 
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go 
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg 
"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax 
"{44B4C2E3-D570-16B4-8CED-3D83AAF5D6F7}" = Catalyst Control Center Localization All 
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis 
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter 
"{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}" = Junk Mail filter update 
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack 
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport 
"{4ECC1D06-672F-2935-E570-CA2D210AE0CE}" = Catalyst Control Center InstallProxy 
"{566BAEC0-74CB-4ACC-9E18-8779AC974FB0}" = Windows Live Toolbar 
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3 
"{5A166C0B-9557-4364-A057-F946D674E6AC}" = Windows Live Mail 
"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck 
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2 
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon 
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components 
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites 
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1 
"{685B0843-6C8D-4E42-B60D-2B86B45526E0}" = PS_AIO_02_Software_Min 
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin 
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply 
"{6B96DADA-1A27-4A04-8CB2-CC45168D05FA}" = Windows Live Fotogalerie 
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox 
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update 
"{71BFC818-0CED-42D6-9C87-5142918957EE}" = ICQ7.1 
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable 
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 
"{81821BF8-DA20-4F8C-AA87-F70A274828D4}" = Windows Live Writer 
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}" = Chicken Invaders 2 
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers 
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115233673}" = Dream Day Wedding Married in Manhattan 
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-1173957}" = Piggly FREE 
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117396510}" = Smileyville FREE 
"{835686C5-8650-49EB-8CA0-4528B4035495}" = Windows Live Call 
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable 
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger 
"{83A606F5-BF6F-42ED-9F33-B9F74297CDED}" = Need for Speed(TM) Hot Pursuit 
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent 
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight 
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86) 
"{8C1E2925-14F8-45AA-B999-1E2A74BF5607}" = Windows Live Sync 
"{8D7CCD59-BEBB-57D4-23EC-B9A9DB173EAA}" = Catalyst Control Center Graphics Previews Vista 
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash 
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard 
"{90120000-0015-0404-0000-0000000FF1CE}" = Microsoft Office Access MUI (Chinese (Traditional)) 2007 
"{90120000-0015-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007 
"{90120000-0015-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0015-0408-0000-0000000FF1CE}" = Microsoft Office Access MUI (Greek) 2007 
"{90120000-0015-0408-0000-0000000FF1CE}_PROHYBRIDR_{C913F31D-FF3E-47F6-95E6-7E417D37A76E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007 
"{90120000-0015-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007 
"{90120000-0015-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0015-040D-0000-0000000FF1CE}" = Microsoft Office Access MUI (Hebrew) 2007 
"{90120000-0015-040D-0000-0000000FF1CE}_PROHYBRIDR_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0015-0410-0000-0000000FF1CE}" = Microsoft Office Access MUI (Italian) 2007 
"{90120000-0015-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0015-0413-0000-0000000FF1CE}" = Microsoft Office Access MUI (Dutch) 2007 
"{90120000-0015-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0015-0816-0000-0000000FF1CE}" = Microsoft Office Access MUI (Portuguese (Portugal)) 2007 
"{90120000-0015-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0015-0C0A-0000-0000000FF1CE}" = Microsoft Office Access MUI (Spanish) 2007 
"{90120000-0015-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-0404-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Chinese (Traditional)) 2007 
"{90120000-0016-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007 
"{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-0408-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Greek) 2007 
"{90120000-0016-0408-0000-0000000FF1CE}_PROHYBRIDR_{C913F31D-FF3E-47F6-95E6-7E417D37A76E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007 
"{90120000-0016-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007 
"{90120000-0016-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-040D-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Hebrew) 2007 
"{90120000-0016-040D-0000-0000000FF1CE}_PROHYBRIDR_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-0410-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Italian) 2007 
"{90120000-0016-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-0413-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Dutch) 2007 
"{90120000-0016-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-0816-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Portuguese (Portugal)) 2007 
"{90120000-0016-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0016-0C0A-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Spanish) 2007 
"{90120000-0016-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-0404-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2007 
"{90120000-0018-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007 
"{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-0408-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Greek) 2007 
"{90120000-0018-0408-0000-0000000FF1CE}_PROHYBRIDR_{C913F31D-FF3E-47F6-95E6-7E417D37A76E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007 
"{90120000-0018-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007 
"{90120000-0018-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-040D-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Hebrew) 2007 
"{90120000-0018-040D-0000-0000000FF1CE}_PROHYBRIDR_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-0410-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Italian) 2007 
"{90120000-0018-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-0413-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Dutch) 2007 
"{90120000-0018-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-0816-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Portuguese (Portugal)) 2007 
"{90120000-0018-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0018-0C0A-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Spanish) 2007 
"{90120000-0018-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-0404-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Chinese (Traditional)) 2007 
"{90120000-0019-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007 
"{90120000-0019-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-0408-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Greek) 2007 
"{90120000-0019-0408-0000-0000000FF1CE}_PROHYBRIDR_{C913F31D-FF3E-47F6-95E6-7E417D37A76E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007 
"{90120000-0019-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007 
"{90120000-0019-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-040D-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Hebrew) 2007 
"{90120000-0019-040D-0000-0000000FF1CE}_PROHYBRIDR_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-0410-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Italian) 2007 
"{90120000-0019-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-0413-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Dutch) 2007 
"{90120000-0019-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-0816-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Portuguese (Portugal)) 2007 
"{90120000-0019-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0019-0C0A-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Spanish) 2007 
"{90120000-0019-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-0404-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Chinese (Traditional)) 2007 
"{90120000-001A-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007 
"{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-0408-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Greek) 2007 
"{90120000-001A-0408-0000-0000000FF1CE}_PROHYBRIDR_{C913F31D-FF3E-47F6-95E6-7E417D37A76E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007 
"{90120000-001A-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007 
"{90120000-001A-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-040D-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Hebrew) 2007 
"{90120000-001A-040D-0000-0000000FF1CE}_PROHYBRIDR_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-0410-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Italian) 2007 
"{90120000-001A-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-0413-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Dutch) 2007 
"{90120000-001A-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-0816-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Portuguese (Portugal)) 2007 
"{90120000-001A-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001A-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Spanish) 2007 
"{90120000-001A-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-0404-0000-0000000FF1CE}" = Microsoft Office Word MUI (Chinese (Traditional)) 2007 
"{90120000-001B-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007 
"{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-0408-0000-0000000FF1CE}" = Microsoft Office Word MUI (Greek) 2007 
"{90120000-001B-0408-0000-0000000FF1CE}_PROHYBRIDR_{C913F31D-FF3E-47F6-95E6-7E417D37A76E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007 
"{90120000-001B-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007 
"{90120000-001B-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-040D-0000-0000000FF1CE}" = Microsoft Office Word MUI (Hebrew) 2007 
"{90120000-001B-040D-0000-0000000FF1CE}_PROHYBRIDR_{A5B40B57-F7E1-4C88-A3A4-D1E1C07F023F}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-0410-0000-0000000FF1CE}" = Microsoft Office Word MUI (Italian) 2007 
"{90120000-001B-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-0413-0000-0000000FF1CE}" = Microsoft Office Word MUI (Dutch) 2007 
"{90120000-001B-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-0816-0000-0000000FF1CE}" = Microsoft Office Word MUI (Portuguese (Portugal)) 2007 
"{90120000-001B-0816-0000-0000000FF1CE}_PROHYBRIDR_{C2EC91A8-CC39-45F7-9E46-62B85ADF9DF5}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001B-0C0A-0000-0000000FF1CE}" = Microsoft Office Word MUI (Spanish) 2007 
"{90120000-001B-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007 
"{90120000-001F-0401-0000-0000000FF1CE}_PROHYBRIDR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0403-0000-0000000FF1CE}" = Microsoft Office Proof (Catalan) 2007 
"{90120000-001F-0403-0000-0000000FF1CE}_PROHYBRIDR_{4B47C31E-46B0-462B-BEE4-DC383B6A1F2A}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0404-0000-0000000FF1CE}" = Microsoft Office Proof (Chinese (Traditional)) 2007 
"{90120000-001F-0404-0000-0000000FF1CE}_PROHYBRIDR_{33FA7680-10ED-444E-BC72-214064317283}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0408-0000-0000000FF1CE}" = Microsoft Office Proof (Greek) 2007 
"{90120000-001F-0408-0000-0000000FF1CE}_PROHYBRIDR_{3C7DCB2F-8EA1-4558-B8F5-1107C4055A0B}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 
"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-040D-0000-0000000FF1CE}" = Microsoft Office Proof (Hebrew) 2007 
"{90120000-001F-040D-0000-0000000FF1CE}_PROHYBRIDR_{D51DB996-6D46-4195-B495-5E96F61A3CB9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007 
"{90120000-001F-0410-0000-0000000FF1CE}_PROHYBRIDR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007 
"{90120000-001F-0413-0000-0000000FF1CE}_PROHYBRIDR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007 
"{90120000-001F-0416-0000-0000000FF1CE}_PROHYBRIDR_{75EBE365-7FC5-4720-A7D3-804BF550D1BC}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0419-0000-0000000FF1CE}" = Microsoft Office Proof (Russian) 2007 
"{90120000-001F-0419-0000-0000000FF1CE}_PROHYBRIDR_{57A92C5E-E76A-49CC-9EC2-A7B6CE1255EA}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-042D-0000-0000000FF1CE}" = Microsoft Office Proof (Basque) 2007 
"{90120000-001F-0456-0000-0000000FF1CE}" = Microsoft Office Proof (Galician) 2007 
"{90120000-001F-0816-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Portugal)) 2007 
"{90120000-001F-0816-0000-0000000FF1CE}_PROHYBRIDR_{C312E1CD-EC19-4270-A072-F36F634DFF79}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) 
"{90120000-0028-0404-0000-0000000FF1CE}" = Microsoft Office IME (Chinese (Traditional)) 2007 
"{90120000-0028-0404-0000-0000000FF1CE}_PROHYBRIDR_{5E6C6E79-40BE-491B-9ABF-C665667E1B07}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0028-0404-1000-0000000FF1CE}_PROHYBRIDR_{1252D255-DB26-4F85-9F0F-D59B9DFE339E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-0000-1000-0000000FF1CE}_PROHYBRIDR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-0404-1000-0000000FF1CE}_PROHYBRIDR_{3F96DD0A-F509-4CBD-8130-B3B3194A9C3D}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-0407-1000-0000000FF1CE}_PROHYBRIDR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-0408-1000-0000000FF1CE}_PROHYBRIDR_{E3B92295-785F-4FF7-8BE1-67E86F5F8140}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-0409-1000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-040C-1000-0000000FF1CE}_PROHYBRIDR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-040D-1000-0000000FF1CE}_PROHYBRIDR_{C4FDF834-B4AF-4B5E-8901-5146204B58CC}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-0410-1000-0000000FF1CE}_PROHYBRIDR_{0A75DA12-55CB-4DE5-8B6A-74D97847204E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-0413-1000-0000000FF1CE}_PROHYBRIDR_{89C8E56A-90D8-4598-B0E6-EB28F6270E07}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-0816-1000-0000000FF1CE}_PROHYBRIDR_{A8523DA4-5563-4F0E-BD9D-4E4CC3CF7239}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002A-0C0A-1000-0000000FF1CE}_PROHYBRIDR_{6113C11D-BACA-4D8E-8002-03C8D06FD5E6}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-002C-0404-0000-0000000FF1CE}" = Microsoft Office Proofing (Chinese (Traditional)) 2007 
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007 
"{90120000-002C-0408-0000-0000000FF1CE}" = Microsoft Office Proofing (Greek) 2007 
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007 
"{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007 
"{90120000-002C-040D-0000-0000000FF1CE}" = Microsoft Office Proofing (Hebrew) 2007 
"{90120000-002C-0410-0000-0000000FF1CE}" = Microsoft Office Proofing (Italian) 2007 
"{90120000-002C-0413-0000-0000000FF1CE}" = Microsoft Office Proofing (Dutch) 2007 
"{90120000-002C-0816-0000-0000000FF1CE}" = Microsoft Office Proofing (Portuguese (Portugal)) 2007 
"{90120000-002C-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing (Spanish) 2007 
"{90120000-006E-0404-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Chinese (Traditional)) 2007 
"{90120000-006E-0404-0000-0000000FF1CE}_PROHYBRIDR_{3F96DD0A-F509-4CBD-8130-B3B3194A9C3D}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007 
"{90120000-006E-0407-0000-0000000FF1CE}_PROHYBRIDR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-006E-0408-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Greek) 2007 
"{90120000-006E-0408-0000-0000000FF1CE}_PROHYBRIDR_{E3B92295-785F-4FF7-8BE1-67E86F5F8140}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 
"{90120000-006E-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007 
"{90120000-006E-040C-0000-0000000FF1CE}_PROHYBRIDR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-006E-040D-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Hebrew) 2007 
"{90120000-006E-040D-0000-0000000FF1CE}_PROHYBRIDR_{C4FDF834-B4AF-4B5E-8901-5146204B58CC}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-006E-0410-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Italian) 2007 
"{90120000-006E-0410-0000-0000000FF1CE}_PROHYBRIDR_{0A75DA12-55CB-4DE5-8B6A-74D97847204E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-006E-0413-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Dutch) 2007 
"{90120000-006E-0413-0000-0000000FF1CE}_PROHYBRIDR_{89C8E56A-90D8-4598-B0E6-EB28F6270E07}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-006E-0816-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Portuguese (Portugal)) 2007 
"{90120000-006E-0816-0000-0000000FF1CE}_PROHYBRIDR_{A8523DA4-5563-4F0E-BD9D-4E4CC3CF7239}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-006E-0C0A-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Spanish) 2007 
"{90120000-006E-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{6113C11D-BACA-4D8E-8002-03C8D06FD5E6}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 
"{90120000-0115-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0116-0409-1000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007 
"{90120000-0117-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007 
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) 
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) 
"{94F8D42D-BB31-4858-9705-7D756D8D9655}" = PS_AIO_02_Software 
"{95120000-0120-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector 
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster 
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars 
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 
"{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}" = Counter-Strike 1.6 Final Release 
"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc 
"{a1f89c34-f061-447d-ac10-b5f1896a5923}" = C4380_Help 
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9 
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper 
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package 
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.1 MUI 
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR 
"{B28635AB-1DF3-4F07-BFEA-975D911B549B}" = hpphotosmartdisclabelplugin 
"{B3276CB1-20B6-4AF9-AAEC-E72C83816495}" = IKEA Home Planner 
"{B4B2096B-B13E-408E-8985-BD07463D5487}" = PS_AIO_02_ProductContext 
"{B5A5627C-0173-4DB2-ADA8-740479370F67}" = Express Gate 
"{B72E80DB-DF9B-DE1E-8899-CC74B6B9456A}" = Catalyst Control Center InstallProxy 
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86) 
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations 
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5 
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant 
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint 
"{C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1" = Game Park Console 
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget 
"{CB829D09-6426-F17D-C95D-303A6613A190}" = ccc-core-static 
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 
"{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}" = Full Tilt Poker 
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential 
"{D86B0E2E-DF9A-441C-AF77-8D1A0FF00FA6}" = AIO_Scan 
"{D9D8F2CF-FE2D-4644-9762-01F916FE90A9}" = HPPhotoSmartDiscLabel_PaperLabel 
"{DB8FCBE8-B9AE-455D-B9FE-55BB06F165CF}" = C4380 
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting 
"{DF5F687F-8018-4542-9F98-7084E9022917}" = Windows Live Essentials 
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update 
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera 
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] 
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver 
"{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader 
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform 
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites 
"Adobe AIR" = Adobe AIR 
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX 
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin 
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5 
"ASUS AP Bank_is1" = ASUS AP Bank 
"ASUS_Notebook_G73" = ASUS_Notebook_G73 Screen Saver 
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus 
"Blobby Volley 2.0 Alpha 6_is1" = Blobby Volley 2.0 Alpha 6 
"Carom3D" = Carom3D 
"CCleaner" = CCleaner 
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4 
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8 
"Google Chrome" = Google Chrome 
"HoldemManager" = Holdem Manager 
"InstallShield_{045A9539-37B6-464D-94F9-E4ADFA856903}" = PokerStrategy.com Equilator 
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go 
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9 
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint 
"InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader 
"JDownloader" = JDownloader 
"League of Legends_is1" = League of Legends 
"Mafia II_is1" = Mafia II 
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware 
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13) 
"PartyPoker" = PartyPoker 
"PokerStars.net" = PokerStars.net 
"PostgreSQL 8.4" = PostgreSQL 8.4 
"PROHYBRIDR" = 2007 Microsoft Office system 
"PunkBusterSvc" = PunkBuster Services 
"SensorsView Pro 3.2" = SensorsView Pro 3.2 
"SensorsView Pro 4.1" = SensorsView Pro 4.1 
"SopCast" = SopCast 3.2.9 
"Tunngle beta_is1" = Tunngle beta 
"Uninstall_is1" = Uninstall 1.0.0.1 
"VLC media player" = VLC media player 1.1.4 
"Warcraft III" = Warcraft III 
"Webcam Video Capture_is1" = Webcam Video Capture 4.8.0 
"WinLiveSuite_Wave3" = Windows Live Essentials 
   ========== HKEY_USERS Uninstall List ========== 
  
[HKEY_USERS\S-1-5-21-2416166752-3120119939-1990265985-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] 
"Warcraft III" = Warcraft III: All Products 
   ========== Last 10 Event Log Errors ========== 
  
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! 
  
< End of report >      |