Habe nach einer Virusmeldung lauter Systemmeldungen erhalten, das meine Platte abgeschmiert ist. Einige Desktopsymbole sind weg, ich kann auf praktisch nichts zugreifen und bin voll in Panik. Ich brauche hier ganz schnell Hilfe und an die Programme zum Posten der Logs weiß ich auch nicht mehr wie ich rankommen soll.

Okok, einiges geht doch noch. Aber es stockt alles, ich versuche zu posten, was ich kann.

Mist gerade Bluescreen und der Gmer-Scan ist hin und witzigerweise wohl auch das Programm, also alles von vorne. Ich bräuchte hier wirklich eine Nichtt-Standard variante.

Lasse gerade einen Gmer-Scan durchlaufen und das kann etwas dauern. Habe aber jetzt schon von anderen ähnliche Probleme gehört. Also Desktopsymbole verschwinden, Startmenü wird leer, Pseudo-Windowsfehlermeldungen über Festplatte und RAM. Geht da etwas um?

Bitte nun routinemäßig einen Vollscan mit Malwarebytes machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss! Außerdem müssen alle Funde entfernt werden.

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!



ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

 hier steht das Log
         

Mach ich, Chef :-)


Habe gestern schon ein langen Gmer-Scan gemacht. Kannst ja schon mal drüber gucken.

Hier erstmal der Malware-Bericht.

Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.02.03.06

Windows Vista Service Pack 2 x86 NTFS 

(Abgesichertenmodus/Netzwerkfähig)
Internet Explorer 9.0.8112.16421
Wolfi :: WOLFI-PC [Administrator]

03.02.2012 15:01:36
mbam-log-2012-02-03 (15-01-36).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | 

Registrierung | Dateisystem | Heuristiks/Extra | 

HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 693558
Laufzeit: 1 Stunde(n), 46 Minute(n), 19 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 3
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Adva

nced|Start_ShowMyComputer (PUM.Hijack.StartMenu) -> 

Bösartig: (0) Gut: (1) -> Erfolgreich ersetzt und in 

Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Adva

nced|Start_ShowSearch (PUM.Hijack.StartMenu) -> Bösartig: 

(0) Gut: (1) -> Erfolgreich ersetzt und in Quarantäne 

gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Syst

em|DisableTaskMgr (PUM.Hijack.TaskManager) -> Bösartig: (1) 

Gut: (0) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 5
C:\Users\Wolfi\AppData\Local\temp\jika0.7824183182430539.exe 

(Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne 

gestellt.
C:\Users\Wolfi\AppData\Local\temp\oleda0.194583403417541.exe 

(Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne 

gestellt.
C:\Users\Wolfi\AppData\Local\temp\~!#19BC.tmp 

(Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne 

gestellt.
C:\Users\Wolfi\AppData\LocalLow\Sun\Java\Deployment\cache\6.

0\27\79d99a9b-7aaebdb4 (Trojan.Agent) -> Erfolgreich 

gelöscht und in Quarantäne gestellt.
C:\Users\Wolfi\Downloads\SoftonicDownloader_fuer_total-

video-player.exe (PUP.BundleOffer.Downloader.S) -> 

Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Problem mit Eset: Wenn ich auf starten drücke, kriege ich nur "Can not get update. Is proxy configured? Bin gerade im abg. Modus mit Netzwerktreibern. Muss ich im Normalbetrieb sein?

Neuer Malware-Log! 2 Meldungen übrig.

Advanced|Start_ShowMyComputer (PUM.Hijack.StartMenu)
Advanced|Start_ShowSearch (PUM.Hijack.StartMenu)

Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.02.03.07

Windows Vista Service Pack 2 x86 NTFS (Abgesichertenmodus/Netzwerkfähig)
Internet Explorer 9.0.8112.16421
Wolfi :: WOLFI-PC [Administrator]

03.02.2012 17:22:25
mbam-log-2012-02-03 (17-22-25).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 693596
Laufzeit: 2 Stunde(n), 22 Minute(n), 9 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer (PUM.Hijack.StartMenu) -> Bösartig: (0) Gut: (1) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowSearch (PUM.Hijack.StartMenu) -> Bösartig: (0) Gut: (1) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

Kurzer zwischen Bericht: Malwarebyte's findet erstmal nichts mehr, außer die beiden (s.o. letzter Scan). Die von dem FakeHDD versteckten habe ich manuell sichtbar gemacht und das Startmenü hergestellt, um besser arbeiten zu können. Habe schon mal nen OTL-Scan durchlaufen lassen und ein Fix wäre jetzt echt super.

OTL.txt

OTL logfile created on: 04.02.2012 02:43:13 - Run 3
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Wolfi\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,25 Gb Total Physical Memory | 2,36 Gb Available Physical Memory | 72,51% Memory free
7,08 Gb Paging File | 6,37 Gb Available in Paging File | 89,99% Paging File free
Paging file location(s): c:\pagefile.sys 4000 4000 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,76 Gb Total Space | 26,61 Gb Free Space | 5,71% Space Free | Partition Type: NTFS
 
Computer Name: WOLFI-PC | User Name: Wolfi | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Users\Wolfi\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\SpeedFan\speedfan.exe (Almico Software (www.almico.com))
PRC - C:\Programme\Microsoft Office\Office12\WINWORD.EXE (Microsoft Corporation)
PRC - C:\Programme\Microsoft\Office Live\OfficeLiveSignIn.exe (Microsoft Corp.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\Wolfi\AppData\Local\Temp\sfamcc00001.dll ()
MOD - C:\Users\Wolfi\AppData\Local\Temp\sfareca00001.dll ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Programme\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll ()
MOD - C:\Programme\Common Files\microsoft shared\OFFICE12\MSPTLS.DLL ()
MOD - C:\Programme\WinRAR\RarExt.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (CPUCooLServer) --  File not found
SRV - (Creative ALchemy AL1 Licensing Service) -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL1Licensing.exe (Creative Labs)
SRV - (Akamai) -- c:\program files\common files\akamai/netsession_win_e286960.dll ()
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (nvUpdatusService) -- C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (UMVPFSrv) -- C:\Programme\Common Files\Logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Creative ALchemy AL6 Licensing Service) -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe (Creative Labs)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (WAS) -- C:\Windows\System32\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) -- C:\Windows\System32\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (SwitchBoard) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (Creative Audio Engine Licensing Service) -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe (Creative Labs)
SRV - (McComponentHostService) -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (SandraAgentSrv) -- C:\Systemerkennung\SiSoftware Sandra Lite 2010.SP3\RpcAgentSrv.exe (SiSoftware)
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Cherry Device Interface) -- C:\Programme\Cherry\CDI\cdi.exe (ZF Electronics GmbH)
SRV - (AppHostSvc) -- C:\Windows\System32\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (CTAudSvcService) -- C:\Programme\Creative\Shared Files\CTAudSvc.exe (Creative Technology Ltd)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (cpuz135) -- C:\Windows\System32\drivers\cpuz135_x32.sys (CPUID)
DRV - (LVUVC) Logitech HD Webcam C270(UVC) -- C:\Windows\System32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVRS) -- C:\Windows\System32\drivers\lvrs.sys (Logitech Inc.)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (speedfan) -- C:\Windows\system32\speedfan.sys (Almico Software)
DRV - (ntiopnp) -- C:\Windows\System32\drivers\ntiopnp.sys ()
DRV - (ntiomin) -- C:\Windows\System32\drivers\ntiomin.sys ()
DRV - (FsUsbExDisk) -- C:\Windows\System32\FsUsbExDisk.Sys ()
DRV - (LVPr2Mon) -- C:\Windows\System32\drivers\LVPr2Mon.sys ()
DRV - (ss_bmdm) -- C:\Windows\System32\drivers\ss_bmdm.sys (MCCI Corporation)
DRV - (ss_bbus) SAMSUNG USB Mobile Device (WDM) -- C:\Windows\System32\drivers\ss_bbus.sys (MCCI)
DRV - (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) -- C:\Windows\System32\drivers\ss_bmdfl.sys (MCCI Corporation)
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (SASENUM) -- C:\Programme\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) -- C:\Programme\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) -- C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (P17) -- C:\Windows\System32\drivers\P17.sys (Creative Technology Ltd.)
DRV - (RivaTuner32) -- C:\Programme\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys ()
DRV - (SANDRA) -- C:\Systemerkennung\SiSoftware Sandra Lite 2010.SP3\WNt500x86\sandra.sys (SiSoftware)
DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys ()
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (cFosNT) -- C:\Windows\System32\Drivers\cFosNT.sys (cFos Software GmbH)
DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (acedrv11) -- C:\Windows\System32\drivers\acedrv11.sys (Protect Software GmbH)
DRV - (VX3000) -- C:\Windows\System32\drivers\VX3000.sys (Microsoft Corporation)
DRV - (LUsbFilt) -- C:\Windows\System32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation                                            )
DRV - (ha20x2k) -- C:\Windows\System32\drivers\HA20X2K.SYS (Creative Technology Ltd)
DRV - (emupia) -- C:\Windows\System32\drivers\EMUPIA2K.SYS (Creative Technology Ltd)
DRV - (ctsfm2k) -- C:\Windows\System32\drivers\CTSFM2K.SYS (Creative Technology Ltd)
DRV - (ctprxy2k) -- C:\Windows\System32\drivers\CTPRXY2K.SYS (Creative Technology Ltd)
DRV - (ossrv) -- C:\Windows\System32\drivers\CTOSS2K.SYS (Creative Technology Ltd.)
DRV - (ctdvda2k) -- C:\Windows\System32\drivers\CTDVDA2K.SYS (Creative Technology Ltd)
DRV - (ctaud2k) Creative Audio Driver (WDM) -- C:\Windows\System32\drivers\CTAUD2K.SYS (Creative Technology Ltd)
DRV - (ctac32k) -- C:\Windows\System32\drivers\CTAC32K.SYS (Creative Technology Ltd)
DRV - (CTEXFIFX.DLL) -- C:\Windows\System32\CTEXFIFX.DLL (Creative Technology Ltd.)
DRV - (CTEDSPSY.DLL) -- C:\Windows\System32\CTEDSPSY.DLL (Creative Technology Ltd)
DRV - (CTEDSPIO.DLL) -- C:\Windows\System32\CTEDSPIO.DLL (Creative Technology Ltd)
DRV - (CT20XUT.DLL) -- C:\Windows\System32\CT20XUT.DLL (Creative Technology Ltd.)
DRV - (CTHWIUT.DLL) -- C:\Windows\System32\CTHWIUT.DLL (Creative Technology Ltd.)
DRV - (CTERFXFX.DLL) -- C:\Windows\System32\CTERFXFX.DLL (Creative Technology Ltd)
DRV - (CTEDSPFX.DLL) -- C:\Windows\System32\CTEDSPFX.DLL (Creative Technology Ltd)
DRV - (CTEAPSFX.DLL) -- C:\Windows\System32\CTEAPSFX.DLL (Creative Technology Ltd)
DRV - (CTSBLFX.DLL) -- C:\Windows\System32\CTSBLFX.DLL (Creative Technology Ltd)
DRV - (CTAUDFX.DLL) -- C:\Windows\System32\CTAUDFX.DLL (Creative Technology Ltd)
DRV - (COMMONFX.DLL) -- C:\Windows\System32\COMMONFX.DLL (Creative Technology Ltd)
DRV - (MTOnlPktAlyX) -- C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\MTOnlPktAlyx.sys (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
DRV - (RTCore32) -- C:\Programme\MSI Afterburner\RTCore32.sys ()
DRV - (giveio) -- C:\Windows\system32\giveio.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.t-online.de/service/redir/ie_t-online.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.t-online.de/service/redir/ie_suche.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/service/redir/ie_t-online.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 00 6F F4 EC 49 B5 CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.t-online.de;localhost;<local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=www-proxy.t-online.de:80;ftp=ftp-proxy.t-online.de:80
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: "Google"
FF - prefs.js..browser.search.useDBForOrder: ""
FF - prefs.js..browser.startup.homepage: ""
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.102.0: C:\Program Files\Battlelog Web Plugins\1.102.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.104.0: C:\Program Files\Battlelog Web Plugins\1.104.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.2.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.2.1: C:\Program Files\Oracle\JavaFX Runtime 2.0\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.4: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@protectdisc.com/NPMPDRM: C:\Program Files\Common Files\mpDRM\NPMPDRM.dll ( )
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Wolfi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.12.31 02:34:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.01.13 19:48:48 | 000,000,000 | ---D | M]
 
[2009.02.09 11:19:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wolfi\AppData\Roaming\mozilla\Extensions
[2012.01.28 21:25:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wolfi\AppData\Roaming\mozilla\Firefox\Profiles\r6307irc.default\extensions
[2011.12.24 22:24:16 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Wolfi\AppData\Roaming\mozilla\Firefox\Profiles\r6307irc.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.03.30 01:05:23 | 000,000,000 | ---D | M] (NoRedirect) -- C:\Users\Wolfi\AppData\Roaming\mozilla\Firefox\Profiles\r6307irc.default\extensions\{c1970c0d-dbe6-4d91-804f-c9c0de643a57}
[2010.04.25 12:30:38 | 000,001,840 | ---- | M] () -- C:\Users\Wolfi\AppData\Roaming\Mozilla\Firefox\Profiles\r6307irc.default\searchplugins\bing.xml
[2012.02.01 14:15:21 | 000,001,056 | ---- | M] () -- C:\Users\Wolfi\AppData\Roaming\Mozilla\Firefox\Profiles\r6307irc.default\searchplugins\icqplugin.xml
[2009.08.29 16:25:07 | 000,000,952 | ---- | M] () -- C:\Users\Wolfi\AppData\Roaming\Mozilla\Firefox\Profiles\r6307irc.default\searchplugins\youtube-videosuche.xml
[2011.12.17 11:12:32 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
() (No name found) -- C:\USERS\WOLFI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\R6307IRC.DEFAULT\EXTENSIONS\{79C50F9A-2FFE-4EE0-8A37-FAE4F5DACD4F}.XPI
() (No name found) -- C:\USERS\WOLFI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\R6307IRC.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\USERS\WOLFI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\R6307IRC.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
() (No name found) -- C:\USERS\WOLFI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\R6307IRC.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}.XPI
() (No name found) -- C:\USERS\WOLFI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\R6307IRC.DEFAULT\EXTENSIONS\COMPATIBILITY@ADDONS.MOZILLA.ORG.XPI
() (No name found) -- C:\USERS\WOLFI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\R6307IRC.DEFAULT\EXTENSIONS\UNPLUG@COMPUNACH.XPI
[2011.12.31 02:34:23 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.10.04 14:49:02 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.10.04 14:49:02 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.10.04 14:49:02 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.10.04 14:49:02 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.10.04 14:49:02 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.10.04 14:49:02 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.12.06 08:50:07 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2 - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Programme\TechSmith\Snagit 9\SnagitBHO.dll (TechSmith Corporation)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Oracle\JavaFX Runtime 2.0\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Snagit) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Programme\TechSmith\Snagit 9\SnagitIEAddin.dll (TechSmith Corporation)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [CTHelper] C:\Windows\System32\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\System32\CTXFIHLP.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [P17RunE] C:\Windows\System32\P17RunE.dll (Creative Technology Ltd.)
O4 - HKLM..\Run: [QFIbEoUCQmCWD.exe] C:\ProgramData\QFIbEoUCQmCWD.exe ()
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 10.2.1)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15116/CTPID.cab (Creative Software AutoUpdate Support Package 1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.0.43.1 217.0.43.193
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9ED490E5-A5D2-442E-9EA0-75DE411CAA91}: DhcpNameServer = 217.0.43.1 217.0.43.193
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Wolfi\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Wolfi\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Programme\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.02.03 17:18:09 | 002,322,184 | ---- | C] (ESET) -- C:\Users\Wolfi\Desktop\esetsmartinstaller_enu.exe
[2012.02.03 15:00:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.02.03 15:00:42 | 000,000,000 | ---D | C] -- C:\Users\Wolfi\Desktop\Malwarebytes' Anti-Malware
[2012.02.02 16:53:46 | 000,000,000 | ---D | C] -- C:\Users\Wolfi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check
[2012.02.01 13:12:02 | 000,000,000 | ---D | C] -- C:\Users\Wolfi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Creative
[2012.02.01 13:12:02 | 000,000,000 | ---D | C] -- C:\Users\Wolfi\AppData\Roaming\Creative
[2012.02.01 12:58:52 | 000,090,112 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\Updreg.EXE
[2012.02.01 12:58:05 | 000,094,208 | ---- | C] (Creative Technology Ltd) -- C:\Windows\System32\cttele32.dll
[2012.02.01 12:56:04 | 000,048,400 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\System32\AddCat.exe
[2012.02.01 12:54:28 | 000,011,264 | ---- | C] (Creative Technology Ltd) -- C:\Windows\CTDCRGER.DLL
[2012.02.01 12:53:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center
[2012.01.27 19:01:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Media Center Programs
[2012.01.26 15:43:50 | 000,000,000 | ---D | C] -- C:\Users\Wolfi\AppData\Roaming\Magic Set Editor
[2012.01.26 15:43:17 | 000,000,000 | ---D | C] -- C:\Program Files\Magic Set Editor 2
[2012.01.25 20:34:36 | 000,000,000 | ---D | C] -- C:\Users\Wolfi\AppData\Roaming\.minecraft
[2012.01.22 12:35:41 | 000,000,000 | ---D | C] -- C:\Users\Wolfi\AppData\Roaming\Day 1 Studios
[2012.01.22 10:24:52 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll
[2012.01.22 10:24:52 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll
[2012.01.11 11:20:07 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciseq.dll
[2012.01.11 11:20:03 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2012.01.11 11:20:01 | 000,376,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2012.01.11 11:19:57 | 001,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2012.01.11 11:19:57 | 000,497,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2012.01.10 12:28:34 | 000,000,000 | ---D | C] -- C:\Users\Wolfi\AppData\Local\SWTOR
[2012.01.10 12:28:31 | 000,000,000 | ---D | C] -- C:\Users\Wolfi\Documents\HeroBlade Logs
[2012.01.10 11:42:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA
[2012.01.10 11:10:08 | 000,000,000 | ---D | C] -- C:\Star Wars-The Old Republic
[2012.01.09 11:17:56 | 000,000,000 | ---D | C] -- C:\Microsoft Games
[2012.01.06 18:22:23 | 000,021,992 | ---- | C] (CPUID) -- C:\Windows\System32\drivers\cpuz135_x32.sys
[2012.01.06 18:22:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
[2012.01.06 18:22:23 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID
[2007.10.25 14:57:44 | 000,034,816 | ---- | C] ( ) -- C:\Windows\System32\A3D.DLL
[2007.10.25 14:42:46 | 000,010,240 | ---- | C] ( ) -- C:\Windows\System32\KILLAPPS.EXE
[7 C:\Users\Wolfi\Documents\*.tmp files -> C:\Users\Wolfi\Documents\*.tmp -> ]
[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.02.03 17:18:14 | 002,322,184 | ---- | M] (ESET) -- C:\Users\Wolfi\Desktop\esetsmartinstaller_enu.exe
[2012.02.03 17:10:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.02.03 17:06:59 | 000,003,840 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.02.03 17:06:59 | 000,003,840 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.02.03 14:50:05 | 000,002,116 | ---- | M] () -- C:\Users\Wolfi\0302backup.zip
[2012.02.02 17:26:42 | 000,000,456 | ---- | M] () -- C:\ProgramData\ekMFD1W9NQq5nU
[2012.02.02 17:25:29 | 000,000,304 | ---- | M] () -- C:\ProgramData\~ekMFD1W9NQq5nU
[2012.02.02 17:25:29 | 000,000,224 | ---- | M] () -- C:\ProgramData\~ekMFD1W9NQq5nUr
[2012.02.02 17:18:57 | 449,706,338 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.02.02 16:53:46 | 000,000,605 | ---- | M] () -- C:\Users\Wolfi\Desktop\System Check.lnk
[2012.02.02 16:53:36 | 000,336,520 | ---- | M] () -- C:\ProgramData\ekMFD1W9NQq5nU.exe
[2012.02.02 16:51:54 | 000,064,756 | ---- | M] () -- C:\Windows\System32\DVCState-{00000004-00000000-00000003-00001102-00000005-00311102}.rfx
[2012.02.02 16:51:54 | 000,054,156 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000004-00000000-00000003-00001102-00000005-00311102}.rfx
[2012.02.02 16:51:54 | 000,054,156 | ---- | M] () -- C:\Windows\System32\BMXState-{00000004-00000000-00000003-00001102-00000005-00311102}.rfx
[2012.02.02 16:45:36 | 000,427,144 | -HS- | M] () -- C:\ProgramData\QFIbEoUCQmCWD.exe
[2012.02.02 14:54:43 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2012.02.02 14:51:18 | 000,193,379 | ---- | M] () -- C:\Users\Wolfi\Documents\gesamt.pdf
[2012.02.02 00:03:25 | 000,001,080 | ---- | M] () -- C:\Windows\System32\settingsbkup.sfm
[2012.02.02 00:03:25 | 000,001,080 | ---- | M] () -- C:\Windows\System32\settings.sfm
[2012.01.31 22:38:56 | 000,000,200 | ---- | M] () -- C:\Users\Wolfi\Desktop\Hitman Blood Money.url
[2012.01.31 13:29:09 | 000,361,256 | ---- | M] () -- C:\Users\Wolfi\Documents\Schulgesetz.pdf
[2012.01.30 21:49:04 | 000,105,984 | ---- | M] () -- C:\Users\Wolfi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.01.27 08:35:54 | 000,337,320 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.01.26 12:49:22 | 000,738,974 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.01.26 12:49:22 | 000,687,942 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.01.26 12:49:22 | 000,168,432 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.01.26 12:49:22 | 000,138,060 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.01.24 16:46:14 | 000,017,885 | ---- | M] () -- C:\Users\Wolfi\.recently-used.xbel
[2012.01.18 03:34:58 | 000,089,114 | ---- | M] () -- C:\Users\Wolfi\Documents\satzung_jusos_region_hannover.pdf
[2012.01.13 18:12:23 | 000,766,388 | ---- | M] () -- C:\Users\Wolfi\Documents\Antragspaket 2012 UBK.pdf
[7 C:\Users\Wolfi\Documents\*.tmp files -> C:\Users\Wolfi\Documents\*.tmp -> ]
[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.02.03 14:50:05 | 000,002,116 | ---- | C] () -- C:\Users\Wolfi\0302backup.zip
[2012.02.02 16:57:47 | 000,000,304 | ---- | C] () -- C:\ProgramData\~ekMFD1W9NQq5nU
[2012.02.02 16:57:47 | 000,000,224 | ---- | C] () -- C:\ProgramData\~ekMFD1W9NQq5nUr
[2012.02.02 16:53:46 | 000,000,605 | ---- | C] () -- C:\Users\Wolfi\Desktop\System Check.lnk
[2012.02.02 16:53:43 | 000,000,456 | ---- | C] () -- C:\ProgramData\ekMFD1W9NQq5nU
[2012.02.02 16:53:32 | 000,336,520 | ---- | C] () -- C:\ProgramData\ekMFD1W9NQq5nU.exe
[2012.02.02 16:48:39 | 000,427,144 | -HS- | C] () -- C:\ProgramData\QFIbEoUCQmCWD.exe
[2012.02.02 14:51:18 | 000,193,379 | ---- | C] () -- C:\Users\Wolfi\Documents\gesamt.pdf
[2012.02.02 00:03:25 | 000,001,080 | ---- | C] () -- C:\Windows\System32\settingsbkup.sfm
[2012.02.02 00:03:25 | 000,001,080 | ---- | C] () -- C:\Windows\System32\settings.sfm
[2012.02.01 13:03:35 | 000,064,756 | ---- | C] () -- C:\Windows\System32\DVCState-{00000004-00000000-00000003-00001102-00000005-00311102}.rfx
[2012.02.01 13:03:35 | 000,054,156 | ---- | C] () -- C:\Windows\System32\BMXStateBkp-{00000004-00000000-00000003-00001102-00000005-00311102}.rfx
[2012.02.01 13:03:35 | 000,054,156 | ---- | C] () -- C:\Windows\System32\BMXState-{00000004-00000000-00000003-00001102-00000005-00311102}.rfx
[2012.02.01 12:58:52 | 000,006,123 | ---- | C] () -- C:\Windows\System32\AudioDrv.ini
[2012.02.01 12:56:04 | 001,048,576 | ---- | C] () -- C:\Windows\System32\CT1MGM.ROM
[2012.02.01 12:56:03 | 000,098,174 | ---- | C] () -- C:\Windows\System32\instwdm.ini
[2012.02.01 12:56:03 | 000,003,128 | ---- | C] () -- C:\Windows\System32\XFi.bmp
[2012.02.01 12:56:03 | 000,000,054 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini
[2012.02.01 12:54:28 | 000,003,072 | ---- | C] () -- C:\Windows\CTXFIGER.DLL
[2012.02.01 12:53:39 | 007,572,224 | ---- | C] () -- C:\Windows\System32\CT8MGM.SF2
[2012.02.01 12:53:38 | 004,174,814 | ---- | C] () -- C:\Windows\System32\CT4MGM.SF2
[2012.02.01 12:53:37 | 002,167,684 | ---- | C] () -- C:\Windows\System32\CT2MGM.SF2
[2012.02.01 12:53:29 | 029,705,938 | ---- | C] () -- C:\Windows\System32\28MBGM.sf2
[2012.01.31 22:38:56 | 000,000,200 | ---- | C] () -- C:\Users\Wolfi\Desktop\Hitman Blood Money.url
[2012.01.31 13:29:09 | 000,361,256 | ---- | C] () -- C:\Users\Wolfi\Documents\Schulgesetz.pdf
[2012.01.24 16:46:14 | 000,017,885 | ---- | C] () -- C:\Users\Wolfi\.recently-used.xbel
[2012.01.18 03:34:58 | 000,089,114 | ---- | C] () -- C:\Users\Wolfi\Documents\satzung_jusos_region_hannover.pdf
[2012.01.13 18:12:22 | 000,766,388 | ---- | C] () -- C:\Users\Wolfi\Documents\Antragspaket 2012 UBK.pdf
[2011.11.08 15:50:51 | 000,110,592 | ---- | C] () -- C:\Windows\System32\rtvcvfw32.dll
[2011.10.26 13:47:55 | 000,007,672 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\.freeciv-client-rc-2.3
[2011.10.14 23:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2011.08.27 11:56:33 | 000,000,133 | ---- | C] () -- C:\Windows\Wininit.INI
[2011.08.19 10:26:20 | 010,898,456 | ---- | C] () -- C:\Windows\System32\LogiDPP.dll
[2011.08.19 10:26:20 | 000,336,408 | ---- | C] () -- C:\Windows\System32\DevManagerCore.dll
[2011.08.19 10:26:20 | 000,104,472 | ---- | C] () -- C:\Windows\System32\LogiDPPApp.exe
[2011.08.12 12:20:14 | 000,015,896 | ---- | C] () -- C:\Windows\System32\drivers\iKeyLFT2.dll
[2011.07.28 06:36:43 | 000,136,448 | ---- | C] () -- C:\Windows\RMTOOLS.DLL
[2011.07.26 07:48:54 | 000,028,418 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini
[2011.07.19 20:33:02 | 000,000,085 | -HS- | C] () -- C:\ProgramData\.zreglib
[2011.06.13 17:45:05 | 000,038,912 | ---- | C] () -- C:\Windows\System32\NVDevTray.dll
[2011.06.13 17:44:02 | 000,151,552 | ---- | C] () -- C:\Windows\System32\nvRegDev.dll
[2011.06.13 17:43:47 | 001,388,544 | ---- | C] () -- C:\Windows\System32\nvpmapi.dll
[2011.06.13 17:43:38 | 000,040,960 | ---- | C] () -- C:\Windows\System32\nvISWOW64.dll
[2011.05.27 02:40:40 | 000,166,912 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL
[2011.05.27 02:40:40 | 000,073,728 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL
[2011.05.15 20:49:27 | 000,008,541 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\PStrip.bko
[2011.05.15 13:02:48 | 000,008,564 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\PStrip.bk!
[2011.05.15 13:01:47 | 000,008,541 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\PStrip.bak
[2011.05.15 01:01:59 | 000,008,564 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\PStrip.ini
[2011.05.13 21:01:49 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin
[2011.04.26 20:43:07 | 000,036,892 | ---- | C] () -- C:\Windows\System32\bassmod.dll
[2011.04.25 21:52:34 | 000,000,510 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011.03.11 17:17:58 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2011.03.11 17:17:58 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010.12.25 09:10:28 | 000,056,320 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll
[2010.12.24 05:06:16 | 000,028,052 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\OFMissionEditorConfig.xml
[2010.11.11 20:19:24 | 000,021,080 | ---- | C] () -- C:\Windows\System32\drivers\ntiopnp.sys
[2010.10.03 10:24:10 | 000,000,760 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\setup_ldm.iss
[2010.09.07 11:36:06 | 000,860,160 | ---- | C] () -- C:\Windows\System32\spk.dll
[2010.08.27 14:07:05 | 000,090,624 | ---- | C] () -- C:\Windows\VSUNINST.EXE
[2010.08.22 22:39:32 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini
[2010.08.10 14:49:36 | 000,011,392 | ---- | C] () -- C:\Windows\System32\drivers\ntiomin.sys
[2010.07.18 17:20:48 | 000,000,760 | ---- | C] () -- C:\Windows\eReg.dat
[2010.07.04 13:21:02 | 000,089,446 | ---- | C] () -- C:\Windows\War3Unin.dat
[2010.06.09 19:35:51 | 000,000,069 | ---- | C] () -- C:\Windows\cc.ini
[2010.06.02 18:01:52 | 002,580,552 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2010.05.26 22:44:22 | 000,000,022 | ---- | C] () -- C:\Windows\WET.INI
[2010.05.07 18:43:30 | 000,025,824 | ---- | C] () -- C:\Windows\System32\drivers\LVPr2Mon.sys
[2010.05.01 15:14:23 | 000,000,083 | ---- | C] () -- C:\Windows\CIV.INI
[2010.04.27 21:36:04 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2010.04.17 20:01:25 | 000,000,026 | ---- | C] () -- C:\Windows\buffygame.INI
[2010.03.27 23:22:37 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll
[2010.03.25 15:29:11 | 000,020,992 | ---- | C] () -- C:\Windows\jestertb.dll
[2010.02.21 09:42:56 | 000,000,551 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\AutoGK.ini
[2010.02.18 07:09:56 | 000,261,632 | ---- | C] () -- C:\Windows\PEV.exe
[2010.02.18 07:09:56 | 000,077,312 | ---- | C] () -- C:\Windows\MBR.exe
[2010.02.18 07:09:56 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010.02.18 07:09:55 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2010.02.18 07:09:55 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2010.02.06 19:39:08 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010.02.06 19:37:52 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010.01.28 01:09:54 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2009.12.23 19:15:47 | 000,113,152 | -HS- | C] () -- C:\Windows\System32\SCX.dll
[2009.11.04 17:21:31 | 000,000,040 | ---- | C] () -- C:\ProgramData\ra3.ini
[2009.10.16 06:50:54 | 000,003,930 | ---- | C] () -- C:\Windows\System32\ludap17.ini
[2009.10.04 07:13:20 | 000,000,292 | ---- | C] () -- C:\Windows\vtmb.ini
[2009.09.24 02:52:56 | 000,008,312 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\.civclientrc
[2009.09.23 16:26:29 | 000,030,439 | ---- | C] () -- C:\Windows\scunin.dat
[2009.09.22 19:01:35 | 000,000,179 | ---- | C] () -- C:\Windows\IfoEdit.INI
[2009.09.22 17:21:28 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2009.09.04 05:46:33 | 000,000,437 | ---- | C] () -- C:\Windows\ACTIVEJP.INI
[2009.09.03 02:53:33 | 000,000,307 | ---- | C] () -- C:\Windows\Romme.INI
[2009.09.03 02:48:27 | 000,080,896 | ---- | C] () -- C:\Windows\cadkasdeinst01.exe
[2009.08.09 22:10:56 | 000,004,620 | ---- | C] () -- C:\Windows\XChange.dat
[2009.08.03 14:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009.08.03 14:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2009.06.02 09:57:24 | 000,138,056 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\PnkBstrK.sys
[2009.05.30 00:37:40 | 000,205,824 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2009.05.30 00:31:52 | 000,881,664 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2009.05.26 01:38:29 | 000,000,000 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\AVSMediaPlayer.m3u
[2009.05.19 02:05:54 | 000,000,340 | ---- | C] () -- C:\Windows\scummvm.ini
[2009.03.30 04:16:00 | 000,000,072 | ---- | C] () -- C:\Windows\mix-fx.ini
[2009.03.28 20:26:00 | 000,069,632 | R--- | C] () -- C:\Windows\System32\xmltok.dll
[2009.03.28 20:26:00 | 000,036,864 | R--- | C] () -- C:\Windows\System32\xmlparse.dll
[2009.03.19 16:23:28 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2009.03.10 11:14:20 | 000,073,728 | ---- | C] () -- C:\Windows\System32\GkSui18.EXE
[2009.03.09 14:25:55 | 000,000,711 | ---- | C] () -- C:\Windows\SIERRA.INI
[2009.02.18 17:44:08 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2009.02.18 17:42:22 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2009.02.17 18:01:28 | 000,000,099 | ---- | C] () -- C:\Windows\cdplayer.ini
[2009.02.14 13:52:27 | 000,046,592 | ---- | C] () -- C:\Windows\System32\DrvMgt.dll
[2009.02.14 13:52:27 | 000,000,712 | ---- | C] () -- C:\Windows\System32\layout.bin
[2009.02.12 17:08:00 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009.02.11 05:25:53 | 000,140,072 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2009.02.11 05:25:46 | 000,280,904 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2009.02.11 05:25:36 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2009.02.10 06:48:37 | 000,105,984 | ---- | C] () -- C:\Users\Wolfi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.02.09 10:56:30 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009.02.09 10:18:12 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009.02.09 09:52:42 | 000,000,093 | ---- | C] () -- C:\Users\Wolfi\AppData\Local\fusioncache.dat
[2009.02.09 09:18:02 | 000,023,888 | ---- | C] () -- C:\Users\Wolfi\AppData\Roaming\UserTile.png
[2009.02.09 09:08:01 | 000,000,169 | ---- | C] () -- C:\Windows\uno.ini
[2009.02.09 09:07:58 | 000,287,744 | ---- | C] () -- C:\Windows\uno364mi.dll
[2009.02.09 09:07:58 | 000,109,568 | ---- | C] () -- C:\Windows\vos364mi.dll
[2009.02.09 09:07:58 | 000,091,648 | ---- | C] () -- C:\Windows\osl364mi.dll
[2009.02.06 17:17:50 | 000,001,356 | ---- | C] () -- C:\Users\Wolfi\AppData\Local\d3d9caps.dat
[2008.11.13 06:07:24 | 000,002,177 | ---- | C] () -- C:\Windows\P17EP.ini
[2008.01.21 08:15:58 | 000,738,974 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2008.01.21 08:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2008.01.21 08:15:58 | 000,168,432 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2008.01.21 08:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2007.12.04 05:20:30 | 000,001,489 | ---- | C] () -- C:\Windows\P17EP51.ini
[2007.10.25 17:26:10 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2007.10.25 14:59:44 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CTBURST.DLL
[2007.10.25 14:56:28 | 000,037,888 | ---- | C] () -- C:\Windows\System32\PSCONV.EXE
[2007.10.25 14:46:54 | 000,325,724 | ---- | C] () -- C:\Windows\System32\CTDLANG.DAT
[2007.10.25 14:46:54 | 000,055,904 | ---- | C] () -- C:\Windows\System32\CTDNLSTR.DAT
[2007.10.25 14:45:08 | 000,048,128 | ---- | C] () -- C:\Windows\System32\REGPLIB.EXE
[2007.10.25 14:44:52 | 000,149,838 | ---- | C] () -- C:\Windows\System32\CTBAS2W.DAT
[2007.10.25 14:43:10 | 000,274,587 | ---- | C] () -- C:\Windows\System32\CTSBAS2W.DAT
[2007.10.25 14:43:04 | 000,241,084 | ---- | C] () -- C:\Windows\System32\CTSBASW.DAT
[2007.10.25 14:43:04 | 000,115,166 | ---- | C] () -- C:\Windows\System32\CTBASICW.DAT
[2007.10.25 14:42:50 | 000,313,207 | ---- | C] () -- C:\Windows\System32\CTSTATIC.DAT
[2007.10.25 14:42:50 | 000,053,932 | ---- | C] () -- C:\Windows\System32\CTDAUGHT.DAT
[2007.10.25 14:42:48 | 000,005,120 | ---- | C] () -- C:\Windows\System32\ENLOCSTR.EXE
[2007.09.04 10:56:10 | 000,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2007.08.13 13:45:02 | 000,077,824 | ---- | C] () -- C:\Windows\System32\CTMMACTL.DLL
[2007.06.07 05:25:42 | 000,001,578 | ---- | C] () -- C:\Windows\P17EPLS.ini
[2007.04.10 22:46:48 | 000,015,498 | ---- | C] () -- C:\Windows\VX3000.ini
[2007.02.05 19:05:26 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
[2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 13:47:37 | 000,337,320 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 11:33:01 | 000,687,942 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 11:33:01 | 000,138,060 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006.10.02 10:25:18 | 000,000,307 | ---- | C] () -- C:\Windows\System32\KILL.INI
[2000.02.09 23:00:00 | 000,047,104 | ---- | C] () -- C:\Windows\System32\wrkgadm.exe
[2000.02.09 23:00:00 | 000,012,288 | ---- | C] () -- C:\Windows\System32\HLINKPRX.DLL
[1998.06.13 21:53:26 | 000,044,544 | ---- | C] () -- C:\Windows\System32\Gif89.dll
[1996.04.03 20:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
 
========== Files - Unicode (All) ==========
(C:\Users\Wolfi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\?????) -- C:\Users\Wolfi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\クレージュ
(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\?????) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\クレージュ

< End of report >
         

EXTRA.txt

OTL Extras logfile created on: 04.02.2012 02:43:13 - Run 3
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Wolfi\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,25 Gb Total Physical Memory | 2,36 Gb Available Physical Memory | 72,51% Memory free
7,08 Gb Paging File | 6,37 Gb Available in Paging File | 89,99% Paging File free
Paging file location(s): c:\pagefile.sys 4000 4000 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,76 Gb Total Space | 26,61 Gb Free Space | 5,71% Space Free | Partition Type: NTFS
 
Computer Name: WOLFI-PC | User Name: Wolfi | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\T-Online\T-Online_Software_6\Browser\Browser.exe" "%1" (Deutsche Telekom AG, T-Com)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Betrachten mit XnView] -- "C:\Program Files\XnView\xnview.exe" "%1" (XnView, hxxp://www.xnview.com)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-1452552504-3750701632-1159496026-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 2
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{065F4FF7-23A1-4986-9B17-27BD040C3A95}" = lport=10000 | protocol=17 | dir=in | name=10000 | 
"{0F0BB42C-3A4D-4556-8D03-438885E46690}" = lport=138 | protocol=17 | dir=in | app=system | 
"{12671432-C936-44AC-929F-30CD6DC7A347}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{14263818-6072-4F22-A502-03E4F3A19AE7}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface | 
"{1BA88F85-76C1-4B93-96ED-3A721AF153E8}" = lport=443 | protocol=6 | dir=in | name=443 | 
"{2911B7BE-EB91-4C6F-AC48-041D09B0F189}" = lport=49168 | protocol=6 | dir=in | name=akamai netsession interface | 
"{2E925641-1176-46CB-BDB1-10F74DA77FCF}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{42A402B0-F19D-4B10-9D14-5F1A64B73CAC}" = rport=445 | protocol=6 | dir=out | app=system | 
"{44F16478-4C5C-44F6-ABA2-635648F4028C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{5216AB19-47B4-42BC-9B09-0D58FB2E89CF}" = lport=rpc | protocol=6 | dir=in | app=c:\systemerkennung\sisoftware sandra lite 2010.sp3\wnt500x86\rpcsandrasrv.exe | 
"{53A7F418-F79D-4E8B-80EE-31AA424788C5}" = lport=rpc | protocol=6 | dir=in | app=c:\systemerkennung\sisoftware sandra lite 2010.sp3\wnt500x86\rpcsandrasrv.exe | 
"{5CA9D031-885A-4A3A-A1F9-C1DCE8AD3649}" = rport=138 | protocol=17 | dir=out | app=system | 
"{62197CD8-837F-4EDB-91C8-92BD17B7DB3A}" = lport=445 | protocol=6 | dir=in | app=system | 
"{6D6E8639-95D6-4F0D-8C6A-22B2276A8854}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{71E8C076-F3FF-40DA-8EF8-F6FE52EE2B78}" = lport=35453 | protocol=17 | dir=in | name=to | 
"{74592E5E-6B74-4F93-BDA2-8E682D680DD3}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{878C9A9F-2453-4F1E-91BC-5785E2A0D03F}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{A6E70ED6-70D7-407D-B630-1380E83FC485}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{AC5D6674-8143-4AC5-8A13-05FD23D21594}" = lport=3075 | protocol=6 | dir=in | name=siedler 6 | 
"{B7EB3C05-4618-4642-827A-2FD3D86522D8}" = lport=18095 | protocol=17 | dir=in | name=18095 | 
"{BE70AACC-48E5-4BC5-AF56-58A156D76F7B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{C3EF2CD9-01B9-45F6-8AB7-01E262D94A79}" = rport=137 | protocol=17 | dir=out | app=system | 
"{C7227E7F-3DEF-4C1D-84CF-886E4C128A05}" = lport=18090 | protocol=6 | dir=in | name=18090 | 
"{CC4B7229-1282-4B42-8D57-97BE1488ABC8}" = lport=137 | protocol=17 | dir=in | app=system | 
"{CE91B8AF-9018-4544-89EC-23B94DFDB4EA}" = lport=80 | protocol=6 | dir=in | name=80 | 
"{D53722FB-4B8D-4BAC-8EB4-5EA83899D1F4}" = rport=139 | protocol=6 | dir=out | app=system | 
"{DE75CA67-9145-49D6-8B8F-F0E76DF6EE1B}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{E29FD27D-B0B1-40A5-B459-E348DF37D482}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{E4B0B717-85D0-4CD4-BB1A-3C5FC18C1211}" = lport=139 | protocol=6 | dir=in | app=system | 
"{E929745E-24DE-43AD-997E-5D1832CC5B6F}" = lport=rpc | protocol=6 | dir=in | app=c:\systemerkennung\sisoftware sandra lite 2010.sp3\rpcagentsrv.exe | 
"{EB2F0935-0566-4335-8391-7E42DA9BAFDF}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{EE985641-A409-4C75-9426-A200D792B254}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 | 
"{FD8D56EE-DC14-49CD-AC4E-8DB97DEEEBCE}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{000C5458-1339-4C9A-93B6-923B05F70463}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\initengine.exe | 
"{004B6899-6DE3-4465-B42B-63171EE3413B}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\plants vs zombies\plantsvszombies.exe | 
"{00B04EA2-1D8E-42A5-B260-DFC2E01354BA}" = protocol=17 | dir=in | app=c:\star wars-the old republic\launcher.exe | 
"{017245FA-4B11-4BA5-A59D-66EE4B3E65F2}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{03EE831D-A65C-4345-B6FA-FA04753FE13C}" = protocol=1 | dir=in | app=c:\systemerkennung\sisoftware sandra lite 2010.sp3\wnt500x86\rpcsandrasrv.exe | 
"{0411AE75-90C8-447E-983F-CD44F5EFAD9D}" = protocol=17 | dir=in | app=c:\ubisoft\die siedler - aufstieg eines königreichs\base\bin\settlers6.exe | 
"{05218DA9-018A-4DF1-8EC0-B7359E35D1FD}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe | 
"{068BA41A-D77B-45AD-9E47-64C43532A6DC}" = protocol=6 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.3\sonarhost.exe | 
"{07ED872E-4C3E-43DB-B817-144128CC28D5}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{0865C6F8-AA1A-404E-BADF-0D5D946478B6}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\hearts of iron 3\hoi3game.exe | 
"{087CF431-A420-43AA-AC2D-516D6EA53842}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{08D62976-4F6D-453A-914E-798DDF8FEBDF}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\hacker evolution duality\hacker evolution duality.exe | 
"{09DFDF6A-B8DE-4568-9D74-EA537FB8339C}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{09FF73F9-82D1-449B-89F6-55D89C9B9A99}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\hacker evolution duality\hacker evolution duality.exe | 
"{0ADA920B-5AB3-4A69-A84F-25FC217AB487}" = protocol=6 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{0BC510B3-2A1B-4CD1-BB99-E415F7DDCB22}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{0F927830-9DEF-4527-BD00-86F949EB69A5}" = protocol=17 | dir=in | app=c:\steam\steam.exe | 
"{112589FB-5B84-4384-88E6-B39F4A767491}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\fallout new vegas\falloutnvlauncher.exe | 
"{11F46038-06CB-400E-AA43-7CD812C7316B}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\autopatcher.exe | 
"{15CCE61B-C78B-421E-B6DB-FD2F8AC28D37}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{1743706E-87FC-4F02-87AC-2C905CCB74A5}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\anno4web.exe | 
"{18E9B516-9EAC-4ABC-840B-23FABC68930D}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{1B670A33-7C02-4CA8-BC68-3733AAB85BAB}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe | 
"{1DEDE7D7-8A6F-4E7C-AF10-BDEB39F77AAB}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\magic the gathering - duels of the planeswalkers\dotp.exe | 
"{1FC045DF-9ADB-4B7B-83CC-B1CE9BF221F5}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{247F915A-48FC-4896-8DD4-CF6381E46551}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\cities in motion\cities in motion.exe | 
"{251E4538-69F9-4A60-8B50-332F84F41AFD}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\x3 terran conflict\x3tc.exe | 
"{26E7A0D0-7C4F-44F8-A342-54A00224FC77}" = protocol=17 | dir=in | app=c:\ubisoft\die siedler - aufstieg eines königreichs\base\bin\settlers6.exe | 
"{27394A33-8664-4EA0-ADAE-CE721D184961}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\empire total war\empire.exe | 
"{2B15F5CC-AF73-4B42-B7F0-FF399776CC26}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\magic the gathering - duels of the planeswalkers\dotp.exe | 
"{2CDBD7B5-E0BA-4782-9E24-227938051EA4}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\patrician iv\patrician4.exe | 
"{2D1B050D-52FE-4FE9-A5F2-E7852EF87404}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe | 
"{2F3FDCE3-BBE5-47AC-AC95-65D138C1E182}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{30A802C0-3492-4E4B-B3D6-57B9C10E35E1}" = protocol=17 | dir=in | app=c:\world of warcraft\launcher.exe | 
"{3126B057-EF0E-4913-93EA-697CE1CFDF83}" = protocol=17 | dir=in | app=c:\world of warcraft\launcher.exe | 
"{31BDC2E5-D5F4-42D9-AFD2-8FB05E54498C}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{33966AC4-E9D6-49D2-B645-903D55CD53E1}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\f.e.a.r. 3\f.e.a.r. 3.exe | 
"{33B8CDBC-6BF0-4F19-8E9E-A9AF58346398}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\settlers 7 gold\data\base\_dbg\bin\release\settlers7r.exe | 
"{33BA4CE9-BC04-47C1-B6AB-53BD2602C3BC}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\ibomber defense\game.exe | 
"{3429CF84-8445-4E61-9E3A-6A6BFD203A33}" = protocol=17 | dir=in | app=c:\program files\2k games\firaxis games\sid meier's civilization iv colonization\colonization.exe | 
"{3764A764-950F-4819-844C-86875FA99F15}" = protocol=6 | dir=in | app=c:\star wars-the old republic\launcher.exe | 
"{38A4924E-0A76-41D6-8D44-E4F77FDA6797}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\bully scholarship edition\bully.exe | 
"{3AFA10CB-9967-4F1A-AC39-88B29E9C5A25}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v sdk\sid meier's civilization v sdk.exe | 
"{3DD52E7B-4A90-4DA4-B3A1-5ABC3C6A5315}" = protocol=6 | dir=in | app=c:\starcraft ii\versions\base15405\sc2.exe | 
"{3E727D30-73F1-4581-8C03-23313DA095DC}" = protocol=6 | dir=in | app=c:\star wars-the old republic\swtor\retailclient\swtor.exe | 
"{4169B5D4-5EF9-4463-9869-7676781A721B}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe | 
"{46C3F339-40BE-4925-A439-4CE59281376E}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\plants vs zombies\plantsvszombies.exe | 
"{474232AC-DB53-4497-B44B-75F1F52294BB}" = protocol=6 | dir=in | app=c:\starcraft ii\starcraft ii.exe | 
"{47EDC340-6F71-4EBE-972F-E8936C2DEEAD}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\plants vs zombies\plantsvszombies.exe | 
"{4A53F3C2-C42B-4CEA-BA85-28A714CD79AD}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{4B6C4EF8-48C0-4951-A864-74BD5D532870}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{4CAD5CB0-00C9-49F2-BBB7-20C8B198EB20}" = protocol=17 | dir=in | app=c:\program files\sierra\swat 4\contentexpansion\system\swat4xdedicatedserver.exe | 
"{4D8CDFC0-4AEE-4B4F-A395-FD045542AB9D}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{4DC23B1F-D4F3-4D06-B6B4-CA6C6856E8A6}" = protocol=17 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{4E237606-7023-4F49-B419-F9AE85DB7FE7}" = protocol=6 | dir=in | app=c:\ubisoft\die siedler - aufstieg eines königreichs\base\bin\settlers6.exe | 
"{4F6747E6-FB61-43BB-87A8-6E7D77BCE237}" = protocol=17 | dir=in | app=c:\starcraft ii\starcraft ii.exe | 
"{550AA87A-E259-41E7-A9B1-705763EF71CE}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\fable 3\fablelauncher.exe | 
"{5659A82B-3454-441C-A0C7-94139383050F}" = protocol=17 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.3\sonarhost.exe | 
"{591518A1-C147-4299-8D84-3DCE04FE6861}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe | 
"{5A354671-39E9-4DC3-8ADB-C9690C6F0F22}" = protocol=6 | dir=in | app=c:\ubisoft\die siedler - aufstieg eines königreichs\base\bin\settlers6.exe | 
"{5BEC6B83-4ABC-4EA0-9BC2-2AF33D9223C9}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{5C3E7B47-95FC-46BF-B85A-0DCCE0258F9C}" = protocol=17 | dir=in | app=c:\starcraft ii\versions\base15405\sc2.exe | 
"{5C52128A-C52F-457A-A7F8-81F8A5B4C038}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\fable 3\fablelauncher.exe | 
"{5CB33225-6DA6-4515-893C-EF710A56A856}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{5F3D05E1-C105-40F5-A392-FEFF2CA538D8}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{60436C3A-3A37-4239-82B2-B60EC2160891}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\anno5.exe | 
"{61F4B04C-CEDE-4F90-A77E-77A56E561A94}" = protocol=6 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{6443A895-44F9-4B0B-A394-F3C2B7CDF8E5}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{6660A9FA-65C4-4602-A588-3B300B46959D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{6832114F-9AC3-4FBC-8C6B-B731D9E11667}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{6B3096F9-406C-417F-B52A-28DF71C4A150}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe | 
"{6C30DC32-79E5-4D89-B0B5-747AC7D9D9D6}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\addon.exe | 
"{6D563FE1-3DB3-4B81-A2B8-BB0A59611DD8}" = protocol=17 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{70F72CA7-8D86-4710-ACD2-0F9BA0F26BE8}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\hitman blood money\hitmanbloodmoney.exe | 
"{71DEF81E-9E2E-4DE9-8CC6-474E7E01A7B7}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{720397BB-E044-4231-B5EE-5C38933DBEAF}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\addonweb.exe | 
"{746C47FD-2A39-4EF3-8D6F-2CAEF1DEAF36}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm | 
"{75FC0F8A-E393-4079-8CBD-6804EEA0CB8D}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\anno4.exe | 
"{76D96553-6528-4996-A4BF-4CD15A5E0787}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\imperium romanum\imperium romanum.exe | 
"{78D3D06B-3BC1-4659-88C7-746D384EDA0B}" = protocol=17 | dir=in | app=c:\program files\sierra\swat 4\contentexpansion\system\swat4x.exe | 
"{79008010-6803-48E2-A1A6-980DD6C6117C}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{7A33559A-10F2-4DFE-9E1E-4FD17122B7B8}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\imperium romanum\imperium romanum.exe | 
"{7B1C3773-E40E-47E0-B982-9C58739B6671}" = protocol=6 | dir=in | app=c:\world of warcraft\launcher.exe | 
"{7B5B3278-C23C-413A-B194-1AA42A33A9AC}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{7F97D829-2831-4240-AE7A-8AB8BD7A351B}" = protocol=17 | dir=in | app=c:\star wars-the old republic\swtor\retailclient\swtor.exe | 
"{80FFB510-B067-4ED3-8A6D-910910C84518}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\autopatcher.exe | 
"{8315B2C4-615D-4AA4-AA34-5B84514627B8}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe | 
"{86A94068-5B79-4E62-A79F-F456B0F7376F}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"{86F3DEAC-E7C7-493A-8B57-100B5E04F19A}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe | 
"{8749EDA0-36A7-42FC-B830-7442EFEE0AA4}" = protocol=6 | dir=in | app=c:\world of warcraft\launcher.exe | 
"{87684327-499E-40E8-9A4C-0430E363BB1C}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\settlers 7 gold\data\base\_dbg\bin\release\settlers7r.exe | 
"{877D153C-70EB-448C-B8E9-F9604D019065}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm | 
"{8908510B-2ACA-4839-BF70-FB7E9F64AE7F}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\plants vs zombies\plantsvszombies.exe | 
"{895170D8-8495-4FF3-9713-4873142B888A}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{89F0A680-A620-4A0A-BB23-F1C50CF9D79B}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{8A8D39DF-BAC5-4232-AEA8-3C824A5D7A55}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{8B73B345-8924-4BF0-9A9D-B6981A7F7658}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\fallout new vegas\falloutnvlauncher.exe | 
"{8C1ECFB4-0F39-4A38-97A2-5CC8E9D708DC}" = protocol=17 | dir=in | app=c:\electronic arts\battlefield 3\bf3.exe | 
"{8E2AAA67-B68B-4D2A-9AD1-DBB5CA98C2A1}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{8F556B60-4374-4150-8C59-3E655A8C9DB0}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{9304F7B7-BFF1-4C4C-9988-6AD8C4122102}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{93BA3A98-1EE5-45CE-9129-94BD5375B988}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\empire total war\empire.exe | 
"{944C3218-F616-4133-B5AA-BD407B131641}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\magicka\magicka.exe | 
"{95BEA4F6-A785-4027-898E-63D8C21C68AA}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\anno5.exe | 
"{9B4558FC-F43A-4125-8E70-8FE1BDF6DD7C}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\fate of the world\bin\fotw.exe | 
"{9D0388E8-2694-4E8A-8D75-AD530D54DA8A}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\civilizationv.exe | 
"{9E2A732E-0C1D-4D1E-A9CE-DF79FAC9DA63}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\magicka\magicka.exe | 
"{9E90DE51-9AF8-4DDB-AAA4-A6C0C976BECD}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\magicka\magicka.exe | 
"{A240B747-F409-4B2F-90A2-694B3EA7B909}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\anno4.exe | 
"{A2D5B4A6-A80B-4DB1-A13A-DEB210F0C4EA}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\dawn of war ii - retribution\dow2.exe | 
"{A420D6D8-CF4B-4CFA-B4FC-AA8055410AC8}" = protocol=6 | dir=in | app=c:\steam\steam.exe | 
"{A5A53FA5-4BCE-4EDA-8AB6-4031B3FFB96B}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{A5AAF7C5-23CF-4F49-80C2-26A58FD91997}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\bully scholarship edition\bully.exe | 
"{A71071C9-3D0B-45FF-AE17-A269A896AD8C}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\x3 terran conflict\x3tc.exe | 
"{AA88F7D2-7F6A-4F87-8151-BE0DB6A16DE9}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v sdk\sid meier's civilization v sdk.exe | 
"{AB46307A-32EA-43B0-B2E4-77837CD9F238}" = protocol=17 | dir=in | app=c:\star wars-the old republic\swtor\retailclient\swtor.exe | 
"{AE642DDA-3EA0-4CAB-8A2D-786BF3E44375}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\addonweb.exe | 
"{AE853FEA-3CC4-44A9-A201-628D7D3BF18D}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\f.e.a.r. 3\f.e.a.r. 3.exe | 
"{AEBF1EC3-3262-4046-AEAE-C0BD41006F23}" = protocol=17 | dir=in | app=c:\electronic arts\battlefield 3\bf3.exe | 
"{AF04D870-8A4B-43FD-B7D0-008D31CC1946}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\magicka\magicka.exe | 
"{B08AAD0D-2C12-4A03-8559-FE39E4D8B0C2}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{B5C16823-0E87-4C34-BC78-4583AA2685F9}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\hearts of iron 3\hoi3game.exe | 
"{B60B9BCC-D482-458E-8D5A-6B32B49863AE}" = protocol=6 | dir=in | app=c:\program files\sierra\swat 4\contentexpansion\system\swat4x.exe | 
"{B7E203B9-7CDE-4D8C-BE8B-9D5CC2795D9A}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\anno4web.exe | 
"{B8DCAFD3-0C4D-4317-A3F2-23F38C7E38EB}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{BB0C2AC7-3129-490D-927D-74424B57D5F2}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe | 
"{BB5FD64A-02DD-4685-9038-D53C44BD4AEF}" = protocol=17 | dir=in | app=c:\electronic arts\fifa 12\game\fifa.exe | 
"{BC1DEAF9-8D74-4FF2-B0D6-7BDB3063BEAB}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\ibomber defense\game.exe | 
"{BC8A9184-4BED-4F6A-8718-42FE9DC7EA88}" = protocol=6 | dir=in | app=c:\electronic arts\fifa 12\game\fifa.exe | 
"{BE392200-B0A2-46DA-A7EC-D3817E314F8E}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\civilizationv.exe | 
"{BE8E8DB5-CF1A-4586-89C3-1378BAA9E947}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\hitman blood money\configure.exe | 
"{BFE3DE9E-BF08-4475-AC80-D87862353CE3}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{C4062346-98DB-4098-8984-68811A86F7CD}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{C444B041-AFA4-4132-B49B-49BD02F2BE6B}" = protocol=6 | dir=in | app=c:\program files\sierra\swat 4\contentexpansion\system\swat4xdedicatedserver.exe | 
"{C4E8520D-6C60-4422-903D-13300F952E30}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{C655F66D-5181-4042-8D4D-1645A067C10D}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\hitman blood money\configure.exe | 
"{C65894DD-0548-470A-ADC2-E8066580377D}" = protocol=6 | dir=in | app=c:\star wars-the old republic\launcher.exe | 
"{C9AFDFC9-AC94-43FD-AFD8-40D7FF007F27}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\hitman blood money\hitmanbloodmoney.exe | 
"{CB836586-EC79-48C5-BE89-201C9BE56EC1}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe | 
"{CD42739B-094D-4F9F-B187-B91E6E0E215D}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\hearts of iron 3\hoi3game.exe | 
"{CE66EEFE-0DD7-4C41-BEF3-EEDECEEC48A6}" = protocol=17 | dir=in | app=c:\ubisoft\die siedler - aufstieg eines königreichs\extra1\bin\settlers6.exe | 
"{CFA22BBF-7CEC-45A4-AB88-B6F3093A74BB}" = protocol=6 | dir=in | app=c:\star wars-the old republic\swtor\retailclient\swtor.exe | 
"{D0912AAB-D603-4459-8382-6E7A9EAFF5D3}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\initengine.exe | 
"{D0AAF2BF-FDCB-4E27-A511-92C7A74F94A6}" = protocol=6 | dir=in | app=c:\program files\2k games\firaxis games\sid meier's civilization iv colonization\colonization.exe | 
"{D28DE716-117B-4781-8F23-8AD0F97B51D4}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"{D3CA65E5-DDA0-4987-A514-DE3D9C15F56A}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\patrician iv\patrician4.exe | 
"{D7C73603-BFB7-4519-8C12-BAC36449E054}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe | 
"{DB0CE64D-E450-4929-9550-4CD7114F55D0}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{DC8A7C12-EB90-4E66-8A1B-89708610B3EB}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{DE253A1F-0CF9-4C6D-8527-6CC0A2DA06D1}" = protocol=6 | dir=in | app=c:\electronic arts\battlefield 3\bf3.exe | 
"{E0407028-AB3A-44FB-A3EC-1ADEC7A20348}" = protocol=1 | dir=in | app=c:\systemerkennung\sisoftware sandra lite 2010.sp3\wnt500x86\rpcsandrasrv.exe | 
"{E12F9F71-5BCA-47DF-8987-E791A705B57E}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | 
"{E16FEB45-72E3-4DED-9A62-DC25C72952DE}" = protocol=6 | dir=in | app=c:\ubisoft\die siedler - aufstieg eines königreichs\extra1\bin\settlers6.exe | 
"{E1B7195E-4003-4989-A328-2C8705EF128C}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\fate of the world\bin\fotw.exe | 
"{E21BE120-5FB9-4BC8-A751-29673D3D543D}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\cities in motion\cities in motion.exe | 
"{E89808B8-9A39-470D-A5F2-1D8E945942EC}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\addon.exe | 
"{E9EB099A-A16F-4DC3-BD7F-1766BFA5C54B}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\dead island\deadislandgame.exe | 
"{EB9B6468-4C62-46AA-8E8B-4A1602D09029}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\hearts of iron 3\hoi3game.exe | 
"{EBE36C49-83F7-4FB7-953B-2A9D39C4D8E2}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | 
"{EBE49005-213F-4866-AFBB-61D5DFEEAB09}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{EC41CDBF-B3A9-4056-8CCC-591DEC008CCF}" = protocol=6 | dir=in | app=c:\electronic arts\battlefield 3\bf3.exe | 
"{EFFBC369-6486-43A6-8A50-5896DF27860E}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{F38B46EE-B43E-4ADF-BD23-D947F373F49B}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{F4A7CC8B-EC28-416A-BE77-7339E3627FE1}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{F5917AA3-9B7C-4EBC-8CB7-795745F8694E}" = protocol=17 | dir=in | app=c:\star wars-the old republic\launcher.exe | 
"{F5ED8175-22B8-4FDB-BB5A-9DD3F13796AD}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{F89229E1-5506-4BE7-9DB1-AC6943299FF9}" = protocol=6 | dir=in | app=c:\steam\steamapps\common\dead island\deadislandgame.exe | 
"{FAE71874-44B7-4DBD-9645-28CD2A3860BE}" = protocol=17 | dir=in | app=c:\steam\steamapps\common\dawn of war ii - retribution\dow2.exe | 
"{FDE98933-1CA5-41F5-B9F3-E7B5E79B60AF}" = protocol=1 | dir=in | app=c:\systemerkennung\sisoftware sandra lite 2010.sp3\rpcagentsrv.exe | 
"TCP Query User{070F5DF7-B043-4434-A458-64C39BFE6BF3}C:\ubisoft\die siedler - aufstieg eines königreichs\extra1\bin\settlers6.exe" = protocol=6 | dir=in | app=c:\ubisoft\die siedler - aufstieg eines königreichs\extra1\bin\settlers6.exe | 
"TCP Query User{0E6B9099-398E-4A08-8DE1-C681B3BE943B}C:\freeciv-2.3.0-gtk2\freeciv-server.exe" = protocol=6 | dir=in | app=c:\freeciv-2.3.0-gtk2\freeciv-server.exe | 
"TCP Query User{17A258B6-E8BA-4ECA-83F1-62BC5B2F41D1}C:\program files\namco bandai games\warhammer® mark of chaos\warhammer.exe" = protocol=6 | dir=in | app=c:\program files\namco bandai games\warhammer® mark of chaos\warhammer.exe | 
"TCP Query User{2772024C-BFD0-4DAB-ADAA-B85C5CFB6B48}C:\program files\ubisoft\related designs\anno 1404\tools\worldeditor2.exe" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\worldeditor2.exe | 
"TCP Query User{2D013074-78C3-4B67-A32C-EED161417279}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"TCP Query User{2F7F94FC-A5BC-4D5C-85CB-BF0DD9735207}C:\program files\freeciv-2.1.9-gtk2\civserver.exe" = protocol=6 | dir=in | app=c:\program files\freeciv-2.1.9-gtk2\civserver.exe | 
"TCP Query User{5A4029BE-5A50-4AFC-8E17-A2E36A50AC27}C:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe" = protocol=6 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe | 
"TCP Query User{5BF0E037-2782-48DB-A447-C1A1E144DB6D}C:\program files\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | 
"TCP Query User{5C82B187-21FD-4C95-819A-82512D8289FC}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | 
"TCP Query User{65E64EA3-0516-421A-B079-13E6AC5437B0}C:\steam\steamapps\common\fable 3\fable3.exe" = protocol=6 | dir=in | app=c:\steam\steamapps\common\fable 3\fable3.exe | 
"TCP Query User{6AE5F2C7-18D6-4A52-ADF1-28886DE1C32B}C:\bethesda softworks\fallout 3\fallout3ng.exe" = protocol=6 | dir=in | app=c:\bethesda softworks\fallout 3\fallout3ng.exe | 
"TCP Query User{70BFD245-1769-47F7-9C0A-59B1DEDE54C3}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | 
"TCP Query User{756F0D35-9CE1-4FE9-9A1B-ACEAC85D0FAB}C:\program files\thq\dawn of war - soulstorm\w40kwa.exe" = protocol=6 | dir=in | app=c:\program files\thq\dawn of war - soulstorm\w40kwa.exe | 
"TCP Query User{75DEF9DC-F9D3-4605-BE84-324981B0019A}C:\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\world of warcraft\backgrounddownloader.exe | 
"TCP Query User{88F34AE0-E4B5-4F40-925E-1779D67A1F7D}C:\users\wolfi\downloads\yuleech-runes_of_magic_3_0_8_2349_slim_eu.exe" = protocol=6 | dir=in | app=c:\users\wolfi\downloads\yuleech-runes_of_magic_3_0_8_2349_slim_eu.exe | 
"TCP Query User{AC05B479-774D-4AB3-9319-A4CAFA2B8847}C:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe" = protocol=6 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe | 
"TCP Query User{AE6A629E-469B-4632-AE4C-343FA902E127}C:\program files\t-online\t-online_software_6\internet-telefon\phone.exe" = protocol=6 | dir=in | app=c:\program files\t-online\t-online_software_6\internet-telefon\phone.exe | 
"TCP Query User{B98B737E-1302-45A4-8FCD-8DD903F0FFAF}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"TCP Query User{C65EDDA3-37DE-403B-8DC9-16C2D4863F2F}C:\program files\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | 
"TCP Query User{C6985603-2E10-497E-8BCF-AD6458AE45D4}C:\steam\steamapps\common\dawn of war ii - retribution\dow2.exe" = protocol=6 | dir=in | app=c:\steam\steamapps\common\dawn of war ii - retribution\dow2.exe | 
"TCP Query User{C6A8ACEA-E85A-4E03-9498-A2B1152B1741}C:\program files\thq\dawn of war - soulstorm\soulstorm.exe" = protocol=6 | dir=in | app=c:\program files\thq\dawn of war - soulstorm\soulstorm.exe | 
"TCP Query User{D320752C-9DC8-4CCC-883C-5327B8671A48}C:\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\world of warcraft\backgrounddownloader.exe | 
"TCP Query User{DAA57DCA-12B6-4A49-89C0-FD0C3806F91A}C:\users\wolfi\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\wolfi\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{E8E751EE-57BA-4BD7-AD2C-8FABB190E872}C:\program files\clonk rage\clonk.exe" = protocol=6 | dir=in | app=c:\program files\clonk rage\clonk.exe | 
"TCP Query User{F74656D3-70CF-4A19-9E5E-4304471588E9}C:\steam\steamapps\common\defcon\defcon.exe" = protocol=6 | dir=in | app=c:\steam\steamapps\common\defcon\defcon.exe | 
"UDP Query User{017B2733-8465-4FDF-AE7E-68C2A944A710}C:\program files\t-online\t-online_software_6\internet-telefon\phone.exe" = protocol=17 | dir=in | app=c:\program files\t-online\t-online_software_6\internet-telefon\phone.exe | 
"UDP Query User{11C179FA-6BD6-4F99-BBD2-1FDDF8F1902A}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | 
"UDP Query User{174C030E-CE7C-4A61-914A-AD435ADA1410}C:\users\wolfi\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\wolfi\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{2280E25D-93BF-45CA-85DC-FC3FEFA439B7}C:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe" = protocol=17 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe | 
"UDP Query User{581E91FC-BDBD-4FF9-A768-CC2E9487706F}C:\freeciv-2.3.0-gtk2\freeciv-server.exe" = protocol=17 | dir=in | app=c:\freeciv-2.3.0-gtk2\freeciv-server.exe | 
"UDP Query User{5E65F330-EBA8-4C79-969B-C5A582B1250F}C:\users\wolfi\downloads\yuleech-runes_of_magic_3_0_8_2349_slim_eu.exe" = protocol=17 | dir=in | app=c:\users\wolfi\downloads\yuleech-runes_of_magic_3_0_8_2349_slim_eu.exe | 
"UDP Query User{68BCDB8F-9114-4C3A-9E0A-A8AD3AF5E497}C:\program files\freeciv-2.1.9-gtk2\civserver.exe" = protocol=17 | dir=in | app=c:\program files\freeciv-2.1.9-gtk2\civserver.exe | 
"UDP Query User{7A171C23-6426-403A-8218-02D8BB39BD17}C:\program files\clonk rage\clonk.exe" = protocol=17 | dir=in | app=c:\program files\clonk rage\clonk.exe | 
"UDP Query User{8636F866-CE14-495A-8641-567B94CAA36F}C:\steam\steamapps\common\dawn of war ii - retribution\dow2.exe" = protocol=17 | dir=in | app=c:\steam\steamapps\common\dawn of war ii - retribution\dow2.exe | 
"UDP Query User{87DFAF42-235A-4044-9E09-74985FB5A0B1}C:\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\world of warcraft\backgrounddownloader.exe | 
"UDP Query User{9143771E-0726-4BF5-9878-8340B241C1C3}C:\steam\steamapps\common\fable 3\fable3.exe" = protocol=17 | dir=in | app=c:\steam\steamapps\common\fable 3\fable3.exe | 
"UDP Query User{93954DB6-07B3-4060-B766-8766A0D854F0}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{98E169DE-788F-4CBC-9D26-EBE815704829}C:\program files\thq\dawn of war - soulstorm\w40kwa.exe" = protocol=17 | dir=in | app=c:\program files\thq\dawn of war - soulstorm\w40kwa.exe | 
"UDP Query User{9991C2B0-A12F-4834-B031-49FD079964F4}C:\program files\ubisoft\related designs\anno 1404\tools\worldeditor2.exe" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\worldeditor2.exe | 
"UDP Query User{A9ED01A5-A9FA-423C-9CE6-3EEA49CF2A0B}C:\program files\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | 
"UDP Query User{B2ED98CA-CABD-4501-9BB2-89BCE46000CE}C:\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\world of warcraft\backgrounddownloader.exe | 
"UDP Query User{C28F2F5A-6EFE-4C34-9B83-0DF797279CEE}C:\bethesda softworks\fallout 3\fallout3ng.exe" = protocol=17 | dir=in | app=c:\bethesda softworks\fallout 3\fallout3ng.exe | 
"UDP Query User{CBB9BC5B-570C-422B-8337-100110326000}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"UDP Query User{CBF44C31-9AB4-44CE-A887-0C9C1C9E93BD}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | 
"UDP Query User{CE125B3B-D8CB-4A20-A0E7-C00C085485D7}C:\steam\steamapps\common\defcon\defcon.exe" = protocol=17 | dir=in | app=c:\steam\steamapps\common\defcon\defcon.exe | 
"UDP Query User{D20695FB-30C2-4C6B-9D8C-90F1A4B7E163}C:\ubisoft\die siedler - aufstieg eines königreichs\extra1\bin\settlers6.exe" = protocol=17 | dir=in | app=c:\ubisoft\die siedler - aufstieg eines königreichs\extra1\bin\settlers6.exe | 
"UDP Query User{D3461B3A-6381-4143-AD5E-DF28F964A99C}C:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe" = protocol=17 | dir=in | app=c:\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe | 
"UDP Query User{FA0E3CC9-7670-4213-AA65-7C653C03FF99}C:\program files\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | 
"UDP Query User{FACB4B84-4067-492B-8B79-6580C5B7F3DC}C:\program files\namco bandai games\warhammer® mark of chaos\warhammer.exe" = protocol=17 | dir=in | app=c:\program files\namco bandai games\warhammer® mark of chaos\warhammer.exe | 
"UDP Query User{FE6CDEDD-F9C3-40D7-AAAA-42EA0513ED88}C:\program files\thq\dawn of war - soulstorm\soulstorm.exe" = protocol=17 | dir=in | app=c:\program files\thq\dawn of war - soulstorm\soulstorm.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{01501EBA-EC35-4F9F-8889-3BE346E5DA13}" = MSXML4 Parser
"{0215A652-E081-4B09-9333-DC85AAB67FFA}" = Adobe Dreamweaver CS5.5
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0805AE1C-D466-3264-0C8F-B05097BCD567}" = PC-Fahrschule 2009
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}" = Civilization III
"{0B5154C0-8F00-4616-B0AB-6240AE80D9CE}" = SimCity™ Societies
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{1111706F-666A-4037-7777-202328764D10}" = JavaFX 2.0.2
"{112B0ED9-57F8-4883-8E6A-5BEAABDABBC1}" = Crazy Machines II
"{138A4072-9E64-46BD-B5F9-DB2BB395391F}" = LWS VideoEffects
"{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi
"{15F02176-0D12-4FAF-B2CD-2767C7781427}" = Google SketchUp 8
"{15FA5ED6-2F98-4B5E-AF0B-18E5F4723FAD}_is1" = Cities In Motion
"{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main
"{174A3B31-4C43-43DD-866F-73C9DB887B48}" = LWS Twitter
"{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}" = Sound Blaster X-Fi
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1A3E23D7-7A1E-43EC-B35D-EB2A31BED943}" = Video DVD Maker v3.20.0.50
"{1A655D51-1423-48A3-B748-8F5A0BE294C8}" = Microsoft Visual J# .NET Redistributable Package 1.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20533183-D42D-4261-A125-956736FBEA8C}" = Dawn of War - Soulstorm
"{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin
"{2222706F-666A-4037-7777-202328764D10}" = JavaFX 2.0.2 sdk
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{23E445D5-FD83-4C50-A211-EB26A2975317}" = Adobe Flash Professional CS5.5
"{266C7330-C0F4-49E5-8F20-A56F9F822875}" = SweetIM Toolbar for Internet Explorer 3.3
"{26A24AE4-039D-4CA4-87B4-2F83217002FF}" = Java(TM) 7 Update 2
"{295C31E5-3F91-498E-9623-DA24D2FA2B6A}" = T-Online WLAN-Access Finder
"{29ED20C9-5E15-4969-9279-25BF3727A3DA}" = iTunes
"{2AA5F60A-389C-44F7-8B42-6D8FA4A20C02}" = Vokabeltrainer-A-Update 3.0.32
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}" = Microsoft Visual C++  Compilers 2010 Standard - enu - x86
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{32A3A4F4-B792-11D6-A78A-00B0D0170020}" = Java(TM) SE Development Kit 7 Update 2
"{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help
"{378BA9B5-DB6C-41DB-BE93-86CD198A8A9E}" = Guild 2 King's Edition
"{394BE3D9-7F57-4638-A8D1-1D88671913B7}" = Microsoft AppLocale
"{3A29CC30-8E1A-430C-8E5B-A52CA2F3F9DA}" = Die Gilde 2 Venedig Patch 3.5
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT
"{3F0D0ABE-CDAF-431A-00BC-CBBE018EA74E}" = SimCity 4 Deluxe
"{41A01180-D9FD-3428-9FD6-749F4C637CBF}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"{41B6EF3E-C5D2-4196-B915-7DDD8842F8C0}" = NVIDIA PerfSDK
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C2BF3B9-7E8A-49DE-B662-3656FE60BB01}" = Civ3 Conquests v1.22 Full
"{4C93C363-414E-11D4-9756-00C04F8EEB39}" = Macromedia Flash 5
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4f94b43a-8a00-4ac4-bb94-269cf24aef97}.sdb" = Dungeon Keeper 2
"{5157A26D-28AF-4E96-99EE-25D510437653}_is1" = SpaceChem
"{529125EF-E3AC-4B74-97E6-F688A7C0F1BF}" = Paint.NET v3.5.10
"{53735ECE-E461-4FD0-B742-23A352436D3A}" = Logitech Updater
"{54510837-257F-4E9A-B359-731000028301}" = Red Faction: Guerrilla
"{54510837-257F-4E9A-B359-731000038301}" = Red Faction: Guerrilla
"{557F9DCC-C0D8-427A-B9B0-4522F39E4AAD}" = GSFileViewer
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57BB52B7-6B7B-31F3-89F4-4EE8FE5CEF6D}" = Microsoft Help Viewer 1.1
"{5AB7D739-1735-3A9E-BE73-C43507CB4E6F}" = Microsoft Visual Studio 2010 Service Pack 1
"{5C81B189-5456-40C4-9313-7FE6FA6DD64C}" = Duden-Bibliothek
"{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}" = Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F499D33-546A-442B-B0F9-4C58F3B5B6E3}" = Cuttermaran 1.70
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{65FBA21B-7F80-4E4E-B275-0958D2648F94}_is1" = Java-Editor 9.19b, 2010.01.31
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B3CA80E-6AC0-4725-BABF-9B0FEF880CB3}" = Power Tab Editor 1.7
"{6BCB7EAA-598C-4836-B7EA-3642E41AA222}" = Microsoft LifeCam
"{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71929EC1-FDB2-4A67-AAAD-936E4539FA84}_is1" = Driver Sweeper 2.1.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{73EC658D-A1C6-40CA-8E86-E05821BAACE7}" = Java DB 10.6.2.1
"{74A84478-70A5-4F7A-966C-FA2771FF91A5}_is1" = Patch v2.2
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7958FD50-F724-4A8A-B7B7-F90F6DAF56C2}" = Sim Brothel
"{7B08D306-7266-4647-A926-2F78817ED1E0}" = Microsoft Corporation
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}" = NVIDIA PhysX
"{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1" = Hex-Editor MX
"{8043219B-D2C0-4561-90AB-3F1113ED5A87}" = HERRSCHER DES OLYMP - ZEUS & HERRSCHER von ATLANTIS - POSEIDON
"{8283FCCD-AC71-4DC1-A81E-4F244FBBE11D}" = T-Online 5.0
"{82D040D1-F95B-4C96-AF5C-B6A1E138EC6E}" = �¹–ë‚̉S
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger
"{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher
"{86365a09-8271-4eb1-93c8-812a2118ab67}" = Nero 9 Lite
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software
"{89661B04-C646-4412-B6D3-5E19F02F1F37}" = EAX4 Unified Redist
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader
"{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8}" = SWAT 4
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{91E04CA7-0B13-4F8C-AA4D-2A573AC96D19}" = Windows Live Essentials
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97E12F84-C033-4DA2-97D2-F540C3E292EA}" = Installer
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B0F9788-3141-4009-846E-52E59843E963}" = SimCity™ Societies
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CA5D9C5-9F31-4019-88DC-3DF500DB3605}" = gDEBugger
"{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin
"{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}" = Apple Mobile Device Support
"{A06F5ACB-AF59-4DC0-B22E-1F6F47FC7004}" = Microsoft Reader Text-to-Speech deutsch
"{A2B3C27C-1F09-47C6-9A90-9683BEFD7963}" = Dawn of War - Soulstorm
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A8740268-638C-4AD4-BB8A-9B1E5C493A30}" = PowerArchiver 2010 German
"{AC4C38FD-A54C-4CA5-92EE-D983CD81293E}" = Microsoft Xbox 360 Accessories 1.2
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.2) - Deutsch
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4
"{B1275E23-717A-4D52-997A-1AD1E24BC7F3}" = T-Online 6.0
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.11.0621
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.2.24.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B440D659-FECA-4BDD-A12B-5C9F05790FF3}" = Snagit 9.1.2
"{B48E264C-C8CD-4617-B0BE-46E977BAD694}" = ANNO 2070
"{B5DD0F28-0167-4F1E-A114-06AB8DC82D81}" = Die Gilde 2 Venedig
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{B6F7DBE7-2FE2-458F-A738-B10832746036}" = Microsoft Reader
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{BD7F0533-243E-4CCF-B97C-BAD08510E7BC}" = Vokabeltrainer 3.0 Hebräisch - Griechisch - Lateinisch
"{BDE646E8-86E0-50E1-37BC-0AEBB2185D76}" = Adobe Widget Browser
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{C05BC4CD-C001-37E7-939C-3392604DFBEF}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU
"{C3113E55-7BCB-4de3-8EBF-60E6CE6B2296}_is1" = SiSoftware Sandra Lite 2010.SP3
"{C4E2A4A7-B623-40CB-8EEA-72F577E49D56}" = Vampire - The Masquerade Bloodlines
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{C83CD843-260E-3BD0-86BC-4E613BFDDE0A}" = Microsoft Help Viewer 1.1 Language Pack - DEU
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D1C7BB12-BE01-11DC-AAC9-EEBA55D89593}" = SimCity™ Societies Reisewelten
"{D3F80A98-05AB-4D8C-9272-766CCFA6A48D}" = DIE SIEDLER - Aufstieg eines Königreichs (Alle Produkte)
"{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam-Software
"{D7BF3B76-EEF9-4868-9B2B-42ABF60B279A}" = Microsoft_VC80_CRT_x86
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{D98C9637-93DA-44DB-B73A-B11A1192AB26}" = GameShadow
"{DA47ABC4-52DF-468D-988D-B9E768A3DF52}" = Pizza Connection 2
"{DC627AE5-A2B1-4D16-AF56-178D10EC3E81}" = KeyMan V4.0 Build 5
"{DE5C9428-3DA7-4A0C-B5E0-16031B5DC030}_is1" = The Guild 2 - Renaissance
"{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb" = Microsoft Windows Application Compatibility Database
"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{E1845F1C-068C-F8F4-D31D-D3540D47C453}" = Adobe Download Assistant
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E3A64E20-EDA4-4B93-9176-FD3B4C7B085F}" = TransportGigant: Down Under
"{E71AC707-179D-458D-A1E8-F52977CAEAB4}" = M.U.D. TV
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{EA8ADAA9-6671-4839-A51E-0C6792B78F3E}" = FIFA 12
"{EED027B7-0DB6-404B-8F45-6DFEE34A0441}" = LWS Video Mask Maker
"{EF36A836-BF89-4A4F-B079-057B0C68C1E0}" = Sid Meier's Civilization IV Colonization
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F31BC49F-AB7B-4A53-A399-EB7331B585BC}" = Civilization III: Conquests
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}" = Vista Codec Package
"{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1" = StreamTransport version: 1.0.2.2171
"{FB326C8F-DA81-4764-B994-6D3D6C4796A9}_is1" = Domingo 2 Version 2.1.1.
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{THEGUILDREN-0010-2010-300520102330}_is1" = Patch v4.15
"3D-Fahrschule" = 3D-Fahrschule
"7-Zip" = 7-Zip 4.65
"AC3Filter" = AC3Filter (remove only)
"Access 97rt PAN EURO G" = Access 97rt PAN EURO G
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Afterburner" = MSI Afterburner 2.1.0
"Age of Empires Gold 1.0" = Microsoft Age of Empires Gold
"Airline Tycoon - Deluxe" = Airline Tycoon - Deluxe
"Akamai" = Akamai NetSession Interface Service
"ALchemy" = Creative ALchemy
"ALchemy X-Fi" = Creative ALchemy (X-Fi Edition)
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.9
"AnalogX AutoTune" = AnalogX AutoTune
"Audacity_is1" = Audacity 1.2.6
"AudioCS" = Creative Audio-Systemsteuerung
"AutoGK" = Auto Gordian Knot 2.55
"AVIcodec" = AVIcodec (remove only)
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"AviSynth" = AviSynth 2.5
"Battlelog Web Plugins" = Battlelog Web Plugins
"Caesar 3" = Caesar 3
"CCleaner" = CCleaner
"cFos" = cFos 2000/XP/Vista DSL/ISDN Driver 7.53.3089
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Cheat Engine 6.1_is1" = Cheat Engine 6.1
"Civ3MultiTool_is1" = Civ3MultiTool
"Clonk Rage" = Clonk Rage
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1" = Adobe Widget Browser
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2009-09-09
"CPU-Control_is1" = CPU-Control
"CPUCooL" = CPUCooL (remove only)
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.59
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"Creative Sound Blaster Properties" = Eigenschaften von Creative Sound Blaster
"Defraggler" = Defraggler
"Die 15 beliebtesten Kartenspiele_is1" = Die 15 beliebtesten Kartenspiele
"Die Gilde Gold-Edition" = Die Gilde Gold-Edition
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX-Setup
"Driver Cleaner Pro" = DH Driver Cleaner Professional Edition
"Dungeon Keeper 2_is1" = Dungeon Keeper 2
"DVD Flick_is1" = DVD Flick 1.3.0.7
"ESET Online Scanner" = ESET Online Scanner v3
"ESN Sonar-0.70.4" = ESN Sonar
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Explorer Suite_is1" = Explorer Suite III
"Fallout Mod Manager_is1" = Fallout Mod Manager 0.11.9
"ffdshow_is1" = ffdshow [rev 1324] [2007-07-01]
"Freeciv-2.1.9-gtk2" = Freeciv 2.1.9 (GTK+ client)
"Freeciv-2.3.0-gtk2" = Freeciv 2.3.0 (GTK+ client)
"FUSSBALL MANAGER 12" = FUSSBALL MANAGER 12
"GameWiz32" = GameWiz32
"Guitar Pro 5_is1" = Guitar Pro 5.0
"HijackThis" = HijackThis 2.0.2
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Indeo® Software" = Indeo® Software
"InstallShield_{149464D9-B06F-4505-9968-FD1206F67AD3}" = Call of Duty(R) - World at War(TM) 1.3 Patch
"InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch
"InstallShield_{97EE1BAC-C04F-4935-8110-B1BBAB99D09D}" = Call of Duty(R) - World at War(TM) 1.4.1 Patch
"InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty(R) - World at War(TM) 1.1 Patch
"InstallShield_{C4E2A4A7-B623-40CB-8EEA-72F577E49D56}" = Vampire - The Masquerade Bloodlines
"InstallShield_{CC862A04-B2B0-4A79-ADD2-4B76D6CF4DCD}" = Call of Duty(R) - World at War(TM) 1.4 Patch
"LucasArts' Rogue Squadron" = LucasArts Rogue Squadron
"Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281)
"Magic Set Editor 2_is1" = Magic Set Editor 2.0.0
"Magic The Gathering - Duels of the Planeswalkers 2012_is1" = Magic The Gathering - Duels of the Planeswalkers 2012
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.60.1.1000
"McAfee Security Scan" = McAfee Security Scan Plus
"MegaTrainer eXperience_is1" = MegaTrainer eXperience V1.0.2.8
"MegaTrainer XL_is1" = MegaTrainer XL V1.5.8.0
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.1" = Microsoft Help Viewer 1.1
"Microsoft Help Viewer 1.1 Language Pack - DEU" = Microsoft Help Viewer 1.1 Language Pack - DEU
"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU
"Microsoft Visual Studio 2010 Service Pack 1" = Microsoft Visual Studio 2010 Service Pack 1
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU" = Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU
"Mix-FX" = Mix-FX
"MozBackup" = MozBackup 1.4.9
"Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de)
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"OpenTTD" = OpenTTD 1.0.1
"Origin" = Origin
"pcsx2-r4600" = PCSX2 - Playstation 2 Emulator
"PokerStars.net" = PokerStars.net
"ProtectDisc Driver 11" = ProtectDisc Driver, Version 11
"PSXMemTool" = PSXMemTool 1.20b (remove only)
"PunkBusterSvc" = PunkBuster Services
"RealAlt_is1" = Real Alternative 2.0.2
"Revo Uninstaller" = Revo Uninstaller 1.93
"RivaTuner" = RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
"ScummVM_is1" = ScummVM 0.13.1a
"Shockwave" = Shockwave
"Sierra-Dienstprogramme" = Sierra-Dienstprogramme
"SMPlayer" = SMPlayer 0.6.8
"SpeedFan" = SpeedFan (remove only)
"ST6UNST #1" = Hero Editor V1.04
"Starcraft" = Starcraft
"Steam App 104000" = iBomber Defense
"Steam App 10500" = Empire: Total War
"Steam App 105400" = Fable III
"Steam App 105600" = Terraria
"Steam App 12200" = Bully: Scholarship Edition
"Steam App 1520" = DEFCON
"Steam App 16830" = Sid Meier's Civilization V SDK
"Steam App 21100" = F.E.A.R. 3
"Steam App 23400" = Imperium Romanum: Gold Edition
"Steam App 25890" = Hearts of Iron III
"Steam App 2820" = X3: Terran Conflict
"Steam App 32460" = Monkey Island 2: Special Edition
"Steam App 340" = Half-Life 2: Lost Coast
"Steam App 3590" = Plants vs. Zombies: Game of the Year
"Steam App 42910" = Magicka
"Steam App 49400" = Magic: The Gathering - Duels of the Planeswalkers
"Steam App 55040" = Atom Zombie Smasher 
"Steam App 56400" = Warhammer® 40,000®: Dawn of War® II – Retribution™
"Steam App 57620" = Patrician IV: Steam Special Edition
"Steam App 6860" = Hitman: Blood Money
"Steam App 70120" = Hacker Evolution Duality
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 73010" = Cities in Motion
"Steam App 80200" = Fate of the World
"Steam App 8930" = Sid Meier's Civilization V
"Steam App 91310" = Dead Island
"SUPER ©" = SUPER © Version 2009.bld.36 (June 10, 2009)
"SYBEX.PC-Fahrschule09.0B79F3AA8BA7B28571920BBC33ADF06D54740292.1" = Die neue PC-Fahrschule 2009
"SysInfo" = Creative Systeminformationen
"SystemRequirementsLab" = System Requirements Lab
"TreeSize Free_is1" = TreeSize Free V2.5
"Uplink" = Uplink
"VirtualCloneDrive" = VirtualCloneDrive
"VLC media player" = VLC media player 1.1.11
"VobSub" = VobSub v2.23 (Remove Only)
"Warcraft III" = Warcraft III
"WaveStudio 7" = Creative WaveStudio 7
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinGimp-2.0_is1" = GIMP 2.6.7
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"WinVDIG_is1" = WinVDIG 1.0.5
"World of Warcraft" = World of Warcraft
"Xilisoft DVD Creator" = Xilisoft DVD Creator
"XnView_is1" = XnView 1.98
"XviD MPEG4 Video Codec" = XviD MPEG4 Video Codec (remove only)
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"0ac7d207f51cb75e" = Text2Speech
"Akamai" = Akamai NetSession Interface
"Tropico 4" = Tropico 4 1.00
"UnityWebPlayer" = Unity Web Player
"Warcraft III" = Warcraft III: All Products
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 02.02.2012 12:19:35 | Computer Name = Wolfi-PC | Source = EventSystem | ID = 4609
Description = 
 
Error - 02.02.2012 12:20:26 | Computer Name = Wolfi-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 02.02.2012 12:25:45 | Computer Name = Wolfi-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 02.02.2012 12:43:42 | Computer Name = Wolfi-PC | Source = Application Hang | ID = 1002
Description = Programm 84y3h25h.exe, Version 1.0.15.15641 arbeitet nicht mehr mit
 Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: af4  Anfangszeit: 01cce1c956a0c80f  Zeitpunkt
 der Beendigung: 7799
 
Error - 02.02.2012 12:48:10 | Computer Name = Wolfi-PC | Source = Perflib | ID = 1010
Description = 
 
Error - 03.02.2012 09:39:44 | Computer Name = Wolfi-PC | Source = EventSystem | ID = 4609
Description = 
 
Error - 03.02.2012 09:40:52 | Computer Name = Wolfi-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 03.02.2012 12:03:53 | Computer Name = Wolfi-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 03.02.2012 12:10:32 | Computer Name = Wolfi-PC | Source = EventSystem | ID = 4609
Description = 
 
Error - 03.02.2012 12:11:36 | Computer Name = Wolfi-PC | Source = WinMgmt | ID = 10
Description = 
 
[ Media Center Events ]
Error - 03.09.2009 14:56:36 | Computer Name = Wolfi-PC | Source = Media Center Guide | ID = 0
Description = Ereignisinformationen: ERROR: SqmApiWrapper.TimerRecord failed; Win32
 GetLastError returned 10000105  Prozess: DefaultDomain Objektname: Media Center Guide

 
Error - 15.10.2010 14:02:43 | Computer Name = Wolfi-PC | Source = Media Center Guide | ID = 0
Description = Ereignisinformationen: ERROR: SqmApiWrapper.TimerRecord failed; Win32
 GetLastError returned 10000105  Prozess: DefaultDomain Objektname: Media Center Guide

 
[ OSession Events ]
Error - 14.03.2009 05:02:56 | Computer Name = Wolfi-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
 12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 1172
 seconds with 960 seconds of active time.  This session ended with a crash.
 
Error - 20.03.2010 12:48:19 | Computer Name = Wolfi-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1119
 seconds with 360 seconds of active time.  This session ended with a crash.
 
Error - 06.04.2011 02:32:05 | Computer Name = Wolfi-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 31.05.2011 09:12:46 | Computer Name = Wolfi-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 24.08.2011 12:09:21 | Computer Name = Wolfi-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 17.12.2011 11:30:43 | Computer Name = Wolfi-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 26
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 17.12.2011 11:32:32 | Computer Name = Wolfi-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 0
 seconds with 0 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 03.02.2012 12:03:54 | Computer Name = Wolfi-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 03.02.2012 12:10:26 | Computer Name = Wolfi-PC | Source = DCOM | ID = 10005
Description = 
 
Error - 03.02.2012 12:10:32 | Computer Name = Wolfi-PC | Source = DCOM | ID = 10005
Description = 
 
Error - 03.02.2012 12:10:33 | Computer Name = Wolfi-PC | Source = DCOM | ID = 10005
Description = 
 
Error - 03.02.2012 12:10:36 | Computer Name = Wolfi-PC | Source = DCOM | ID = 10005
Description = 
 
Error - 03.02.2012 12:10:36 | Computer Name = Wolfi-PC | Source = DCOM | ID = 10005
Description = 
 
Error - 03.02.2012 12:11:37 | Computer Name = Wolfi-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 03.02.2012 12:11:37 | Computer Name = Wolfi-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 03.02.2012 12:11:37 | Computer Name = Wolfi-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 03.02.2012 13:54:56 | Computer Name = Wolfi-PC | Source = DCOM | ID = 10005
Description = 
 
[ TuneUp Events ]
Error - 11.10.2009 12:02:48 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
Error - 11.10.2009 12:03:58 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
Error - 15.10.2009 13:11:43 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
Error - 29.10.2009 09:09:18 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
Error - 04.12.2009 07:51:46 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
Error - 04.12.2009 12:06:37 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
Error - 04.12.2009 15:35:15 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
Error - 05.12.2009 09:24:08 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
Error - 05.12.2009 13:30:37 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
Error - 06.12.2009 09:28:18 | Computer Name = Wolfi-PC | Source = TuneUp Program Statistics | ID = 131840
Description = 
 
 
< End of report >
         

Hey cosinus,

habe das hier angesprochene Problem beseitig. Wäre aber nett, wenn du den Thread noch 24h auflassen könntest. Wenn ich bisdahin nichts poste, kann hier zu gemacht werden.

Trotzdem danke