Hallo!

Seit einiger Zeit habe Ich ein sehr merkwürdiges Problem mit meinem Windows 7 64bit System. Wenn Ich mein PC starte passiert es manchmal das der PC einfach komplett einfriert und es passiert nichts mehr. Ich kann nichts anklicken und nichts starten und muss den PC per Knopf neustarten. Außerdem iist es mir Heute auch noch passiert das meine Treiber für die Soundkarte einfach weg waren, zudem installiert Windows keine Updates mehr und seit heute kann ich keine Daten von Ordner zu Ordner oder vom Desktop zu Ordner/Papierkorb mehr bewegen. Es klappt einfach nicht, wenn Ich eine Datei auswähle und Sie irgendwohin verschieben will = Nichts. Die Funktion für Drag & Drop bei Windows ist eingeschaltet, aber es will einfach nicht klappen. Ich befürchte Mittlerweile das Ich mir irgendein Trojaner oder irgendwas eingefangen hat der mein System nach und nach Schrottet!

Paar Infos:

-Windows 7 64bit
-Kaspersky Anti-Virus

und hier noch die Logs von OTL und Defogger:

OTL:

OTL logfile created on: 14.06.2012 20:37:53 - Run 1
OTL by OldTimer - Version 3.2.48.0 Folder = C:\Users\Niko\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

15,97 Gb Total Physical Memory | 13,92 Gb Available Physical Memory | 87,12% Memory free
31,95 Gb Paging File | 29,65 Gb Available in Paging File | 92,82% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,14 Gb Total Space | 28,27 Gb Free Space | 23,73% Space Free | Partition Type: NTFS
Drive D: | 1862,89 Gb Total Space | 1428,03 Gb Free Space | 76,66% Space Free | Partition Type: NTFS
Drive E: | 172,33 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive H: | 14,83 Gb Total Space | 6,38 Gb Free Space | 42,99% Space Free | Partition Type: FAT32

Computer Name: NIKO-PC | User Name: Niko | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.06.14 20:33:38 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Niko\Desktop\OTL.exe
PRC - [2012.06.14 18:51:37 | 000,874,384 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
PRC - [2012.06.14 18:51:37 | 000,800,656 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\pluginwrapper\opera_plugin_wrapper.exe
PRC - [2012.05.03 08:31:10 | 000,158,856 | R--- | M] (Skype Technologies) -- C:\Program Files (x86)\Skype\Updater\Updater.exe
PRC - [2012.04.04 07:53:56 | 000,815,512 | ---- | M] (Adobe Systems Inc.) -- D:\Programme\Photoshop Cs6\Acrobat 10.0\Acrobat\acrotray.exe
PRC - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.02.28 17:38:56 | 001,987,976 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.02.27 14:43:07 | 000,801,792 | ---- | M] (Yuna Software) -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
PRC - [2012.02.13 21:19:20 | 000,193,816 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe
PRC - [2011.03.22 19:08:06 | 000,284,184 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2010.11.21 05:24:27 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
PRC - [2007.09.02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe

OTL Extras logfile created on: 14.06.2012 20:37:53 - Run 1
OTL by OldTimer - Version 3.2.48.0 Folder = C:\Users\Niko\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

15,97 Gb Total Physical Memory | 13,92 Gb Available Physical Memory | 87,12% Memory free
31,95 Gb Paging File | 29,65 Gb Available in Paging File | 92,82% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,14 Gb Total Space | 28,27 Gb Free Space | 23,73% Space Free | Partition Type: NTFS
Drive D: | 1862,89 Gb Total Space | 1428,03 Gb Free Space | 76,66% Space Free | Partition Type: NTFS
Drive E: | 172,33 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive H: | 14,83 Gb Total Space | 6,38 Gb Free Space | 42,99% Space Free | Partition Type: FAT32

Computer Name: NIKO-PC | User Name: Niko | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.txt [@ = txtfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- D:\Programme\Photoshop Cs6\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- D:\Programme\Photoshop Cs6\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{180BB45B-2DB3-4281-8417-D26FF511EE66}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1B0CDD00-F05F-49A3-AADD-91B905B1D241}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2408E42D-F82A-4A6B-A3A8-A549B3716243}" = lport=7935 | protocol=6 | dir=in | name=adobe flash builder 4.6 |
"{26E22070-9AB0-44A1-99CD-934DC0B316D5}" = lport=137 | protocol=17 | dir=in | app=system |
"{30893598-B8DF-4338-98D8-2F9B4DF7EB7F}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{39AF3657-DE8D-4D8C-BB24-E91430510203}" = rport=10243 | protocol=6 | dir=out | app=system |
"{4174D074-D75B-4C61-A2FE-274A5533B137}" = rport=138 | protocol=17 | dir=out | app=system |
"{418FCEAC-C364-47B0-A510-2AA3C2A6280D}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{61A56262-FCEE-4AC6-943D-546BD0C5B3E1}" = rport=139 | protocol=6 | dir=out | app=system |
"{6D118418-0394-4B45-A594-BBDBBDA8C980}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{93D7E70F-834C-4268-B4EC-184B1AD561CA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A2FAFC3E-DFB0-4B09-B939-EC7A80F53F0E}" = lport=445 | protocol=6 | dir=in | app=system |
"{A73825E6-9050-4870-A884-DB37ECD62E3A}" = rport=137 | protocol=17 | dir=out | app=system |
"{AF311C17-A26C-4391-B071-06882F9530D2}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{BFE00E19-5E9B-41CD-AF9A-F853129636B0}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{C2041CAC-BB55-41A4-BC5E-2371063A05E9}" = rport=445 | protocol=6 | dir=out | app=system |
"{C3C0C683-6681-4BBB-AFA1-8F440AE5849A}" = lport=10243 | protocol=6 | dir=in | app=system |
"{CF1076C0-27A8-4EDC-BBE5-A66F90C06543}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{D0DD6494-C6CA-4C24-9CF6-C6073684DC29}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E21D25E5-B76E-4B23-9722-B52B2F4DE3BE}" = lport=138 | protocol=17 | dir=in | app=system |
"{E4BDADA9-B9C9-448E-A6AE-B59B7A1113A1}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{EC162CF6-18B2-437A-8331-07FB7441365E}" = lport=2869 | protocol=6 | dir=in | app=system |
"{F7BC8E42-01AA-47B2-8AA9-558D109CA94A}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FEDD2FDD-84A4-434B-9B74-76B4D413FC55}" = lport=139 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{004FDFD5-E6FD-49A1-9DCC-26801B84826F}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{03B41988-3C62-46EB-88A8-684D19BF2C87}" = protocol=6 | dir=in | app=d:\programme\maxpayne3\playmaxpayne3.exe |
"{09922F91-DBB9-4D09-8F83-6D6F1641E45B}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{0B654B73-E44E-46C5-8B67-8420D1993D6C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0E41AE5A-AC38-474A-9B85-9C5FD48D0BB2}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\max payne 3\playmaxpayne3.exe |
"{1054763C-FD9D-4682-915A-0953F572C707}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\grand theft auto iv\gtaiv\launchgtaiv.exe |
"{22B7F51D-215C-45D5-B632-ED9C0E88185F}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{27D9AD27-267E-4C6C-849A-431F883F75D2}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe |
"{28B324C3-4F08-4B82-97F4-A83C585693C9}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\resident evil 5\launcher.exe |
"{28F8D70B-F1D1-409E-B92B-3CFB69BB1E41}" = protocol=6 | dir=in | app=d:\programme\starcraft ii\starcraft ii.exe |
"{296DB73D-2E84-4844-8DED-A3930D45A6AE}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\crysis 2\bin32\crysis2.exe |
"{3561A343-3CE9-4277-9E7F-E87AA949898C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{35C3EF59-D612-4946-B2DA-AD556FF43EFC}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{3646CDD8-0E8B-41B3-A175-63A069E86C31}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{381709C6-4306-4B6C-9A9A-83C32D7D3659}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\rage\rage.exe |
"{39088708-284D-434C-8DF8-ECDEDEE77603}" = protocol=6 | dir=in | app=d:\programme\diablo 3\diablo iii\diablo iii.exe |
"{39804BF6-D58F-4675-B063-1CA6E9998CDA}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe |
"{3E3F8C11-9ADC-4129-8D3C-BB7E850C4A96}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3E510064-5F3C-40CB-86F6-87CD0D6671FE}" = protocol=6 | dir=in | app=d:\programme\photoshop cs6\adobe flash builder 4.6\flashbuilder.exe |
"{41369DCF-F158-45DB-9314-B19273FB98DF}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\dead island\deadislandgame.exe |
"{4274820A-172D-421A-B404-8F0E8BEF5766}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{4581DC0A-8DC6-478E-BF36-14080902DA83}" = protocol=58 | dir=in | app=system |
"{490F0912-D6FE-4C13-868A-CD9F4DD602DA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4BB1BE08-D8EC-441E-8C4F-5D15A8681027}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{4CD604F4-25A0-400B-BE0F-0BCAF44BA197}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4E2BCDF2-D57C-448E-AD0E-D2DB71FCDB80}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{507257F2-8694-4B2A-852D-9CE10AC03C2A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{51DCCDF2-BF27-4309-9BD3-AA127ED0CA5E}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{57E1E717-384D-49B0-B9E8-BE3FFF9BA6B0}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{59089692-7AE5-429A-BD7E-FF6668A53BA1}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{5CD98C6D-F628-4273-AD8E-7E6561D3D657}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\dxhrml\dxhrml.exe |
"{5FAC544D-C6CD-4D4D-BD56-25FB527B3140}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{6124C967-2DED-4137-BC7B-7F5BC2E67C79}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\crysis 2\support\ea help\electronic_arts_technical_support.htm |
"{624DDA48-EF90-46FF-9749-C7B6902D770A}" = protocol=17 | dir=in | app=d:\programme\maxpayne3\playmaxpayne3.exe |
"{63B4F2E3-626E-4593-B02E-7BD59A9AF490}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\deus ex - human revolution\dxhr.exe |
"{66DE03A3-F310-4401-B182-29C2E1A00548}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\dead island\deadislandgame.exe |
"{6C3DA334-7A36-4124-9B05-885EFD1A365E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{6D4A95EA-15ED-443B-9A29-00679E95C3D0}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{6F4083C9-B88C-4F9F-AFC6-0B60E6A75656}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{70C1F4D8-DA07-4875-B829-DDF81ACC3316}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{716669AC-EDE1-423D-8862-36C30AA1519D}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{729E0F03-EB93-4788-8FCD-04A8FE2D28EE}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\left 4 dead\left4dead.exe |
"{783C88EE-5D92-4ACF-8E35-53D9C3E28ECE}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe |
"{792C7C38-72BA-4F22-9CC6-8485ED270FD8}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{7A843500-149B-40B1-A0D4-A2A86788449F}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\grand theft auto iv\gtaiv\launchgtaiv.exe |
"{7E3D174F-40EA-4456-9462-75D0D1CD894D}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\crysis 2\support\ea help\electronic_arts_technical_support.htm |
"{7ED2F54B-3AFF-4598-A7A7-B2DE5D910F1E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{8783AC04-0E66-476A-BB8A-03EC65F52494}" = protocol=17 | dir=in | app=d:\programme\starcraft ii\starcraft ii.exe |
"{87ACC631-A011-46B5-9A0A-F15F8885F6E9}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{89F6F8DA-738A-4A76-A2B6-3360E7405DAB}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{8C756446-BF47-4FE1-9635-DCAD302D71C7}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{92F9DAB9-C62B-4882-BC0B-A40E60E139AF}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{975D2D82-736A-4B61-94CC-27CA64F9A645}" = protocol=17 | dir=in | app=d:\programme\diablo 3\diablo iii\diablo iii.exe |
"{97D34376-802F-4921-8B2F-36B0473C8E8F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{9B80BA43-559A-46B5-8D7B-7D36A702CFF4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9F979F86-6231-4F47-A2A8-FA5D0A9FC790}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\resident evil 5\launcher.exe |
"{9FE02F92-EEAB-40E4-AA20-21BFDFE6AF94}" = protocol=6 | dir=in | app=d:\programme\mass effect 3\mass effect 3\binaries\win32\masseffect3.exe |
"{A03D51A8-31BC-494A-8FA2-71CB3895E1BF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A5042725-A758-4F4D-9C64-E49837E23B64}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{A5F94CCB-17E1-464B-BEDE-4BFBDB1B54FE}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\max payne 3\playmaxpayne3.exe |
"{A98984AE-F18B-4322-B427-28250A662A60}" = protocol=6 | dir=out | app=system |
"{AD1C3CBB-2F7F-4450-9B4C-9861EA87D7B0}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\crysis 2\bin32\crysis2.exe |
"{ADFD10E3-9753-42BF-B254-E96FAE60D304}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B25BC064-A339-426B-B934-9D0720EE1F67}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\dxhrml\dxhrml.exe |
"{B4D381D8-1F0B-4AFA-ADE4-F50A499BE39B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B763C9F7-4D12-4B9C-8771-ED2240A123CB}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\deus ex - human revolution\dxhr.exe |
"{B7BD00CC-6500-457B-AB0E-0C7A6693CDA1}" = protocol=17 | dir=in | app=d:\programme\steam\steam.exe |
"{B9C0A903-5EB9-4095-93C7-F0580F20022C}" = protocol=6 | dir=in | app=d:\programme\steam\steam.exe |
"{BB20B22E-FFB1-4947-8D68-FE2643CA4230}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{BB27CA6F-C448-4C2E-80B1-F7A764CB2186}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\launcheflc.exe |
"{C24F25AB-28DB-44BE-BE91-82C24234DF87}" = protocol=17 | dir=in | app=d:\programme\mass effect 3\mass effect 3\binaries\win32\masseffect3.exe |
"{CA2B078F-3CDE-4F71-9F1E-453253C384E7}" = protocol=17 | dir=in | app=c:\users\niko\appdata\roaming\dropbox\bin\dropbox.exe |
"{D90A0C2B-25C2-4B5D-8A0F-6F90AF013527}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\launcheflc.exe |
"{DB207AB7-D8AC-44A3-A9B3-13E1498D8D76}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\left 4 dead\left4dead.exe |
"{DF35A472-E0FA-4AFF-94CF-AF5B0D62FA3C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe |
"{EF3CA071-3BA9-49B5-8AF9-5616C7C26BC8}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{F474A213-199C-4F85-B3DA-DA2CA2C2B54D}" = protocol=17 | dir=in | app=d:\programme\photoshop cs6\adobe flash builder 4.6\flashbuilder.exe |
"{F5949B5B-90E7-4C95-A0FD-39CA5423AA1D}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{F61C7C61-6ED9-4700-9350-92FF8C68381E}" = protocol=6 | dir=in | app=c:\users\niko\appdata\roaming\dropbox\bin\dropbox.exe |
"{FCE687B8-9695-4831-AD56-C6870B928841}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\rage\rage.exe |
"TCP Query User{3FC9E28F-4E87-4F63-8588-9F62D29D1B71}D:\programme\maxpayne3\maxpayne3.exe" = protocol=6 | dir=in | app=d:\programme\maxpayne3\maxpayne3.exe |
"UDP Query User{5E842B54-2639-4404-9FD5-345F31F623BB}D:\programme\maxpayne3\maxpayne3.exe" = protocol=17 | dir=in | app=d:\programme\maxpayne3\maxpayne3.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{07D1CCC7-85B8-802A-A3D3-19EA4488CC22}" = AMD Media Foundation Decoders
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX320_series" = Canon MX320 series MP Drivers
"{119B2F5A-2A06-DB96-FF28-992EC2A10BDF}" = AMD Accelerated Video Transcoding
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{26A24AE4-039D-4CA4-87B4-2F86417004FF}" = Java(TM) 7 Update 4 (64-bit)
"{4A85E8AD-6CF6-D3D1-2280-420452F5E1EE}" = ATI AVIVO64 Codecs
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4C569ABA-8FE0-DC22-5550-FC0D4837F6B0}" = ccc-utility64
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6CC95B76-D380-46B2-9022-9353938E48BA}" = Logitech GamePanel Software 3.03.133
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8DDDD1B7-CB3E-3270-6EC0-581C7C7CAE68}" = AMD Catalyst Install Manager
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B1A8F3D-8059-43FB-A7AE-4F2C21F0AAF2}" = KhalInstallWrapper
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{BCCC97EE-E162-448C-8847-59718FF29B04}" = Intel(R) Network Connections 15.6.25.0
"{ECA0FDBA-70C2-D23A-6BD3-3D3118DD90B4}" = AMD Drag and Drop Transcoding
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"PROSetDX" = Intel(R) Network Connections 15.6.25.0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{1111706F-666A-4037-7777-210328764D10}" = JavaFX 2.1.0
"{121E6FA9-6633-1FB3-473F-6EED2CC9D96A}" = CCC Help English
"{1429F2F7-C307-94C3-025C-754E7B23C195}" = CCC Help Finnish
"{15157B88-3773-FE29-99A3-065749EA2DF7}" = CCC Help Danish
"{1583C05E-2AB7-7892-6A73-3E671B79F26C}" = CCC Help Czech
"{15E642CC-E176-5962-8A9B-6E3E44AC413A}" = CCC Help Swedish
"{16793295-2366-40F7-A045-A3E42A81365E}" = Bing Bar
"{185F9795-9663-4F13-9EF9-307A282ADB5A}" = ph
"{1AA94747-3BF6-4237-9E1A-7B3067738FE1}" = Max Payne 3
"{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}" = Windows Live Messenger
"{1BC4F235-FCFB-54EE-E05B-551D8DA20164}" = CCC Help Greek
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83217004FF}" = Java(TM) 7 Update 4
"{28D67165-E575-5F18-ED79-6C8ABBFC23A7}" = Catalyst Control Center Localization All
"{2A075BB4-E976-4278-BF3F-E5C6945D84C0}" = bl
"{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}" = Logitech SetPoint
"{33E0033D-A617-DA5B-2EAD-CE59947C7365}" = HydraVision
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{39930321-4C58-4B8B-BCBF-342698C9801D}" = Max Payne
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMicron JMB36X Driver
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Anti-Virus 2012
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}" = OpenOffice.org 3.4
"{4D96BC8B-3945-D6F1-87BC-B32029BBC07F}" = CCC Help Turkish
"{534A31BD-20F4-46b0-85CE-09778379663C}" = Mass Effect™ 3
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
"{5FADC5E2-3564-7601-471B-B3648D26FBAC}" = CCC Help Spanish
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71A2554B-5DAE-86F9-AA6C-E773B1F41EB0}" = Catalyst Control Center
"{736C6F0E-A133-9BA8-1567-C32615B56606}" = Catalyst Control Center Graphics Previews Common
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{85257426-38D5-F3BB-533F-14AD95510CD8}" = Catalyst Control Center InstallProxy
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B7BFDD0-D33E-A654-88E5-0AA86CDD712D}" = CCC Help Chinese Standard
"{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}" = CDDRV_Installer
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{9530AE42-DAE1-4619-9594-B23487285D17}" = NVIDIA PhysX
"{9866E5F0-121F-E018-E2D1-2E1770847ABF}" = Adobe Download Assistant
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B326B27-315A-5268-2EA0-37183003C55F}" = CCC Help Chinese Traditional
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2S166A0-F031-4E27-A057-C69733219434}_is1" = TERA
"{A78A44C4-2406-971B-A844-2DBD7AA4EF1D}" = CCC Help Thai
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AC76BA86-1033-F400-7760-000000000005}" = Adobe Acrobat X Pro - English, Français, Deutsch
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Deutsch
"{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager
"{AFFC96D1-1341-9A0D-5C6B-86C129E0DE99}" = CCC Help French
"{B428FE8F-C5C1-1013-F595-CE60F33796C0}" = CCC Help Korean
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{B890C235-856E-974C-34E1-4BA27190B269}" = CCC Help Japanese
"{B9242864-2841-4ADE-86E0-8F90F91B04DD}" = Logitech Gaming Software
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C496E361-159F-5E56-DEBC-2AFE49AEF5F3}" = CCC Help German
"{C9559D7E-1CE6-F543-A474-0351AEDCD553}" = CCC Help Dutch
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D4E133B8-6359-B9D6-D82D-3E021570F88A}" = CCC Help Hungarian
"{D726D186-0BA7-8BC4-6273-A9AED17C7B8A}" = Application Profiles
"{DC58EF47-72CC-2499-7D1A-E8F662B68BC1}" = CCC Help Polish
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2494AD8-314D-44F8-B39C-4358A60DC184}" = LogMeIn Hamachi
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}" = Asmedia ASM104x USB 3.0 Host Controller Driver
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}" = Adobe Creative Suite 6 Master Collection
"{EC409068-9252-2A42-0E4D-E2A4EF612810}" = CCC Help Portuguese
"{ECD71D86-8D8E-B8D4-3B04-DCBBE70E8D54}" = CCC Help Norwegian
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.9
"{EFBE6DD5-B224-96E5-72B9-68D328CB12A6}" = Adobe Widget Browser
"{EFE1AB94-5466-4B6E-BE31-FF4C115FD25D}" = Max Payne 2
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}" = The Witcher Enhanced Edition
"{F3FC97A4-7E43-8230-61FD-5784B5F5D580}" = CCC Help Italian
"{F7B1FFCA-7ED4-C50E-F98F-6DE383C8AF66}" = CCC Help Russian
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Canon MX320 series Benutzerregistrierung" = Canon MX320 series Benutzerregistrierung
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"com.adobe.WidgetBrowser" = Adobe Widget Browser
"DAEMON Tools Lite" = DAEMON Tools Lite
"Diablo III" = Diablo III
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.22.508
"InstallWIX_{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Anti-Virus 2012
"LogMeIn Hamachi" = LogMeIn Hamachi
"ManiaPlanet_is1" = ManiaPlanet
"Messenger Plus!" = Messenger Plus! 5
"Mozilla Firefox 12.0 (x86 de)" = Mozilla Firefox 12.0 (x86 de)
"MP Navigator EX 2.1" = Canon MP Navigator EX 2.1
"Notepad++" = Notepad++
"Opera 12.00.1467" = Opera 12.00
"Origin" = Origin
"RocketDock_is1" = RocketDock 1.3.5
"Rockstar Games Social Club" = Rockstar Games Social Club
"StarCraft II" = StarCraft II
"Steam App 12210" = Grand Theft Auto IV
"Steam App 12220" = Grand Theft Auto: Episodes from Liberty City
"Steam App 1250" = Killing Floor
"Steam App 201280" = Deus Ex: Human Revolution - The Missing Link
"Steam App 21690" = Resident Evil 5
"Steam App 28050" = Deus Ex: Human Revolution
"Steam App 42680" = Call of Duty: Modern Warfare 3
"Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer
"Steam App 500" = Left 4 Dead
"Steam App 550" = Left 4 Dead 2
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 8980" = Borderlands
"Steam App 91310" = Dead Island
"Steam App 9200" = RAGE
"Steam App 99830" = Crysis 2
"The Witcher 2 Enhanced Edition_is1" = The Witcher 2 Enhanced Edition Version 3.0
"VLC media player" = VLC media player 2.0.1
"Wacom Tablet Driver" = Wacom Tablett
"Wacom WebTabletPlugin for IE" = WebTablet IE Plugin
"Wacom WebTabletPlugin for Netscape" = WebTablet Netscape Plugin
"Warcraft III" = Warcraft III
"WinLiveSuite" = Windows Live Essentials

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"FileZilla Client" = FileZilla Client 3.2.7.1
"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 14.06.2012 13:02:06 | Computer Name = Niko-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description =

Error - 14.06.2012 13:02:58 | Computer Name = Niko-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description =

Error - 14.06.2012 13:03:10 | Computer Name = Niko-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description =

Error - 14.06.2012 13:03:18 | Computer Name = Niko-PC | Source = WinMgmt | ID = 10
Description =

Error - 14.06.2012 13:22:43 | Computer Name = Niko-PC | Source = WinMgmt | ID = 10
Description =

Error - 14.06.2012 14:01:12 | Computer Name = Niko-PC | Source = ESENT | ID = 455
Description = Catalog Database (1328) Catalog Database: Fehler -1023 (0xfffffc01)
beim Öffnen von Protokolldatei C:\Windows\system32\CatRoot2\edb.log.

Error - 14.06.2012 14:01:12 | Computer Name = Niko-PC | Source = ESENT | ID = 455
Description = Catalog Database (1328) Catalog Database: Fehler -1023 (0xfffffc01)
beim Öffnen von Protokolldatei C:\Windows\system32\CatRoot2\edb.log.

Error - 14.06.2012 14:01:12 | Computer Name = Niko-PC | Source = Microsoft-Windows-CAPI2 | ID = 257
Description = Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert
werden. "ESENT"-Fehler: -1023.

Error - 14.06.2012 14:26:22 | Computer Name = Niko-PC | Source = WinMgmt | ID = 10
Description =

Error - 14.06.2012 14:37:33 | Computer Name = Niko-PC | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 14.06.2012 14:28:35 | Computer Name = Niko-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x8007371c fehlgeschlagen: Update für Windows 7 für x64-Systeme (KB2699779)

Error - 14.06.2012 14:28:35 | Computer Name = Niko-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x8007371c fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte
Systeme (KB2709715)

Error - 14.06.2012 14:28:41 | Computer Name = Niko-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x8007371c fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte
Systeme (KB2667402)

Error - 14.06.2012 14:35:39 | Computer Name = Niko-PC | Source = Microsoft-Windows-Kernel-General | ID = 5
Description =

Error - 14.06.2012 14:35:58 | Computer Name = Niko-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
LogMeIn Hamachi Tunneling Engine erreicht.

Error - 14.06.2012 14:35:58 | Computer Name = Niko-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden
Fehlers nicht gestartet: %%1053

Error - 14.06.2012 14:36:00 | Computer Name = Niko-PC | Source = SMSvcHost 4.0.0.0 | ID = 262151
Description =

Error - 14.06.2012 14:36:00 | Computer Name = Niko-PC | Source = SMSvcHost 4.0.0.0 | ID = 262151
Description =

Error - 14.06.2012 14:36:00 | Computer Name = Niko-PC | Source = WAS | ID = 5175
Description =

Error - 14.06.2012 14:36:00 | Computer Name = Niko-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Net.Tcp-Listeneradapter" ist vom Dienst "Net.Tcp-Portfreigabedienst"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%0


< End of report >

Defogger

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:34 on 14/06/2012 (Niko)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCUAEMON Tools Lite -> Removed

Checking for services/drivers...
SPTD -> Disabled (Service running -> reboot required)


-=E.O.F=-

Ich hoffe ehrlich das mir jemand helfen kann, am schlimmsten ist dieses Problem mit dem verschieben von Daten, ich kann einfach nichts mehr hin und her schieben und muss ständig Shortkeys (strg+c - strg+v) benutzen. Habe übrigens mein System vor ca 2-3 Monaten komplett Neuinstalliert, ABER dabei meine zweite Festplatte auf der Ich alle Daten habe nicht wie die Hauptplatte defragmentiert, da Ich dachte das dort nicht das Problem sein kann? Jedoch wundert es mich nach und nach das auf dieser Festplatte ständig Daten wie z.b "eula.1036" oder "install.res.1028.dll" hinterlegt werden, was das ist weiß ich nicht mal.

Achja Kaspersky habe Ich per "Untersuchung wichtiger Bereiche" und "Schwachstellensuche" schon mein System untersuchen lassen, aber es wurden keine Bedrohungen gefunden. Eine "Vollständige Untersuchung" kann Ich auf grund von Zeitdruck nur morgen bzw am Wochenende durchführen, aber vielleicht reichen ja auch schon die Logs von OTL oder Defogger, bin da ehrlich gesagt kein Experte darin.

Sollten irgendwelche Infos fehlen werde Ich Sie natürlich gerne sofort posten! Und wenn ich irgendwas falsch gemacht habe entschuldige Ich mich gleich schon dafür

MfG und Danke

Bitte erstmal routinemäßig einen Vollscan mit Malwarebytes machen und Log posten. =>ALLE lokalen Datenträger (außer CD/DVD) überprüfen lassen!
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Die Funde mit Malwarebytes bitte alle entfernen, sodass sie in der Quarantäne von Malwarebytes aufgehoben werden! NICHTS voreilig aus der Quarantäne entfernen!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!



ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

 hier steht das Log