| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: C:\Windows\System32Gl\svchost.exeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
11.07.2012, 13:08
| #1 |
 |  C:\Windows\System32Gl\svchost.exe Ich habe mir gestern leider scheinbar einen Virus eingefangen. Beim Systemstart wird 2 Mal eine svchost.exe aus dem Verzeichnis C:\Windows\System32Gl\svchost.exe gestartet. In dem Ordner wird aber keine Datei angezeigt, und auch wenn ich die versteckten Dateien einblenden lasse, wird nichts angezeigt. Ich habe schon versucht das verzeichnis per cmd zu löschen, doch es wird unmittelbar nachdem es gelöscht wurde wieder hergestellt. Im Autostart steht ein Eintrag zu der Datei, der angeblich unter HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run liegen soll, doch auch hier wird nichts angezeigt. (Im Übrigen wird der Autostart Eintrag auch automatisch immer wieder aktiviert.) Ich bin ziemlich ratlos... OTL LOG'S: OTL.txt Code:
ATTFilter OTL logfile created on: 11.07.2012 13:58:11 - Run 1 OTL by OldTimer - Version 3.2.53.1 Folder = D:\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 2,10 Gb Available Physical Memory | 52,54% Memory free 8,00 Gb Paging File | 5,88 Gb Available in Paging File | 73,59% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 458,87 Gb Total Space | 245,56 Gb Free Space | 53,51% Space Free | Partition Type: NTFS Drive D: | 458,87 Gb Total Space | 332,91 Gb Free Space | 72,55% Space Free | Partition Type: NTFS Computer Name: DASISTMAIKSPC | User Name: derMaik | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.07.11 13:43:15 | 000,595,968 | ---- | M] (OldTimer Tools) -- D:\Downloads\OTL.exe PRC - [2012.06.27 12:29:26 | 001,996,200 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe PRC - [2012.06.23 13:25:32 | 001,535,176 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe PRC - [2012.06.17 21:02:13 | 000,215,128 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe PRC - [2012.06.17 09:23:46 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012.05.26 06:32:24 | 004,327,744 | ---- | M] (Akamai Technologies, Inc) -- C:\Users\derMaik\AppData\Local\Akamai\netsession_win.exe PRC - [2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\derMaik\AppData\Roaming\Dropbox\bin\Dropbox.exe PRC - [2012.04.04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2012.04.04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe PRC - [2012.03.05 19:11:27 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2012.03.04 17:31:25 | 000,127,040 | ---- | M] (ICQ, LLC.) -- C:\Program Files (x86)\ICQ7.7\ICQ.exe PRC - [2012.03.03 13:11:15 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe PRC - [2012.02.23 12:40:41 | 002,886,528 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe PRC - [2012.02.10 06:13:00 | 002,348,352 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe PRC - [2012.02.09 21:05:32 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe PRC - [2011.06.29 11:52:34 | 001,074,496 | ---- | M] (D-Link Corp.) -- C:\Program Files (x86)\D-Link\DWA-140 revB\AirNCFG.exe PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\explorer.exe PRC - [2010.07.12 15:39:24 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\D-Link\DWA-140 revB\ANIWConnService.exe PRC - [2010.03.06 05:04:24 | 000,310,224 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe PRC - [2009.10.14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Programme\Logitech\Logitech WebCam Software\LWS.exe PRC - [2009.10.14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe PRC - [2009.10.07 01:47:22 | 000,125,464 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe PRC - [2007.09.02 14:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe ========== Modules (No Company Name) ========== MOD - [2012.06.20 18:44:16 | 020,313,384 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll MOD - [2012.06.20 18:44:12 | 001,099,576 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-53.dll MOD - [2012.06.20 18:44:12 | 000,895,312 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.DLL MOD - [2012.06.20 18:44:12 | 000,190,776 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-53.dll MOD - [2012.06.20 18:44:12 | 000,123,192 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-51.dll MOD - [2012.06.17 09:23:46 | 002,042,848 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2012.03.03 12:23:32 | 000,315,392 | ---- | M] () -- C:\Program Files (x86)\D-Link\DWA-140 revB\ANPDApi.dll MOD - [2012.02.09 21:05:16 | 000,360,768 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll MOD - [2011.11.02 00:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2011.11.02 00:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2011.07.29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll MOD - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe MOD - [2010.05.13 11:58:00 | 000,294,912 | ---- | M] () -- C:\Program Files (x86)\D-Link\DWA-140 revB\WlanApp.dll MOD - [2009.10.14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Programme\Logitech\Logitech WebCam Software\LWS.exe MOD - [2009.10.14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe MOD - [2007.09.02 14:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe MOD - [2007.09.02 14:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2012.07.10 20:29:52 | 004,419,392 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai/netsession_win_4f7fccd.dll -- (Akamai) SRV - [2012.06.27 12:29:24 | 002,369,960 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2012.06.23 13:25:32 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012.06.20 18:44:17 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012.06.17 21:02:13 | 000,215,128 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB) SRV - [2012.06.17 09:23:46 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012.06.07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012.04.09 09:47:19 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2012.04.04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012.03.05 19:11:27 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2012.02.23 12:40:41 | 002,886,528 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7) SRV - [2012.02.10 06:13:00 | 002,348,352 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2012.02.09 21:05:32 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011.03.28 22:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2010.07.12 15:39:24 | 000,053,248 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\D-Link\DWA-140 revB\ANIWConnService.exe -- (D_Link_DWA-140_WPS) SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010.02.19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009.10.07 01:47:10 | 000,191,000 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Programme\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcS64) SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2012.04.04 15:56:40 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:64bit: - [2012.03.03 16:26:25 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2012.02.15 12:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2012.01.17 14:45:56 | 000,188,224 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:64bit: - [2011.04.28 15:20:30 | 001,617,472 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Dnetr28ux.sys -- (netr28ux) DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.02.21 11:09:14 | 000,015,872 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\anodlwfx.sys -- (anodlwf) DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.11.20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2009.10.07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2Mon) DRV:64bit: - [2009.10.07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64) DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD) DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2009.05.01 01:01:34 | 000,327,576 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64) DRV:64bit: - [2009.05.01 00:55:56 | 002,755,096 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LV302V64.SYS -- (PID_PEPI) Logitech QuickCam IM(PID_PEPI) DRV:64bit: - [2009.05.01 00:55:46 | 000,015,896 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lv302a64.sys -- (lvpepf64) DRV:64bit: - [2009.03.18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:64bit: - [2008.07.26 16:26:34 | 000,050,072 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVUSBS64.sys -- (LVUSBS64) DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D0 1B E1 F3 15 23 CD 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "google.de" FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@spoon.net/Spoon Plugin 3.33: C:\Program Files (x86)\Spoon\3.33.0.18\npMozillaSpoonPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\derMaik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.03.17 15:50:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.06.17 09:23:46 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.04.11 09:37:51 | 000,000,000 | ---D | M] [2012.03.03 12:13:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\derMaik\AppData\Roaming\mozilla\Extensions [2012.07.04 18:56:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\derMaik\AppData\Roaming\mozilla\Firefox\Profiles\ezb2pv9y.default\extensions [2012.03.18 01:24:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2012.05.31 13:18:02 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012.07.04 18:56:02 | 000,743,290 | ---- | M] () (No name found) -- C:\USERS\DERMAIK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EZB2PV9Y.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2012.03.29 21:21:36 | 000,029,003 | ---- | M] () (No name found) -- C:\USERS\DERMAIK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EZB2PV9Y.DEFAULT\EXTENSIONS\GROOVESHARKUNLOCKER@OVERLORD1337.XPI [2012.04.01 16:40:29 | 000,010,013 | ---- | M] () (No name found) -- C:\USERS\DERMAIK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EZB2PV9Y.DEFAULT\EXTENSIONS\YOUTUBEUNBLOCKER@UNBLOCKER.YT.XPI [2012.06.17 09:23:46 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012.02.16 13:02:53 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2012.02.16 12:48:01 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012.02.16 13:02:53 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2012.02.16 13:02:53 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2012.02.16 13:02:53 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2012.02.16 13:02:53 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2012.04.09 09:57:41 | 000,000,857 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 activate.adobe.com O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No CLSID value found. O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [D-Link D-Link DWA-140] C:\Program Files (x86)\D-Link\DWA-140 revB\AirNCFG.exe (D-Link Corp.) O4 - HKLM..\Run: [HKLM] C:\Windows\Win32Gl\svchost.exe () O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe () O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\derMaik\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [HKCU] C:\Windows\Win32Gl\svchost.exe () O4 - HKCU..\Run: [ICQ] C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.) O4 - HKCU..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe () O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation) O4 - Startup: C:\Users\derMaik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\derMaik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\Win32Gl\svchost.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\Win32Gl\svchost.exe () O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.0) O16:64bit: - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03) O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{201F26EE-7BA8-4CC1-9224-3434C4EF197D}: DhcpNameServer = 192.168.2.1 O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - File not found O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{9bdd90ab-6538-11e1-a176-00262d202946}\Shell - "" = AutoRun O33 - MountPoints2\{9bdd90ab-6538-11e1-a176-00262d202946}\Shell\AutoRun\command - "" = I:\Autorun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012.07.10 22:46:40 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{C9EFA0E6-D106-43A6-8E83-F6FEAD9E26A1} [2012.07.10 22:46:14 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{C00D4E89-9FDB-40F7-8E2F-D1CED40169D2} [2012.07.10 12:23:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab [2012.07.10 12:23:35 | 000,000,000 | ---D | C] -- C:\Users\derMaik\SystemRequirementsLab [2012.07.09 18:26:26 | 000,000,000 | ---D | C] -- D:\Documents\Electronic Arts [2012.07.09 18:22:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE [2012.07.09 18:17:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts [2012.07.09 13:39:43 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{B0044F31-E906-4EF1-857D-87E0789968DB} [2012.07.09 13:39:18 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{DBFF17CF-2DBC-4B70-BDA4-BC3FEE85F3F7} [2012.07.08 16:21:49 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{D26A2BBC-B4EB-4EEA-B51D-EA7C8C7F00F7} [2012.07.08 16:21:24 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{19E05809-2FDA-413B-BB13-2EF101A45A6C} [2012.07.08 13:30:42 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{4DD3D491-623E-4C9F-98B4-4A8853D349AF} [2012.07.07 07:18:01 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{C0082C8F-46B9-4899-B06C-8336A3013E56} [2012.07.07 07:17:35 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{46B63C70-F55B-418B-B0B1-01425C31BA97} [2012.07.06 12:32:54 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{05A6D352-A76A-463E-8745-A3A232156FE8} [2012.07.05 18:22:22 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{5CEA3EAA-6FE6-4932-9859-FCE84DC50400} [2012.07.05 16:08:21 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{FC115579-8FE5-4F65-A0EB-5D213287B36A} [2012.07.04 18:11:29 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{B22E4D00-5BD3-4E0A-B74A-210EF654DAF8} [2012.07.04 18:11:17 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{3B24472A-EEA7-46DF-92FA-8E50C8BCEB8B} [2012.07.04 17:50:07 | 000,000,000 | ---D | C] -- C:\Users\derMaik\Desktop\MCEdit [2012.07.03 14:03:02 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{736C8F47-D457-4816-9AE5-26BDBD6F984B} [2012.07.03 14:02:36 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{FC9EAEA9-6947-4BD2-BF1B-D48F9553381D} [2012.07.02 22:35:10 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{3A6EF0D4-F4CF-4742-8BB1-F74B4DCCF4ED} [2012.07.02 18:17:45 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\Spoon [2012.07.02 18:17:44 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\Xenocode [2012.07.02 18:17:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spoon [2012.07.02 18:12:53 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{667D5511-F5EA-4FDB-BCA0-A83CC07B46DE} [2012.07.02 18:12:27 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{8D3F388C-9B62-4EC4-9899-38DF25DA7E97} [2012.07.01 15:42:42 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{E826BB64-BBF8-4798-BCCA-496C4AD9F89F} [2012.07.01 15:42:17 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{D2512E8A-8B39-4070-9E75-AC3BE51AE02D} [2012.07.01 02:07:22 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{B2E49FA9-20EA-4DCB-B1FC-12DF18CE0FFF} [2012.07.01 01:29:38 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{13E3EA65-22A2-47EB-94E8-ED0F8B2B7B9E} [2012.06.29 15:08:19 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{B5FE6EA2-8D93-4257-82D0-DC96F20E3B86} [2012.06.29 15:07:54 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{C93F40CD-8ADE-4BF8-A546-29BCC553A51B} [2012.06.28 13:18:44 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{F0E86ED7-9C1A-4F83-8A12-CC949832E2EC} [2012.06.28 13:18:18 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{58691B1D-8438-4024-897E-E436B866FDC4} [2012.06.28 12:56:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2012.06.28 12:56:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2012.06.27 19:28:17 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{1461903F-0B87-4B21-949F-9F2BAD86826B} [2012.06.27 19:27:50 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{ECC82CB2-FFD2-4E30-8499-E300615540D5} [2012.06.26 22:34:55 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{35A6030B-E031-4595-BEFB-FA275A4C4D31} [2012.06.26 22:34:29 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{A6EE0ECF-3788-458D-9AA0-F4C5A2F8F64E} [2012.06.26 14:42:54 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{4EF8E5E4-58E3-4432-B705-C75C1E8C2E27} [2012.06.25 20:08:09 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{19C013E3-29ED-41D5-9C0B-7386FC29BE78} [2012.06.25 20:07:43 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{68B3808A-D73C-462D-8AEE-EB6D56E39E10} [2012.06.25 18:11:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace [2012.06.24 19:09:45 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{F32D65D0-740E-4933-BB80-1FB64A181D2D} [2012.06.24 19:09:16 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{7CA57928-329A-4B1E-BE32-133C780F3B2D} [2012.06.24 17:49:27 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{5515B0C1-BF31-439D-8D96-7AE4FD80E2C9} [2012.06.24 17:49:15 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{2878E8D3-2198-418F-AB9E-7BE45FA01841} [2012.06.24 13:36:38 | 000,000,000 | ---D | C] -- C:\Users\derMaik\Desktop\The Elder Scrolls V Skyrim [2012.06.23 17:48:05 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{28203478-6DE0-45B6-B292-65DC23FC8260} [2012.06.23 17:47:41 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{5B45E560-B3EF-481A-AF25-27AE3EED3EA5} [2012.06.22 15:01:30 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{36F6AC4A-587F-44C9-A1A7-C0A4CDB331CA} [2012.06.22 15:01:04 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{0F2F7245-4378-4443-8912-A6FF1BD0C2DC} [2012.06.21 16:56:13 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{58FCA758-D8EB-476A-BCE5-53A897716060} [2012.06.21 16:55:48 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{422162B7-6B1C-429A-A94B-93A3952E3C35} [2012.06.19 14:15:09 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{CBB28F1E-2C04-4869-87C6-97B4D607C185} [2012.06.19 14:14:57 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{D430288E-B803-4FDB-BF97-5C55A55BBFE0} [2012.06.18 17:14:47 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{6EAA7C81-320C-4344-990A-4F612B1E63D5} [2012.06.17 18:23:41 | 000,000,000 | ---D | C] -- C:\Users\derMaik\Desktop\KalawaKollektive [2012.06.16 05:05:44 | 000,000,000 | ---D | C] -- D:\Documents\Square Enix [2012.06.16 05:03:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX - Eidos Interactive [2012.06.16 05:01:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SQUARE ENIX - Eidos Interactive [2012.06.16 04:45:58 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\storage [2012.06.16 04:45:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Ubisoft [2012.06.16 04:35:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2012.06.16 04:29:31 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\Skyrim [2012.06.16 04:25:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Skyrim [2012.06.16 04:22:21 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\2K Games [2012.06.16 04:21:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mafia 2 [2012.06.16 03:07:24 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll [2012.06.16 01:12:09 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\ArmA 2 [2012.06.15 14:23:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2012.06.15 14:22:27 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2012.06.15 14:22:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes [2012.06.15 14:22:27 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2012.06.14 18:24:23 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{2F8AB78A-13FB-41BC-AD22-AF4C7F1B1228} [2012.06.14 18:23:57 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{BC902D42-93FC-44DE-A526-EA0572379538} [2012.06.13 19:16:20 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{83C84FC5-58FB-4C32-8A5C-07AA7928A193} [2012.06.13 19:15:55 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{00C63F47-BB7B-47D4-9CD2-D2A1D7530D83} [2012.06.12 21:32:18 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{AEC0A110-C77D-4CA8-B7F6-41D6CD49E9F0} [2012.06.12 21:31:41 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{9D670674-E86A-4AEF-8D92-CA3AFC138AE4} [2012.06.12 15:51:45 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{0C401D52-EC56-44D6-8DC4-5703D762D83F} [2012.06.11 20:01:34 | 000,000,000 | ---D | C] -- C:\Users\derMaik\Desktop\MW3 [2012.06.11 17:02:52 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{F4136D87-DA76-40A1-B700-D35B3ADFF053} [2012.06.11 17:02:27 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{69245831-6D54-4C66-9BB2-C3F0E170F022} [2012.06.11 16:47:23 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\Macromedia ========== Files - Modified Within 30 Days ========== [2012.07.11 14:01:07 | 000,117,762 | -H-- | M] () -- C:\Users\derMaik\AppData\Roaming\derMaiklog.dat [2012.07.11 13:27:03 | 000,019,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.07.11 13:27:03 | 000,019,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.07.11 13:25:13 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012.07.11 13:20:05 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012.07.11 13:19:31 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012.07.11 13:19:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.07.11 13:19:16 | 3220,082,688 | -HS- | M] () -- C:\hiberfil.sys [2012.07.10 19:38:20 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.07.10 19:38:20 | 000,696,620 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2012.07.10 19:38:20 | 000,651,938 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012.07.10 19:38:20 | 000,147,916 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2012.07.10 19:38:20 | 000,120,870 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012.07.10 00:06:10 | 006,917,511 | ---- | M] () -- C:\Users\derMaik\Desktop\Vegas.wmv [2012.07.09 16:42:04 | 001,475,774 | ---- | M] () -- C:\Users\derMaik\Desktop\terrain.png [2012.07.09 16:42:02 | 000,000,132 | ---- | M] () -- C:\Users\derMaik\AppData\Roaming\Adobe PNG Format CS5 Prefs [2012.07.08 22:12:27 | 000,911,822 | ---- | M] () -- C:\Users\derMaik\Desktop\RevoPromote.png [2012.07.01 15:13:48 | 004,838,776 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.06.27 17:52:09 | 000,764,072 | ---- | M] () -- C:\Users\derMaik\Desktop\Desk2.jpg [2012.06.25 18:21:49 | 001,589,442 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012.06.24 22:41:42 | 000,301,099 | ---- | M] () -- C:\Users\derMaik\Desktop\Maiko.jpg [2012.06.24 22:41:24 | 005,322,305 | ---- | M] () -- C:\Users\derMaik\Desktop\Maiko.psd [2012.06.24 22:18:53 | 000,004,175 | ---- | M] () -- C:\Users\derMaik\Desktop\kkjry93b.eps [2012.06.17 21:05:01 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2012.06.17 21:05:01 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2012.06.17 21:02:13 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012.06.16 03:07:24 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll [2012.06.15 22:00:26 | 000,689,741 | ---- | M] () -- C:\Users\derMaik\Desktop\CreeperArmy.c4d [2012.06.15 22:00:23 | 000,196,961 | ---- | M] () -- C:\Users\derMaik\Desktop\CreeperArmy.jpg ========== Files Created - No Company Name ========== [2012.07.08 22:12:23 | 000,911,822 | ---- | C] () -- C:\Users\derMaik\Desktop\RevoPromote.png [2012.06.27 17:42:50 | 000,764,072 | ---- | C] () -- C:\Users\derMaik\Desktop\Desk2.jpg [2012.06.24 22:41:40 | 000,301,099 | ---- | C] () -- C:\Users\derMaik\Desktop\Maiko.jpg [2012.06.24 22:29:55 | 005,322,305 | ---- | C] () -- C:\Users\derMaik\Desktop\Maiko.psd [2012.06.24 22:18:54 | 000,004,175 | ---- | C] () -- C:\Users\derMaik\Desktop\kkjry93b.eps [2012.06.21 19:35:08 | 006,917,511 | ---- | C] () -- C:\Users\derMaik\Desktop\Vegas.wmv [2012.06.15 22:00:23 | 000,196,961 | ---- | C] () -- C:\Users\derMaik\Desktop\CreeperArmy.jpg [2012.06.14 22:54:26 | 000,689,741 | ---- | C] () -- C:\Users\derMaik\Desktop\CreeperArmy.c4d [2012.06.07 01:25:34 | 000,000,065 | ---- | C] () -- C:\Windows\wininit.ini [2012.04.29 20:38:14 | 001,589,442 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012.04.15 11:47:45 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI [2012.03.23 23:15:19 | 000,052,167 | ---- | C] () -- C:\Windows\RFC4DPluginUninstall.exe [2012.03.17 16:48:32 | 000,007,642 | ---- | C] () -- C:\Users\derMaik\AppData\Local\Resmon.ResmonCfg [2012.03.09 22:55:53 | 000,001,456 | ---- | C] () -- C:\Users\derMaik\AppData\Local\Adobe Für Web speichern 12.0 Prefs [2012.03.09 19:08:49 | 000,000,132 | ---- | C] () -- C:\Users\derMaik\AppData\Roaming\Adobe PNG Format CS5 Prefs [2012.03.04 01:28:23 | 000,215,128 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012.03.04 01:28:22 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012.03.04 01:28:21 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe [2012.03.03 12:23:01 | 000,302,080 | ---- | C] () -- C:\Windows\lwd.exe [2012.02.09 21:05:44 | 000,416,064 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe [2011.09.28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2005.12.24 14:46:06 | 000,117,614 | -H-- | C] () -- C:\Users\derMaik\AppData\Roaming\derMaiklog.dat ========== LOP Check ========== [2012.07.04 17:44:31 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\.minecraft [2012.04.14 00:24:47 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\.Nitrous [2012.04.05 02:40:34 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\bizarre creations [2012.03.15 19:49:13 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2012.07.11 13:32:25 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\DAEMON Tools Lite [2012.07.11 13:20:55 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Dropbox [2012.03.04 23:45:07 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\DVDVideoSoft [2012.06.25 16:21:53 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\FileZilla [2012.07.11 13:20:39 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\ICQ [2012.04.13 12:22:10 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Leadertech [2012.03.03 16:56:04 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\MAXON [2012.05.12 01:00:37 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\MonoDevelop-Unity-2.8 [2012.03.03 16:43:25 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Origin [2012.05.11 16:29:41 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\PACE Anti-Piracy [2012.03.16 23:14:38 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Publish Providers [2012.06.07 00:06:10 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Red Giant Link [2012.06.27 21:07:55 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Sony [2012.04.12 17:02:07 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Sony Creative Software Inc [2012.04.13 12:07:42 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Stardock [2012.03.13 21:21:00 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\TeamViewer [2012.03.25 18:36:42 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\thriXXX [2012.07.11 13:32:18 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\TS3Client [2012.05.17 18:57:04 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\ts3overlay [2012.05.11 16:30:12 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Unity [2012.03.18 17:02:20 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Windows Live Writer [2012.04.05 18:57:18 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Wondershare Video Converter Platinum [2012.05.23 15:37:14 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 1088 bytes -> C:\ProgramData\Microsoft:XGzQaVLqJNSuHFsQQNFROtrjxLz @Alternate Data Stream - 1086 bytes -> C:\ProgramData\Microsoft:MVYkW83wmajDDDRD6R54O < End of report > Code:
ATTFilter OTL Extras logfile created on: 11.07.2012 13:58:11 - Run 1
OTL by OldTimer - Version 3.2.53.1 Folder = D:\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
4,00 Gb Total Physical Memory | 2,10 Gb Available Physical Memory | 52,54% Memory free
8,00 Gb Paging File | 5,88 Gb Available in Paging File | 73,59% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 458,87 Gb Total Space | 245,56 Gb Free Space | 53,51% Space Free | Partition Type: NTFS
Drive D: | 458,87 Gb Total Space | 332,91 Gb Free Space | 72,55% Space Free | Partition Type: NTFS
Computer Name: DASISTMAIKSPC | User Name: derMaik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
.reg [@ = regfile] -- regedit.exe "%1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [open] -- regedit.exe "%1"
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0117B680-0DB2-4BB7-9F77-4A5EA07BDB7A}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{1372AE34-1AFB-43AF-8B98-5EB9284F4D63}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{230CE3E6-0E5F-43DC-A8D8-B18B2293E4F3}" = lport=49206 | protocol=6 | dir=in | name=akamai netsession interface |
"{3AEC32AD-F91F-4B19-840D-3CF827DE8712}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3FCCAAC8-B853-45CB-AAD4-D0B101558906}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{42D089FE-F47F-4439-9C54-69C2C390659F}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{53275F90-3051-47DB-B8B5-AAB6A35253BF}" = rport=139 | protocol=6 | dir=out | app=system |
"{5ACA5ED7-44F8-4FA0-9D3C-1E293E29EC00}" = lport=138 | protocol=17 | dir=in | app=system |
"{62B4A0FC-6777-4EC6-974C-3C187FACE5D1}" = rport=138 | protocol=17 | dir=out | app=system |
"{81EA811E-6B64-45ED-9880-FF94A6376670}" = lport=445 | protocol=6 | dir=in | app=system |
"{89F479DD-7107-4C48-80D0-CF16E82882F3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8F0DC2B0-9066-4DAF-805C-E700363F6D4E}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8FA05988-F448-45A6-9362-9586A338F1D1}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface |
"{953E323E-29E1-4EA2-B705-768D2AF55641}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{96545585-82B9-4717-BE47-F20DEFC7282E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{A01EE721-D402-44D4-9415-15A22FFE6B5B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A315BB7F-0286-4875-9B1E-F55A639CFE11}" = lport=137 | protocol=17 | dir=in | app=system |
"{A96C8D86-DF36-474B-8960-74843047A917}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface |
"{B07DE83E-FEC4-481A-956B-3370BD4A6BBC}" = rport=137 | protocol=17 | dir=out | app=system |
"{BA4BBDF4-3282-4057-AE8E-2B227A537686}" = lport=49327 | protocol=6 | dir=in | name=akamai netsession interface |
"{BE53BF35-2E26-4E5B-A0C9-30FD7BF4A873}" = lport=139 | protocol=6 | dir=in | app=system |
"{C68CC316-2B1E-4E88-B4DD-DA2D782ED40C}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{CB3EDB90-2003-49C9-9AFE-BFF491EFE475}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{E39B9E00-3D45-4FE6-9E7C-7FBB71217906}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{F0EB25EB-552A-4867-B8C8-40A5873D0C1C}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{F6F2FE9A-9198-4DB6-ABE5-845E18AF0F97}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{FAE67BC3-EA82-4470-A964-1A662BE5FDC2}" = rport=445 | protocol=6 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04D92BB3-BBCC-487C-A7DC-6C06513A23BD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforeverlauncher.exe |
"{05A0B145-CE1F-4167-B741-78EB4A0F7666}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe |
"{06EC0645-9F10-4F75-9123-D4CC75C8D5EA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\hitman blood money\hitmanbloodmoney.exe |
"{077BF8BF-16EF-4FDF-8FBB-4A31F99A953F}" = protocol=6 | dir=in | app=c:\program files (x86)\valve\hl.exe |
"{092A5B5A-C6DA-40B0-97B1-608D1381E76E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{1309C547-B767-4A6A-98DC-9B8DB1EDC333}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"{1423B0C3-3490-4848-AD24-136426525D66}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{16CE1C70-ED5F-40AC-BB35-80D231D63B47}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{1A47B90B-FAD2-4438-A92E-DD1D02DF257C}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{1AA4BD19-033C-4785-B0EC-B8F0BBEB7D5E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{1B8399AE-6CC7-4466-B79B-4B3EA7A6DBFF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\l.a.noire\lanlauncher.exe |
"{1C47EB28-B924-496C-B11B-CCFDAEF2DC68}" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\farcry2.exe |
"{2066FD3A-EA8E-42A5-885E-EBD9FDA86EA6}" = protocol=17 | dir=in | app=c:\program files (x86)\jdownloader\jdownloaderportable.exe |
"{2188AC87-0F88-4EC1-A890-5B3D06A0667E}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"{22DD84EC-2157-44CC-8411-780C73BCFE5D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\apb reloaded\launcher\apblauncher.exe |
"{2352E7E8-EB74-4CBE-8409-39FFC1F2AC78}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{23BBCF10-B1AB-4A09-B9D4-0C0406A7F381}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\hitman blood money\configure.exe |
"{27E5FF42-0409-4941-A9F7-F2D73DA3CCE7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe |
"{2864C29F-CA3A-446B-8199-6BFD25381F86}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\universe sandbox\universe sandbox.exe |
"{299D1B3F-2747-47D6-95FE-30EB4CB46EDF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 free\arma2free.exe |
"{2BDAD195-1985-428C-9195-3727B12E1944}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{2F36973C-2834-47EE-B69D-A65892290378}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\aoeonline.exe |
"{2F66B509-DFE8-414C-AFAF-A6BC3D7F8A0E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{2FBFEF6A-65F9-4220-B110-6F85A474661D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{32F85BCD-0E3A-46EB-B77E-B7E4E870E423}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{33C825B0-9A82-4EAB-BE4E-4230576BED48}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blur\blur.exe |
"{3457A69E-C868-4EF9-93B3-55B134D1550E}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"{361A88EF-A4DA-4A21-B5F4-17DE1F12CB93}" = protocol=6 | dir=in | app=c:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe |
"{3856E4E9-113F-4EFB-9B02-D45D061467AE}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{38EF2526-FFC5-4E32-8522-FAF0C154B131}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe |
"{3AED78C6-EE6B-48E3-878E-C755162CA0B4}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{3F1F7288-B5EB-42AE-8EFF-BEB9959CAC47}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{40191B5E-9FD2-4182-8606-BDD7095630C5}" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe |
"{4306BBD3-9134-4A8A-B189-B4CBF73B57B4}" = protocol=6 | dir=in | app=c:\program files (x86)\jdownloader\jdownloaderportable.exe |
"{465A0B7F-90CE-4813-BCAC-FB1193824637}" = protocol=17 | dir=in | app=c:\users\dermaik\appdata\roaming\dropbox\bin\dropbox.exe |
"{46DCBE25-768D-44B7-836F-60E0D14BB8C4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{480465C3-DDED-48ED-8A63-293E9134447A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{4CF00045-0EF5-4C7B-BC35-E5A7CA851265}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{516DABBF-D01F-4184-989E-B15982D2CE36}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\apb reloaded\launcher\apblauncher.exe |
"{518EEA4A-2B05-4DC2-91E9-C69BDC526EE6}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{524B9D96-6851-4B8B-B3B5-60DFB90B54B6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe |
"{53C13D4C-FF0A-4B02-A9E7-DBD333D1DCC0}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{54562183-78D7-4486-A36F-9A0770208048}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\hitman blood money\configure.exe |
"{546E7559-067E-4150-A130-13BF3E081353}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{552DC457-AD2D-4AE7-8BCB-7BF7C973B47D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{5641CBFF-4B5D-497B-A7D7-2CC2F0F47D20}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{5D37484B-19AC-464C-834A-D0A19FB0BE76}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe |
"{5F3238BE-BF84-4B11-847A-CF9D5328FDAF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{5F9E538C-8444-476B-A639-61F83FC109F8}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{5FAD1516-91C8-4F42-9D2A-607EB6502181}" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike source von lours\hl2.exe |
"{6566164E-347F-4EA6-89B6-4E5490E129E7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe |
"{6DFCE367-9F12-4987-8D4F-01EAA90B6201}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{6E3576F3-4F41-46C6-AFBE-1670C976628A}" = protocol=6 | dir=in | app=c:\windows\syswow64\dplaysvr.exe |
"{6FE9C663-8E2D-400E-800F-00CEDFC78119}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"{7084CE0C-28FD-4AEE-BAF3-7503E384BA57}" = protocol=17 | dir=in | app=c:\windows\syswow64\dplaysvr.exe |
"{71D62135-2619-4E90-B2DA-CDE15787F9EF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe |
"{759DA587-CBEC-4E68-B8CA-CE7F7260C67A}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{784C3EB2-8E90-4672-92CE-CC8301B1BC5E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\l.a.noire\lanlauncher.exe |
"{7857CD39-BCDF-48AC-BFD7-18874AB5570E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{794C8BE6-7A2F-4FA4-BF4D-A39228C002C4}" = protocol=17 | dir=in | app=c:\users\dermaik\appdata\roaming\dropbox\bin\dropbox.exe |
"{79CB41B4-2743-4176-8381-81CCC2BCF484}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe |
"{7A39E986-AFD2-41F9-94F3-CFDE7AE32C85}" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike source von lours\hl2.exe |
"{7D12B23F-27AE-4551-9C3C-9E908FEFC343}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\apb reloaded\launcher\apblauncher.exe |
"{7D21CDA1-8FC4-4AEF-A464-7FF9A6CD3757}" = protocol=17 | dir=in | app=c:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe |
"{7D51B00B-A2D2-48EE-87E4-9B677C244E11}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\thebigmaik\source sdk base 2007\hl2.exe |
"{7F9FB13A-2F8A-4C6A-897B-892059E8E989}" = protocol=6 | dir=in | app=c:\program files\next limit\realflow 2012\realflow.exe |
"{82B1550E-4965-4C09-8A20-805CFE825A72}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforeverlauncher.exe |
"{834C55A0-A5B8-49C1-8DB4-5DE3D0CA033B}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{8546E299-8854-4B3C-BF3F-6D56CF7895B8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\l.a.noire\lanlauncher.exe |
"{85F5DD1C-94D8-4C2B-B75A-0201DB53D5AD}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"{8B5404D1-2243-40B7-887B-59EC21152013}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"{8ECA6AC8-C105-4C54-A8D9-A2BE7B148BF9}" = protocol=17 | dir=in | app=c:\program files (x86)\unity\editor\unity.exe |
"{90A198AE-122C-4379-941A-46E86D2E1A0D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 free\arma2free.exe |
"{91087DEA-2B17-48F3-B647-486592D5DD1B}" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe |
"{9137DA1A-C76F-4A7C-9A2E-1B00125DF723}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\hitman blood money\hitmanbloodmoney.exe |
"{95CAC671-6C69-49EB-A4D2-545FDCFE954A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\l.a.noire\lanlauncher.exe |
"{964755FF-47BC-4906-B2CA-C348AF955B67}" = protocol=6 | dir=in | app=c:\users\dermaik\appdata\roaming\dropbox\bin\dropbox.exe |
"{97810EC6-EBF9-4A30-8C25-1ED99A7A3199}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{9A408EE5-CAFC-4872-A65A-1F40B4E5A58D}" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe |
"{9BE8C8E8-D654-4FCC-B404-37D2326ADC92}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\thebigmaik\source sdk base 2007\hl2.exe |
"{9CCC6C8B-4D33-46E1-A9F7-F10DB5A86E2A}" = dir=in | app=c:\program files (x86)\brickforce\bflauncher.exe |
"{9D98CF67-82DA-4DF3-B1E3-76CE9EFBEDB3}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe |
"{9E552014-03A0-4285-BAFA-91992EE12165}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{A3097CF9-48AE-4E38-92D5-B69134C37012}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{A3F4F4C2-FFB4-4A2B-975C-172BE7B0AD12}" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe |
"{AA9C1747-E57E-4DED-A839-085B1EAE4411}" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe |
"{AB723BD0-23E9-4504-912F-548AA16BC15D}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"{AECC0FBD-F224-426B-AE41-E5BE3B4699CA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe |
"{AFE5B724-F137-476D-9975-1D1EC4972C79}" = protocol=17 | dir=in | app=c:\program files\next limit\realflow 2012\realflow.exe |
"{B141B66C-3B80-4625-A265-CE723AD66703}" = dir=in | app=c:\program files (x86)\brickforce\brickforce.exe |
"{B331E9AB-90A4-41A5-8C2E-6023F812B9E4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blur\blur.exe |
"{B833CF9B-D5E2-4253-B92F-B6A8EB2A357F}" = protocol=17 | dir=in | app=c:\users\dermaik\appdata\local\akamai\netsession_win.exe |
"{B846342B-384B-4C0D-BD4C-22FB5C687D45}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{BC8BF044-A58A-4A9F-8A45-EC4CE9831480}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe |
"{BF28ABDF-82FA-48CE-B814-741A1F67F2FD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe |
"{BF73175E-46BB-4B1B-8901-6619E9852241}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{C04B4930-4074-4FC4-8D37-7EC9F1D625A0}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{C32371D5-24D2-4DB3-A9E7-E5EAED814646}" = protocol=6 | dir=in | app=c:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe |
"{CC0CAD07-B9A0-4C07-B9F3-12C525E86558}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{CCFD4D83-7B1F-4C36-AC28-A0D6654D349A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe |
"{CEEDEEC0-F41D-423A-BF13-CACF845A58A3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\universe sandbox\universe sandbox.exe |
"{D031F0A3-D4B5-436B-9383-0EB3D3208715}" = protocol=6 | dir=in | app=c:\users\dermaik\appdata\local\akamai\netsession_win.exe |
"{D2313522-764D-4836-8F19-53CDD6E352BB}" = protocol=6 | dir=in | app=c:\program files (x86)\unity\monodevelop\bin\monodevelop.exe |
"{D27A0726-CD30-4813-8F0E-6B5D93B2FC94}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"{D5B1D16F-FA6B-4691-951D-8790B16EC9DC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe |
"{D67D813B-5C37-48D7-8261-86EACA9D107F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{D7E0479F-C7DD-4308-9484-5DAD28F2D343}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\microsoft flight\flight.exe |
"{DAFA363A-C902-4E3F-A0A2-C6A5FF2CDBAA}" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\farcry2.exe |
"{DBB3990C-B42B-4F03-A537-22E0960152E4}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{DD461193-2466-487C-91B5-2BA625895D20}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E5F1A721-4B03-41FD-A107-E49BC3CFA158}" = protocol=6 | dir=in | app=c:\program files (x86)\unity\editor\unity.exe |
"{E904D001-55C8-4B6E-8311-A3A21B4DD47A}" = protocol=17 | dir=in | app=c:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe |
"{E945C1AB-7D7D-4031-B1D3-10710C5128E5}" = protocol=6 | dir=in | app=c:\users\dermaik\appdata\roaming\dropbox\bin\dropbox.exe |
"{EA4F79CE-0104-46C8-A2A6-4EAC6A33A4C9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe |
"{EF3C3892-A644-4670-957F-06A8F5E17279}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{F16D0991-6FAE-4A6D-AC37-EE8FBA13C132}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\aoeonline.exe |
"{F30830CF-44C1-4595-8E0D-29ABE2B2CEE0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\apb reloaded\launcher\apblauncher.exe |
"{F3D59464-5AA1-4CB7-BA2D-E40232B37A25}" = protocol=17 | dir=in | app=c:\program files (x86)\unity\monodevelop\bin\monodevelop.exe |
"{F55AEDFE-00F4-4315-907F-886564E160A8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe |
"{F615E359-0B4E-4BB7-9C90-18DA5A2EEB7D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\microsoft flight\flight.exe |
"{F61D2FE5-1AE2-4C43-9C05-F77DA3A0457D}" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe |
"{F95FB738-B952-405C-93EE-07732FFE55B5}" = protocol=17 | dir=in | app=c:\program files (x86)\valve\hl.exe |
"{FFEE558A-EDA5-4831-89EC-3520968D35A4}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"TCP Query User{14BC19FE-9215-4988-B80F-522F0077EBBF}C:\program files (x86)\unity\editor\unity.exe" = protocol=6 | dir=in | app=c:\program files (x86)\unity\editor\unity.exe |
"TCP Query User{189ECD85-0E31-49C4-A68F-5DD4EB2089EB}C:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe |
"TCP Query User{1AED6E53-100C-4E93-BA63-2F29E58F9FF8}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe |
"TCP Query User{206F9E19-BE64-4634-B5AF-1B5B939ADB0F}C:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe |
"TCP Query User{2C23F375-5502-47F1-A507-CD4FA357CB81}C:\program files (x86)\call of duty 4 - modern warfare\iw3mp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\call of duty 4 - modern warfare\iw3mp.exe |
"TCP Query User{2E78325A-50C1-416D-9E19-89738B98C069}C:\program files (x86)\steam\steam.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"TCP Query User{30E466A7-571E-4BFE-A484-17C2684282C9}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{38F0B1A3-0D2E-45B2-AAA2-8643D5F00FB8}C:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=6 | dir=in | app=c:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe |
"TCP Query User{3C862820-2596-4779-87FC-72F165D4FDE6}C:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe |
"TCP Query User{3F29F607-9F3C-4CEB-86D0-6330B97B24D8}C:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe |
"TCP Query User{4C5418CB-C0D5-44CE-B8A2-F71B65E09A40}C:\users\dermaik\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\dermaik\appdata\local\akamai\netsession_win.exe |
"TCP Query User{5242D185-C1E7-4CB3-8B5D-F0DB14E2C509}C:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe |
"TCP Query User{74362E64-DC3A-435C-9D29-44900A9D1923}C:\program files (x86)\unity\monodevelop\bin\monodevelop.exe" = protocol=6 | dir=in | app=c:\program files (x86)\unity\monodevelop\bin\monodevelop.exe |
"TCP Query User{75502EB0-3EBB-4619-B64E-F7C9B345B3FE}C:\program files (x86)\steam\steamapps\common\blur\blur.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blur\blur.exe |
"TCP Query User{81BF17B7-6DD4-4EBB-987C-C3211BA49F63}C:\program files\next limit\realflow 2012\realflow.exe" = protocol=6 | dir=in | app=c:\program files\next limit\realflow 2012\realflow.exe |
"TCP Query User{822BA452-3AFF-4E7F-9BAB-7D73765CDEE0}C:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe" = protocol=6 | dir=in | app=c:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe |
"TCP Query User{AD2951E8-9F48-425A-98CB-ADA6EED92CB1}C:\program files\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"TCP Query User{B0AE3405-B7CF-4C38-A49B-C98C51AC3125}C:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe |
"TCP Query User{B2A82EE2-1D5A-42CA-8276-3DB5D8CB53CD}C:\program files (x86)\steam\steamapps\common\arma 2 free\arma2server.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 free\arma2server.exe |
"TCP Query User{D13C967F-5613-417F-933E-FD4DE302DC29}C:\program files (x86)\valve\hl.exe" = protocol=6 | dir=in | app=c:\program files (x86)\valve\hl.exe |
"TCP Query User{DC3F55F3-0BD9-4BA5-B68A-D47BA70AE5BA}C:\program files (x86)\icq7.7\icq.exe" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"TCP Query User{E9B70EDA-D296-4608-BE4A-B2F7A642F87E}C:\program files (x86)\counter-strike source von lours\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike source von lours\hl2.exe |
"TCP Query User{ECCE912F-D9BB-4C3A-A8DF-538D23B7A00C}C:\windows\syswow64\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\dplaysvr.exe |
"TCP Query User{F50F6749-C330-4B63-836B-F4667FDEF106}C:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe |
"TCP Query User{FA65D3EC-AC39-4CA7-9008-47032DBC7AB1}C:\program files (x86)\far cry 2 lan version\bin\farcry2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\farcry2.exe |
"TCP Query User{FB1E09CD-4BEC-44B5-A43C-B2F4A916FA80}C:\program files (x86)\wc3\wc3 (v 1.20e)\war3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\wc3\wc3 (v 1.20e)\war3.exe |
"UDP Query User{03606A3C-8067-4068-9FAE-5CB4559368FB}C:\program files (x86)\steam\steamapps\common\blur\blur.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blur\blur.exe |
"UDP Query User{13B37DAD-BBF4-4D45-91FE-16EE73D25CCA}C:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe |
"UDP Query User{19F0A205-9ACD-4C5A-82BC-398311232C1F}C:\program files (x86)\wc3\wc3 (v 1.20e)\war3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\wc3\wc3 (v 1.20e)\war3.exe |
"UDP Query User{20A2AF77-4497-4FB7-BF5D-73A3A43CAB3E}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe |
"UDP Query User{327CB7E8-A3FB-45C5-8374-B0B311D9DCA0}C:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe |
"UDP Query User{39ABAE0A-E9F7-484C-812C-6A08C6B3FE1B}C:\program files (x86)\call of duty 4 - modern warfare\iw3mp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\call of duty 4 - modern warfare\iw3mp.exe |
"UDP Query User{3C034C33-5DE8-469C-98DD-B0ACA6B3DF7E}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{3EC16FFD-72BB-49ED-8790-F09C266E4EE5}C:\windows\syswow64\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\dplaysvr.exe |
"UDP Query User{4311ADE6-6DC3-4760-970D-CB5F540CA32D}C:\program files (x86)\unity\monodevelop\bin\monodevelop.exe" = protocol=17 | dir=in | app=c:\program files (x86)\unity\monodevelop\bin\monodevelop.exe |
"UDP Query User{44E8C50F-C950-43F1-B7B2-2D8CDBAF5CFF}C:\program files\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"UDP Query User{4CE9A5A0-8933-40DC-B57F-CDCDF35CC983}C:\program files (x86)\steam\steamapps\common\arma 2 free\arma2server.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 free\arma2server.exe |
"UDP Query User{4F7E3AC9-1EBF-476C-A43B-721F459D21A1}C:\program files (x86)\unity\editor\unity.exe" = protocol=17 | dir=in | app=c:\program files (x86)\unity\editor\unity.exe |
"UDP Query User{570A4850-5920-4187-A1ED-98A9813E703D}C:\program files (x86)\far cry 2 lan version\bin\farcry2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\farcry2.exe |
"UDP Query User{636D2C7C-8ED6-4766-825C-F49B8EB7E51E}C:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe |
"UDP Query User{6C53316A-BF09-4B5D-8A19-45BF4C92ECA4}C:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe |
"UDP Query User{7BD0F0F6-1431-40D1-8A1C-84D6E12C59F9}C:\program files (x86)\valve\hl.exe" = protocol=17 | dir=in | app=c:\program files (x86)\valve\hl.exe |
"UDP Query User{846E7181-89A3-4BA9-B72B-FD294E7E4EF3}C:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe |
"UDP Query User{88F101E6-8818-400E-9516-3802227876EC}C:\program files (x86)\counter-strike source von lours\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike source von lours\hl2.exe |
"UDP Query User{C01D2DE6-4529-4BF0-B2D3-D381B7AF14D8}C:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe |
"UDP Query User{CC687947-8F09-47C5-BE0B-BD195070E137}C:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=17 | dir=in | app=c:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe |
"UDP Query User{CD4881C9-EAF8-4596-BCF6-30070B18D875}C:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe" = protocol=17 | dir=in | app=c:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe |
"UDP Query User{E05CE888-1047-4FEF-8022-FFA86753F2DC}C:\program files\next limit\realflow 2012\realflow.exe" = protocol=17 | dir=in | app=c:\program files\next limit\realflow 2012\realflow.exe |
"UDP Query User{E8F12280-E307-4FC1-815C-01FD5C234B06}C:\program files (x86)\steam\steam.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"UDP Query User{EE4ACDB7-0771-4868-9890-9F7ADC638303}C:\program files (x86)\icq7.7\icq.exe" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe |
"UDP Query User{F8464F3A-02AF-4F44-859F-375F87D0B543}C:\users\dermaik\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\dermaik\appdata\local\akamai\netsession_win.exe |
"UDP Query User{FF1311FA-50D8-466E-9697-29B78BF44AD1}C:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{26A24AE4-039D-4CA4-87B4-2F86417003FF}" = Java(TM) 7 Update 3 (64-bit)
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}" = Apple Mobile Device Support
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}" = iTunes
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{987FE247-4E69-4A2E-A961-D14F901FDBF6}" = Logitech Webcam Software
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 295.73
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 295.73
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 295.73
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 295.73
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0209
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.7.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.12.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"CCleaner" = CCleaner
"lvdrivers_12.10" = Logitech Webcam Software-Treiberpaket
"MAXONFB05E576" = CINEMA 4D 13.016
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"WinRAR archiver" = WinRAR 4.11 (64-Bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{0FF3D021-5ED4-11E1-8FD8-F04DA23A5C58}" = Vegas Pro 11.0
"{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support
"{13B792AA-C078-43A4-8A3A-8B12D629940D}" = Counter-Strike 1.6
"{147894EE-5ED4-11E1-A8FF-F04DA23A5C58}" = MSVCRT Redists
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{188704D4-07EA-4B28-89C6-1132F2BE8CF9}" = Icarus (Personal Edition)
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{28E82311-8616-11E1-BEB0-B8AC6F97B88E}" = Google Earth
"{30C8AA56-4088-426F-91D1-0EDFD3A25678}" = Adobe Dreamweaver CS4
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets
"{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4EAE665D-957A-4D04-9679-3AD582008877}" = NVIDIA PhysX
"{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}" = ICQ7.7
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7FB413C8-3CAD-49F7-A67C-6EFEB4B04050}" = LogMeIn Hamachi
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{87532CAB-7932-4F84-8937-823337622807}" = Adobe Illustrator CS4
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{943A8D28-80D6-41DC-AE94-81FEB42041BF}" = System Requirements Lab CYRI
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A70B1A8B-24B4-4204-9E46-D14CBC49093E}" = Vicon boujou 5.0
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Deutsch
"{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D7D2F494-89E3-42ED-8A2B-75BDD9B464CB}" = D-Link DWA-140
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_697a06b96d8bcbe2d77b88e7d5448d0" = Adobe Creative Suite 4 Master Collection
"Akamai" = Akamai NetSession Interface
"Audacity_is1" = Audacity 1.2.6
"BrickForce" = BrickForce 1.4.40
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DAEMON Tools Lite" = DAEMON Tools Lite
"DivX Setup" = DivX-Setup
"Fences" = Fences
"FileZilla Client" = FileZilla Client 3.5.3
"Fraps" = Fraps (remove only)
"Free Audio Converter_is1" = Free Audio Converter version 5.0.6.221
"Just Cause 2_is1" = Just Cause 2
"LogMeIn Hamachi" = LogMeIn Hamachi
"Magic Bullet Looks Vegas" = Magic Bullet Looks Vegas
"Magic Bullet PhotoLooks" = Magic Bullet PhotoLooks
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.61.0.1400
"Mozilla Firefox 13.0.1 (x86 de)" = Mozilla Firefox 13.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Origin" = Origin
"PunkBusterSvc" = PunkBuster Services
"RealFlow 2012" = RealFlow 2012
"RealFlowC4D" = RealFlow Plug-in for Cinema4D
"RocketDock_is1" = RocketDock 1.3.5
"Scratch" = Scratch
"Steam App 105430" = Age of Empires Online
"Steam App 107400" = ARMA 2: Free
"Steam App 203850" = Microsoft Flight
"Steam App 42640" = Blur
"Steam App 42680" = Call of Duty: Modern Warfare 3
"Steam App 6860" = Hitman: Blood Money
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 7" = TeamViewer 7
"Tomb Raider: Underworld" = Tomb Raider: Underworld 1.0
"Trapcode Particular" = Trapcode Particular
"Trapcode Particular v2" = Trapcode Particular v2
"Unity" = Unity
"Vector Magic" = Vector Magic
"WinLiveSuite" = Windows Live Essentials
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Dropbox" = Dropbox
"UnityWebPlayer" = Unity Web Player
========== Last 20 Event Log Errors ==========
[ System Events ]
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
Error - 02.07.2012 12:20:48 | Computer Name = DasIstMaiksPC | Source = Service Control Manager | ID = 7034
Description = Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1
Mal passiert.
Error - 02.07.2012 12:23:21 | Computer Name = DasIstMaiksPC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?02.?07.?2012 um 18:21:30 unerwartet heruntergefahren.
< End of report >
|
| Themen zu C:\Windows\System32Gl\svchost.exe |
| adobe, adobe after effects, akamai, alternate, audacity, autostart, bho, bonjour, call of duty, converter, error, firefox, flash player, format, google earth, helper, jdownloader, langs, locker, log's, logfile, mozilla, msvcrt, nvidia update, object, plug-in, registry, rundll, scan, searchscopes, security, software, svchost.exe, system, system32gl, teamspeak, third party, udp, updates, virus, windows |
Baum-Darstellung