S.M.A.R.T. Check Windows7 Desktop Schwarz und nurnoch Papierkorb und Arbeitsplatz da

OTL logfile created on: 01.11.2012 18:34:10 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\huscho\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,49 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 47,25% Memory free
6,98 Gb Paging File | 5,27 Gb Available in Paging File | 75,56% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 199,90 Gb Total Space | 71,12 Gb Free Space | 35,58% Space Free | Partition Type: NTFS
Drive D: | 265,76 Gb Total Space | 49,30 Gb Free Space | 18,55% Space Free | Partition Type: NTFS
Drive E: | 298,09 Gb Total Space | 12,97 Gb Free Space | 4,35% Space Free | Partition Type: NTFS
 
Computer Name: HUSCHO-PC | User Name: huscho | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\huscho\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\ProgramData\xwn8lR3QrpkCV8.exe ()
PRC - C:\ProgramData\gsLFMTxcnODDjts.exe ()
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\avscan.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avcenter.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\TeamViewer\Version7\TeamViewer.exe (TeamViewer GmbH)
PRC - C:\Programme\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Programme\TeamViewer\Version7\tv_w32.exe (TeamViewer GmbH)
PRC - C:\Programme\Common Files\Java\Java Update\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
PRC - C:\Programme\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)
PRC - C:\Programme\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\ProgramData\xwn8lR3QrpkCV8.exe ()
MOD - C:\ProgramData\gsLFMTxcnODDjts.exe ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\2e16482769fcdf856919e292a968f16c\IAStorUtil.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\3b2b9f4ec1819e4b95792d92f56d26f9\IAStorCommon.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll ()
MOD - C:\Programme\Avira\AntiVir Desktop\sqlite3.dll ()
MOD - C:\Programme\WinRAR\RarExt.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Programme\DeviceVM\Browser Configuration Utility\sqlite3.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (nvUpdatusService) -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (TeamViewer7) -- C:\Programme\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (TeamViewer6) -- C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (IAStorDataMgrSvc) -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (BCUService) -- C:\Programme\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (odserv) -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose) -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira GmbH)
DRV - (dtsoftbus01) -- C:\Windows\System32\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV - (truecrypt) -- C:\Windows\System32\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV - (asmtxhci) -- C:\Windows\System32\drivers\asmtxhci.sys (ASMedia Technology Inc)
DRV - (asmthub3) -- C:\Windows\System32\drivers\asmthub3.sys (ASMedia Technology Inc)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (USB28xxOEM) -- C:\Windows\System32\drivers\emOEM.sys (eMPIA Technology, Inc.)
DRV - (USB28xxBGA) -- C:\Windows\System32\drivers\emBDA.sys (eMPIA Technology, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.splashtop.com/asusexpressgate/mb/searchAPI.php?SE=yahoo&QS=http%3A%2F%2Fde.search.yahoo.com%2Fsearch%3Ffr%3Dfp-devicevm%26type%3DWEB01
IE - HKCU\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Programme\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {698BEECB-7CDB-4b49-A6A5-133359065ACA}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{698BEECB-7CDB-4b49-A6A5-133359065ACA}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
IE - HKCU\..\SearchScopes\{CA1F1138-C801-4134-AB53-B1EBADDC9DC0}: "URL" = hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5369970905&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=de&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.selectedEngine: "Amazon.de"
FF - prefs.js..browser.startup.homepage: "hxxp://partnerpage.google.com/frieden7.de"
FF - prefs.js..extensions.enabledAddons: ich@maltegoetz.de:1.4.3
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.29 21:40:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.10.29 21:40:43 | 000,000,000 | ---D | M]
 
[2011.09.06 19:54:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\huscho\AppData\Roaming\mozilla\Extensions
[2012.10.23 22:43:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\huscho\AppData\Roaming\mozilla\Firefox\Profiles\f4oxc5ey.default\extensions
[2012.09.17 20:27:45 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\huscho\AppData\Roaming\mozilla\Firefox\Profiles\f4oxc5ey.default\extensions\ich@maltegoetz.de
[2012.07.25 19:39:46 | 000,741,958 | ---- | M] () (No name found) -- C:\Users\huscho\AppData\Roaming\mozilla\firefox\profiles\f4oxc5ey.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012.10.29 21:40:43 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.10.29 21:40:43 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.10.29 21:40:44 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.03.05 11:34:45 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.07.11 22:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012.06.24 13:50:31 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.09.01 15:37:41 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.06.24 13:50:31 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.24 13:50:31 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.06.24 13:50:31 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.24 13:50:31 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BCU] C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [gsLFMTxcnODDjts.exe] C:\ProgramData\gsLFMTxcnODDjts.exe ()
O4 - HKLM..\Run: [IAStorIcon] C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKCU..\Run: [xwn8lR3QrpkCV8] C:\ProgramData\xwn8lR3QrpkCV8.exe ()
O4 - Startup: C:\Users\huscho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O4 - Startup: C:\Users\huscho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\huscho\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{53B3A884-7333-4FF0-AC78-0A6D4861E30C}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{200abcec-7a8f-11e1-9db9-f46d044f27dc}\Shell - "" = AutoRun
O33 - MountPoints2\{200abcec-7a8f-11e1-9db9-f46d044f27dc}\Shell\AutoRun\command - "" = G:\Autorun.exe
O33 - MountPoints2\{d6b272b0-d8e5-11e0-8111-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{d6b272b0-d8e5-11e0-8111-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Bin\assetup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.11.01 18:32:33 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\huscho\Desktop\OTL.exe
[2012.11.01 18:25:07 | 000,399,264 | ---- | C] (Bleeping Computer, LLC) -- C:\Users\huscho\Desktop\unhide.exe
[2012.11.01 17:14:53 | 000,000,000 | ---D | C] -- C:\Users\huscho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Restore
[2012.10.29 21:40:42 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012.10.27 11:31:55 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.10.26 17:15:38 | 000,000,000 | ---D | C] -- C:\Users\huscho\AppData\Roaming\foobar2000
[2012.10.26 17:15:35 | 000,000,000 | ---D | C] -- C:\Program Files\foobar2000
[2012.10.20 09:28:08 | 000,000,000 | ---D | C] -- C:\Users\huscho\AppData\Roaming\Magic Set Editor
[2012.10.20 09:28:02 | 000,000,000 | ---D | C] -- C:\Users\huscho\Desktop\Quest-MSE-Karteneditor
[2012.10.13 18:15:58 | 000,000,000 | ---D | C] -- C:\Users\huscho\Desktop\Neuer Ordner
[2012.10.13 13:58:22 | 000,000,000 | ---D | C] -- C:\Users\huscho\AppData\Local\MPlayer
[2012.10.12 17:42:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2012.10.12 17:41:05 | 019,906,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll
[2012.10.12 17:41:05 | 017,559,912 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll
[2012.10.12 17:41:05 | 010,837,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys
[2012.10.12 17:41:05 | 007,697,768 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll
[2012.10.12 17:41:05 | 006,127,464 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvopencl.dll
[2012.10.12 17:41:05 | 002,574,696 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll
[2012.10.12 17:41:05 | 001,867,112 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll
[2012.10.12 17:41:05 | 000,888,168 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispgenco32.dll
[2012.10.12 17:41:05 | 000,884,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvhdagenco3220103.dll
[2012.10.12 17:41:05 | 000,831,848 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvumdshim.dll
[2012.10.12 17:41:05 | 000,202,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvinit.dll
[2012.10.12 17:41:05 | 000,149,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvhda32v.sys
[2012.10.12 17:41:05 | 000,028,008 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvhdap32.dll
[2012.10.10 17:25:28 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2012.10.10 17:25:25 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2012.10.10 17:25:25 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2012.10.10 17:25:25 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2012.10.10 17:25:25 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2012.10.10 17:25:25 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2012.10.10 17:25:25 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2012.10.10 17:25:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2012.10.10 17:25:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2012.10.10 17:25:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2012.10.10 17:25:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2012.10.10 17:25:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2012.10.10 17:25:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2012.10.10 17:25:17 | 003,968,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012.10.10 17:25:17 | 003,914,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.11.01 18:32:32 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\huscho\Desktop\OTL.exe
[2012.11.01 18:25:11 | 000,399,264 | ---- | M] (Bleeping Computer, LLC) -- C:\Users\huscho\Desktop\unhide.exe
[2012.11.01 18:21:40 | 000,015,456 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.01 18:21:40 | 000,015,456 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.01 18:12:00 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.01 18:11:44 | 2810,101,760 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.01 18:07:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.11.01 17:46:31 | 000,000,368 | ---- | M] () -- C:\ProgramData\xwn8lR3QrpkCV8
[2012.11.01 17:45:59 | 000,000,176 | ---- | M] () -- C:\ProgramData\-xwn8lR3QrpkCV8r
[2012.11.01 17:45:59 | 000,000,160 | ---- | M] () -- C:\ProgramData\-xwn8lR3QrpkCV8
[2012.11.01 17:14:53 | 000,000,659 | ---- | M] () -- C:\Users\huscho\Desktop\File_Restore.lnk
[2012.11.01 17:14:47 | 000,246,784 | ---- | M] () -- C:\ProgramData\xwn8lR3QrpkCV8.exe
[2012.11.01 17:04:35 | 000,657,438 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.11.01 17:04:35 | 000,618,714 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.11.01 17:04:35 | 000,130,810 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.11.01 17:04:35 | 000,107,034 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.11.01 17:01:46 | 000,339,968 | ---- | M] () -- C:\ProgramData\gsLFMTxcnODDjts.exe
[2012.10.29 22:19:07 | 000,256,448 | ---- | M] () -- C:\Users\huscho\Desktop\15189.pdf
[2012.10.26 17:15:35 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\foobar2000.lnk
[2012.10.25 18:52:36 | 002,327,181 | ---- | M] () -- C:\Users\huscho\Desktop\Dusttactics_Victory_Bridge_German_low.pdf
[2012.10.25 18:52:04 | 014,666,827 | ---- | M] () -- C:\Users\huscho\Desktop\DustTactics_Rev_Rules_German_low.pdf
[2012.10.23 20:57:56 | 001,015,580 | ---- | M] () -- C:\Users\huscho\Desktop\WGS000X-Scenarios-Bombers_EN_Web.pdf
[2012.10.23 20:57:15 | 006,990,532 | ---- | M] () -- C:\Users\huscho\Desktop\WGS001-Rulebook_EN_web.pdf
[2012.10.08 22:07:15 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.10.08 22:07:15 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.10.07 10:30:47 | 000,001,901 | ---- | M] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk
[2012.10.02 23:20:00 | 019,906,920 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll
[2012.10.02 23:20:00 | 017,559,912 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll
[2012.10.02 23:20:00 | 015,309,160 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvd3dum.dll
[2012.10.02 23:20:00 | 012,501,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvwgf2um.dll
[2012.10.02 23:20:00 | 010,837,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys
[2012.10.02 23:20:00 | 007,697,768 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll
[2012.10.02 23:20:00 | 006,127,464 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvopencl.dll
[2012.10.02 23:20:00 | 002,574,696 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll
[2012.10.02 23:20:00 | 002,428,776 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvapi.dll
[2012.10.02 23:20:00 | 001,867,112 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll
[2012.10.02 23:20:00 | 001,009,512 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco32.dll
[2012.10.02 23:20:00 | 000,888,168 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvdispgenco32.dll
[2012.10.02 23:20:00 | 000,831,848 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvumdshim.dll
[2012.10.02 23:20:00 | 000,202,600 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvinit.dll
[2012.10.02 23:20:00 | 000,012,865 | ---- | M] () -- C:\Windows\System32\nvinfo.pb
[2012.10.02 20:29:41 | 002,557,288 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvsvcr.dll
[2012.10.02 20:29:41 | 000,108,392 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvmctray.dll
[2012.10.02 20:29:41 | 000,062,312 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvshext.dll
[2012.10.02 20:29:23 | 003,536,817 | ---- | M] () -- C:\Windows\System32\nvcoproc.bin
[2012.10.02 20:29:22 | 002,853,224 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvsvc.dll
[2012.10.02 20:28:53 | 003,965,288 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcpl.dll
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.11.01 18:30:31 | 000,001,901 | ---- | C] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk
[2012.11.01 18:30:31 | 000,001,515 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2012.11.01 18:30:31 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\Foto-Mosaik-Edda.lnk
[2012.11.01 18:30:31 | 000,001,066 | ---- | C] () -- C:\Users\Public\Desktop\MAGIX Retten Sie Ihre Videokassetten! Version 5.lnk
[2012.11.01 18:30:31 | 000,000,995 | ---- | C] () -- C:\Users\Public\Desktop\foobar2000.lnk
[2012.11.01 18:30:31 | 000,000,794 | ---- | C] () -- C:\Users\Public\Desktop\World of Warcraft.lnk
[2012.11.01 18:30:31 | 000,000,616 | ---- | C] () -- C:\Users\Public\Desktop\Reason.lnk
[2012.11.01 18:30:30 | 000,001,325 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
[2012.11.01 18:30:30 | 000,001,138 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 6.lnk
[2012.11.01 18:30:30 | 000,001,066 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 7.lnk
[2012.11.01 18:30:29 | 000,001,953 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2012.11.01 18:30:29 | 000,001,897 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
[2012.11.01 18:30:29 | 000,001,876 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2012.11.01 18:30:29 | 000,001,077 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
[2012.11.01 18:30:27 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2012.11.01 18:30:27 | 000,001,851 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
[2012.11.01 18:30:27 | 000,001,136 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady 7.0.lnk
[2012.11.01 18:30:27 | 000,001,131 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 7.0.lnk
[2012.11.01 17:14:53 | 000,000,659 | ---- | C] () -- C:\Users\huscho\Desktop\File_Restore.lnk
[2012.11.01 17:14:53 | 000,000,176 | ---- | C] () -- C:\ProgramData\-xwn8lR3QrpkCV8r
[2012.11.01 17:14:53 | 000,000,160 | ---- | C] () -- C:\ProgramData\-xwn8lR3QrpkCV8
[2012.11.01 17:14:48 | 000,000,368 | ---- | C] () -- C:\ProgramData\xwn8lR3QrpkCV8
[2012.11.01 17:14:47 | 000,246,784 | ---- | C] () -- C:\ProgramData\xwn8lR3QrpkCV8.exe
[2012.11.01 17:04:06 | 000,339,968 | ---- | C] () -- C:\ProgramData\gsLFMTxcnODDjts.exe
[2012.10.29 22:19:07 | 000,256,448 | ---- | C] () -- C:\Users\huscho\Desktop\15189.pdf
[2012.10.25 18:52:35 | 002,327,181 | ---- | C] () -- C:\Users\huscho\Desktop\Dusttactics_Victory_Bridge_German_low.pdf
[2012.10.25 18:52:04 | 014,666,827 | ---- | C] () -- C:\Users\huscho\Desktop\DustTactics_Rev_Rules_German_low.pdf
[2012.10.23 20:57:56 | 001,015,580 | ---- | C] () -- C:\Users\huscho\Desktop\WGS000X-Scenarios-Bombers_EN_Web.pdf
[2012.10.23 20:57:07 | 006,990,532 | ---- | C] () -- C:\Users\huscho\Desktop\WGS001-Rulebook_EN_web.pdf
[2012.10.12 17:41:45 | 003,536,817 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin
[2012.09.15 16:44:28 | 000,007,609 | ---- | C] () -- C:\Users\huscho\AppData\Local\Resmon.ResmonCfg
[2011.10.25 20:14:30 | 000,032,397 | ---- | C] () -- C:\Windows\SGTBox.INI
[2011.10.25 20:10:54 | 000,000,035 | ---- | C] () -- C:\Windows\A4W.INI
[2011.09.21 19:09:06 | 000,000,000 | ---- | C] () -- C:\Windows\ViewNX2.INI
[2011.09.17 15:11:03 | 000,000,268 | R--- | C] () -- C:\ProgramData\Organs
[2011.09.17 15:11:03 | 000,000,268 | R--- | C] () -- C:\ProgramData\Organic
[2011.09.17 15:11:03 | 000,000,268 | R--- | C] () -- C:\ProgramData\Noise Gate
[2011.09.17 15:11:03 | 000,000,268 | R--- | C] () -- C:\Users\huscho\AppData\Roaming\Nature Sounds
[2011.09.17 15:11:03 | 000,000,268 | R--- | C] () -- C:\Users\huscho\AppData\Roaming\Nature
[2011.09.17 15:11:03 | 000,000,268 | R--- | C] () -- C:\Users\huscho\AppData\Roaming\Multipressor
[2011.09.17 15:11:03 | 000,000,020 | ---- | C] () -- C:\ProgramData\PKP_DLev.DAT
[2011.09.17 15:11:03 | 000,000,020 | ---- | C] () -- C:\ProgramData\PKP_DLet.DAT
[2011.09.17 15:11:03 | 000,000,020 | ---- | C] () -- C:\ProgramData\PKP_DLes.DAT
[2011.09.17 15:11:03 | 000,000,012 | R--- | C] () -- C:\ProgramData\Pipe Organ
[2011.09.17 15:11:03 | 000,000,012 | R--- | C] () -- C:\ProgramData\Pianos and Keyboards
[2011.09.17 15:11:03 | 000,000,012 | R--- | C] () -- C:\ProgramData\Piano Hard
[2011.09.06 19:28:31 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011.09.06 19:22:00 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2011.09.06 19:21:54 | 000,025,282 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >
         

OTL Extras logfile created on: 01.11.2012 18:34:10 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\huscho\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,49 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 47,25% Memory free
6,98 Gb Paging File | 5,27 Gb Available in Paging File | 75,56% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 199,90 Gb Total Space | 71,12 Gb Free Space | 35,58% Space Free | Partition Type: NTFS
Drive D: | 265,76 Gb Total Space | 49,30 Gb Free Space | 18,55% Space Free | Partition Type: NTFS
Drive E: | 298,09 Gb Total Space | 12,97 Gb Free Space | 4,35% Space Free | Partition Type: NTFS
 
Computer Name: HUSCHO-PC | User Name: huscho | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\fotobuch.de\Designer 2.0\Designer.exe" = C:\Program Files\fotobuch.de\Designer 2.0\Designer.exe:*:Designer.exe
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{027034B5-924F-4B16-AA18-5C4A212A5899}" = lport=138 | protocol=17 | dir=in | app=system | 
"{18DCB5F5-4E44-429F-9A13-E0982001EAD6}" = lport=137 | protocol=17 | dir=in | app=system | 
"{220E762A-0C06-4D4C-9C65-271CC38B4371}" = lport=139 | protocol=6 | dir=in | app=system | 
"{23B65D12-81F2-4700-B9F3-FD40A1451E59}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | 
"{2B272818-175D-4918-90AA-93BC5758F952}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2EABFAB5-823F-45D2-AC13-71C5416C394A}" = rport=139 | protocol=6 | dir=out | app=system | 
"{4BCED05F-C0DF-4034-8823-0562548BF536}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{50D33F5C-0812-467F-B30B-74C6E511725F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{55AD5640-50D6-4F61-8E0B-927B9CC77762}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{5C7B6224-1120-4CDC-82CF-3B947333CEB5}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{61F3CD70-D2BD-4457-9333-55407C9A897E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{6E415705-9B92-428A-A48C-BCD2EB946886}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{7AA7D634-87F0-4386-83A0-D54246EEB7E4}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{7DD4A69C-1388-4FB5-A989-7671CC15F9E8}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{84F70658-CD5D-4DF2-9422-1AFF1D91745B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{8B61DB9F-C807-477F-B58A-C2987992D2EB}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{8FA43EBE-20A0-42B2-9CFF-40CD9FEBEB49}" = rport=137 | protocol=17 | dir=out | app=system | 
"{9F711895-D9D8-408A-98A3-075147F1CD77}" = rport=138 | protocol=17 | dir=out | app=system | 
"{D6A4E4FD-5728-4793-BB89-4B59A15A30EE}" = rport=445 | protocol=6 | dir=out | app=system | 
"{DE973AAB-0946-40D9-91DB-99480706BD4E}" = lport=445 | protocol=6 | dir=in | app=system | 
"{E6EA9514-175E-403D-9E99-468500633495}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{F8AB4B1B-3E51-4D9D-B2DF-DAB33EA96D38}" = lport=2869 | protocol=6 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03A5917A-2BA7-426C-A8AD-A7DB872C968E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{0717C3D6-4828-4A8A-8118-87BC73E612E5}" = protocol=6 | dir=in | app=c:\program files\icq7.6\icq.exe | 
"{08CF5CE6-BFB9-4CA4-992A-FED77FD21E29}" = protocol=6 | dir=in | app=c:\users\huscho\appdata\local\apps\2.0\xy4btn9p.qxn\vnkak45e.3j5\curs..tion_eee711038731a406_0004.0000_2bd39706d04e72c8\curseclient.exe | 
"{0AEBBAB6-F183-47C4-81F8-D5BEC748424F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{0CCA4571-CDDB-43AB-9203-29C9FBE54F1A}" = protocol=17 | dir=in | app=d:\world of warcraft\launcher.exe | 
"{10BC94B1-79FD-41B1-8751-221625AC5E0B}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{1558D132-45D2-4E1D-BD80-C30A5583CCA0}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version7\teamviewer_service.exe | 
"{18F1011B-CB6C-4021-87DE-1D9ABCAA7FE9}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version6\teamviewer.exe | 
"{1C539513-5286-48AD-970E-929ABEE980BB}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version6\teamviewer_service.exe | 
"{1E9ABC14-F9EF-4805-B88F-272102C90C85}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe | 
"{1F494B49-25EF-48F2-8805-9FA3C4E59B46}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"{21322EFC-4404-4F96-84D8-7D7134735D99}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version6\teamviewer_service.exe | 
"{23288A74-AAF1-425C-89B1-6B9C097EEF29}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{246F56D5-8BBB-4779-BC9F-C969882A9ECB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{26FE70D8-C842-4C7F-AECB-37064C61B30D}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version7\teamviewer.exe | 
"{2766029F-2113-4F10-B707-E4C90D1E1C78}" = protocol=6 | dir=in | app=c:\users\huscho\appdata\local\apps\2.0\xy4btn9p.qxn\vnkak45e.3j5\curs..tion_eee711038731a406_0004.0000_2bd39706d04e72c8\curseclient.exe | 
"{30C1B0FC-5077-404E-B370-DAE91A0B68AB}" = protocol=6 | dir=out | app=system | 
"{3316B6A8-EF81-404C-8B00-CE19A221EC16}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.868\agent.exe | 
"{365CA97F-97F2-4C9C-A84C-E3A448841F0F}" = protocol=17 | dir=in | app=c:\users\huscho\appdata\local\apps\2.0\xy4btn9p.qxn\vnkak45e.3j5\curs..tion_eee711038731a406_0004.0000_2bd39706d04e72c8\curseclient.exe | 
"{36A49C94-B00B-45DC-843B-761242D097DB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{39D6DBE4-BCFD-46D4-9A94-A68E249221B9}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.649\agent.exe | 
"{41EC0032-E679-45DA-8E5C-ADF5410EC0CB}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | 
"{456C8E6D-235C-4803-AF1B-7392F945F456}" = protocol=17 | dir=in | app=d:\spiele\star wars-the old republic\launcher.exe | 
"{473B99D0-3C5B-49C2-AFB9-28F122733D8E}" = protocol=6 | dir=in | app=d:\spiele\steam\steam.exe | 
"{4CDFE291-9AB6-4C55-8E64-F25899D7088A}" = protocol=17 | dir=in | app=c:\users\huscho\appdata\roaming\spotify\spotify.exe | 
"{512C777A-CFD1-4FE5-BDAB-505E87A754FA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{52B6D6A8-1794-42BF-A74C-A0783727A85D}" = protocol=17 | dir=in | app=c:\users\huscho\appdata\roaming\dropbox\bin\dropbox.exe | 
"{54E98811-611A-46A0-A723-ACEFC3F79BDC}" = protocol=17 | dir=in | app=c:\program files\icq7.6\icq.exe | 
"{5A05ED50-F137-4321-9F3F-81E6CC5507CE}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe | 
"{5E0427B5-B11E-4F9E-9E3E-89F03E38BA57}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{60977B51-C476-43F2-91E7-FFA9B954817F}" = protocol=6 | dir=in | app=d:\spiele\star wars-the old republic\launcher.exe | 
"{62E14007-EAD3-47EB-AC42-077E7D5740EF}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{6320BAB2-82EE-4B90-88D5-6B6FE2EBD89A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{652DC408-4C94-4153-A11F-609BEC170B84}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{67304174-CB38-4516-A3B4-4A0142949ADD}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{69F89789-C778-44B6-8CF1-4061D2087EB4}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{6A1A85FD-0F30-41EB-A911-077C1C8DAD14}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{6E6684D1-A67E-4A3F-919A-340590B87B81}" = protocol=6 | dir=in | app=d:\world of warcraft\launcher.exe | 
"{6F640553-3FD1-4A67-B2FF-402B152E3B14}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.868\agent.exe | 
"{744226C3-034C-44E2-BDFD-3F96A4667F68}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{78FBACF0-B039-4970-AB0F-FEDF51FF6F86}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | 
"{79EB611E-9DE7-4CDD-9D3D-5C827EBE4AE7}" = protocol=6 | dir=in | app=d:\spiele\star wars-the old republic\launcher.exe | 
"{7F09CF42-04BC-45FE-ADB9-4A1F523A16AE}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe | 
"{7FAF6034-49FD-4EBB-8D71-35E91C0DC775}" = protocol=6 | dir=in | app=c:\program files\diablo iii\diablo iii.exe | 
"{8367E4F1-2514-47B2-8F5A-B6C8BEE77CBC}" = protocol=6 | dir=in | app=c:\program files\diablo iii beta\diablo iii.exe | 
"{87930A4A-9256-4DF0-9933-37E7176729F6}" = protocol=17 | dir=in | app=d:\world of warcraft\launcher.patch.exe | 
"{8AD3086B-9004-4C02-91CD-012F9F66BC99}" = protocol=17 | dir=in | app=c:\users\huscho\appdata\local\apps\2.0\xy4btn9p.qxn\vnkak45e.3j5\curs..tion_eee711038731a406_0004.0000_2bd39706d04e72c8\curseclient.exe | 
"{A08C9507-5131-4EDD-B553-A9BAA1947A41}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{A3C4E26E-5340-4639-AB6F-E244CF0AA4F1}" = protocol=17 | dir=in | app=d:\spiele\steam\steam.exe | 
"{A8C80ABF-FA97-4BE9-B13D-844C230DC5BC}" = protocol=6 | dir=in | app=d:\world of warcraft\launcher.patch.exe | 
"{AB35C1D4-8563-449C-B341-172FF991D2AF}" = protocol=17 | dir=in | app=c:\program files\diablo iii beta\diablo iii.exe | 
"{AC38D9F3-3DA0-48E8-8D5A-4582BBAC41D1}" = protocol=17 | dir=in | app=c:\program files\icq7.6\icq.exe | 
"{B3EB333A-C1CD-41A6-82BC-A61348D90BFE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C36E21DA-EDB1-45B0-BB79-EAA26D76807E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1267\agent.exe | 
"{C465652A-EE09-45A6-BC26-75B790735730}" = protocol=6 | dir=in | app=c:\users\huscho\appdata\roaming\spotify\spotify.exe | 
"{C9F8101F-4278-446B-83EC-9C77CACA6DA2}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{CB2494C6-2505-4B26-8440-0EB0CF3F5919}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1267\agent.exe | 
"{CDE699C6-3367-4E82-AC00-6B9E498CBE53}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version7\teamviewer.exe | 
"{D4A1ED4F-2B02-4342-A924-0242E49B418E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.649\agent.exe | 
"{D61125A8-64C7-46B4-A417-912A922AD16D}" = protocol=6 | dir=in | app=c:\users\huscho\appdata\roaming\dropbox\bin\dropbox.exe | 
"{DAE4608A-1D24-47B2-9EF4-33EB771D67E0}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{DBEA4769-9410-4416-8AD8-D229BA2F8FAF}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | 
"{DF502168-E677-4BB0-9E8B-B723839B7252}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{DFC794FF-1870-4878-AE99-B11F2176B1A3}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{E06B90D0-06B9-48C4-B9F3-AD8FC7020219}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{E1544523-EAC2-4FC5-9483-6B751C80A59E}" = protocol=6 | dir=in | app=c:\program files\icq7.6\icq.exe | 
"{E25F2649-47B6-4185-A445-68B44B4FBBBB}" = protocol=17 | dir=in | app=d:\spiele\star wars-the old republic\launcher.exe | 
"{E660A321-8B2B-445A-AA52-C5C14AA7883A}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version7\teamviewer_service.exe | 
"{E6EFAA1E-B573-4F5B-BF89-8A2A1F3D6D09}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe | 
"{E9EB3244-BFF4-4800-8EB9-91D9D203DC9F}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version6\teamviewer.exe | 
"{EA0B55E1-68B6-42AA-AC7C-E06C23227A3D}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe | 
"{EA8EFD40-3CF6-4018-8191-58AA9D99A0C6}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe | 
"{EF6F5065-E347-4A51-A8E4-B34DAF083999}" = protocol=17 | dir=in | app=c:\program files\diablo iii\diablo iii.exe | 
"{FF0C979B-12C3-4957-A010-86234207B994}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe | 
"{FF4B701C-D33B-45F5-9268-7DC543FBD927}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"TCP Query User{097A7039-EDFE-4552-8D47-8D0155BB1506}D:\spiele\bloodline\binary\bloodlinechampions.exe" = protocol=6 | dir=in | app=d:\spiele\bloodline\binary\bloodlinechampions.exe | 
"TCP Query User{10A67391-D52D-46E9-AE08-DCB2CADEFC81}D:\spiele\tera\tera-launcher.exe" = protocol=6 | dir=in | app=d:\spiele\tera\tera-launcher.exe | 
"TCP Query User{1E93A2CC-4107-4037-BC26-9CB9FB3B3B36}C:\python26\python.exe" = protocol=6 | dir=in | app=c:\python26\python.exe | 
"TCP Query User{2C9A8A91-44F1-446B-8395-1F2C9B459AA1}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"TCP Query User{49DCDDB8-2030-4C4A-A81D-AAD5D565AEF4}D:\world of warcraft\temp\wow-4.2.1.2727-enus-tools-downloader.exe" = protocol=6 | dir=in | app=d:\world of warcraft\temp\wow-4.2.1.2727-enus-tools-downloader.exe | 
"TCP Query User{700AD251-0747-4FF6-96DA-9668AC1F8D99}D:\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe" = protocol=6 | dir=in | app=d:\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe | 
"TCP Query User{79953E54-17FF-4A4B-825E-3F076500F3CF}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | 
"TCP Query User{9DAFFEB8-0B65-4992-9734-C3000658D1BC}D:\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=d:\world of warcraft\backgrounddownloader.exe | 
"TCP Query User{C2D48DB4-806A-4116-AC7B-DB9AB7F31801}D:\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=6 | dir=in | app=d:\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe | 
"TCP Query User{D907A072-F42D-41ED-9C65-DFFF029440D7}D:\spiele\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=d:\spiele\world_of_tanks\wotlauncher.exe | 
"TCP Query User{E55B18B3-4DBF-41F1-B2F6-6D72E8B941CB}D:\spiele\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=d:\spiele\world_of_tanks\worldoftanks.exe | 
"UDP Query User{0871D818-7717-4194-AEEE-4F20D9C3F52C}D:\spiele\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=d:\spiele\world_of_tanks\worldoftanks.exe | 
"UDP Query User{0A06508D-43C8-4082-956F-35E9F62B1649}D:\world of warcraft\temp\wow-4.2.1.2727-enus-tools-downloader.exe" = protocol=17 | dir=in | app=d:\world of warcraft\temp\wow-4.2.1.2727-enus-tools-downloader.exe | 
"UDP Query User{17C8BBF9-09FF-46C0-B78A-CF5A47A76EED}D:\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=17 | dir=in | app=d:\world of warcraft\temp\wow-4.2.1.2736-enus-tools-downloader.exe | 
"UDP Query User{723DBB1A-CB43-45E4-8176-D1369E6FB9A9}D:\spiele\tera\tera-launcher.exe" = protocol=17 | dir=in | app=d:\spiele\tera\tera-launcher.exe | 
"UDP Query User{77C171B6-9F14-4204-B0F0-99E7FD58D4C1}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"UDP Query User{7EB56959-2F45-474E-B096-629EFE392006}D:\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=d:\world of warcraft\backgrounddownloader.exe | 
"UDP Query User{8077C765-48D4-4ACB-AB90-26F15DCC040E}D:\spiele\bloodline\binary\bloodlinechampions.exe" = protocol=17 | dir=in | app=d:\spiele\bloodline\binary\bloodlinechampions.exe | 
"UDP Query User{8C6AE0A4-C819-4553-9044-3D9DEF2C8F24}D:\spiele\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=d:\spiele\world_of_tanks\wotlauncher.exe | 
"UDP Query User{9710F2DD-F99D-4FDA-88F1-E738C5C476A3}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | 
"UDP Query User{C6C933EB-E415-4C38-BB58-F594BE888A42}C:\python26\python.exe" = protocol=17 | dir=in | app=c:\python26\python.exe | 
"UDP Query User{DC6A0D6A-24C0-4871-8FA6-DA3605B70A87}D:\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe" = protocol=17 | dir=in | app=d:\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{23B8A91D-680B-462B-87AD-3D70F7341731}" = iTunes
"{24aab420-4e30-4496-9739-3e216f3de6ae}" = Python 2.6.2
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}" = NVIDIA PhysX
"{31D888B7-9DA0-4219-9371-9A0037A097C6}" = MAGIX Screenshare
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7644E42D-B096-457F-8B5B-901238FC81AE}" = ICQ7.6
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{87441A59-5E64-4096-A170-14EFE67200C3}" = Picture Control Utility
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D85149E-D7A0-4920-BEBF-B6CEDFED8D1E}" = MAGIX USB-Videowandler 2
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A2D6ECD0-7E52-42B7-9236-DB2951436616}_is1" = Foto-Mosaik-Edda Standard V6.7.12231.1
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.2
"{B014EE44-9197-4513-9613-71E6EB1B514E}" = Nikon Message Center 2
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0604
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.18.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7B5A370-3DFF-4F0E-AE11-FD267C4938AA}" = CCS64 V3.9
"{BA88EE67-8974-459D-A1DB-C8281D9AC6F6}" = Browser Configuration Utility
"{D1E7142C-6BC3-49EB-A71A-E5D7ADAC7599}" = Nikon File Uploader 2
"{DDD62492-32A7-412B-8AF1-2CF032AD42E3}" = ViewNX 2
"{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}" = Asmedia ASM104x USB 3.0 Host Controller Driver
"{E6D67604-6C43-4D04-B829-436772FA7F5D}" = MAGIX Retten Sie Ihre Videokassetten! Version 5
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}" = Apple Mobile Device Support
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F8F9302E-27C2-45FA-A2D3-3880616A2BD1}" = MAGIX Speed burnR (MSI)
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop 7.0" = Adobe Photoshop 7.0
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.9
"Avira AntiVir Desktop" = Avira Free Antivirus
"Canon ScanGear Toolbox CS" = Canon ScanGear Toolbox CS 2.2
"DAEMON Tools Lite" = DAEMON Tools Lite
"Diablo III" = Diablo III
"ENTERPRISE" = Microsoft Office Enterprise 2007
"foobar2000" = foobar2000 v1.1.15
"MAGIX_MSI_Video_easy_4_RYVT" = MAGIX Retten Sie Ihre Videokassetten! Version 5
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox 16.0.2 (x86 de)" = Mozilla Firefox 16.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PS3 Media Server" = PS3 Media Server
"Reason4_is1" = Reason 4.0
"Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 6" = TeamViewer 6
"TeamViewer 7" = TeamViewer 7
"TrueCrypt" = TrueCrypt
"VLC media player" = VLC media player 2.0.1
"Winamp" = Winamp
"WinRAR archiver" = WinRAR 4.01 (32-Bit)
"World of Warcraft" = World of Warcraft
"wxPython2.8-unicode-py26_is1" = wxPython 2.8.10.1 (unicode) for Python 2.6
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"090215de958f1060" = Curse Client
"Dropbox" = Dropbox
"Spotify" = Spotify
"Winamp Detect" = Winamp Erkennungs-Plug-in
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 30.10.2012 13:11:39 | Computer Name = Huscho-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Python26\Lib\distutils\command\wininst-8_d.exe".
Die
 abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 31.10.2012 19:59:46 | Computer Name = Huscho-PC | Source = SideBySide | ID = 16842827
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Skype\Toolbars\Internet
 Explorer\SkypeIEPluginBroker.exe". Fehler in Manifest- oder Richtliniendatei "C:\Program
 Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe" in Zeile 2.  Mehrere
 requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 
Error - 31.10.2012 19:59:58 | Computer Name = Huscho-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Python26\Lib\distutils\command\wininst-8_d.exe".
Die
 abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 01.11.2012 12:52:33 | Computer Name = Huscho-PC | Source = Microsoft-Windows-LoadPerf | ID = 3013
Description = Die Zeichenfolgen der Leistungsindikatoren, die für die Sprach-ID 
"007" definiert wurden, können nicht aktualisiert werden. Das erste DWORD im Datenbereich
 enthält den Fehlercode.
 
Error - 01.11.2012 12:52:33 | Computer Name = Huscho-PC | Source = Microsoft-Windows-LoadPerf | ID = 3013
Description = Die Zeichenfolgen der Leistungsindikatoren, die für die Sprach-ID 
"009" definiert wurden, können nicht aktualisiert werden. Das erste DWORD im Datenbereich
 enthält den Fehlercode.
 
Error - 01.11.2012 12:52:33 | Computer Name = Huscho-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren
 für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 
Error - 01.11.2012 12:52:36 | Computer Name = Huscho-PC | Source = Microsoft-Windows-LoadPerf | ID = 3013
Description = Die Zeichenfolgen der Leistungsindikatoren, die für die Sprach-ID 
"007" definiert wurden, können nicht aktualisiert werden. Das erste DWORD im Datenbereich
 enthält den Fehlercode.
 
Error - 01.11.2012 12:52:36 | Computer Name = Huscho-PC | Source = Microsoft-Windows-LoadPerf | ID = 3009
Description = Die Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl)
 konnten nicht installiert werden. Der Fehlercode ist das erste DWORD im Datenbereich.
 
Error - 01.11.2012 13:17:46 | Computer Name = Huscho-PC | Source = Microsoft-Windows-LoadPerf | ID = 3013
Description = Die Zeichenfolgen der Leistungsindikatoren, die für die Sprach-ID 
"007" definiert wurden, können nicht aktualisiert werden. Das erste DWORD im Datenbereich
 enthält den Fehlercode.
 
Error - 01.11.2012 13:17:46 | Computer Name = Huscho-PC | Source = Microsoft-Windows-LoadPerf | ID = 3009
Description = Die Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl)
 konnten nicht installiert werden. Der Fehlercode ist das erste DWORD im Datenbereich.
 
[ System Events ]
Error - 31.05.2012 00:39:51 | Computer Name = Huscho-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Heimnetzgruppen-Listener" wurde unerwartet beendet. Dies
 ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 31.05.2012 00:39:51 | Computer Name = Huscho-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Netzwerkverbindungen" wurde unerwartet beendet. Dies ist
 bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 100 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 31.05.2012 00:39:51 | Computer Name = Huscho-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Programmkompatibilitäts-Assistent-Dienst" wurde unerwartet
 beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden
 in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 31.05.2012 00:39:51 | Computer Name = Huscho-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Superfetch" wurde unerwartet beendet. Dies ist bereits
 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt:
 Neustart des Diensts.
 
Error - 31.05.2012 00:39:51 | Computer Name = Huscho-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Überwachung verteilter Verknüpfungen (Client)" wurde unerwartet
 beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden
 in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 31.05.2012 00:39:51 | Computer Name = Huscho-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Sitzungs-Manager für Desktopfenster-Manager" wurde unerwartet
 beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden
 in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 31.05.2012 00:39:51 | Computer Name = Huscho-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Diagnosesystemhost" wurde unerwartet beendet. Dies ist bereits
 1 Mal passiert.
 
Error - 31.05.2012 00:39:51 | Computer Name = Huscho-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Windows Driver Foundation - Benutzermodus-Treiberframework"
 wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen
 werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 01.06.2012 14:22:12 | Computer Name = Huscho-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?01.?06.?2012 um 20:19:12 unerwartet heruntergefahren.
 
Error - 01.06.2012 14:22:15 | Computer Name = Huscho-PC | Source = BugCheck | ID = 1001
Description = 
 
 
< End of report >