www.Startfenster.com entfernen

OTL Extras logfile created on: 06.12.2012 20:47:08 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Russell\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16433)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,96 Gb Total Physical Memory | 6,76 Gb Available Physical Memory | 84,98% Memory free
11,33 Gb Paging File | 10,10 Gb Available in Paging File | 89,12% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 247,92 Gb Total Space | 188,09 Gb Free Space | 75,87% Space Free | Partition Type: NTFS
Drive E: | 292,97 Gb Total Space | 290,51 Gb Free Space | 99,16% Space Free | Partition Type: NTFS
 
Computer Name: RUSS-GAMINGPC | User Name: Russell | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = CE 37 E6 AF FF 6A CD 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0256451B-74DB-4B00-A910-4CC111028357}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{0E7BD1CD-5D6C-407C-B4A5-68DBACC88282}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{164B30A4-CEB1-4707-A89D-4C935847FD2F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{187C7371-E749-4C0F-BC8A-8FE3EA0AEBEB}" = lport=137 | protocol=17 | dir=in | app=system | 
"{3EEDF13D-B630-4B9B-9EA2-51CBEF40EAF1}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{41BDC9CC-F78E-4C79-8AF8-ED10634F7F8C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{43E4C7E4-A098-4EA1-82EB-507EAB97890D}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{4D54B613-D078-4D95-A1A5-0DE7F3B9297F}" = lport=445 | protocol=6 | dir=in | app=system | 
"{52DFAA33-7000-4F97-9E5A-5685C255218B}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{58146F73-53A2-4091-B3B9-F535B4BD184B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{59C223B8-6072-4EA9-92B3-BFF95E034A0E}" = rport=138 | protocol=17 | dir=out | app=system | 
"{5F3E8864-16DA-4C93-BCFC-99360620E528}" = rport=445 | protocol=6 | dir=out | app=system | 
"{64BC3169-D247-495C-9FAC-5A52DB4E916E}" = lport=139 | protocol=6 | dir=in | app=system | 
"{6B8D9DDF-6677-41B7-AC33-0D16AFD13C7C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{9382A6DF-5E49-449B-B142-A691291EB121}" = rport=139 | protocol=6 | dir=out | app=system | 
"{B3A45FEB-746B-4AA9-88D1-A599EBFA74C6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{C01E0977-AB98-4B17-B4F1-6282BF2F2735}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{C26CFEBD-1F49-4B72-B251-135B6485D942}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{CADAD473-29AE-4611-B974-92A62C6334D9}" = lport=138 | protocol=17 | dir=in | app=system | 
"{E37B2C90-CB06-41F3-B2D5-8583AA4FEE43}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{F6669CBC-EF06-4F67-9F6B-5A826F6A71A3}" = rport=137 | protocol=17 | dir=out | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00662546-B038-4507-8B6A-52BB164DF2E2}" = dir=in | name=@{microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} | 
"{04856FDF-7846-4D7D-8E82-77FB50F34C4A}" = dir=out | name=@{microsoft.xboxlivegames_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | 
"{05D1F126-940E-488F-8FF1-E8A5466223AF}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\initengine.exe | 
"{068A6B67-9007-4181-B27D-7F5B51A64143}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{1326728A-46F4-4C9D-A523-10BDB36D62B6}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{1A2B5710-2B1E-45DA-8104-16D9633EE808}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{1C0817AF-22F6-4C5D-A79A-34CB2BF85FC6}" = protocol=17 | dir=in | app=c:\users\russell\desktop\steam.exe | 
"{26EA1420-5FB3-4BD5-A474-5498EC122880}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | 
"{285521A1-F07E-45D5-9C9A-71D656AE1FA3}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\anno5.exe | 
"{2E1D077B-DBAE-42CB-A95E-5754CA432B00}" = dir=out | name=@{microsoft.zunevideo_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/33270} | 
"{2E97F7C5-8AFB-419A-A43F-55FE8E3A73A6}" = protocol=6 | dir=in | app=c:\users\russell\desktop\steam.exe | 
"{2FC0C975-DB6D-4ECF-B668-382C8602AD20}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{2FC7C5A0-740B-4C38-82DA-AD5D4794833C}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\autopatcher.exe | 
"{343F368C-04C7-4ADA-B806-2635778C6D68}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{344CAE9D-8BAB-4C84-80EC-3E6DA7865E52}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | 
"{351E58AB-AB51-4D35-B986-9B247604BEEE}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{444BF403-D6C1-47B0-8865-85BD1921884D}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\anno5.exe | 
"{4CCB1A90-7770-414A-AD4F-EE1D5F10BCB8}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | 
"{50FCFB5B-9C3F-4E67-82D8-098B45EB3E98}" = dir=out | name=@{microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | 
"{60F6F234-56F9-4407-9A7B-CDB54A5D0CCB}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{674B6A15-E6BC-4FCA-9C55-9A746CAE642F}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{6BF9DD15-5F9E-4130-A9B0-856FA3F62E28}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{6C79303D-8539-4FA9-845B-497BF349A962}" = dir=out | name=@{microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} | 
"{74A12476-DAD5-4C73-81A7-67418734CAA4}" = dir=in | name=@{microsoft.reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | 
"{7702A063-1796-4AD9-944E-95BC8E989F52}" = dir=out | name=@{microsoft.bingweather_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} | 
"{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | 
"{86C0CE18-A3BC-47B5-AC8F-BEC354197086}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{9C724CA1-7E27-4368-8AF8-53955310B6E6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{A2226A77-B978-4423-8E8C-0164BD2B2147}" = dir=in | name=@{microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | 
"{A2AC6E61-45C8-4626-BC7F-625AEBE766DB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{AC8DED4D-58BA-4F8C-BFF7-ACC03E1971D7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{AD20D419-213E-4A49-ADC0-0FCEE530E9C0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{B11364B3-6538-448C-B4D5-3CBDD7B1A5A5}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{B2CAA5F6-4D61-4164-9386-C7FF32004FB3}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | 
"{BB0EFBC3-8BF6-4E0B-A39F-2EECECD83501}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{BBB9A078-F734-40FD-9ECE-ADC4376BF8CB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{BE15EEA3-CC48-47E3-94C7-C85CB4148F5D}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | 
"{C4A2EED7-7D7F-4D49-AB73-1A33A978B955}" = dir=out | name=@{microsoft.reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | 
"{CCCD1F4D-BCA2-418F-87C3-C4318B3A6742}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{CCECE1EE-7EEC-4A12-98E8-6EB313D07385}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{CD81C6F4-5B9D-43D9-B768-E38028A094BA}" = dir=out | name=@{microsoft.bingnews_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} | 
"{CEE6AABC-C520-43A1-820C-BDFDBA2D0EBA}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{CF43624F-F9FA-45AE-B7B0-2C5533DC7242}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{D6DF60AE-7C1A-4BAD-867A-9FB20D43D2C5}" = dir=out | name=@{microsoft.bingfinance_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} | 
"{D6FE871D-43F4-4A5A-9D3F-A652D299E09B}" = protocol=58 | dir=in | app=system | 
"{D79BA8EB-1B74-4292-AD6C-87F278628515}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{D8A7CA6D-B699-4177-BCD4-22F571F99247}" = dir=out | name=@{microsoft.bingmaps_1.2.0.136_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | 
"{DDEE0226-C8EC-4D68-ACF9-4770D9BA7034}" = dir=out | name=@{microsoft.microsoftskydrive_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} | 
"{E46FBB14-5E5B-4B9A-B28D-C1172DCA3ED3}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\autopatcher.exe | 
"{E4EE2CB7-05E1-4606-87D1-DAD758343065}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{E6369F25-BA8D-44B3-98C0-9FD2CC4539E3}" = dir=out | name=@{microsoft.bingsports_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} | 
"{E6AD813D-3552-4A0C-81B6-D3130319EF30}" = dir=out | name=@{microsoft.zunemusic_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/33273} | 
"{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | 
"{E8966065-074B-41AC-A689-F0D28129E295}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\related designs\anno 2070\initengine.exe | 
"{EE22D4F9-081F-4B5B-B242-22AA4D39D0A7}" = protocol=6 | dir=out | app=system | 
"{EF1FE6D3-4F9E-4E67-8C63-3CF19B208948}" = dir=out | name=@{microsoft.bing_1.2.0.137_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} | 
"{F17146D4-0865-4C15-BCBE-B86C67AF6844}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{F89B8F42-BDBF-46D6-BA83-0B8D381233C9}" = dir=out | name=@{microsoft.bingtravel_1.2.0.145_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} | 
"{F999E07F-E8B8-4774-A101-D9841181B0A8}" = dir=in | name=@{microsoft.bing_1.2.0.137_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} | 
"TCP Query User{66FBB52F-3F86-4D46-8021-AF72BED77193}C:\program files (x86)\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\guild wars 2\gw2.exe | 
"TCP Query User{BBB3C40E-99E8-4149-9C10-16BDFB291FEA}C:\users\russell\desktop\skype.exe" = protocol=6 | dir=in | app=c:\users\russell\desktop\skype.exe | 
"UDP Query User{69BBF861-01F2-4159-9930-D73277B83BCE}C:\users\russell\desktop\skype.exe" = protocol=17 | dir=in | app=c:\users\russell\desktop\skype.exe | 
"UDP Query User{F34F0181-DF64-4C08-AC89-5EE2145C0167}C:\program files (x86)\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\guild wars 2\gw2.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{22D8AE6F-3C6B-47E8-8F04-629F23DBE978}" = iTunes
"{26A24AE4-039D-4CA4-87B4-2F86417009FF}" = Java 7 Update 9 (64-bit)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{7AB6F8D7-7804-4662-BE8C-1AFCCD602D9F}" = Microsoft-Maus- und Tastatur-Center
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.18.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}" = Apple Mobile Device Support
"Microsoft Mouse and Keyboard Center" = Microsoft-Maus- und Tastatur-Center
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B48E264C-C8CD-4617-B0BE-46E977BAD694}" = ANNO 2070
"{CAE017F8-C238-4397-879B-7FBB915D9457}" = LogMeIn Hamachi
"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Google Chrome" = Google Chrome
"LogMeIn Hamachi" = LogMeIn Hamachi
"NIS" = Norton Internet Security
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Origin" = Origin
"TmNationsForever_is1" = TmNationsForever
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 01.12.2012 13:58:10 | Computer Name = Russ-Gamingpc | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Paint.NET\Native.x64\PaintDotNet.Native.x64.dll".
Die
 abhängige Assemblierung "Microsoft.VC90.OpenMP,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.6161""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 02.12.2012 07:47:02 | Computer Name = Russ-Gamingpc | Source = Application Hang | ID = 1002
Description = Programm java.exe, Version 7.0.90.5 kann nicht mehr unter Windows 
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: db4    Startzeit: 
01cdd07d306f15d4    Endzeit: 4294967295    Anwendungspfad: C:\Program Files\Java\jre7\bin\java.exe

Berichts-ID:
 fbf1a27f-3c75-11e2-be82-10bf48bce829    Vollständiger Name des fehlerhaften Pakets:
     Anwendungs-ID, die relativ zum fehlerhaften Paket ist:   
 
Error - 04.12.2012 14:09:45 | Computer Name = Russ-Gamingpc | Source = Application Hang | ID = 1002
Description = Programm javaw.exe, Version 7.0.90.5 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 17c8    Startzeit:
 01cdd249fa6f52a7    Endzeit: 4294967295    Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe

Berichts-ID:
 c71bb7be-3e3d-11e2-be86-10bf48bce829    Vollständiger Name des fehlerhaften Pakets:
     Anwendungs-ID, die relativ zum fehlerhaften Paket ist:   
 
Error - 04.12.2012 14:10:40 | Computer Name = Russ-Gamingpc | Source = Application Hang | ID = 1002
Description = Programm javaw.exe, Version 7.0.90.5 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 640    Startzeit: 
01cdd24a90e938a6    Endzeit: 4294967295    Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe

Berichts-ID:
 e8c86f28-3e3d-11e2-be86-10bf48bce829    Vollständiger Name des fehlerhaften Pakets:
     Anwendungs-ID, die relativ zum fehlerhaften Paket ist:   
 
Error - 04.12.2012 14:12:14 | Computer Name = Russ-Gamingpc | Source = Application Hang | ID = 1002
Description = Programm javaw.exe, Version 7.0.90.5 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 908    Startzeit: 
01cdd24aac2aa05d    Endzeit: 4294967295    Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe

Berichts-ID:
 20de1778-3e3e-11e2-be86-10bf48bce829    Vollständiger Name des fehlerhaften Pakets:
     Anwendungs-ID, die relativ zum fehlerhaften Paket ist:   
 
Error - 04.12.2012 14:15:02 | Computer Name = Russ-Gamingpc | Source = Application Hang | ID = 1002
Description = Programm javaw.exe, Version 7.0.90.5 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 2c    Startzeit: 01cdd24ae7caa2df

Endzeit:
 9    Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe    Berichts-ID: 83791563-3e3e-11e2-be86-10bf48bce829

Vollständiger
 Name des fehlerhaften Pakets:     Anwendungs-ID, die relativ zum fehlerhaften Paket
 ist:   
 
Error - 04.12.2012 14:32:08 | Computer Name = Russ-Gamingpc | Source = Application Hang | ID = 1002
Description = Programm soffice.bin, Version 3.4.9593.500 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: ea8    Startzeit: 
01cdd2456da583a1    Endzeit: 40775    Anwendungspfad: C:\Program Files (x86)\OpenOffice.org
 3\program\soffice.bin    Berichts-ID: ca12ca6f-3e40-11e2-be86-10bf48bce829    Vollständiger
 Name des fehlerhaften Pakets:     Anwendungs-ID, die relativ zum fehlerhaften Paket
 ist:   
 
Error - 04.12.2012 15:52:11 | Computer Name = Russ-Gamingpc | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.2.9200.16433,
 Zeitstempel: 0x50763312  Name des fehlerhaften Moduls: d3d11.dll, Version: 6.2.9200.16420,
 Zeitstempel: 0x505a98f1  Ausnahmecode: 0xc000041d  Fehleroffset: 0x00000000000489d1
ID
 des fehlerhaften Prozesses: 0xba8  Startzeit der fehlerhaften Anwendung: 0x01cdd245636dad5e
Pfad
 der fehlerhaften Anwendung: C:\WINDOWS\Explorer.EXE  Pfad des fehlerhaften Moduls:
 C:\WINDOWS\SYSTEM32\d3d11.dll  Berichtskennung: 17818372-3e4c-11e2-be86-10bf48bce829
Vollständiger
 Name des fehlerhaften Pakets:   Anwendungs-ID, die relativ zum fehlerhaften Paket
 ist: 
 
Error - 06.12.2012 09:43:34 | Computer Name = Russ-Gamingpc | Source = System Restore | ID = 8210
Description = 
 
Error - 06.12.2012 09:52:41 | Computer Name = Russ-Gamingpc | Source = System Restore | ID = 8210
Description = 
 
[ System Events ]
Error - 23.11.2012 12:58:11 | Computer Name = Russ-Gamingpc | Source = DCOM | ID = 10016
Description = 
 
Error - 30.11.2012 12:22:28 | Computer Name = Russ-Gamingpc | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?30.?11.?2012 um 17:07:24 unerwartet heruntergefahren.
 
Error - 04.12.2012 13:20:22 | Computer Name = Russ-Gamingpc | Source = Service Control Manager | ID = 7030
Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" ist als interaktiver
 Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive
 Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 
Error - 04.12.2012 13:20:23 | Computer Name = Russ-Gamingpc | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 LogMeIn Hamachi Tunneling Engine erreicht.
 
Error - 04.12.2012 13:20:23 | Computer Name = Russ-Gamingpc | Source = Service Control Manager | ID = 7000
Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1053
 
Error - 05.12.2012 07:42:29 | Computer Name = Russ-Gamingpc | Source = Service Control Manager | ID = 7030
Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" ist als interaktiver
 Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive
 Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 
Error - 05.12.2012 07:42:30 | Computer Name = Russ-Gamingpc | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 LogMeIn Hamachi Tunneling Engine erreicht.
 
Error - 05.12.2012 07:42:30 | Computer Name = Russ-Gamingpc | Source = Service Control Manager | ID = 7000
Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1053
 
Error - 06.12.2012 11:45:56 | Computer Name = Russ-Gamingpc | Source = DCOM | ID = 10016
Description = 
 
Error - 06.12.2012 12:31:07 | Computer Name = Russ-Gamingpc | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt
 gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende
 Warnung hat folgenden für das TLS-Protokoll definierten Code: 51. Der Windows-SChannel-Fehlerstatus
 lautet: 900.
 
 
< End of report >
         

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:55 on 06/12/2012 (Russell)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-