| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber aufWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
17.06.2013, 21:50
| #1 |
| |  PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber auf Hallo, Ich habe seit kurzem das Problem, daß mein PC im Leerlauf irgendwas tut, was er nicht sollte. Jedes mal wenn ich ihn eine Zeit (3-4 Minuten) in Ruhe lasse, drehen alle Lüfter im PC hoch. Sobald ich dann die Maus bewege, hängt sich mein Anzeigetreiber auf und wird von Windows "wiederhergestellt". Solange ich am PC sitze und ihn ununterbrochen nutze geschieht nichts dergleichen. gruss Mike Wenn ich länger warte, haengt sich das System komplett auf, sobald ich die Maus wieder bewege und ich kann nur mit einem Reset weitermachen... |
|
18.06.2013, 00:14
| #2 |
| /// TB-Ausbilder   | PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber auf Hallo Mike,
__________________das kann natürlich verschiedene Gründe haben. Aber klären wir den Rechner mal in Bezug auf Malware ab: Wenn du deinen Rechner nach Malware untersuchen lassen willst, dann arbeite bitte diese Anleitung ab und poste die entsprechenden Logfiles.
__________________ |
|
18.06.2013, 07:27
| #3 |
| | PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber auf OTL Logfile:
__________________Code:
ATTFilter OTL logfile created on: 18.06.2013 01:31:58 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Mike\Desktop 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16614) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7.98 Gb Total Physical Memory | 5.61 Gb Available Physical Memory | 70.31% Memory free 15.95 Gb Paging File | 13.67 Gb Available in Paging File | 85.66% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 279.46 Gb Total Space | 98.09 Gb Free Space | 35.10% Space Free | Partition Type: NTFS Drive D: | 279.46 Gb Total Space | 31.47 Gb Free Space | 11.26% Space Free | Partition Type: NTFS Drive E: | 698.63 Gb Total Space | 148.91 Gb Free Space | 21.31% Space Free | Partition Type: NTFS Drive I: | 1863.02 Gb Total Space | 1320.14 Gb Free Space | 70.86% Space Free | Partition Type: NTFS Computer Name: KELLER | User Name: Mike | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2013.06.18 01:24:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Mike\Desktop\OTL.exe PRC - [2013.06.07 00:06:24 | 001,641,896 | ---- | M] (Valve Corporation) -- E:\Steam\Steam.exe PRC - [2013.06.07 00:06:24 | 000,543,656 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe PRC - [2013.05.16 16:44:05 | 001,012,000 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe PRC - [2013.05.16 16:38:39 | 001,826,592 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe PRC - [2013.05.16 16:38:28 | 001,213,216 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe PRC - [2013.04.22 06:32:56 | 002,882,096 | ---- | M] (GamersFirst) -- C:\Users\Mike\AppData\Local\GamersFirst\LIVE!\Live.exe PRC - [2013.04.03 12:32:24 | 000,082,800 | ---- | M] (X-Rite Inc.) -- C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe PRC - [2013.03.25 07:43:48 | 000,569,488 | ---- | M] (EnTech Taiwan) -- C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe PRC - [2013.03.06 17:30:43 | 003,560,288 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe PRC - [2013.03.06 14:26:20 | 004,449,280 | ---- | M] () -- C:\Program Files (x86)\UseNeXT\UseNeXT.exe PRC - [2013.02.21 16:06:26 | 001,527,808 | ---- | M] (hxxp://www.webtemp.org) -- C:\Program Files (x86)\WebTemp\WebTemp.exe PRC - [2012.12.24 05:33:29 | 000,144,520 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe PRC - [2012.12.18 16:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012.10.02 13:15:38 | 000,382,824 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2012.07.12 09:12:44 | 002,359,808 | ---- | M] () -- C:\Program Files (x86)\X-Rite\ColorMunki Smile\application\ColorMunki Smile Tray.exe PRC - [2012.06.28 00:23:00 | 000,108,544 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe PRC - [2012.06.15 00:44:22 | 000,528,896 | ---- | M] (Cooler Master) -- C:\Program Files (x86)\Cooler Master\CM Storm Trigger\CMTrigger.exe PRC - [2012.06.14 17:25:04 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2011.11.03 10:29:04 | 004,657,048 | ---- | M] (Almico Software (www.almico.com)) -- C:\Program Files (x86)\SpeedFan\speedfan.exe PRC - [2011.10.06 19:27:47 | 003,246,040 | ---- | M] (Acronis) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe PRC - [2011.09.22 18:30:58 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\nlssrv32.exe PRC - [2011.01.10 14:49:20 | 000,014,848 | ---- | M] () -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe PRC - [2010.10.22 02:00:00 | 000,376,832 | ---- | M] (AVM Berlin) -- C:\Program Files (x86)\avmwlanstick\WlanNetService.exe ========== Modules (No Company Name) ========== MOD - [2013.06.18 01:24:51 | 000,192,512 | ---- | M] () -- C:\Users\Mike\AppData\Local\Temp\sfamcc00002.dll MOD - [2013.06.18 01:24:51 | 000,192,512 | ---- | M] () -- C:\Users\Mike\AppData\Local\Temp\sfamcc00001.dll MOD - [2013.06.18 01:24:51 | 000,172,032 | ---- | M] () -- C:\Users\Mike\AppData\Local\Temp\sfareca00002.dll MOD - [2013.06.18 01:24:51 | 000,172,032 | ---- | M] () -- C:\Users\Mike\AppData\Local\Temp\sfareca00001.dll MOD - [2013.06.07 00:06:24 | 001,114,536 | ---- | M] () -- E:\Steam\bin\chromehtml.dll MOD - [2013.05.28 07:44:30 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\30e3a21202000677d0a9270572251477\System.Windows.Forms.ni.dll MOD - [2013.05.28 07:44:08 | 000,687,104 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\23673bbebe3c0ca7c894e614bb3ffd1a\System.Security.ni.dll MOD - [2013.05.28 07:44:06 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\764f15e86c82662e977bd418bd6318c1\System.Configuration.ni.dll MOD - [2013.05.07 03:05:20 | 000,654,848 | ---- | M] () -- E:\Steam\SDL2.dll MOD - [2013.04.19 00:43:32 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\X-Rite\ColorMunki Smile\application\zlib1.dll MOD - [2013.04.19 00:43:30 | 044,355,072 | ---- | M] () -- C:\Program Files (x86)\X-Rite\ColorMunki Smile\application\Prism.dll MOD - [2013.04.19 00:43:22 | 003,449,344 | ---- | M] () -- C:\Program Files (x86)\X-Rite\ColorMunki Smile\application\CxF2_VC90MD_2.1.dll MOD - [2013.04.19 00:43:22 | 000,898,560 | ---- | M] () -- C:\Program Files (x86)\X-Rite\ColorMunki Smile\application\libxml2.dll MOD - [2013.03.27 02:16:40 | 020,341,672 | ---- | M] () -- E:\Steam\bin\libcef.dll MOD - [2013.03.06 14:26:20 | 004,449,280 | ---- | M] () -- C:\Program Files (x86)\UseNeXT\UseNeXT.exe MOD - [2013.02.05 01:11:35 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll MOD - [2013.02.05 01:11:25 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll MOD - [2013.02.05 01:11:20 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll MOD - [2013.02.05 01:10:55 | 011,493,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll MOD - [2012.12.12 09:42:46 | 000,160,768 | ---- | M] () -- C:\Program Files (x86)\UseNeXT\unrar.dll MOD - [2012.12.11 19:51:10 | 001,100,800 | ---- | M] () -- E:\Steam\bin\avcodec-53.dll MOD - [2012.12.11 19:51:10 | 000,192,000 | ---- | M] () -- E:\Steam\bin\avformat-53.dll MOD - [2012.12.11 19:51:10 | 000,124,416 | ---- | M] () -- E:\Steam\bin\avutil-51.dll MOD - [2012.07.12 09:12:44 | 002,359,808 | ---- | M] () -- C:\Program Files (x86)\X-Rite\ColorMunki Smile\application\ColorMunki Smile Tray.exe MOD - [2012.06.28 00:23:28 | 002,285,056 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll MOD - [2012.06.28 00:23:26 | 011,603,968 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll MOD - [2012.06.28 00:23:24 | 000,051,200 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll MOD - [2012.06.28 00:23:24 | 000,049,664 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll MOD - [2012.06.28 00:23:22 | 001,868,288 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll MOD - [2012.06.28 00:23:22 | 001,719,296 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll MOD - [2012.06.28 00:23:22 | 000,386,560 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll MOD - [2012.06.28 00:23:22 | 000,185,856 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll MOD - [2012.06.28 00:23:22 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll MOD - [2012.06.28 00:23:22 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll MOD - [2012.06.28 00:23:22 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll MOD - [2012.06.28 00:23:22 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll MOD - [2012.06.28 00:23:22 | 000,040,448 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll MOD - [2012.06.28 00:23:22 | 000,038,400 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll MOD - [2012.06.28 00:23:22 | 000,037,376 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll MOD - [2012.06.28 00:23:20 | 010,292,224 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll MOD - [2012.06.28 00:23:20 | 001,318,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll MOD - [2012.06.28 00:23:20 | 000,372,224 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll MOD - [2012.06.28 00:23:20 | 000,265,216 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll MOD - [2012.06.28 00:23:18 | 000,263,168 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll MOD - [2012.06.28 00:23:18 | 000,154,624 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll MOD - [2012.06.28 00:23:18 | 000,051,200 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll MOD - [2012.06.28 00:23:18 | 000,051,200 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll MOD - [2012.06.28 00:23:18 | 000,037,888 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll MOD - [2012.06.28 00:23:18 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll MOD - [2012.06.28 00:23:16 | 000,034,816 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll MOD - [2012.06.28 00:23:14 | 000,428,032 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll MOD - [2012.06.28 00:23:14 | 000,310,784 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll MOD - [2012.06.28 00:23:14 | 000,182,272 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll MOD - [2012.06.28 00:23:14 | 000,068,608 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll MOD - [2012.06.28 00:23:14 | 000,045,568 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll MOD - [2012.06.28 00:23:14 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll MOD - [2012.06.28 00:23:14 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll MOD - [2012.06.28 00:23:14 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll MOD - [2012.06.28 00:23:12 | 001,518,080 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll MOD - [2012.06.28 00:23:12 | 001,316,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll MOD - [2012.06.28 00:23:12 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll MOD - [2012.06.28 00:23:12 | 000,046,592 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll MOD - [2012.06.28 00:23:12 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll MOD - [2012.06.28 00:23:12 | 000,038,400 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll MOD - [2012.06.28 00:23:12 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll MOD - [2012.06.28 00:23:12 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll MOD - [2012.06.28 00:23:12 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll MOD - [2012.06.28 00:23:12 | 000,034,816 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll MOD - [2012.06.28 00:23:10 | 001,235,456 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll MOD - [2012.06.28 00:23:10 | 000,037,376 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll MOD - [2012.06.28 00:23:08 | 000,698,368 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll MOD - [2012.06.28 00:23:08 | 000,077,824 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll MOD - [2012.06.28 00:23:08 | 000,056,320 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll MOD - [2012.06.28 00:23:08 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll MOD - [2012.06.28 00:23:08 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll MOD - [2012.06.28 00:23:08 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll MOD - [2012.06.28 00:23:08 | 000,041,984 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll MOD - [2012.06.28 00:23:08 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll MOD - [2012.06.28 00:23:08 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll MOD - [2012.06.28 00:23:08 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll MOD - [2012.06.28 00:23:08 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll MOD - [2012.06.28 00:23:06 | 000,139,264 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll MOD - [2012.06.28 00:23:06 | 000,070,144 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll MOD - [2012.06.28 00:23:06 | 000,070,144 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll MOD - [2012.06.28 00:23:06 | 000,052,736 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll MOD - [2012.06.28 00:23:06 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll MOD - [2012.06.28 00:23:04 | 000,258,560 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll MOD - [2012.06.28 00:23:04 | 000,248,832 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll MOD - [2012.06.28 00:23:04 | 000,219,648 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll MOD - [2012.06.28 00:23:04 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll MOD - [2012.06.28 00:23:04 | 000,091,136 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll MOD - [2012.06.28 00:23:04 | 000,083,968 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll MOD - [2012.06.28 00:23:04 | 000,047,616 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll MOD - [2012.06.28 00:23:04 | 000,043,520 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll MOD - [2012.06.28 00:23:04 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll MOD - [2012.06.28 00:23:02 | 000,724,992 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll MOD - [2012.06.28 00:23:02 | 000,440,320 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll MOD - [2012.06.28 00:23:02 | 000,198,656 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll MOD - [2012.06.28 00:23:02 | 000,106,496 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll MOD - [2012.06.28 00:23:02 | 000,092,160 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll MOD - [2012.06.28 00:23:00 | 000,111,616 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll MOD - [2012.06.28 00:23:00 | 000,108,544 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe MOD - [2012.06.28 00:23:00 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll MOD - [2012.05.30 08:51:08 | 000,699,280 | R--- | M] () -- C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.3.1.22\wincfi39.dll MOD - [2012.04.27 00:38:30 | 020,758,016 | ---- | M] () -- C:\Users\Mike\AppData\Local\GamersFirst\LIVE!\libcef.dll MOD - [2010.11.13 01:26:08 | 000,434,176 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll MOD - [2010.11.13 01:26:08 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ========== Services (SafeList) ========== SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2013.06.07 00:06:24 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2013.05.16 16:38:39 | 001,826,592 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2013.04.03 12:32:24 | 000,082,800 | ---- | M] (X-Rite Inc.) [Auto | Running] -- C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe -- (xrdd.exe) SRV - [2013.03.06 17:30:43 | 003,560,288 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8) SRV - [2013.01.08 13:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012.12.24 05:33:29 | 000,144,520 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe -- (NIS) SRV - [2012.12.18 16:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012.12.17 16:46:50 | 000,137,488 | ---- | M] (Futuremark Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service) SRV - [2012.10.02 13:15:38 | 000,382,824 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2012.06.14 17:25:04 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2011.12.27 17:10:45 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011.10.06 19:27:47 | 003,246,040 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv) SRV - [2011.09.27 21:04:08 | 000,359,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV - [2011.09.22 18:30:58 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\nlssrv32.exe -- (nlsX86cc) SRV - [2011.09.07 09:59:00 | 000,569,072 | ---- | M] (CrossLoop) [Disabled | Stopped] -- C:\Users\Mike\AppData\Local\CrossLoop\CrossLoopService.exe -- (CrossLoopService) SRV - [2011.06.29 17:25:12 | 003,246,920 | ---- | M] (O&O Software GmbH) [Auto | Running] -- C:\Programme\OO Software\Defrag\oodag.exe -- (OODefragAgent) SRV - [2011.06.28 01:46:22 | 001,114,280 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc) SRV - [2011.06.14 10:32:04 | 000,011,776 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Dell\PowerNap\PowerNap.Service.exe -- (dell_power_nap_service) SRV - [2011.01.10 14:49:20 | 000,014,848 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe -- (DokanMounter) SRV - [2010.12.18 18:56:34 | 000,291,384 | ---- | M] (EnTech Taiwan) [Disabled | Stopped] -- C:\Program Files (x86)\softOSD\softOSD.exe -- (softOSD) SRV - [2010.10.27 17:18:52 | 000,052,896 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc) SRV - [2010.10.22 02:00:00 | 000,376,832 | ---- | M] (AVM Berlin) [Auto | Running] -- C:\Program Files (x86)\avmwlanstick\WlanNetService.exe -- (AVM WLAN Connection Service) SRV - [2010.10.06 00:17:26 | 003,926,520 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc) SRV - [2010.07.21 08:50:26 | 000,814,080 | ---- | M] (GlavSoft LLC.) [Disabled | Stopped] -- C:\Users\Mike\AppData\Local\CrossLoop\tvnserver.exe -- (tvnserver) SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010.02.19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009.08.18 13:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007.05.28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Disabled | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2007.01.11 04:02:00 | 000,126,464 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE -- (EPSON_PM_RPCV4_01) ========== Driver Services (SafeList) ========== DRV:64bit: - [2013.06.17 22:56:19 | 000,036,680 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbamchameleon.sys -- (mbamchameleon) DRV:64bit: - [2013.01.31 05:18:18 | 000,432,800 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1403010.016\symnets.sys -- (SymNetS) DRV:64bit: - [2013.01.31 05:18:06 | 001,139,800 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1403010.016\symefa64.sys -- (SymEFA) DRV:64bit: - [2013.01.29 03:45:19 | 000,796,248 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1403010.016\srtsp64.sys -- (SRTSP) DRV:64bit: - [2013.01.29 03:45:19 | 000,036,952 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1403010.016\srtspx64.sys -- (SRTSPX) DRV:64bit: - [2013.01.29 02:14:30 | 000,177,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent) DRV:64bit: - [2013.01.22 04:15:33 | 000,493,656 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1403010.016\symds64.sys -- (SymDS) DRV:64bit: - [2012.11.16 04:22:01 | 000,224,416 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1403010.016\ironx64.sys -- (SymIRON) DRV:64bit: - [2012.11.16 04:18:04 | 000,168,096 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1403010.016\ccsetx64.sys -- (ccSet_NIS) DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2012.08.23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2012.08.06 20:23:04 | 000,136,192 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\acedrv05.sys -- (acedrv05) DRV:64bit: - [2012.07.19 14:12:56 | 000,088,480 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:64bit: - [2012.07.19 14:12:55 | 000,046,400 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:64bit: - [2012.07.03 17:25:16 | 000,189,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:64bit: - [2012.06.21 16:04:52 | 000,549,704 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SRS_AE_amd64.sys -- (SRS_AE_Service) DRV:64bit: - [2012.04.24 11:26:50 | 000,015,016 | ---- | M] (GretagMacbeth LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\i1display_x64.sys -- (EyeOneDisplay) DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2011.10.06 19:27:54 | 000,285,280 | ---- | M] (Acronis) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\afcdp.sys -- (afcdp) DRV:64bit: - [2011.10.06 19:27:30 | 001,263,200 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tdrpm273.sys -- (tdrpman273) DRV:64bit: - [2011.10.06 19:27:26 | 000,970,336 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\timntr.sys -- (timounter) DRV:64bit: - [2011.10.06 19:27:18 | 000,277,088 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman) DRV:64bit: - [2011.10.01 02:02:21 | 000,868,848 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2011.09.02 08:30:36 | 000,060,696 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:64bit: - [2011.09.02 08:30:24 | 000,076,056 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LEqdUsb.sys -- (LEqdUsb) DRV:64bit: - [2011.09.02 08:30:24 | 000,066,840 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:64bit: - [2011.09.02 08:30:24 | 000,015,128 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidEqd.sys -- (LHidEqd) DRV:64bit: - [2011.06.10 06:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.01.10 14:51:40 | 000,120,408 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\dokan.sys -- (Dokan) DRV:64bit: - [2010.12.10 07:50:36 | 000,181,248 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:64bit: - [2010.12.10 07:50:36 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:64bit: - [2010.11.22 09:09:06 | 000,303,408 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mv91xx.sys -- (mv91xx) DRV:64bit: - [2010.11.21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.10.27 16:50:28 | 000,301,680 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP) DRV:64bit: - [2010.10.27 16:50:28 | 000,279,152 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter) DRV:64bit: - [2010.10.27 16:50:28 | 000,203,624 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP) DRV:64bit: - [2010.10.27 16:50:28 | 000,156,520 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP) DRV:64bit: - [2010.10.27 16:50:28 | 000,058,992 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT) DRV:64bit: - [2010.10.27 16:50:28 | 000,055,336 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AthDfu.sys -- (ATHDFU) DRV:64bit: - [2010.10.27 16:50:28 | 000,038,248 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort) DRV:64bit: - [2010.10.27 16:50:28 | 000,031,080 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS) DRV:64bit: - [2010.10.25 02:00:00 | 000,714,368 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fwlanusbn.sys -- (fwlanusbn) DRV:64bit: - [2010.10.25 02:00:00 | 000,014,120 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avmeject.sys -- (avmeject) DRV:64bit: - [2010.10.22 02:00:00 | 000,460,800 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fwlanusb.sys -- (FWLANUSB) DRV:64bit: - [2010.10.19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:64bit: - [2009.12.17 17:49:02 | 000,045,600 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\npusbio_x64.sys -- (npusbio) DRV:64bit: - [2009.12.15 14:41:32 | 000,346,992 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SRS_SSCFilter_amd64.sys -- (SRS_SSCFilter) DRV:64bit: - [2009.11.24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid) DRV:64bit: - [2009.11.23 17:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum) DRV:64bit: - [2009.08.13 22:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21) DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (1394hub) DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\se64a.sys -- (se64a) DRV - [2013.06.07 02:16:35 | 002,098,776 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.1.22\Definitions\VirusDefs\20130617.002\ex64.sys -- (NAVEX15) DRV - [2013.06.07 02:16:35 | 000,126,040 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.1.22\Definitions\VirusDefs\20130617.002\eng64.sys -- (NAVENG) DRV - [2013.05.31 18:58:18 | 001,393,240 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.1.22\Definitions\BASHDefs\20130531.001\BHDrvx64.sys -- (BHDrvx64) DRV - [2013.05.17 12:41:33 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl) DRV - [2013.01.26 23:56:00 | 000,513,184 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.1.22\Definitions\IPSDefs\20130614.001\IDSviA64.sys -- (IDSVia64) DRV - [2012.08.09 22:26:29 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2012.05.14 11:28:36 | 000,010,568 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI Afterburner\RTCore64.sys -- (RTCore64) DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\se64a.sys -- (se64a) DRV - [2006.10.05 18:07:28 | 000,072,608 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysWow64\drivers\TPkd.sys -- (TPkd) DRV - [2005.01.04 11:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.e-rauchen-forum.de/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A5 7F D2 5C 3A 50 CC 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKCU\..\SearchScopes\{2A962498-E53C-4546-B8C1-494E8F3ABA78}: "URL" = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,136,0_0,Search,20110833,17131,0,18,0 IE - HKCU\..\SearchScopes\{55F21BBF-557A-4C2F-85A0-8A4E4BE9469B}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091 IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADRA_deDE443 IE - HKCU\..\SearchScopes\{7AC0569C-F706-447C-92CF-39647358E937}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=BF8D6693-E31F-4B32-977C-235E987511B9&apn_sauid=C5C80037-4FC1-48AF-B8B8-365CDDE2AE91& IE - HKCU\..\SearchScopes\{7EF10346-3F60-4302-9EF0-A1B826FDF16C}: "URL" = hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5369970905&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=de&q={searchTerms} IE - HKCU\..\SearchScopes\{D72531D5-726A-4e52-BB3A-0508EB6BEB5F}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.132.0: C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Mike\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.1.22\coFFPlgn\ [2013.06.18 01:23:09 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.1.22\IPSFFPlgn\ [2013.01.29 10:22:16 | 000,000,000 | ---D | M] [2012.02.10 22:05:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mike\AppData\Roaming\mozilla\Extensions [2012.02.10 22:05:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mike\AppData\Roaming\mozilla\Extensions\uploadr@flickr.com ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR - homepage: hxxp://www.google.com CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\gcswf32.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = E:\PFiles\Plugins\np-mswmp.dll CHR - plugin: Chrome NaCl (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\pdf.dll CHR - plugin: Norton Confidential (Enabled) = C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.2.6_0\npcoplgn.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: Click to activate/deactivate ProxTube = C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.3_0\ CHR - Extension: bdsm movies @ BDSM Videos Network = C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjjafgbnnkmcmkcjclkiildghpeaiiab\2012.7.10.16465_0\ CHR - Extension: Tampermonkey = C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.1.3440_0\ CHR - Extension: Logitech-Ger\u00E4teerkennung = C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\elncikmfipkphghakkmemnlnahadedno\1.24.0.9_0\ CHR - Extension: AdBlock = C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.64_0\ CHR - Extension: TinEye Reverse Image Search = C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.2_0\ CHR - Extension: Google Maps = C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0\ CHR - Extension: Norton Identity Protection = C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.3.3.19_0\ O1 HOSTS File: ([2012.02.19 12:40:03 | 000,000,854 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 activate.adobe.com O2:64bit: - BHO: (Reg Error: Value error.) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - Reg Error: Value error. File not found O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:64bit: - BHO: (Reg Error: Value error.) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - Reg Error: Value error. File not found O2:64bit: - BHO: (Reg Error: Value error.) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - Reg Error: Value error. File not found O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\IPS\IPSBHO.DLL (Symantec Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\coIEPlg.dll (Symantec Corporation) O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation) O4:64bit: - HKLM..\Run: [OODefragTray] C:\Programme\OO Software\Defrag\oodtray.exe (O&O Software GmbH) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKCU..\Run: [CoolerMaster Trigger] C:\Program Files (x86)\Cooler Master\CM Storm Trigger\CMTrigger.exe (Cooler Master) O4 - HKCU..\Run: [Steam] E:\Steam\steam.exe (Valve Corporation) O4 - Startup: C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk = C:\Users\Mike\AppData\Local\GamersFirst\LIVE!\Live.exe (GamersFirst) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 3 O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKCU\..Trusted Domains: blank ([]about in Computer) O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites) O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16:64bit: - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Object) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8E30A7D2-9FAE-43B1-B57B-1239F2080242}: DhcpNameServer = 192.168.2.1 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9C7EF11A-49ED-43FC-86DC-4AB743CBC0C9}: DhcpNameServer = 192.168.2.1 192.168.2.1 O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2011.07.09 00:14:32 | 000,000,000 | ---D | M] - D:\Autopano Giga 2.5 -- [ NTFS ] O32 - AutoRun File - [2012.02.24 03:07:46 | 000,000,182 | ---- | M] () - I:\Autorun.inf -- [ NTFS ] O33 - MountPoints2\{1cebae4a-db0b-11e1-aec7-002683161dc8}\Shell - "" = AutoRun O33 - MountPoints2\{1cebae4a-db0b-11e1-aec7-002683161dc8}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a O33 - MountPoints2\{42d5b410-dd90-11e1-b35d-002683161dc8}\Shell - "" = AutoRun O33 - MountPoints2\{42d5b410-dd90-11e1-b35d-002683161dc8}\Shell\AutoRun\command - "" = G:\pushinst.exe O33 - MountPoints2\{79fbee9c-ebc1-11e0-bec8-001a4f9d286a}\Shell - "" = AutoRun O33 - MountPoints2\{79fbee9c-ebc1-11e0-bec8-001a4f9d286a}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{b13e5c49-bbf8-11e0-b905-002683161dc8}\Shell - "" = AutoRun O33 - MountPoints2\{b13e5c49-bbf8-11e0-b905-002683161dc8}\Shell\AutoRun\command - "" = H:\pushinst.exe O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\PanzerCorpsWehrmacht-SetupRelease-v103.exe O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (OODBS) O34 - HKLM BootExecute: (auto_reactivate C:\bootwiz\asrm.bin) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.06.18 01:24:20 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Mike\Desktop\OTL.exe [2013.06.17 22:56:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2013.06.17 22:55:29 | 000,000,000 | ---D | C] -- C:\Users\Mike\Desktop\Mbar [2013.06.17 22:44:10 | 000,000,000 | ---D | C] -- C:\FRST [2013.06.17 21:36:37 | 001,926,844 | ---- | C] (Farbar) -- C:\Users\Mike\Desktop\FRST64.exe [2013.06.17 19:28:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group [2013.06.17 19:28:13 | 000,000,000 | ---D | C] -- C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller [2013.06.17 10:33:01 | 026,331,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2013.06.17 10:33:01 | 025,256,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2013.06.17 10:33:01 | 019,906,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2013.06.17 10:33:01 | 018,252,136 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2013.06.17 10:33:01 | 017,559,912 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2013.06.17 10:33:01 | 014,922,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll [2013.06.17 10:33:01 | 012,501,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2013.06.17 10:33:01 | 009,146,728 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2013.06.17 10:33:01 | 007,697,768 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2013.06.17 10:33:01 | 007,414,632 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll [2013.06.17 10:33:01 | 006,127,464 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll [2013.06.17 10:33:01 | 002,747,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2013.06.17 10:33:01 | 002,574,696 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2013.06.17 10:33:01 | 002,218,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll [2013.06.17 10:33:01 | 001,867,112 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll [2013.06.17 10:33:01 | 001,760,104 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco64.dll [2013.06.17 10:33:01 | 001,482,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco64.dll [2013.06.17 10:33:01 | 000,831,848 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll [2013.06.17 10:33:01 | 000,247,144 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll [2013.06.17 10:33:01 | 000,202,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll [2013.06.17 10:33:01 | 000,189,288 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys [2013.06.17 10:33:01 | 000,031,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll [2013.06.17 07:43:15 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2013.06.17 07:43:15 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2013.06.17 07:43:15 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013.06.17 07:43:15 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2013.06.17 07:43:15 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2013.06.17 07:43:14 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013.06.17 07:43:14 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013.06.17 07:43:14 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013.06.17 07:43:14 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013.06.17 07:43:14 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2013.06.17 07:43:14 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2013.06.17 07:43:14 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [2013.06.17 07:43:14 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe [2013.06.17 07:39:34 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2013.06.17 07:39:34 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2013.06.17 07:38:30 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll [2013.06.17 07:38:30 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll [2013.06.17 07:38:17 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2013.06.17 07:38:17 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll [2013.06.17 07:38:11 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2013.06.17 07:38:11 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe [2013.06.17 07:38:11 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe [2013.06.17 07:38:11 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2013.06.17 07:38:10 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll [2013.06.17 07:38:10 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll [2013.06.17 07:37:35 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll [2013.06.17 07:37:13 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll [2013.06.17 07:37:13 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll [2013.06.14 23:16:15 | 000,000,000 | ---D | C] -- C:\Users\Mike\AppData\Local\NVIDIA [2013.06.14 21:51:37 | 001,832,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6432018.dll [2013.06.14 21:51:37 | 001,511,712 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6432018.dll [2013.06.14 21:51:37 | 000,550,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll [2013.06.14 21:51:37 | 000,518,944 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll [2013.06.14 21:51:37 | 000,443,168 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll [2013.06.14 21:51:37 | 000,421,152 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll [2013.06.14 21:51:37 | 000,218,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll [2013.06.14 21:51:37 | 000,181,488 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll [2013.06.13 00:42:06 | 000,000,000 | ---D | C] -- C:\Users\Mike\AppData\Roaming\tor [2013.06.13 00:42:06 | 000,000,000 | ---D | C] -- C:\Users\Mike\AppData\Roaming\Qeop [2013.06.13 00:42:06 | 000,000,000 | ---D | C] -- C:\Users\Mike\AppData\Roaming\Diix [2013.06.09 12:40:44 | 000,000,000 | ---D | C] -- C:\Users\Mike\AppData\Local\ISL [2013.06.09 12:40:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SILKYPIX Developer Studio 4.0 for Tamron [2013.06.09 12:40:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ISL [2013.05.30 13:06:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft [2013.05.30 11:55:26 | 000,000,000 | ---D | C] -- C:\Users\Mike\AppData\Roaming\AdobeLensProfileDownloader [2013.05.30 11:54:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Lens Profile Downloader [2013.05.27 17:34:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2013.05.27 17:34:47 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2013.05.27 17:34:47 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2013.05.27 17:34:47 | 000,095,648 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2013.05.27 08:59:48 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll [2013.05.27 08:59:48 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll [2013.05.27 08:59:46 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll [2013.05.27 08:59:46 | 000,111,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2013.05.27 08:59:40 | 000,265,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2013.05.27 08:59:40 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2013.05.27 08:59:17 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll [2013.05.24 09:23:41 | 000,000,000 | ---D | C] -- C:\Users\Mike\Documents\Codemasters [2013.05.21 10:17:27 | 000,000,000 | ---D | C] -- C:\gravity [2013.05.20 14:58:05 | 000,000,000 | ---D | C] -- C:\Users\Mike\AppData\Local\Warframe [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.06.18 01:29:47 | 000,021,680 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013.06.18 01:29:47 | 000,021,680 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013.06.18 01:26:22 | 000,377,856 | ---- | M] () -- C:\Users\Mike\Desktop\gmer_2.1.19163.exe [2013.06.18 01:24:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Mike\Desktop\OTL.exe [2013.06.18 01:22:14 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013.06.18 01:21:55 | 000,000,408 | ---- | M] () -- C:\Windows\tasks\Final Media Player Update Checker.job [2013.06.18 01:21:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.06.18 01:21:21 | 2129,297,407 | -HS- | M] () -- C:\hiberfil.sys [2013.06.18 01:21:19 | 000,535,356 | ---- | M] () -- C:\Windows\SysNative\oodbs.lor [2013.06.18 01:19:09 | 000,000,020 | ---- | M] () -- C:\Users\Mike\defogger_reenable [2013.06.18 01:17:35 | 000,050,477 | ---- | M] () -- C:\Users\Mike\Desktop\Defogger.exe [2013.06.18 00:37:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013.06.17 22:56:19 | 000,036,680 | ---- | M] () -- C:\Windows\SysNative\drivers\mbamchameleon.sys [2013.06.17 21:25:13 | 001,926,844 | ---- | M] (Farbar) -- C:\Users\Mike\Desktop\FRST64.exe [2013.06.17 19:28:13 | 000,001,268 | ---- | M] () -- C:\Users\Mike\Desktop\Revo Uninstaller.lnk [2013.06.17 18:14:08 | 000,001,949 | ---- | M] () -- C:\Users\Public\Desktop\DxO Optics Pro 8.lnk [2013.06.17 08:00:05 | 000,000,388 | ---- | M] () -- C:\Windows\tasks\X-Rite Device Services Software Updater.job [2013.06.17 07:42:59 | 001,621,436 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2013.06.17 07:42:59 | 000,707,918 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2013.06.17 07:42:59 | 000,661,514 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013.06.17 07:42:59 | 000,153,404 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2013.06.17 07:42:59 | 000,125,600 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013.06.17 07:42:54 | 001,621,436 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013.06.15 18:02:37 | 879,112,860 | ---- | M] () -- C:\Windows\MEMORY.DMP [2013.06.15 10:29:45 | 000,002,375 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ColorMunki Smile Tray.lnk [2013.06.15 10:29:44 | 000,002,320 | ---- | M] () -- C:\Users\Public\Desktop\ColorMunki Smile.lnk [2013.06.14 21:55:46 | 000,001,351 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk [2013.06.13 10:42:57 | 000,002,336 | ---- | M] () -- C:\{C54C87D3-1EE1-435B-876A-1181764D60F4} [2013.06.13 10:42:57 | 000,000,296 | ---- | M] () -- C:\{A6CB0515-0058-480F-83F0-BBB6349EA5CD} [2013.06.11 19:54:00 | 006,219,907 | ---- | M] () -- C:\Users\Mike\Documents\000pano-3.jpg [2013.06.11 19:54:00 | 006,114,984 | ---- | M] () -- C:\Users\Mike\Documents\000pano-2.jpg [2013.06.11 19:54:00 | 006,074,346 | ---- | M] () -- C:\Users\Mike\Documents\000pano.jpg [2013.06.09 12:40:36 | 000,002,136 | ---- | M] () -- C:\Users\Public\Desktop\SILKYPIX Developer Studio 4.0 for Tamron.lnk [2013.06.08 16:06:58 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2013.06.08 13:40:02 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2013.06.06 08:38:52 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2013.06.05 20:15:31 | 000,002,054 | ---- | M] () -- C:\Users\Public\Desktop\SIGMA Optimization Pro.lnk [2013.06.04 08:34:29 | 000,000,172 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\isolate.ini [2013.05.30 13:06:44 | 000,000,844 | ---- | M] () -- C:\Users\Public\Desktop\World of Warcraft.lnk [2013.05.30 11:54:53 | 000,001,081 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Lens Profile Downloader.lnk [2013.05.28 07:43:00 | 005,020,696 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013.05.27 16:37:51 | 000,002,312 | ---- | M] () -- C:\{BB6AB0E9-6774-4B18-B149-85C2123B1370} [2013.05.24 04:09:47 | 000,008,063 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symds64.cat [2013.05.23 07:25:28 | 001,139,800 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symefa64.sys [2013.05.23 07:25:28 | 000,007,587 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symefa64.cat [2013.05.23 07:25:28 | 000,003,434 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symefa.inf [2013.05.22 22:34:28 | 000,001,861 | ---- | M] () -- C:\Users\Mike\Desktop\UseNeXT by Tangysoft.lnk [2013.05.21 07:02:00 | 000,493,656 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symds64.sys [2013.05.21 07:02:00 | 000,002,852 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\symds.inf [2013.05.21 06:40:20 | 000,008,067 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1404000.028\srtsp64.cat [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.06.18 01:26:25 | 000,377,856 | ---- | C] () -- C:\Users\Mike\Desktop\gmer_2.1.19163.exe [2013.06.18 01:19:09 | 000,000,020 | ---- | C] () -- C:\Users\Mike\defogger_reenable [2013.06.18 01:17:54 | 000,050,477 | ---- | C] () -- C:\Users\Mike\Desktop\Defogger.exe [2013.06.17 22:56:19 | 000,036,680 | ---- | C] () -- C:\Windows\SysNative\drivers\mbamchameleon.sys [2013.06.17 19:28:13 | 000,001,268 | ---- | C] () -- C:\Users\Mike\Desktop\Revo Uninstaller.lnk [2013.06.15 10:31:00 | 000,000,388 | ---- | C] () -- C:\Windows\tasks\X-Rite Device Services Software Updater.job [2013.06.14 21:55:46 | 000,001,351 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk [2013.06.13 10:42:57 | 000,000,296 | ---- | C] () -- C:\{A6CB0515-0058-480F-83F0-BBB6349EA5CD} [2013.06.13 10:42:56 | 000,002,336 | ---- | C] () -- C:\{C54C87D3-1EE1-435B-876A-1181764D60F4} [2013.06.11 19:54:00 | 006,219,907 | ---- | C] () -- C:\Users\Mike\Documents\000pano-3.jpg [2013.06.11 19:54:00 | 006,114,984 | ---- | C] () -- C:\Users\Mike\Documents\000pano-2.jpg [2013.06.11 19:54:00 | 006,074,346 | ---- | C] () -- C:\Users\Mike\Documents\000pano.jpg [2013.06.09 12:40:36 | 000,002,136 | ---- | C] () -- C:\Users\Public\Desktop\SILKYPIX Developer Studio 4.0 for Tamron.lnk [2013.06.05 20:15:30 | 000,002,054 | ---- | C] () -- C:\Users\Public\Desktop\SIGMA Optimization Pro.lnk [2013.05.30 13:06:39 | 000,000,844 | ---- | C] () -- C:\Users\Public\Desktop\World of Warcraft.lnk [2013.05.30 11:54:53 | 000,001,093 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lens Profile Downloader.lnk [2013.05.30 11:54:53 | 000,001,081 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Lens Profile Downloader.lnk [2013.05.27 16:37:50 | 000,002,312 | ---- | C] () -- C:\{BB6AB0E9-6774-4B18-B149-85C2123B1370} [2013.05.22 22:34:28 | 000,001,861 | ---- | C] () -- C:\Users\Mike\Desktop\UseNeXT by Tangysoft.lnk [2013.05.08 00:17:30 | 000,085,902 | ---- | C] () -- C:\Users\Mike\AppData\Roaming\icarus-dxdiag.xml [2012.08.06 07:05:35 | 000,000,092 | ---- | C] () -- C:\Users\Mike\AppData\Local\fusioncache.dat [2012.08.04 11:36:13 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\drivers\GameNT.sys [2012.07.16 20:13:21 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CmdLineExt03.dll [2012.06.14 14:45:38 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012.06.14 14:45:25 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012.04.09 11:27:38 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\acedrv05.dll [2012.04.06 14:57:02 | 000,094,208 | ---- | C] () -- C:\Windows\SysWow64\zmbv.dll [2012.03.11 00:01:52 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2012.03.11 00:01:52 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2012.02.25 10:08:32 | 000,003,584 | ---- | C] () -- C:\Windows\ColorEfexPro4FC32.dll [2012.02.25 10:07:50 | 000,004,608 | ---- | C] () -- C:\Windows\SysWow64\ColorEfexPro4FC64.dll [2012.02.09 21:26:26 | 000,001,456 | ---- | C] () -- C:\Users\Mike\AppData\Local\Adobe Für Web speichern 12.0 Prefs [2011.11.25 21:30:30 | 000,040,179 | ---- | C] () -- C:\Windows\Ascd_log.ini [2011.11.25 21:27:21 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2011.11.25 21:26:55 | 000,027,946 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2011.11.24 20:53:16 | 000,000,080 | ---- | C] () -- C:\Users\Mike\AppData\Local\X-Plane Installer.prf [2011.10.21 19:36:06 | 000,004,608 | ---- | C] () -- C:\Users\Mike\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.10.10 21:09:26 | 000,173,111 | ---- | C] () -- C:\Windows\Addictive Pitts Uninstaller.exe [2011.10.03 21:48:04 | 000,789,050 | ---- | C] () -- C:\Windows\SysWow64\unins000.exe [2011.10.03 21:48:04 | 000,026,885 | ---- | C] () -- C:\Windows\SysWow64\unins000.dat [2011.10.02 16:46:18 | 000,000,180 | ---- | C] () -- C:\Users\Mike\FSDreamTeam_ZurichX.reg [2011.10.01 20:27:55 | 000,007,602 | ---- | C] () -- C:\Users\Mike\AppData\Local\Resmon.ResmonCfg [2011.10.01 10:58:05 | 000,204,800 | ---- | C] () -- C:\Windows\SysWow64\DBCDBF32.DLL [2011.10.01 10:58:05 | 000,184,320 | ---- | C] () -- C:\Windows\SysWow64\dbcmdb32.dll [2011.10.01 10:58:05 | 000,141,824 | ---- | C] () -- C:\Windows\SysWow64\dbcjpg32.dll [2011.10.01 10:58:05 | 000,135,168 | ---- | C] () -- C:\Windows\SysWow64\DBCMEM32.DLL [2011.10.01 10:58:05 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\dbcgeo32.dll [2011.09.30 20:59:38 | 000,000,090 | -HS- | C] () -- C:\Windows\cnerolf.bin [2011.09.30 14:39:39 | 000,153,088 | ---- | C] () -- C:\Windows\UNWISE.EXE [2011.09.28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011.09.28 01:29:23 | 000,004,608 | ---- | C] () -- C:\Windows\SysWow64\Viveza2FC64.dll [2011.09.28 01:27:20 | 000,003,584 | ---- | C] () -- C:\Windows\SilverEfexPro2FC32.dll [2011.09.28 01:27:08 | 000,004,608 | ---- | C] () -- C:\Windows\SysWow64\SilverEfexPro2FC64.dll [2011.09.22 18:31:04 | 000,326,144 | ---- | C] () -- C:\Windows\SysWow64\ColorEfexPro4FC32.dll [2011.09.19 15:03:40 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\rtvcvfw32.dll [2011.08.01 13:24:54 | 001,621,436 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI ========== ZeroAccess Check ========== [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] ========== Alternate Data Streams ========== @Alternate Data Stream - 400 bytes -> C:\Users\Mike\AppData\Local\desktop.ini:07a19238af92db80fe9045ca73c7a84e @Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences @Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:74603393 @Alternate Data Stream - 1306 bytes -> C:\ProgramData\Microsoft:T1qet0qP3hO66BOC8O3PtL6L @Alternate Data Stream - 1157 bytes -> C:\ProgramData\Microsoft:aQNVP2ZTqnwDegf9v < End of report > Geändert von Nowater (18.06.2013 um 07:36 Uhr) |
|
18.06.2013, 07:30
| #4 |
| | PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber aufCode:
ATTFilter OTL Extras logfile created on: 18.06.2013 01:31:58 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Mike\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
7.98 Gb Total Physical Memory | 5.61 Gb Available Physical Memory | 70.31% Memory free
15.95 Gb Paging File | 13.67 Gb Available in Paging File | 85.66% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 279.46 Gb Total Space | 98.09 Gb Free Space | 35.10% Space Free | Partition Type: NTFS
Drive D: | 279.46 Gb Total Space | 31.47 Gb Free Space | 11.26% Space Free | Partition Type: NTFS
Drive E: | 698.63 Gb Total Space | 148.91 Gb Free Space | 21.31% Space Free | Partition Type: NTFS
Drive I: | 1863.02 Gb Total Space | 1320.14 Gb Free Space | 70.86% Space Free | Partition Type: NTFS
Computer Name: KELLER | User Name: Mike | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Digital Photo Professional] -- C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Digital Photo Professional] -- C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01AF293F-08FB-4F96-B686-7E211ECFD86E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{07CE3E1F-74C2-4874-9F08-14577D3FB153}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{0865BED2-5F02-4685-B051-2E19582806CD}" = lport=8090 | protocol=6 | dir=in | name=war thunder |
"{08A2DABD-556B-47FF-A8E6-DE85B7CF1003}" = lport=138 | protocol=17 | dir=in | app=system |
"{08CF0DFC-FE65-42FE-942B-E477DA5E99A2}" = lport=33333 | protocol=6 | dir=in | name=war thunder |
"{1AB31CA2-2FE9-4562-BB84-B26266024BA9}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{251D0128-4E07-42FD-9CA9-788C0A7EFC0D}" = lport=445 | protocol=6 | dir=in | app=system |
"{32997C4A-EB66-4A2E-ADD4-EFED3B20515C}" = lport=58872 | protocol=17 | dir=in | name=pando media booster |
"{3E9137C9-65FC-4E1A-BA73-88506D069995}" = lport=139 | protocol=6 | dir=in | app=system |
"{429A58F6-9471-4B1F-A479-9021F2EC73F0}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4606F980-EAB4-434A-A250-E30991C3DE8B}" = rport=445 | protocol=6 | dir=out | app=system |
"{487C8C2F-471B-40F4-8D20-C68BDC5B6A06}" = lport=3478 | protocol=17 | dir=in | name=war thunder |
"{4A87CE93-BE50-4192-89C5-30010473A32C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{542E827B-78C6-42DA-8620-C3E943F281EE}" = rport=137 | protocol=17 | dir=out | app=system |
"{5E8E9708-5CED-45E3-B37D-3FE0DED187E6}" = lport=58872 | protocol=6 | dir=in | name=pando media booster |
"{5EB4C68B-19F4-4D2F-BD37-A32AF0D895CE}" = lport=137 | protocol=17 | dir=in | app=system |
"{61E5A661-40E0-454F-A3FA-C002DA4A5D0D}" = rport=139 | protocol=6 | dir=out | app=system |
"{6B77715B-C563-4EA8-8CCA-C76F3FAC758E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6FB9C576-3110-494C-BC9B-640291A5E416}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{72149D2B-30D7-41E7-AEE1-C79C56EA65CA}" = lport=6881 | protocol=6 | dir=in | name=war thunder |
"{776FCF98-5B1E-464E-ADF5-8C5AD9D73A9D}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{78BC5519-C46E-43FD-9656-2DADF9061C06}" = lport=443 | protocol=6 | dir=in | name=war thunder |
"{7D666A0A-7912-485A-A1F4-8162AC1E1667}" = rport=10243 | protocol=6 | dir=out | app=system |
"{7F5F3537-61AB-4B63-B657-877BF948FBD5}" = rport=80 | protocol=6 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\tools\launcher.exe |
"{8857221B-C643-430B-BCF7-8808CEB2CBF0}" = lport=7850 | protocol=6 | dir=in | name=war thunder |
"{97539D5E-5A1D-49CB-B0ED-CBB714BEB993}" = lport=10243 | protocol=6 | dir=in | app=system |
"{99DDED52-171D-481F-8395-9F0B29426E6E}" = lport=5910 | protocol=6 | dir=in | name=vnc5910 |
"{A3925C9E-EBD1-4F78-BC4D-47042CC42CCF}" = lport=20443 | protocol=6 | dir=in | name=war thunder |
"{A4532E06-FF31-48FC-87A8-725384711F2D}" = rport=80 | protocol=6 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\warframe.x64.exe |
"{ACC574EB-B58C-42F6-B7BD-B860B6881B08}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{AD13DF57-0C46-49EF-B522-33D3EE176BE5}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{AEE7E636-A06F-4439-B333-F983223FC38A}" = rport=80 | protocol=6 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\warframe.exe |
"{B75432F3-A6BE-4165-B56F-2E41F70016BC}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B836EF91-3632-4FB4-ADB5-C232EF9A8A53}" = lport=58872 | protocol=17 | dir=in | name=pando media booster |
"{B8A7140F-D8FB-4AB6-AB22-BD310EAB8889}" = lport=27022 | protocol=6 | dir=in | name=war thunder |
"{CB0CC1BE-8126-485F-B38F-0EF6A3E9295D}" = lport=20010 | protocol=17 | dir=in | name=war thunder |
"{D21C7D6F-6537-4E52-B4E1-67D3F6F438DE}" = lport=80 | protocol=6 | dir=in | name=war thunder |
"{D2AE7840-4A99-4CBC-8A27-0320916708F5}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D49E865D-710D-4E73-9967-FF68B5DDE7D6}" = rport=138 | protocol=17 | dir=out | app=system |
"{D8D98A10-21AB-4749-A5B4-6E459FF80828}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DC9A6E3B-1B31-4FBD-9602-56EB1CC9F538}" = lport=58872 | protocol=6 | dir=in | name=pando media booster |
"{E28742C4-FE30-4B82-9FE6-C63E9157E29E}" = lport=2869 | protocol=6 | dir=in | app=system |
"{E6FB2106-901C-49A9-A677-EFEA024D5F8F}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{F5653AB8-441A-4B8A-8971-54682C6D6420}" = lport=5454 | protocol=6 | dir=in | name=x-rite device services |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00DB2EA0-336A-46AD-9C5D-C0A676622DE7}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\grid 2\grid2.exe |
"{01E852E2-CDCB-4064-8ED3-DA51BE7C4744}" = protocol=17 | dir=in | app=c:\users\mike\appdata\local\crossloop\vncviewer.exe |
"{02470A79-3D7F-4464-A509-91D57294822D}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\dirt 3\dirt3.exe |
"{040275CA-C886-47A5-9AED-8A59EF18602E}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{043CA719-27D0-4D8D-B796-E8332D61E368}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\star conflict\game.exe |
"{053F67FA-FB01-49BD-B5A8-3589E0585023}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{0B5C5416-9F4C-46C1-96A7-CC7A39B66912}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\railworks\railworks.exe |
"{0B6F70F7-D95C-4E59-B92F-817254B281CF}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\dirt showdown\showdown.exe |
"{0C423353-8606-4F02-BB6A-916379E93955}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0E7C670F-7123-41FB-B7C6-8216BA1837E0}" = protocol=17 | dir=in | app=e:\sevencore\sevencore.exe |
"{112595AA-93EC-45ED-B774-250B3A2255BC}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\dirt 2\dirt2.exe |
"{123D82B0-0771-4F1B-8528-15957A01F90E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe |
"{1250E470-91B6-4DD2-8869-E66D7CCC0969}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe |
"{127FA595-C069-4C22-855F-7EABFF72DB1C}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\planetside 2\launchpad.exe |
"{13455646-4A1B-46E8-BD79-BB976FE9302F}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\dirt 3\dirt3.exe |
"{1349F49E-1718-4FC6-9001-FC8396162A71}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{15A1166F-7DFA-4605-9E26-9462968B9087}" = dir=out | app=e:\bf3\originclientservice.exe |
"{15C4DACB-CD51-4345-A38B-35CD492EE5B9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1754374A-84BB-4955-B4F9-A415F370E79D}" = dir=out | app=e:\bf3\origin.exe |
"{1A357E34-713A-4C85-82C3-31A812218371}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{1B8B4F06-F6A0-4777-B023-95AF83F4CD24}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{1C7529DD-C723-402A-A264-076D45D99B60}" = protocol=6 | dir=in | app=e:\arma 2\arma2.exe |
"{1E3E3132-B7D3-481E-BC02-1D450079234C}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\3dmarklaunchersteambeta.exe |
"{226472B2-BCFA-43CE-A6F7-34BF30778D05}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{243DC9FB-53F7-4C1B-9947-050A124CC553}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{25A049E8-B92F-423E-950A-55139B8DCBA5}" = protocol=6 | dir=in | app=e:\star wars-the old republic\launcher.exe |
"{26420F7B-C155-4077-8722-D988D559007A}" = protocol=6 | dir=in | app=e:\sevencore\launcher.exe |
"{2AE6C66C-C049-48FE-BA9B-AC6774FD21A0}" = protocol=6 | dir=in | app=e:\sevencore\sevencore.exe |
"{2AFA6D71-79F9-4070-8F63-58C72D6AD326}" = protocol=17 | dir=in | app=c:\program files (x86)\vuze\azureus.exe |
"{2B289FB8-F7F6-42E4-81F3-5DADA0EED38B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{2C615AA6-EB84-4156-A0C1-1815BBC9C188}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{2C7E09D1-7558-43C7-A432-711D92BCD2FE}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\dirt 2\dirt2.exe |
"{2DF17AFC-1AAE-48F1-AAA2-96CB576FE289}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\star conflict\game.exe |
"{2EF2B50D-5B2B-48DD-804D-181AB16CCA58}" = protocol=17 | dir=in | app=i:\steamlibrary\steamapps\common\warframe\warframe.exe |
"{33512FFA-5D0C-4EA8-93EA-6339BA5C04A6}" = protocol=17 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\warframe.x64.exe |
"{335379FE-06B1-401A-BF2C-8B5CFDECE239}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{33730FD6-4DAA-474E-9135-7BD9D5D30248}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{339CDEF5-712D-4D26-AE43-4716C168CE30}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{343BEF5E-24AF-4036-AE73-2A8C888B91F1}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\ftl faster than light\ftlgame.exe |
"{36B2FB05-DA7B-4F20-B0A1-3F22A8DFC471}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{36BA4452-C414-42B3-A89A-61DC6059493C}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{397154C2-EBB0-47D2-9E84-47E7192EB13D}" = protocol=6 | dir=in | app=e:\bf3\mass effect\binaries\masseffect.exe |
"{3C6E8151-1253-4CD1-863D-227D3FC77DF7}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x86_steam_beta\3dmark.exe |
"{3E7D8F45-F0E6-430E-BF84-2A787E8F04A3}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\dirt showdown\showdown.exe |
"{4110F7DE-D979-4C03-81E7-DBB4D560548F}" = protocol=17 | dir=in | app=e:\bf3\mass effect 3\binaries\win32\masseffect3.exe |
"{42660DB3-4B60-46F2-8737-73E73FBE44B3}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\pro cycling manager 2012\pcm.exe |
"{4291E759-4121-46D2-8AC1-028A1469F736}" = protocol=6 | dir=in | app=d:\war thunder\launcher.exe |
"{42C0F7E6-16C3-4B05-88C1-6D8A07C5CF8E}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{44894361-BD57-408F-86D5-5E94BCC106CB}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{459B97B8-2D62-4EE2-867F-D06DE2F1BA06}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{4A009D76-2803-4BA1-8412-4CDD21D5358A}" = protocol=17 | dir=in | app=c:\users\mike\appdata\local\crossloop\tvnserver.exe |
"{4A32EB0C-A833-4C44-9CFB-6FED1E1F7527}" = protocol=17 | dir=in | app=c:\users\mike\appdata\roaming\dropbox\bin\dropbox.exe |
"{4FAF8E68-6BB4-4798-9287-1F6859C5524F}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{50A95F69-444A-438F-BB7E-CD9E996E67D8}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x64_steam_beta\3dmark.exe |
"{51CCB36B-6013-4691-998F-A3D79E083FDE}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe |
"{5226C41F-1331-44DE-B9D5-2BA1BABE65B0}" = protocol=17 | dir=in | app=e:\bf3\mass effect\masseffectlauncher.exe |
"{5753C8BE-C639-4388-B017-EC04EC560C78}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{57AB9539-182A-4A99-9166-2E8C14E0C486}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\metro 2033\metro2033.exe |
"{5AF97F17-1389-41D5-AFB7-0D41F2306BE0}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{5C7B04F7-3841-461A-8CEE-6938BCEBFED1}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{5CD8A76E-3252-4A04-B062-41DDABA0FD5B}" = protocol=17 | dir=in | app=e:\sevencore\sevencore.exe |
"{5CECD92F-68D1-41F4-B2D5-F5861DCEFC00}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{5D70BA21-8422-4A95-81EE-B6D34457FE20}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{5E5DC452-A395-4752-BFFC-628015E3342D}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x86_steam_beta\3dmark.exe |
"{5F880A52-2C96-48A6-913C-2C33B6F4F296}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5F98ED79-D874-43CD-B15B-75C62CEEE854}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe |
"{60663F4B-C568-43BC-8ADE-6A341106FBF1}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{6099ECB2-8445-4D51-8B0B-53C44DE4A4F5}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\pro cycling manager 2012\ctstageeditor.exe |
"{61C37A37-7FF0-42E4-8CA5-D74F92701E74}" = protocol=6 | dir=in | app=c:\users\mike\appdata\local\crossloop\tvnserver.exe |
"{6219DB7D-AE23-4A0A-B445-A9132667C813}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{63608D54-0AE9-4D18-93C8-06F2282A1E06}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{64217ABD-2F14-4C3C-8CF3-EC25E7A34D42}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x64\3dmark.exe |
"{64FCB16D-024B-49BA-B2F5-89620A143CF9}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{669D89D4-CCEF-4260-8149-50C517C2F6EC}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{67F3673C-B7B5-40EC-B072-6817C466BAAE}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\planetside 2\launchpad.exe |
"{69409609-15CC-48C3-8F90-39AB0FC530AC}" = protocol=17 | dir=in | app=e:\bf3\battlefield 3\bf3.exe |
"{6CD29419-B3E1-43AE-B0E9-B566D4050D63}" = dir=out | app=e:\moh\binaries\mohupdater.exe |
"{6E2013DC-441C-4616-9080-1F6B35DD5BFB}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\railworks\railworks.exe |
"{727BB015-6A00-489E-8471-C28A46B8150D}" = protocol=17 | dir=in | app=e:\steam\steam.exe |
"{74FD6653-364D-4640-9C47-CD090E2DA770}" = protocol=17 | dir=in | app=d:\war thunder\launcher.exe |
"{7813321D-2319-4FF6-88DF-9538FBB2BD0B}" = protocol=17 | dir=in | app=e:\sevencore\launcher.exe |
"{78A6AE67-9FC1-4369-92B5-AD28871DC7E9}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{7956DC67-E244-4881-977A-74E2FA2BEFE2}" = protocol=17 | dir=in | app=e:\sevencore\launcher.exe |
"{7A91F1E2-3F61-4883-80C7-434C22D8DE7C}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x86\3dmark.exe |
"{7E0308E5-08C6-41EE-9902-A16E2DCB40B1}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{7FAB2BFF-FB22-4751-BA8E-243F80E192CA}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x64_steam_beta\3dmark.exe |
"{826D5A0A-7C2B-460F-AF85-87D69036FB60}" = protocol=6 | dir=in | app=e:\bf3\battlefield 1942\bf1942.exe |
"{82CEFF03-1F9F-4893-B919-6404F6CE91A2}" = protocol=17 | dir=in | app=e:\star wars-the old republic\swtor\retailclient\swtor.exe |
"{85654B29-85F8-48FC-BBCB-ADF8B3FF4DED}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{85D877CA-94A5-453B-B262-B6D14892267F}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\grid 2\grid2.exe |
"{87137392-8DF9-42EC-B07A-F96B9F94A785}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{87E12534-2566-42C2-AA8F-90A7123ADFDB}" = protocol=6 | dir=in | app=c:\users\mike\appdata\local\crossloop\vncviewer.exe |
"{8A25E92E-181F-4652-AF4E-FBAED600D83E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{8A5D6ECC-38EC-47F3-BB54-2DD2391E498D}" = protocol=17 | dir=in | app=i:\steamlibrary\steamapps\common\warframe\warframe.x64.exe |
"{8CE35DC0-AE8D-4A23-9E72-17C79FB5AA1C}" = protocol=6 | dir=in | app=c:\users\mike\appdata\roaming\dropbox\bin\dropbox.exe |
"{9258ACEF-0C4B-4716-A887-FD760010413E}" = protocol=6 | dir=in | app=e:\star wars-the old republic\launcher.exe |
"{93AA6CAF-9626-4F04-8077-AEFE939D4AAA}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{94F7B52E-6624-459D-8CFF-1CFFAB5C0602}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x86\3dmark.exe |
"{951FB97B-6FCB-4793-B108-BE1298429561}" = protocol=17 | dir=in | app=e:\arma 2\arma2.exe |
"{9725FDB4-ACE2-4DD0-B291-8261F47208B1}" = protocol=6 | dir=in | app=e:\sevencore\sevencore.exe |
"{991BE5EA-F503-4266-9457-0B02E436FEEB}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\ftl faster than light\ftlgame.exe |
"{9965E675-BC6A-4F1B-9C5C-A401412C85B0}" = dir=out | app=e:\moh\mp\mohmpgame.exe |
"{9BC1F308-A457-4AF8-A756-8D78750825A1}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\stalker shadow of chernobyl\bin\xr_3da.exe |
"{9C35911A-2495-4581-9650-6C85030053CD}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{9FE9F5C2-56BB-4515-95E4-8DECC01AA7A7}" = protocol=17 | dir=in | app=e:\star wars-the old republic\swtor\retailclient\swtor.exe |
"{A21958EC-CBA4-4821-A1BD-2B49C5B89B1A}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{A29E9391-1CAF-48AA-BC7E-3B756C3361B4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{A3D10DF7-C269-428D-A37D-2212092CE9EB}" = protocol=6 | dir=out | app=system |
"{A80BFC12-E499-464F-AA1F-2077A444BAA8}" = protocol=17 | dir=in | app=e:\star wars-the old republic\launcher.exe |
"{A97E0034-D4CD-400F-BBE5-06366DDD7B92}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\3dmarklaunchersteambeta.exe |
"{AB98BE3C-3795-4266-B573-9048B689BA55}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{AB9CE526-CBE2-4E74-BDE8-F310E6A868EC}" = protocol=6 | dir=in | app=e:\steam\steam.exe |
"{AF7D4F6C-4516-4B30-B798-4E49DECB4366}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B25B714A-2886-4820-A74E-D0B8752C2A82}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{B2E6953A-DF57-439B-9ED6-4C21669C32E7}" = protocol=17 | dir=in | app=e:\bf3\mass effect\binaries\masseffect.exe |
"{B47789D8-7F98-4B7C-97B7-988A9040F20C}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{B5639A0C-77E7-43A8-B245-5C9E296E655C}" = protocol=6 | dir=in | app=e:\star wars-the old republic\swtor\retailclient\swtor.exe |
"{B6CCCBC8-3E45-4F2D-8D9C-FFB40D801169}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{B9F2C091-FB0B-46C4-8D66-C90ACCD6B8E2}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{BB03D454-355D-4CB4-AA45-E85F513DF330}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{BE13C819-D305-4228-8B55-32B60C777635}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{BE56D418-57EC-4345-968E-73D428427729}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{BE807270-2FB9-4D33-AEAD-36BB4300027D}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{C09EE9D6-1E22-4483-96B4-0FF1D4FA579F}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe |
"{C1C1B3DE-406C-45F7-A84F-E5DBD87B1D2E}" = protocol=6 | dir=in | app=e:\star wars-the old republic\swtor\retailclient\swtor.exe |
"{C242906C-A1CE-4755-B4B8-5612480C9918}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{C2D287BB-AE32-4BC8-BF1E-CD3214D181A8}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe |
"{C57BB379-560F-4424-817B-EC00BA782A35}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{C779B7F2-1E3F-48F4-B327-AB9FFFC4FB93}" = protocol=6 | dir=in | app=e:\bf3\battlefield 3\bf3.exe |
"{C79EAA3A-5300-4E67-B8F9-4FD08BF05174}" = protocol=6 | dir=in | app=e:\bf3\mass effect\masseffectlauncher.exe |
"{C8F5778E-883A-4103-AAEA-970EAC19F44D}" = protocol=6 | dir=in | app=e:\bf3\mass effect 2\masseffect2launcher.exe |
"{C94E6F22-65BB-4609-8535-4EE91CDD78A7}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{CCAAF6C2-63A2-4EEA-9910-D206F9E71110}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D3969551-FEBB-40A1-A439-91F7D4822CEF}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{D6146F4F-F2E9-4A20-9EC0-E8155955E1C0}" = protocol=6 | dir=in | app=e:\bf3\mass effect 3\binaries\win32\masseffect3.exe |
"{D7260995-D302-411C-95A0-890485652DC0}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\pro cycling manager 2012\pcm.exe |
"{D7C669FE-56C5-4CE4-9152-DD918010E4BC}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\3dmarklauncher.exe |
"{DB9BB42D-AEBA-41FE-9409-198B96BBB67C}" = protocol=17 | dir=in | app=e:\bf3\mass effect 2\masseffect2launcher.exe |
"{DBD96FC0-09F9-46F0-94B4-5D754CB0D21F}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x64\3dmark.exe |
"{E0618BC0-44E0-42AD-80C7-1AB2229B2D84}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{E258CC0F-2C3D-4EC1-8EAE-899377B3B45A}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\stalker shadow of chernobyl\bin\xr_3da.exe |
"{E30BD53E-2BCE-4284-B6B0-AF37F9AE179D}" = protocol=17 | dir=in | app=e:\star wars-the old republic\launcher.exe |
"{E3C60A41-E15E-4C1B-86A5-A2230C3B02B1}" = protocol=17 | dir=in | app=e:\bf3\battlefield 1942\bf1942.exe |
"{EA8C00C0-6FBA-4470-B255-4209E7325EB7}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\3dmarklauncher.exe |
"{EB142702-FDA5-4DDB-991B-1265E4AB129C}" = protocol=17 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\warframe.exe |
"{ECE42978-E818-4C99-B3DF-AA6D2387698F}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{ED1B2821-7329-445E-8D89-24E431F994D6}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{EF447D35-7603-4D83-AF1F-9098D16DC074}" = protocol=6 | dir=in | app=e:\sevencore\launcher.exe |
"{EFBE19DA-CB94-47D5-847A-5E202131BDC3}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\pro cycling manager 2012\ctstageeditor.exe |
"{F14CE5DF-4211-4BB7-9222-E2C918064CC9}" = protocol=6 | dir=in | app=c:\program files (x86)\vuze\azureus.exe |
"{F1F52CE5-80B2-45FD-AD43-3B8A1BF4EF1B}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{F5C0536C-F6C5-4983-9C60-D68F8406D1AF}" = dir=in | app=c:\program files (x86)\finalmediaplayer\fmpcheckforupdates.exe |
"{F6E39BFD-27E4-4F83-B38A-C57211E5546D}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\metro 2033\metro2033.exe |
"{F76A8CCD-01EC-4272-A10A-377C054B5C96}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{FA9258DD-410B-4AC1-AF97-6080E867BFCD}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{FBAF478C-A719-42E4-82E8-C8BE9B46ADF4}" = dir=out | app=e:\moh\binaries\moh.exe |
"{FCC2A0D4-29B5-4821-BD13-C7D0102CD92C}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"TCP Query User{0114FCCA-55B5-4887-B167-A9FC173E2C7C}E:\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=e:\guild wars 2\gw2.exe |
"TCP Query User{0390FEA9-8417-452C-BCC4-039F0F28F334}E:\world_of_tanks - kopie\worldoftanks.exe" = protocol=6 | dir=in | app=e:\world_of_tanks - kopie\worldoftanks.exe |
"TCP Query User{1EF46A83-CD79-434B-8F6D-A34D8B9BE2D2}E:\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=e:\world_of_tanks\wotlauncher.exe |
"TCP Query User{8785D4E0-F2C7-4596-979C-562105CA522B}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"TCP Query User{88587CF4-4913-4E89-9A5C-F773683B0FD5}E:\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=e:\world_of_tanks\worldoftanks.exe |
"TCP Query User{AE319F46-7F5B-4E59-91A8-63C8BF66A550}E:\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=e:\world_of_tanks\wotlauncher.exe |
"TCP Query User{C2BCE42E-583E-44B8-A75F-94AD8948318C}E:\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=e:\guild wars 2\gw2.exe |
"TCP Query User{E39A4E58-AE9E-4525-B84A-667EDDF5C3EC}E:\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=e:\world_of_tanks\worldoftanks.exe |
"TCP Query User{EE0C914E-B376-441D-B256-760C06E71248}E:\planetside 2 beta\planetside2.exe" = protocol=6 | dir=in | app=e:\planetside 2 beta\planetside2.exe |
"UDP Query User{11D1F32C-2DCB-4192-9034-5D9EBB12DE0B}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{16957F73-EFA9-4078-AB71-B4DF55588683}E:\world_of_tanks - kopie\worldoftanks.exe" = protocol=17 | dir=in | app=e:\world_of_tanks - kopie\worldoftanks.exe |
"UDP Query User{2B710E95-C423-41A3-8730-484CAA784887}E:\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=e:\world_of_tanks\worldoftanks.exe |
"UDP Query User{49E16301-12A9-4464-A316-50383A0F5B10}E:\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=e:\guild wars 2\gw2.exe |
"UDP Query User{6F3A1F82-3DF8-4F7F-A5A4-3F0CD40A31F7}E:\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=e:\world_of_tanks\wotlauncher.exe |
"UDP Query User{75C62320-E950-49FA-B68C-BD7FA86F8C1D}E:\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=e:\world_of_tanks\worldoftanks.exe |
"UDP Query User{96D0467A-1C5A-46CA-B808-F9AD79549DB3}E:\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=e:\guild wars 2\gw2.exe |
"UDP Query User{AAD42679-8454-4774-BE39-F9A7DC138EFC}E:\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=e:\world_of_tanks\wotlauncher.exe |
"UDP Query User{C0D61766-E2DA-42B6-8150-DEB1E644D29E}E:\planetside 2 beta\planetside2.exe" = protocol=17 | dir=in | app=e:\planetside 2 beta\planetside2.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{11A955CD-4398-405A-886D-E464C3618FBF}" = Adobe Photoshop Lightroom 4.4 64-bit
"{183C740A-0406-380F-A235-2EC2F8A28D13}" = Microsoft Windows SDK MSHelp (30514)
"{1CDE9DB9-7D47-46F8-83DC-9DD9899BBBFC}" = Topaz ReMask 3 (64-bit)
"{1D3B0300-45BB-49A3-B1B6-56E3D4024042}" = DxO Optics Pro 8
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Bluetooth Win7 Suite (64)
"{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java(TM) 6 Update 27 (64-bit)
"{3156336D-8E44-3671-A6FE-AE51D3D6564E}" = Microsoft Windows SDK for Windows 7 (7.1)
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5E11C972-1E76-45FE-8F92-14E0D1140B1B}" = iTunes
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64579E10-6249-4BB1-B1D1-8EF55042DB45}" = DxO Optics Pro 7
"{652E6883-26B8-4683-BDAA-8AD37D00C045}" = Adobe Photoshop Lightroom 5 Beta 64-bit
"{68570626-1BF6-310B-AF69-6CD686C04AEA}" = Microsoft Windows SDK Net Fx Interop Headers And Libraries (30514)
"{690285C2-2481-44FB-8402-162EA970A6DD}" = Logitech Gaming Software
"{6C8D7973-31F9-32E1-A820-8DD857910323}" = Microsoft Windows SDK for Windows 7 Utilities for Win32 Development (30514)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{75104836-CAC7-444E-A39E-3F54151942F5}" = Apple Mobile Device Support
"{7D088FD6-67B8-4186-947C-5FB4CC7227B5}" = O&O Defrag Professional
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{84452C2C-BDCC-36F3-A189-CE15F02A47FB}" = Microsoft Windows SDK for Windows 7 Headers and Libraries (30514)
"{84E30D73-E30F-3A02-BAA0-5353C04DD18A}" = Microsoft Windows SDK Intellisense and Reference Assemblies (30514)
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{88387B3B-B110-392F-B919-1A15B48F21D4}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x64
"{89026002-A893-42D9-9E20-6829B844735E}" = Application Verifier (x64)
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{90BF0360-A1DB-4599-A643-95AB90A52C1E}" = Microsoft_VC90_MFCLOC_x86_x64
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{951E6223-AC28-345E-BCF4-B55C1267E321}" = Microsoft Windows SDK for Windows 7 Samples (30514)
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A0A7372A-C28E-48BE-B88C-3C3C3EEFC2EA}" = DxO ViewPoint
"{A0B0F02C-410B-3DE3-9740-EC4C3D902532}" = Microsoft Windows SDK for Windows 7 Common Utilities (30514)
"{A2C55034-8DAF-3755-BA85-CC321707FE99}" = Microsoft Windows SDK for Visual Studio .NET 4.0 Framework Tools
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 4.11.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.18.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{D4F66BBA-D79E-4F11-9B06-70C3D75A2958}" = Adobe Photoshop Lightroom 3.6 64-bit
"{DBFC6AAE-DCCB-4C23-B01C-3EDDDC03298B}" = Debugging Tools for Windows (x64)
"{E44D14E2-A6D0-4F38-BF06-2E4244E23FED}" = Topaz InFocus (64-bit)
"{E7F9E526-2324-437B-A609-E8C5309465CB}" = Microsoft Windows Performance Toolkit
"{F1C4B89A-8BF0-3D7C-8095-BAE412FBEA3F}" = Microsoft Windows SDK .NET Framework Tools (30514)
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FCADA26A-5672-31DD-BF0E-BA76ECF9B02D}" = Microsoft Help Viewer 1.0
"0B9256266C4321F4FACD6D67F2408684F14A89CA" = Windows-Treiberpaket - Phase One A/S (WinUSB) USBDevice (11/13/2012 1.11.0.63801)
"0F81152D3B5D40D8F497EC1750B8EFF11FEED116" = Windows-Treiberpaket - Phase One / Mamiya V-Grip USB Driver (09/28/2010 1.1.0.1)
"A35BD68D4A1B3E191138E3C9AA417190A9468F7E" = Windows-Treiberpaket - Leaf Imaging Ltd. Image (02/11/2010 )
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"Logitech Gaming Software" = Logitech Gaming Software 8.30
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Neat Image Standalone_is1" = Neat Image v7.3.0 Demo Standalone
"Oloneo HDRengine" = Oloneo HDRengine
"Oloneo PhotoEngine" = Oloneo PhotoEngine
"PanoramaStudio2Pro" = PanoramaStudio 2.3 Pro ((deinstallieren))
"PhotomatixPro42x64_is1" = Photomatix Pro version 4.2.6
"SDKSetup_7.1.7600.0.30514" = Microsoft Windows SDK for Windows 7 (7.1)
"SNS-HDR Home_is1" = SNS-HDR Home v1.4.22
"SNS-HDR Lite_is1" = SNS-HDR Lite v1.4.14
"SNS-HDR Pro_is1" = SNS-HDR Pro v1.4.22
"sp6" = Logitech SetPoint 6.32
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 4.01 (64-Bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01C3630A-7FD2-46DF-B514-A4B829B0021A}" = aerosoft's - German Airports 2 X - FSX
"{02BA6B72-F4CF-4EEE-B144-825F4225B823}" = WOT Statistics
"{02F744CB-0E04-40DA-A50C-58F49D8E5A0C}_is1" = CaptainSim 727 PRO FULL PACK 2.1
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{04A3A6B0-8E19-49BB-82FF-65C5A55F917D}" = Acronis*True*Image*Home 2011
"{04B73EB2-7538-4CC4-BBD6-5463E508B69B}" = aerosoft's - Balearic Islands X for FSX
"{073B36E0-84D5-4561-92B1-35A807EF253A}" = PMDGMD11X_PW_DL3
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A297C87-BF52-43FD-AD75-EE72228E4457}" = aerosoft's - Mega Airport Amsterdam FSX
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{0F5E7FC8-3D49-47DA-9A51-6A8B4BE393B0}" = aerosoft's - Mega Airport Paris CDG X
"{0F6047EC-36A9-4735-840F-2BAA134D4B94}" = Aerosoft's - Keflavik X
"{1592B9A6-E23D-4B57-9D3D-BB98F1EF55F6}" = SEVENCORE
"{17440258-DB48-49DE-8391-79900477490C}" = aerosoft's - Madeira X
"{17BA8B2D-BF89-4D10-B9D1-1CC5F322A6BB}" = aerosoft's - Maldives X
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1B0FBB9A-995D-47CD-87CD-13E68B676E4F}" = Mass Effect
"{1C5510F5-5452-4411-A54C-3DA055D8A793}" = Aerosoft's - German Airfields 2
"{1C5F9FED-6D15-4260-843A-487CFEB76D7C}" = Machinery HDR Effects
"{1E90660B-8460-498E-B781-44FF5D99396E}" = Navigraph nDAC 3
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812CT}_is1" = World of Tanks - Common Test
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1" = World of Tanks
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C8PD}_is1" = World of Tanks - Physics Preview
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20708FD5-E94D-4097-A21E-E28564CDBC06}" = PMDG 737 8900 NGX
"{22DA31EE-2DEA-4DB7-9301-3222F91826F7}" = PMDGMD11XF_PW_FXF
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2336573C-3213-48AA-A306-8309BA9BD92C}" = Aerosoft's - Airbus X
"{26405538-F6B6-4EDC-8C58-6D291ADA2D38}" = PMDG_BAe_JS4100_3M
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 21
"{2A9A269C-1C36-493C-96D8-60B23FAB2E10}" = FSC
"{336CBE20-6E47-43D2-9CF2-FAB241A3CCD4}" = PMDGMD11X_GE_AM
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{34B32B70-8081-11E2-89AF-B8AC6F98CCE3}" = Google Earth Plug-in
"{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help
"{35489B42-C438-441E-B246-A2C52B52FF6A}" = X Graphics
"{370187B9-6964-38D0-851F-6C4898B0C2B1}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x86
"{3A8DED06-80E7-4555-AA1F-FF4A2A4D353C}" = Aerosoft's - DHC-6 Twin Otter X
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{3C9D6BFF-3316-4F33-A8EE-54A21684ED14}" = PMDGMD11XF_PW_MPF2
"{3DB1F8B4-96A5-45B8-9C50-CB5828A0B1C6}" = PMDGMD11X_GE_LH
"{3E977FB7-0A6F-4B7D-AE5A-0C080F71D951}" = CoolerMaster Trigger
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{40C5DFE3-3B86-4151-A225-C7B28ACEFEB7}" = Aerosoft's - Simcheck Airbus A300B4-200
"{417FC1D9-A946-4638-B02C-FD9AE0E96E95}" = Aerosoft's - German Airfields 3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C7F54EE-DC36-431F-9978-DA678D77C4BA}" = aerosoft's - Tahiti X
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CFCC6FD-AEA2-4208-99A6-45CBF9DFFD82}" = Real Environment Xtreme
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{4F23F6D6-1648-4AB2-A86E-827B7772CA99}" = PMDG_BAe_JS4100_EV
"{50CE738D-60A0-4721-92A5-5C0BD329A687}" = PMDG_BAe_JS4100_AX2
"{534A31BD-20F4-46b0-85CE-09778379663C}" = Mass Effect™ 3
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{559C7AA8-E526-8C65-88FC-FD7A9C366E38}" = Adobe Lens Profile Downloader
"{55F78BA4-3D29-4F66-8D89-36E45C3750B6}" = Active Sky Evolution
"{5B545767-D712-44C3-A894-AC5FA62331BA}" = PMDGMD11X_PW_SR2
"{5BDEA9E0-E55B-45A7-93F7-6B8F68F851E5}" = Topaz InFocus
"{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}" = Battlefield 1942™
"{60BA9208-43BA-4D24-AD54-11EC0A3453EC}" = Snapseed
"{61957FA7-34C1-4F46-871C-A0FD49848832}" = Aerosoft's - HelgolandX
"{61C63F60-152B-4D28-B357-6DB81837FA9B}" = Aerosoft's - German Airfields 1
"{62B7012A-D02C-4981-9D37-634DF40E9578}" = aerosoft's - Santorini X
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{6360C5E9-2842-4213-88B9-47D814FAAD54}" = aerosoft's - German Airports 3 X - FSX
"{636D1606-79EE-4A33-8A16-DECF8B45B92B}" = PMDGMD11X_GE_US
"{64392EEB-38EF-45FD-822D-5C75CA136860}_is1" = Incomedia WebSite X5 v9 - Evolution
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6583D00E-0924-4950-8BE9-5D09FE70B333}" = MTX
"{6884A1E7-6557-4018-B917-FD11327AAAD4}" = PMDG_BAe_JS4100_VNE
"{68E6762C-20CA-41B2-8720-1B178B2C6AED}" = DxO FilmPack 2.0
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6D6A26D5-492A-49BD-B30D-546B2F3E4793}" = Real Environment Xtreme - Overdrive
"{6E57CA24-C027-4D88-8E94-D1EE92F8864C}" = FollowMe
"{6E58FAA6-751E-4EE6-A3DD-24431DCCB76A}" = SILKYPIX Developer Studio 4.0 for Tamron
"{70864384-DD19-44CB-A999-A917F32F623D}" = aerosoft's - Approaching Innsbruck X
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72FF9BBB-80A1-4A3C-8ABD-A6149BD884A0}" = EireSim-Alicante FSX
"{757F55B9-A5B6-41D6-A126-2B1C0066EA91}" = Aerosoft's - AspenX
"{75D84EF7-0D8C-4E70-B3FA-7B42A5D4E0EB}" = Mass Effect 2
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{76E2A1A0-CE72-48A0-8D8E-767A1B0C2191}" = PhotoFrame 4.6.3 Free
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{78456F0E-278E-4C0D-8B64-2B0151248CA3}" = Active Sky Advanced
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7A5E396C-8D6E-4C63-AA5F-805ED6C911E6}" = PMDG744XF_GE_JLF
"{7BF771B4-83AE-44C3-A870-068A673FF6C9}" = aerosoft's - Andras Field
"{7D606567-5047-451A-B49E-29FCB6012B4E}" = Microsoft Flight Simulator X: Acceleration
"{7F3AD00A-1819-4B15-BB7D-08B3586336D7}" = 3DMark06
"{8117EA22-035F-4880-86AE-AC7C4F1FA3E2}" = Topaz ReMask 3
"{8233F99B-C4C2-44E9-8486-374E9B300BF2}" = aerosoft's - Mega Airport Madrid Barajas
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{858F7CD6-B08D-4C68-8295-DFE2FFF683F5}" = Active Sky X
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{8F00580B-19EC-4709-896D-D21E542630DD}" = Aerosoft's - Piper Cheyenne FSX
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90447E05-DE8E-470D-8D3E-C871D2AE74AF}" = aerosoft's - Nice Cote dAzur X
"{9158FF30-78D7-40EF-B83E-451AC5334640}" = Adobe Photoshop CS5.1
"{922A8108-6233-4AD6-AFBB-6404D8FA80AF}" = PowerNap
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{930945C3-064B-4ACD-A004-436A4783FCD9}" = FlyLogic's - Bern-Belp X
"{97C97546-024D-40E1-A16E-255C3BAAAC16}" = PMDGMD11X_GE_CO
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9BFAD985-B7E2-40FB-B9F9-DEEEAFB25780}_is1" = WoT Skin Installer version 1.1
"{9C6C0D2A-E2C0-4160-B139-5951A72EC80F}" = WOT Statistics
"{9D158D03-2166-445F-8F47-B86FB8909674}" = PTLens
"{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR
"{A0663B00-3376-42C1-B719-995B9CB44DEF}" = Aerosoft's - Hawaii Dillingham X
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A4095642-9995-42B1-B589-D8E7AD6B11DA}" = Just Flight - Air Hauler
"{A4F1F449-DB1C-40AC-AEC9-9973D4234D28}" = PMDGMD11XF_GE_FXF1
"{A75A7BEA-7A33-46FF-A2CD-3B0AF8023903}" = SIGMA Optimization Pro
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA9F7D49-5B32-4635-887A-EC0D526D877C}" = Real Environment Xtreme 2.0
"{AAF496CC-92FE-42B3-80AA-86ECF4250B69}" = Aerosoft's - German Airfields 11
"{ABB4DB59-0284-414D-9346-4992E1856E7F}" = PMDGMD11X_GE_AA
"{AC50C05D-9D57-40F5-B2EF-AC402F14312B}_is1" = Dell Display Manager
"{AC5E0CD0-F560-4504-B8C1-3D4F268AA7EF}" = X-Rite Device Services Manager
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.6) - Deutsch
"{AD6C554F-5050-40B1-B84D-51D74A09C7E4}" = Aerosoft's - Mega Airport Budapest
"{AE0FB74F-8E5D-41DF-9EC6-061B6390189B}" = Aerosoft's - German Airfields 9 - Nordbayern
"{B0F7B3B5-E856-4558-BD7C-BDA32943C783}" = Just Flight - 757 Jetliner Freemium
"{B59C0CF6-03D4-4357-ABD2-4A6EBD91B980}_is1" = WoT Hitbox Installer version 1.83
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{B7429839-9FAE-448E-8413-4888DCFE064F}" = Aerosoft's - Piper Cheyenne FSX
"{B99C3D18-BA4B-4D65-A500-D364E3D2A8A3}" = SIGMA Photo Pro 5
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{BF05DD52-4D84-474D-A7ED-F1DCAAE39E82}" = PMDG744XF_RR_CVF3
"{C04C1DFC-25BC-40CB-A2FB-CFA606D0165D}" = calibre
"{C0E7FAD8-F8AE-4819-AEBF-D92562315EEE}" = Mailsoft's - Switzerland Professional X
"{C40C3C3D-97CF-44B5-836C-766E374464B3}" = 3DMark Vantage
"{C53ED289-218E-4A1B-8760-E7A11B6EB682}" = Skat 9.0
"{C59E019B-0952-4B72-A382-68A72224F88F}" = GNS400W-500W Trainer
"{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
"{CA328CDF-A284-445E-AAE7-B24A11E97201}" = MechWarrior Online
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CB3B7C24-30A1-4961-8039-94919F5ED2EE}" = Noiseware Community Edition
"{CB858C75-8537-4B71-9080-2A4F7D51F128}" = Aerosoft's - Mega Airport Brussels X
"{CEBA70F1-D6C8-4F9C-A04E-D051BB358F60}" = FSX Planner
"{CED6EAB9-9FFD-44B2-939A-D77905AD35F3}" = PMDG_MD11_FSX
"{CF56984D-35C6-4ADB-9075-394978A427FB}" = Microsoft Flight Simulator X: Acceleration SDK
"{CFA5C901-7687-4259-9A64-072926E043FD}" = Mailsoft's - Kleinflugplätze Schweiz Teil 6 X
"{CFDD2CFF-C388-4BEC-85F0-1921C9F57F14}" = aerosoft's - Aerosoft Airport Pack
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D08A5DFE-F0C2-74FC-DD56-A3B371E9344D}" = EA Shared Game Component: Activation
"{D0D3DD91-88FE-4A37-80C5-A036D97E6A89}" = PMDG_BAe_JS4100_T3
"{D145DF3E-0DB1-4ABC-90E4-E89BA713B01B}" = Mailsoft's - Sion X
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{E0BF8C31-2745-4186-A08D-05401FC95AE3}" = Aerosoft's - Twin Otter X - Mission Pack
"{E4197D6B-F046-33E7-ABDE-51FF373FDC76}" = Windows SDK IntellisenseNFX
"{E4298CF5-9C36-4519-9089-FF7A43EA5C5D}" = aerosoft's - German Airports 1 - Stuttgart X
"{E5390E6D-3012-42EF-9F19-156B1B362372}_is1" = Aerosoft - Oslo Gardermoen X (ENGM)
"{E7F6DE96-C3E6-4B05-8EF2-71B7B447CB9C}" = Aerosoft's - Bush Hawk XP
"{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1" = War Thunder Launcher 1.0.1.192
"{EDCEE320-0FB3-4197-9F86-8C1CCF2278FB}" = PMDG 747-400/400F for FSX
"{EE11CFFC-898C-4875-8A63-8B732A9AD43B}" = Aerosoft's - Aerosoft Launcher
"{EF308386-425F-4EA8-949D-298770677F78}" = aerosoft's - Iceland X
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1A6C690-C12C-4E7A-B4BD-958678215418}" = 3DMark
"{F293A032-EB67-4ADC-8646-F1AA7F9E0143}" = Aerosoft's - Luxembourg Airports
"{F3CA05B7-B4C0-4C9B-AAA6-16B868B35DF2}" = TrackIR5
"{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X
"{F6096C02-08BB-42A2-8683-C24703D4B370}" = PMDG_BAe_JS4100_4Z
"{F6DD0D9E-C9C4-4CB9-91D4-39D665042151}" = German Landmarks FSX
"{FB50347E-1E79-4BE5-8DE8-DDFCBC74D35A}" = PMDG_BAe_JS4100_N401TJ
"{FB647DBE-2231-405D-AC36-C73246CBE305}" = PMDG BAe JS4100
"{FD881E1D-1A29-4E8D-B918-EFFD272EC17C}" = PMDG_BAe_JS4100_HKG
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"16fsxun" = 16 Airports X-Generation Bundle FSX v1.0
"18fsxun" = 18 Airports X-Generation Bundle FSX v1.0
"767CAPTAIN" = 767 Captain (767-300 Base Pack)
"A2A Accusim for the Wings of Silver B377" = A2A Accusim for the Wings of Silver B377
"A2A B17 Accusim" = A2A B17 Accusim
"A2A Captain of the Ship" = A2A Captain of the Ship
"A2A Piper J3 Cub" = A2A Piper J3 Cub
"A2A Piper J3 Cub Accusim" = A2A Piper J3 Cub Accusim
"A2A Wings of Silver B377 Stratocruiser" = A2A Wings of Silver B377 Stratocruiser
"Addictive Pitts" = Addictive Pitts
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AdobeLensProfileDownloader" = Adobe Lens Profile Downloader
"Aeroworx X-treme King Air B200 v.2.1 Update" = Aeroworx X-treme King Air B200 v.2.1 Update
"Afterburner" = MSI Afterburner 2.2.1
"Age of Conan_is1" = Age of Conan: Unchained
"AivlaSoft EFB" = AivlaSoft EFB
"AKESOFT FORONDA-X FSX 1.00" = AKESOFT FORONDA-X FSX 1.00
"AKESOFT VALENCIA-X FSX 1.00" = AKESOFT VALENCIA-X FSX 1.00
"Anchorage Photorealistic" = Anchorage Photorealistic
"ArmA 2" = ArmA 2 Uninstall
"AVMWLANCLI" = AVM FRITZ!WLAN
"Battlelog Web Plugins" = Battlelog Web Plugins
"BattlEye for A2" = BattlEye Uninstall
"Beech Duke 2009F1.dl.1.502 (V1.5)" = RealAir Beech Duke 2009
"C337H SKYMASTER HD SERIES FSX" = C337H SKYMASTER HD SERIES FSX
"Canon RAW Codec" = Canon RAW Codec
"Carenado - C185F Skywagon FSX" = Carenado - C185F Skywagon FSX
"Carenado A36 Bonanza FSX" = Carenado A36 Bonanza FSX
"Carenado Baron 58 FSX" = Carenado Baron 58 FSX
"Carenado C 152 II" = Carenado C 152 II
"Carenado C172N FSX" = Carenado C172N FSX
"Carenado C208B Grand Caravan" = Carenado C208B Grand Caravan
"Carenado C340 II FSX" = Carenado C340 II FSX
"Carenado Commander 114 FSX" = Carenado Commander 114 FSX
"Carenado CT210M Centurion II FSX" = Carenado CT210M Centurion II FSX
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Cheat Engine 6.2_is1" = Cheat Engine 6.2
"Color Efex Pro 3.0 Complete Stand-Alone" = Color Efex Pro 3.0 Complete
"ColorChecker Passport_is1" = ColorChecker Passport 1.0.2
"ColorMunki Smile_is1" = ColorMunki Smile
"com.ea.Activation.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Shared Game Component: Activation
"ConcordeX for FSX_is1" = ConcordeX for FSX v1.2
"CrossLoop_is1" = CrossLoop 2.81
"DDS Converter 2.1" = DDS Converter 2.1
"Dfine 2.0 Stand-Alone" = Dfine 2.0
"Digital Photo Professional" = Canon Utilities Digital Photo Professional
"DokanLibrary" = Dokan Library 0.6.0
"E751CAPTAIN_FSX" = '757 Captain' Soundset 1.4
"EA Installer.1522861523" = EA Installer
"Eiresim Shannon Ultimate FsXV1.0" = Eiresim Shannon Ultimate FsX
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EOS Utility" = Canon Utilities EOS Utility
"EPSON Scanner" = EPSON Scan
"ESN Sonar-0.70.4" = ESN Sonar
"Eye-One Match_is1" = Eye-One Match 3.6.2
"F1Connect" = Connect
"f1mustang_FSX" = Flight1 Citation Mustang
"FileZilla Client" = FileZilla Client 3.5.3
"FinalMediaPlayer_is1" = Final Media Player 2011
"Flickr Uploadr" = Flickr Uploadr 3.2.1
"FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Microsoft Flight Simulator X: Acceleration
"Fly the MADDOG 2008" = Fly the MADDOG 2008
"Fraps" = Fraps
"FS Panel Studio for FSX" = FS Panel Studio for FSX Build 22767
"FS2Crew Start Center" = FS2Crew Start Center
"FS2Crew: FeelThere Wilco A320 Edition " = FS2Crew: FeelThere Wilco A320 Edition
"FS2Crew: iFly737NG Button Control Edition" = FS2Crew: iFly737NG Button Control Edition
"FS2Crew: PMDG Jetstream Button Control Edition" = FS2Crew: PMDG Jetstream Button Control Edition
"FSBuild 2.3" = FSBuild 2.3
"FSBuild2.4_is1" = FSBuild v2.4 Update
"FSDreamTeam OHareX 2.0_is1" = FSDreamTeam OHareX 2.0
"FSDreamTeam ZurichX_is1" = FSDreamTeam ZurichX 2.0.3
"FSWidgets Electronic Flight Bag for FSX_is1" = FSWidgets - EFB for FSX
"FSX Missions - A321 Lufthansa" = FSX Missions - A321 Lufthansa
"Google Chrome" = Google Chrome
"Ground Environment X Europe" = Ground Environment X Europe
"Guild Wars 2" = Guild Wars 2
"HDR Efex Pro" = HDR Efex Pro
"i1_driver_installer_utility_i1Match_is1" = i1_driver_installer_utility_i1Match version 1.0
"i1Diagnostics_is1" = i1Diagnostics
"iFly Jets - The 737NG for FSX" = iFly Jets - The 737NG for FSX
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{6E58FAA6-751E-4EE6-A3DD-24431DCCB76A}" = SILKYPIX Developer Studio 4.0 for Tamron
"InstallShield_{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X
"Juneau 1.2 Photorealistic" = Juneau 1.2 Photorealistic
"JustFlight DC-3 Legends of Flight" = JustFlight DC-3 Legends of Flight
"Legacy 'The Luxury Aircraft Collection'" = Legacy 'The Luxury Aircraft Collection'
"LICB FSX beta" = LICB FSX beta
"MagniDriver" = marvell 91xx driver
"Mega Airport Barcelona X1.0" = Mega Airport Barcelona X
"MegaSceneryX_is1" = Hawaii Oahu
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"MILVIZ/NemethDesigns Sikorsky CH-54A & Erickson Air-Crane S-64E for Flight Simulator X" = MILVIZ/NemethDesigns Sikorsky CH-54A & Erickson Air-Crane S-64E for Flight Simulator X
"MyTraffic X Professional 5.4" = MyTraffic X Professional 5.4
"NavyField2 EU" = NavyField2
"Neat Image_is1" = Neat Image v6.0 Pro+
"Nemeth Designs MD 500 Defender for Microsoft Flight Simulator X" = Nemeth Designs MD 500 Defender for Microsoft Flight Simulator X
"Nemeth Designs MD Helicopters MD902 Explorer for FSX" = Nemeth Designs MD Helicopters MD902 Explorer for FSX
"Nik Collection" = Nik Collection
"NIS" = Norton Internet Security
"Noise Ninja (Standalone Version)_is1" = Noise Ninja 2 (Standalone Version)
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"Origin" = Origin
"Pano2VR" = Pano2VR - Garden Gnome Software
"Picture Style Editor" = Canon Utilities Picture Style Editor
"Pole to Pole FSX" = Pole to Pole FSX
"PortraitProfessionalStudio10_is1" = Portrait Professional Studio 10.9
"PunkBusterSvc" = PunkBuster Services
"Radar Contact v4.3_is1" = Radar Contact Version 4.3
"Revo Uninstaller" = Revo Uninstaller 1.94
"RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Flight Simulator X
"RXPGNS32_is1" = Reality XP Garmin GNS WAAS for FSX/9 Ver. 1.4
"Sacred Underworld_is1" = Sacred Underworld
"SERIES X GMX-SX Avionics Suite by SimFlyer" = SERIES X GMX-SX Avionics Suite by SimFlyer
"SERIES X GNS-SX Avionics Suite by SimFlyer" = SERIES X GNS-SX Avionics Suite by SimFlyer
"SeriesX GPX-SX Avionics Suite by SimFlyer" = SeriesX GPX-SX Avionics Suite by SimFlyer
"Sharpener Pro 3.0 Stand-Alone" = Sharpener Pro 3.0
"Silver Efex Pro for Stand-Alone" = Silver Efex Pro
"SimFlyer® GMX-SX (SR3) for Microsoft® FS9 / FSX" = SimFlyer® GMX-SX (SR3) for Microsoft® FS9 / FSX
"SimFlyer® GNS-SX (SR3) for Microsoft® FS9 / FSX" = SimFlyer® GNS-SX (SR3) for Microsoft® FS9 / FSX
"softOSD Client" = softOSD Client (Build 1445)
"SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Flight Simulator X Service Pack 1
"SpeedFan" = SpeedFan (remove only)
"StarConflictLauncher_is1" = Star Conflict Launcher 1.0.1.17
"Steam App 113420" = Fallen Earth
"Steam App 12750" = GRID
"Steam App 12840" = DiRT 2
"Steam App 201700" = DiRT Showdown
"Steam App 210990" = Pro Cycling Manager 2012
"Steam App 212070" = Star Conflict
"Steam App 212680" = FTL: Faster Than Light
"Steam App 217750" = Age of Conan: Unchained - EU version
"Steam App 218230" = PlanetSide 2
"Steam App 221360" = Wizardry Online
"Steam App 230410" = Warframe
"Steam App 231060" = Ragnarok Online 2
"Steam App 231350" = 3DMark Demo
"Steam App 24010" = Train Simulator 2013
"Steam App 43110" = Metro 2033
"Steam App 440" = Team Fortress 2
"Steam App 44320" = DiRT 3
"Steam App 4500" = S.T.A.L.K.E.R.: Shadow of Chernobyl
"Steam App 49520" = Borderlands 2
"Steam App 7650" = X-COM: Terror from the Deep
"Steam App 9900" = Star Trek Online
"TeamViewer 8" = TeamViewer 8
"The KMPlayer" = The KMPlayer (remove only)
"The SW / Vilnius International1.0" = The SW / Vilnius International
"Topaz Adjust 5" = Topaz Adjust 5
"Topaz Adjust 5 (64-bit)" = Topaz Adjust 5 (64-bit)
"Topaz B&W Effects" = Topaz B&W Effects
"Topaz B&W Effects (64-bit)" = Topaz B&W Effects (64-bit)
"Topaz Clean 3" = Topaz Clean 3
"Topaz Clean 3 (64-bit)" = Topaz Clean 3 (64-bit)
"Topaz DeJpeg 4" = Topaz DeJpeg 4
"Topaz DeJpeg 4 (64-bit)" = Topaz DeJpeg 4 (64-bit)
"Topaz DeNoise 5" = Topaz DeNoise 5
"Topaz DeNoise 5 (64-bit)" = Topaz DeNoise 5 (64-bit)
"Topaz Detail 2" = Topaz Detail 2
"Topaz Detail 2 (64-bit)" = Topaz Detail 2 (64-bit)
"Topaz Fusion Express 2" = Topaz Fusion Express 2
"Topaz Fusion Express 2 (64-bit)" = Topaz Fusion Express 2 (64-bit)
"Topaz InFocus" = Topaz InFocus
"Topaz InFocus (64-bit)" = Topaz InFocus (64-bit)
"Topaz Lens Effects" = Topaz Lens Effects
"Topaz Lens Effects (64-bit)" = Topaz Lens Effects (64-bit)
"Topaz ReMask 3" = Topaz ReMask 3
"Topaz ReMask 3 (64-bit)" = Topaz ReMask 3 (64-bit)
"Topaz Simplify 3" = Topaz Simplify 3
"Topaz Simplify 3 (64-bit)" = Topaz Simplify 3 (64-bit)
"Trusted Software Assistant_is1" = File Type Assistant
"tsimlipqxx" = Trieste FSX
"UK2000 Belfast Xtreme" = Remove UK2000 Belfast Xtreme files
"UK2000 Birmingham Xtreme FSX" = UK2000 Birmingham Xtreme FSX
"UK2000 Bristol Xtreme" = Remove UK2000 Bristol Xtreme files
"UK2000 Edinburgh Xtreme" = Remove UK2000 Edinburgh Xtreme files
"UK2000 Gatwick Xtreme FSX" = UK2000 Gatwick Xtreme FSX
"UK2000 Glasgow Xtreme" = Remove UK2000 Glasgow Xtreme files
"UK2000 Heathrow Xtreme" = UK2000 Heathrow Xtreme FSX
"UK2000 Liverpool Xtreme FSX" = UK2000 Liverpool Xtreme FSX
"UK2000 London City Xtreme FSX" = UK2000 London City Xtreme FSX
"UK2000 Stansted Xtreme FSX" = UK2000 Stansted Xtreme FSX
"UK2000 Sutton Bank" = UK2000 Sutton Bank
"UK2000 VFR Scenery Volume1" = UK2000 VFR Scenery Volume1 files
"UseNeXT by Tangysoft_is1" = UseNeXT by Tangysoft
"ViMaCore X" = VistaMare ViMaCore X
"VIRTUALI Addon ManagerX 2.8.0.10_is1" = VIRTUALI Addon ManagerX
"Viveza Stand-Alone" = Viveza
"VLC media player" = VLC media player 2.0.2
"WebTemp_is1" = WebTemp 3.38 (kostenlose Version)
"Wings of POWER II: B17" = Wings of POWER II: B17
"World of Warcraft" = World of Warcraft
"X752CAPTAIN_FSX" = '757-200 Captain' (Base Package) 1.4
"Xvid_is1" = Xvid MPEG-4 Video Codec
"ZMBV" = Zip Motion Block Video codec (Remove Only)
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" ACG's IWM Duxford AI Pack FSX" = ACG's IWM Duxford AI Pack FSX
" ACG's IWM Duxford FSX" = ACG's IWM Duxford FSX
"{4f004f4a-1930-4b55-83e6-61660211787f}" = MechWarrior Online
"097dbf5de184dfda" = FS Economy client for FSX
"171a3bd25b2ddd36" = vroute.info
"61b70e4b67ea6493" = CoPilot
"757 American Airlines (Astrojet livery) v1.01" = 757 American Airlines (Astrojet livery) v1.01
"757 American Airlines (One World livery) v1.03" = 757 American Airlines (One World livery) v1.03
"757 American Airlines v1.01" = 757 American Airlines v1.01
"Aerosoft Mega Airport Munich v 1.00 for FSX" = Aerosoft Mega Airport Munich v 1.00 for FSX
"Airbus Series Vol.1 Deluxe (FSX)" = Airbus Series Vol.1 Deluxe (FSX)
"Airbus Series Vol.2 (FS X)" = Airbus Series Vol.2 (FS X)
"Amazon Kindle" = Amazon Kindle
"C172N SKYHAWK II FLOAT FSX" = C172N SKYHAWK II FLOAT FSX
"Captain Sim UHDT Base pack v1.02" = Captain Sim UHDT Base pack v1.02
"Carenado C208B Super Cargomaster Expansion Pack HD" = Carenado C208B Super Cargomaster Expansion Pack HD
"Carenado Piper Cherokee FSX" = Carenado Piper Cherokee FSX
"Carenado's Beechcraft Mentor T34B FSX" = Carenado's Beechcraft Mentor T34B FSX
"Carenado's C SKYLANE II RG R182" = Carenado's C SKYLANE II RG R182
"Carenado's SKYLANE C182Q FSX" = Carenado's SKYLANE C182Q FSX
"Douglas DC2 for Flightsimulator X" = Douglas DC2 for Flightsimulator X
"Dropbox" = Dropbox
"Eaglesoft Development Group Columbia 400X 1.5" = Eaglesoft Development Group Columbia 400X 1.5
"Eaglesoft Development Group Piper Twin Comanche X" = Eaglesoft Development Group Piper Twin Comanche X
"E-Jets Series (FSX)" = E-Jets Series (FSX)
"ERJ145LR American Eagle (v1.02)" = ERJ145LR American Eagle (v1.02)
"ESC Sceneries - Milan X" = ESC Sceneries - Milan X
"FeelThere E-Jets v.2" = FeelThere E-Jets v.2
"FeelThere ERJ v.2 SP1" = FeelThere ERJ v.2 SP1
"Fokker 70-100 FSX" = Fokker 70-100 FSX
"FSCaptain" = FSCaptain
"FsxAdventures Aer Lingus Missions v1.00" = FsxAdventures Aer Lingus Missions v1.00
"FsxAdventures EasyJet Missions Vol 1. v1.0" = FsxAdventures EasyJet Missions Vol 1. v1.0
"FsxAdventures KLM Missions v1.00" = FsxAdventures KLM Missions v1.00
"FTX AU GOLD Version 1.0" = FTX AU GOLD Version 1.0
"GamersFirst LIVE!" = GamersFirst LIVE!
"Level-D 767-300 for FSX" = Level-D 767-300 for FSX
"Livery pack Douglas DC2 for FSX" = Livery pack Douglas DC2 for FSX
"Lotus Simulations L-39 Albatros" = Lotus Simulations L-39 Albatros
"MiG-17 for FSX" = MiG-17 for FSX
"PA28RT ARROW IV FSX" = PA28RT ARROW IV FSX
"PT Tu-154B-2 FSX" = PT Tu-154B-2 FSX
"SOE-EverQuest" = EverQuest
"SOE-PlanetSide 2 Beta" = PlanetSide 2 Beta
"SuperTrafficBoard V2.3" = SuperTrafficBoard V2.3
"the Douglas DC2 for FS9 and FSX" = the Douglas DC2 for FS9 and FSX
"the Douglas DC2 Servicepack for FSX" = the Douglas DC2 Servicepack for FSX
"Ultimate Airliners - Super 80 FSX" = Ultimate Airliners - Super 80 FSX
"Ultimate Airliners - Super 80 Professional" = Ultimate Airliners - Super 80 Professional
"Ultimate Terrain X - Europe" = Ultimate Terrain X - Europe
"UnityWebPlayer" = Unity Web Player
"VFR Short Fields X - Vol.3 Quebec" = VFR Short Fields X - Vol.3 Quebec
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 17.06.2013 02:49:21 | Computer Name = Keller | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WorldOfTanks.exe, Version: 0.8.5.0,
Zeitstempel: 0x5170f15d Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.6161,
Zeitstempel: 0x4dace5b9 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000561e9 ID des fehlerhaften
Prozesses: 0x1b44 Startzeit der fehlerhaften Anwendung: 0x01ce6b221e71c2a7 Pfad der
fehlerhaften Anwendung: E:\World_of_Tanks\WorldOfTanks.exe Pfad des fehlerhaften
Moduls: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCR90.dll
Berichtskennung:
09537bfb-d71a-11e2-b251-002683161dc8
Error - 17.06.2013 07:05:09 | Computer Name = Keller | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: vlc.exe, Version: 2.0.2.0, Zeitstempel:
0x4feb87c5 Name des fehlerhaften Moduls: vlc.exe, Version: 2.0.2.0, Zeitstempel:
0x4feb87c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000016d5 ID des fehlerhaften Prozesses:
0x1cc8 Startzeit der fehlerhaften Anwendung: 0x01ce6b49a0175029 Pfad der fehlerhaften
Anwendung: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe Pfad des fehlerhaften Moduls:
C:\Program Files (x86)\VideoLAN\VLC\vlc.exe Berichtskennung: c5881386-d73d-11e2-b251-002683161dc8
Error - 17.06.2013 12:44:11 | Computer Name = Keller | Source = WinMgmt | ID = 10
Description =
Error - 17.06.2013 12:46:12 | Computer Name = Keller | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
WMI herstellen, um Antiviren, AntiSpyware- und Firewallprogramme von Drittanbietern
zu überwachen.
Error - 17.06.2013 16:43:01 | Computer Name = Keller | Source = WinMgmt | ID = 10
Description =
Error - 17.06.2013 16:44:30 | Computer Name = Keller | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
WMI herstellen, um Antiviren, AntiSpyware- und Firewallprogramme von Drittanbietern
zu überwachen.
Error - 17.06.2013 17:58:28 | Computer Name = Keller | Source = WinMgmt | ID = 10
Description =
Error - 17.06.2013 18:00:06 | Computer Name = Keller | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
WMI herstellen, um Antiviren, AntiSpyware- und Firewallprogramme von Drittanbietern
zu überwachen.
Error - 17.06.2013 19:22:52 | Computer Name = Keller | Source = WinMgmt | ID = 10
Description =
Error - 17.06.2013 19:24:43 | Computer Name = Keller | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
WMI herstellen, um Antiviren, AntiSpyware- und Firewallprogramme von Drittanbietern
zu überwachen.
[ OSession Events ]
Error - 02.08.2011 00:30:28 | Computer Name = Keller | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 1
seconds with 0 seconds of active time. This session ended with a crash.
Error - 24.08.2012 05:35:00 | Computer Name = Keller | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 44
seconds with 0 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 17.06.2013 17:58:43 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 17:58:50 | Computer Name = Keller | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem
Fehler beendet: %%-2147467262.
Error - 17.06.2013 18:00:05 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 18:03:03 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 18:03:05 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 19:22:08 | Computer Name = Keller | Source = Service Control Manager | ID = 7000
Description = Der Dienst "PDIHWCTL" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error - 17.06.2013 19:22:34 | Computer Name = Keller | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
acedrv05 TPkd
Error - 17.06.2013 19:22:48 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 19:24:19 | Computer Name = Keller | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem
Fehler beendet: %%-2147467262.
Error - 17.06.2013 19:24:42 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
< End of report >
Geändert von Nowater (18.06.2013 um 07:37 Uhr) |
|
18.06.2013, 07:32
| #5 |
| | PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber aufCode:
ATTFilter OTL Extras logfile created on: 18.06.2013 01:31:58 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Mike\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
7.98 Gb Total Physical Memory | 5.61 Gb Available Physical Memory | 70.31% Memory free
15.95 Gb Paging File | 13.67 Gb Available in Paging File | 85.66% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 279.46 Gb Total Space | 98.09 Gb Free Space | 35.10% Space Free | Partition Type: NTFS
Drive D: | 279.46 Gb Total Space | 31.47 Gb Free Space | 11.26% Space Free | Partition Type: NTFS
Drive E: | 698.63 Gb Total Space | 148.91 Gb Free Space | 21.31% Space Free | Partition Type: NTFS
Drive I: | 1863.02 Gb Total Space | 1320.14 Gb Free Space | 70.86% Space Free | Partition Type: NTFS
Computer Name: KELLER | User Name: Mike | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Digital Photo Professional] -- C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Digital Photo Professional] -- C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01AF293F-08FB-4F96-B686-7E211ECFD86E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{07CE3E1F-74C2-4874-9F08-14577D3FB153}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{0865BED2-5F02-4685-B051-2E19582806CD}" = lport=8090 | protocol=6 | dir=in | name=war thunder |
"{08A2DABD-556B-47FF-A8E6-DE85B7CF1003}" = lport=138 | protocol=17 | dir=in | app=system |
"{08CF0DFC-FE65-42FE-942B-E477DA5E99A2}" = lport=33333 | protocol=6 | dir=in | name=war thunder |
"{1AB31CA2-2FE9-4562-BB84-B26266024BA9}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{251D0128-4E07-42FD-9CA9-788C0A7EFC0D}" = lport=445 | protocol=6 | dir=in | app=system |
"{32997C4A-EB66-4A2E-ADD4-EFED3B20515C}" = lport=58872 | protocol=17 | dir=in | name=pando media booster |
"{3E9137C9-65FC-4E1A-BA73-88506D069995}" = lport=139 | protocol=6 | dir=in | app=system |
"{429A58F6-9471-4B1F-A479-9021F2EC73F0}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4606F980-EAB4-434A-A250-E30991C3DE8B}" = rport=445 | protocol=6 | dir=out | app=system |
"{487C8C2F-471B-40F4-8D20-C68BDC5B6A06}" = lport=3478 | protocol=17 | dir=in | name=war thunder |
"{4A87CE93-BE50-4192-89C5-30010473A32C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{542E827B-78C6-42DA-8620-C3E943F281EE}" = rport=137 | protocol=17 | dir=out | app=system |
"{5E8E9708-5CED-45E3-B37D-3FE0DED187E6}" = lport=58872 | protocol=6 | dir=in | name=pando media booster |
"{5EB4C68B-19F4-4D2F-BD37-A32AF0D895CE}" = lport=137 | protocol=17 | dir=in | app=system |
"{61E5A661-40E0-454F-A3FA-C002DA4A5D0D}" = rport=139 | protocol=6 | dir=out | app=system |
"{6B77715B-C563-4EA8-8CCA-C76F3FAC758E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6FB9C576-3110-494C-BC9B-640291A5E416}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{72149D2B-30D7-41E7-AEE1-C79C56EA65CA}" = lport=6881 | protocol=6 | dir=in | name=war thunder |
"{776FCF98-5B1E-464E-ADF5-8C5AD9D73A9D}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{78BC5519-C46E-43FD-9656-2DADF9061C06}" = lport=443 | protocol=6 | dir=in | name=war thunder |
"{7D666A0A-7912-485A-A1F4-8162AC1E1667}" = rport=10243 | protocol=6 | dir=out | app=system |
"{7F5F3537-61AB-4B63-B657-877BF948FBD5}" = rport=80 | protocol=6 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\tools\launcher.exe |
"{8857221B-C643-430B-BCF7-8808CEB2CBF0}" = lport=7850 | protocol=6 | dir=in | name=war thunder |
"{97539D5E-5A1D-49CB-B0ED-CBB714BEB993}" = lport=10243 | protocol=6 | dir=in | app=system |
"{99DDED52-171D-481F-8395-9F0B29426E6E}" = lport=5910 | protocol=6 | dir=in | name=vnc5910 |
"{A3925C9E-EBD1-4F78-BC4D-47042CC42CCF}" = lport=20443 | protocol=6 | dir=in | name=war thunder |
"{A4532E06-FF31-48FC-87A8-725384711F2D}" = rport=80 | protocol=6 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\warframe.x64.exe |
"{ACC574EB-B58C-42F6-B7BD-B860B6881B08}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{AD13DF57-0C46-49EF-B522-33D3EE176BE5}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{AEE7E636-A06F-4439-B333-F983223FC38A}" = rport=80 | protocol=6 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\warframe.exe |
"{B75432F3-A6BE-4165-B56F-2E41F70016BC}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B836EF91-3632-4FB4-ADB5-C232EF9A8A53}" = lport=58872 | protocol=17 | dir=in | name=pando media booster |
"{B8A7140F-D8FB-4AB6-AB22-BD310EAB8889}" = lport=27022 | protocol=6 | dir=in | name=war thunder |
"{CB0CC1BE-8126-485F-B38F-0EF6A3E9295D}" = lport=20010 | protocol=17 | dir=in | name=war thunder |
"{D21C7D6F-6537-4E52-B4E1-67D3F6F438DE}" = lport=80 | protocol=6 | dir=in | name=war thunder |
"{D2AE7840-4A99-4CBC-8A27-0320916708F5}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D49E865D-710D-4E73-9967-FF68B5DDE7D6}" = rport=138 | protocol=17 | dir=out | app=system |
"{D8D98A10-21AB-4749-A5B4-6E459FF80828}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DC9A6E3B-1B31-4FBD-9602-56EB1CC9F538}" = lport=58872 | protocol=6 | dir=in | name=pando media booster |
"{E28742C4-FE30-4B82-9FE6-C63E9157E29E}" = lport=2869 | protocol=6 | dir=in | app=system |
"{E6FB2106-901C-49A9-A677-EFEA024D5F8F}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{F5653AB8-441A-4B8A-8971-54682C6D6420}" = lport=5454 | protocol=6 | dir=in | name=x-rite device services |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00DB2EA0-336A-46AD-9C5D-C0A676622DE7}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\grid 2\grid2.exe |
"{01E852E2-CDCB-4064-8ED3-DA51BE7C4744}" = protocol=17 | dir=in | app=c:\users\mike\appdata\local\crossloop\vncviewer.exe |
"{02470A79-3D7F-4464-A509-91D57294822D}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\dirt 3\dirt3.exe |
"{040275CA-C886-47A5-9AED-8A59EF18602E}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{043CA719-27D0-4D8D-B796-E8332D61E368}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\star conflict\game.exe |
"{053F67FA-FB01-49BD-B5A8-3589E0585023}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{0B5C5416-9F4C-46C1-96A7-CC7A39B66912}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\railworks\railworks.exe |
"{0B6F70F7-D95C-4E59-B92F-817254B281CF}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\dirt showdown\showdown.exe |
"{0C423353-8606-4F02-BB6A-916379E93955}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0E7C670F-7123-41FB-B7C6-8216BA1837E0}" = protocol=17 | dir=in | app=e:\sevencore\sevencore.exe |
"{112595AA-93EC-45ED-B774-250B3A2255BC}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\dirt 2\dirt2.exe |
"{123D82B0-0771-4F1B-8528-15957A01F90E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe |
"{1250E470-91B6-4DD2-8869-E66D7CCC0969}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe |
"{127FA595-C069-4C22-855F-7EABFF72DB1C}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\planetside 2\launchpad.exe |
"{13455646-4A1B-46E8-BD79-BB976FE9302F}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\dirt 3\dirt3.exe |
"{1349F49E-1718-4FC6-9001-FC8396162A71}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{15A1166F-7DFA-4605-9E26-9462968B9087}" = dir=out | app=e:\bf3\originclientservice.exe |
"{15C4DACB-CD51-4345-A38B-35CD492EE5B9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1754374A-84BB-4955-B4F9-A415F370E79D}" = dir=out | app=e:\bf3\origin.exe |
"{1A357E34-713A-4C85-82C3-31A812218371}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{1B8B4F06-F6A0-4777-B023-95AF83F4CD24}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{1C7529DD-C723-402A-A264-076D45D99B60}" = protocol=6 | dir=in | app=e:\arma 2\arma2.exe |
"{1E3E3132-B7D3-481E-BC02-1D450079234C}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\3dmarklaunchersteambeta.exe |
"{226472B2-BCFA-43CE-A6F7-34BF30778D05}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{243DC9FB-53F7-4C1B-9947-050A124CC553}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{25A049E8-B92F-423E-950A-55139B8DCBA5}" = protocol=6 | dir=in | app=e:\star wars-the old republic\launcher.exe |
"{26420F7B-C155-4077-8722-D988D559007A}" = protocol=6 | dir=in | app=e:\sevencore\launcher.exe |
"{2AE6C66C-C049-48FE-BA9B-AC6774FD21A0}" = protocol=6 | dir=in | app=e:\sevencore\sevencore.exe |
"{2AFA6D71-79F9-4070-8F63-58C72D6AD326}" = protocol=17 | dir=in | app=c:\program files (x86)\vuze\azureus.exe |
"{2B289FB8-F7F6-42E4-81F3-5DADA0EED38B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{2C615AA6-EB84-4156-A0C1-1815BBC9C188}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{2C7E09D1-7558-43C7-A432-711D92BCD2FE}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\dirt 2\dirt2.exe |
"{2DF17AFC-1AAE-48F1-AAA2-96CB576FE289}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\star conflict\game.exe |
"{2EF2B50D-5B2B-48DD-804D-181AB16CCA58}" = protocol=17 | dir=in | app=i:\steamlibrary\steamapps\common\warframe\warframe.exe |
"{33512FFA-5D0C-4EA8-93EA-6339BA5C04A6}" = protocol=17 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\warframe.x64.exe |
"{335379FE-06B1-401A-BF2C-8B5CFDECE239}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{33730FD6-4DAA-474E-9135-7BD9D5D30248}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{339CDEF5-712D-4D26-AE43-4716C168CE30}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{343BEF5E-24AF-4036-AE73-2A8C888B91F1}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\ftl faster than light\ftlgame.exe |
"{36B2FB05-DA7B-4F20-B0A1-3F22A8DFC471}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{36BA4452-C414-42B3-A89A-61DC6059493C}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{397154C2-EBB0-47D2-9E84-47E7192EB13D}" = protocol=6 | dir=in | app=e:\bf3\mass effect\binaries\masseffect.exe |
"{3C6E8151-1253-4CD1-863D-227D3FC77DF7}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x86_steam_beta\3dmark.exe |
"{3E7D8F45-F0E6-430E-BF84-2A787E8F04A3}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\dirt showdown\showdown.exe |
"{4110F7DE-D979-4C03-81E7-DBB4D560548F}" = protocol=17 | dir=in | app=e:\bf3\mass effect 3\binaries\win32\masseffect3.exe |
"{42660DB3-4B60-46F2-8737-73E73FBE44B3}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\pro cycling manager 2012\pcm.exe |
"{4291E759-4121-46D2-8AC1-028A1469F736}" = protocol=6 | dir=in | app=d:\war thunder\launcher.exe |
"{42C0F7E6-16C3-4B05-88C1-6D8A07C5CF8E}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{44894361-BD57-408F-86D5-5E94BCC106CB}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{459B97B8-2D62-4EE2-867F-D06DE2F1BA06}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{4A009D76-2803-4BA1-8412-4CDD21D5358A}" = protocol=17 | dir=in | app=c:\users\mike\appdata\local\crossloop\tvnserver.exe |
"{4A32EB0C-A833-4C44-9CFB-6FED1E1F7527}" = protocol=17 | dir=in | app=c:\users\mike\appdata\roaming\dropbox\bin\dropbox.exe |
"{4FAF8E68-6BB4-4798-9287-1F6859C5524F}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{50A95F69-444A-438F-BB7E-CD9E996E67D8}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x64_steam_beta\3dmark.exe |
"{51CCB36B-6013-4691-998F-A3D79E083FDE}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe |
"{5226C41F-1331-44DE-B9D5-2BA1BABE65B0}" = protocol=17 | dir=in | app=e:\bf3\mass effect\masseffectlauncher.exe |
"{5753C8BE-C639-4388-B017-EC04EC560C78}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{57AB9539-182A-4A99-9166-2E8C14E0C486}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\metro 2033\metro2033.exe |
"{5AF97F17-1389-41D5-AFB7-0D41F2306BE0}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{5C7B04F7-3841-461A-8CEE-6938BCEBFED1}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{5CD8A76E-3252-4A04-B062-41DDABA0FD5B}" = protocol=17 | dir=in | app=e:\sevencore\sevencore.exe |
"{5CECD92F-68D1-41F4-B2D5-F5861DCEFC00}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{5D70BA21-8422-4A95-81EE-B6D34457FE20}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{5E5DC452-A395-4752-BFFC-628015E3342D}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x86_steam_beta\3dmark.exe |
"{5F880A52-2C96-48A6-913C-2C33B6F4F296}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5F98ED79-D874-43CD-B15B-75C62CEEE854}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe |
"{60663F4B-C568-43BC-8ADE-6A341106FBF1}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{6099ECB2-8445-4D51-8B0B-53C44DE4A4F5}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\pro cycling manager 2012\ctstageeditor.exe |
"{61C37A37-7FF0-42E4-8CA5-D74F92701E74}" = protocol=6 | dir=in | app=c:\users\mike\appdata\local\crossloop\tvnserver.exe |
"{6219DB7D-AE23-4A0A-B445-A9132667C813}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{63608D54-0AE9-4D18-93C8-06F2282A1E06}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{64217ABD-2F14-4C3C-8CF3-EC25E7A34D42}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x64\3dmark.exe |
"{64FCB16D-024B-49BA-B2F5-89620A143CF9}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{669D89D4-CCEF-4260-8149-50C517C2F6EC}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{67F3673C-B7B5-40EC-B072-6817C466BAAE}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\planetside 2\launchpad.exe |
"{69409609-15CC-48C3-8F90-39AB0FC530AC}" = protocol=17 | dir=in | app=e:\bf3\battlefield 3\bf3.exe |
"{6CD29419-B3E1-43AE-B0E9-B566D4050D63}" = dir=out | app=e:\moh\binaries\mohupdater.exe |
"{6E2013DC-441C-4616-9080-1F6B35DD5BFB}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\railworks\railworks.exe |
"{727BB015-6A00-489E-8471-C28A46B8150D}" = protocol=17 | dir=in | app=e:\steam\steam.exe |
"{74FD6653-364D-4640-9C47-CD090E2DA770}" = protocol=17 | dir=in | app=d:\war thunder\launcher.exe |
"{7813321D-2319-4FF6-88DF-9538FBB2BD0B}" = protocol=17 | dir=in | app=e:\sevencore\launcher.exe |
"{78A6AE67-9FC1-4369-92B5-AD28871DC7E9}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{7956DC67-E244-4881-977A-74E2FA2BEFE2}" = protocol=17 | dir=in | app=e:\sevencore\launcher.exe |
"{7A91F1E2-3F61-4883-80C7-434C22D8DE7C}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x86\3dmark.exe |
"{7E0308E5-08C6-41EE-9902-A16E2DCB40B1}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{7FAB2BFF-FB22-4751-BA8E-243F80E192CA}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x64_steam_beta\3dmark.exe |
"{826D5A0A-7C2B-460F-AF85-87D69036FB60}" = protocol=6 | dir=in | app=e:\bf3\battlefield 1942\bf1942.exe |
"{82CEFF03-1F9F-4893-B919-6404F6CE91A2}" = protocol=17 | dir=in | app=e:\star wars-the old republic\swtor\retailclient\swtor.exe |
"{85654B29-85F8-48FC-BBCB-ADF8B3FF4DED}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{85D877CA-94A5-453B-B262-B6D14892267F}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\grid 2\grid2.exe |
"{87137392-8DF9-42EC-B07A-F96B9F94A785}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{87E12534-2566-42C2-AA8F-90A7123ADFDB}" = protocol=6 | dir=in | app=c:\users\mike\appdata\local\crossloop\vncviewer.exe |
"{8A25E92E-181F-4652-AF4E-FBAED600D83E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{8A5D6ECC-38EC-47F3-BB54-2DD2391E498D}" = protocol=17 | dir=in | app=i:\steamlibrary\steamapps\common\warframe\warframe.x64.exe |
"{8CE35DC0-AE8D-4A23-9E72-17C79FB5AA1C}" = protocol=6 | dir=in | app=c:\users\mike\appdata\roaming\dropbox\bin\dropbox.exe |
"{9258ACEF-0C4B-4716-A887-FD760010413E}" = protocol=6 | dir=in | app=e:\star wars-the old republic\launcher.exe |
"{93AA6CAF-9626-4F04-8077-AEFE939D4AAA}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{94F7B52E-6624-459D-8CFF-1CFFAB5C0602}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x86\3dmark.exe |
"{951FB97B-6FCB-4793-B108-BE1298429561}" = protocol=17 | dir=in | app=e:\arma 2\arma2.exe |
"{9725FDB4-ACE2-4DD0-B291-8261F47208B1}" = protocol=6 | dir=in | app=e:\sevencore\sevencore.exe |
"{991BE5EA-F503-4266-9457-0B02E436FEEB}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\ftl faster than light\ftlgame.exe |
"{9965E675-BC6A-4F1B-9C5C-A401412C85B0}" = dir=out | app=e:\moh\mp\mohmpgame.exe |
"{9BC1F308-A457-4AF8-A756-8D78750825A1}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\stalker shadow of chernobyl\bin\xr_3da.exe |
"{9C35911A-2495-4581-9650-6C85030053CD}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{9FE9F5C2-56BB-4515-95E4-8DECC01AA7A7}" = protocol=17 | dir=in | app=e:\star wars-the old republic\swtor\retailclient\swtor.exe |
"{A21958EC-CBA4-4821-A1BD-2B49C5B89B1A}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{A29E9391-1CAF-48AA-BC7E-3B756C3361B4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{A3D10DF7-C269-428D-A37D-2212092CE9EB}" = protocol=6 | dir=out | app=system |
"{A80BFC12-E499-464F-AA1F-2077A444BAA8}" = protocol=17 | dir=in | app=e:\star wars-the old republic\launcher.exe |
"{A97E0034-D4CD-400F-BBE5-06366DDD7B92}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\3dmarklaunchersteambeta.exe |
"{AB98BE3C-3795-4266-B573-9048B689BA55}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{AB9CE526-CBE2-4E74-BDE8-F310E6A868EC}" = protocol=6 | dir=in | app=e:\steam\steam.exe |
"{AF7D4F6C-4516-4B30-B798-4E49DECB4366}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B25B714A-2886-4820-A74E-D0B8752C2A82}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{B2E6953A-DF57-439B-9ED6-4C21669C32E7}" = protocol=17 | dir=in | app=e:\bf3\mass effect\binaries\masseffect.exe |
"{B47789D8-7F98-4B7C-97B7-988A9040F20C}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{B5639A0C-77E7-43A8-B245-5C9E296E655C}" = protocol=6 | dir=in | app=e:\star wars-the old republic\swtor\retailclient\swtor.exe |
"{B6CCCBC8-3E45-4F2D-8D9C-FFB40D801169}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{B9F2C091-FB0B-46C4-8D66-C90ACCD6B8E2}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{BB03D454-355D-4CB4-AA45-E85F513DF330}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{BE13C819-D305-4228-8B55-32B60C777635}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{BE56D418-57EC-4345-968E-73D428427729}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{BE807270-2FB9-4D33-AEAD-36BB4300027D}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{C09EE9D6-1E22-4483-96B4-0FF1D4FA579F}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe |
"{C1C1B3DE-406C-45F7-A84F-E5DBD87B1D2E}" = protocol=6 | dir=in | app=e:\star wars-the old republic\swtor\retailclient\swtor.exe |
"{C242906C-A1CE-4755-B4B8-5612480C9918}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{C2D287BB-AE32-4BC8-BF1E-CD3214D181A8}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe |
"{C57BB379-560F-4424-817B-EC00BA782A35}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{C779B7F2-1E3F-48F4-B327-AB9FFFC4FB93}" = protocol=6 | dir=in | app=e:\bf3\battlefield 3\bf3.exe |
"{C79EAA3A-5300-4E67-B8F9-4FD08BF05174}" = protocol=6 | dir=in | app=e:\bf3\mass effect\masseffectlauncher.exe |
"{C8F5778E-883A-4103-AAEA-970EAC19F44D}" = protocol=6 | dir=in | app=e:\bf3\mass effect 2\masseffect2launcher.exe |
"{C94E6F22-65BB-4609-8535-4EE91CDD78A7}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{CCAAF6C2-63A2-4EEA-9910-D206F9E71110}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D3969551-FEBB-40A1-A439-91F7D4822CEF}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{D6146F4F-F2E9-4A20-9EC0-E8155955E1C0}" = protocol=6 | dir=in | app=e:\bf3\mass effect 3\binaries\win32\masseffect3.exe |
"{D7260995-D302-411C-95A0-890485652DC0}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\pro cycling manager 2012\pcm.exe |
"{D7C669FE-56C5-4CE4-9152-DD918010E4BC}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\3dmarklauncher.exe |
"{DB9BB42D-AEBA-41FE-9409-198B96BBB67C}" = protocol=17 | dir=in | app=e:\bf3\mass effect 2\masseffect2launcher.exe |
"{DBD96FC0-09F9-46F0-94B4-5D754CB0D21F}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\3dmark\bin\x64\3dmark.exe |
"{E0618BC0-44E0-42AD-80C7-1AB2229B2D84}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{E258CC0F-2C3D-4EC1-8EAE-899377B3B45A}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\stalker shadow of chernobyl\bin\xr_3da.exe |
"{E30BD53E-2BCE-4284-B6B0-AF37F9AE179D}" = protocol=17 | dir=in | app=e:\star wars-the old republic\launcher.exe |
"{E3C60A41-E15E-4C1B-86A5-A2230C3B02B1}" = protocol=17 | dir=in | app=e:\bf3\battlefield 1942\bf1942.exe |
"{EA8C00C0-6FBA-4470-B255-4209E7325EB7}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\3dmark\3dmarklauncher.exe |
"{EB142702-FDA5-4DDB-991B-1265E4AB129C}" = protocol=17 | dir=out | app=i:\steamlibrary\steamapps\common\warframe\warframe.exe |
"{ECE42978-E818-4C99-B3DF-AA6D2387698F}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{ED1B2821-7329-445E-8D89-24E431F994D6}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{EF447D35-7603-4D83-AF1F-9098D16DC074}" = protocol=6 | dir=in | app=e:\sevencore\launcher.exe |
"{EFBE19DA-CB94-47D5-847A-5E202131BDC3}" = protocol=17 | dir=in | app=e:\steam\steamapps\common\pro cycling manager 2012\ctstageeditor.exe |
"{F14CE5DF-4211-4BB7-9222-E2C918064CC9}" = protocol=6 | dir=in | app=c:\program files (x86)\vuze\azureus.exe |
"{F1F52CE5-80B2-45FD-AD43-3B8A1BF4EF1B}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{F5C0536C-F6C5-4983-9C60-D68F8406D1AF}" = dir=in | app=c:\program files (x86)\finalmediaplayer\fmpcheckforupdates.exe |
"{F6E39BFD-27E4-4F83-B38A-C57211E5546D}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\metro 2033\metro2033.exe |
"{F76A8CCD-01EC-4272-A10A-377C054B5C96}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{FA9258DD-410B-4AC1-AF97-6080E867BFCD}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{FBAF478C-A719-42E4-82E8-C8BE9B46ADF4}" = dir=out | app=e:\moh\binaries\moh.exe |
"{FCC2A0D4-29B5-4821-BD13-C7D0102CD92C}" = protocol=6 | dir=in | app=e:\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"TCP Query User{0114FCCA-55B5-4887-B167-A9FC173E2C7C}E:\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=e:\guild wars 2\gw2.exe |
"TCP Query User{0390FEA9-8417-452C-BCC4-039F0F28F334}E:\world_of_tanks - kopie\worldoftanks.exe" = protocol=6 | dir=in | app=e:\world_of_tanks - kopie\worldoftanks.exe |
"TCP Query User{1EF46A83-CD79-434B-8F6D-A34D8B9BE2D2}E:\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=e:\world_of_tanks\wotlauncher.exe |
"TCP Query User{8785D4E0-F2C7-4596-979C-562105CA522B}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"TCP Query User{88587CF4-4913-4E89-9A5C-F773683B0FD5}E:\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=e:\world_of_tanks\worldoftanks.exe |
"TCP Query User{AE319F46-7F5B-4E59-91A8-63C8BF66A550}E:\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=e:\world_of_tanks\wotlauncher.exe |
"TCP Query User{C2BCE42E-583E-44B8-A75F-94AD8948318C}E:\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=e:\guild wars 2\gw2.exe |
"TCP Query User{E39A4E58-AE9E-4525-B84A-667EDDF5C3EC}E:\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=e:\world_of_tanks\worldoftanks.exe |
"TCP Query User{EE0C914E-B376-441D-B256-760C06E71248}E:\planetside 2 beta\planetside2.exe" = protocol=6 | dir=in | app=e:\planetside 2 beta\planetside2.exe |
"UDP Query User{11D1F32C-2DCB-4192-9034-5D9EBB12DE0B}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{16957F73-EFA9-4078-AB71-B4DF55588683}E:\world_of_tanks - kopie\worldoftanks.exe" = protocol=17 | dir=in | app=e:\world_of_tanks - kopie\worldoftanks.exe |
"UDP Query User{2B710E95-C423-41A3-8730-484CAA784887}E:\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=e:\world_of_tanks\worldoftanks.exe |
"UDP Query User{49E16301-12A9-4464-A316-50383A0F5B10}E:\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=e:\guild wars 2\gw2.exe |
"UDP Query User{6F3A1F82-3DF8-4F7F-A5A4-3F0CD40A31F7}E:\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=e:\world_of_tanks\wotlauncher.exe |
"UDP Query User{75C62320-E950-49FA-B68C-BD7FA86F8C1D}E:\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=e:\world_of_tanks\worldoftanks.exe |
"UDP Query User{96D0467A-1C5A-46CA-B808-F9AD79549DB3}E:\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=e:\guild wars 2\gw2.exe |
"UDP Query User{AAD42679-8454-4774-BE39-F9A7DC138EFC}E:\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=e:\world_of_tanks\wotlauncher.exe |
"UDP Query User{C0D61766-E2DA-42B6-8150-DEB1E644D29E}E:\planetside 2 beta\planetside2.exe" = protocol=17 | dir=in | app=e:\planetside 2 beta\planetside2.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{11A955CD-4398-405A-886D-E464C3618FBF}" = Adobe Photoshop Lightroom 4.4 64-bit
"{183C740A-0406-380F-A235-2EC2F8A28D13}" = Microsoft Windows SDK MSHelp (30514)
"{1CDE9DB9-7D47-46F8-83DC-9DD9899BBBFC}" = Topaz ReMask 3 (64-bit)
"{1D3B0300-45BB-49A3-B1B6-56E3D4024042}" = DxO Optics Pro 8
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Bluetooth Win7 Suite (64)
"{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java(TM) 6 Update 27 (64-bit)
"{3156336D-8E44-3671-A6FE-AE51D3D6564E}" = Microsoft Windows SDK for Windows 7 (7.1)
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5E11C972-1E76-45FE-8F92-14E0D1140B1B}" = iTunes
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64579E10-6249-4BB1-B1D1-8EF55042DB45}" = DxO Optics Pro 7
"{652E6883-26B8-4683-BDAA-8AD37D00C045}" = Adobe Photoshop Lightroom 5 Beta 64-bit
"{68570626-1BF6-310B-AF69-6CD686C04AEA}" = Microsoft Windows SDK Net Fx Interop Headers And Libraries (30514)
"{690285C2-2481-44FB-8402-162EA970A6DD}" = Logitech Gaming Software
"{6C8D7973-31F9-32E1-A820-8DD857910323}" = Microsoft Windows SDK for Windows 7 Utilities for Win32 Development (30514)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{75104836-CAC7-444E-A39E-3F54151942F5}" = Apple Mobile Device Support
"{7D088FD6-67B8-4186-947C-5FB4CC7227B5}" = O&O Defrag Professional
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{84452C2C-BDCC-36F3-A189-CE15F02A47FB}" = Microsoft Windows SDK for Windows 7 Headers and Libraries (30514)
"{84E30D73-E30F-3A02-BAA0-5353C04DD18A}" = Microsoft Windows SDK Intellisense and Reference Assemblies (30514)
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{88387B3B-B110-392F-B919-1A15B48F21D4}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x64
"{89026002-A893-42D9-9E20-6829B844735E}" = Application Verifier (x64)
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{90BF0360-A1DB-4599-A643-95AB90A52C1E}" = Microsoft_VC90_MFCLOC_x86_x64
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{951E6223-AC28-345E-BCF4-B55C1267E321}" = Microsoft Windows SDK for Windows 7 Samples (30514)
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A0A7372A-C28E-48BE-B88C-3C3C3EEFC2EA}" = DxO ViewPoint
"{A0B0F02C-410B-3DE3-9740-EC4C3D902532}" = Microsoft Windows SDK for Windows 7 Common Utilities (30514)
"{A2C55034-8DAF-3755-BA85-CC321707FE99}" = Microsoft Windows SDK for Visual Studio .NET 4.0 Framework Tools
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 4.11.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.18.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{D4F66BBA-D79E-4F11-9B06-70C3D75A2958}" = Adobe Photoshop Lightroom 3.6 64-bit
"{DBFC6AAE-DCCB-4C23-B01C-3EDDDC03298B}" = Debugging Tools for Windows (x64)
"{E44D14E2-A6D0-4F38-BF06-2E4244E23FED}" = Topaz InFocus (64-bit)
"{E7F9E526-2324-437B-A609-E8C5309465CB}" = Microsoft Windows Performance Toolkit
"{F1C4B89A-8BF0-3D7C-8095-BAE412FBEA3F}" = Microsoft Windows SDK .NET Framework Tools (30514)
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FCADA26A-5672-31DD-BF0E-BA76ECF9B02D}" = Microsoft Help Viewer 1.0
"0B9256266C4321F4FACD6D67F2408684F14A89CA" = Windows-Treiberpaket - Phase One A/S (WinUSB) USBDevice (11/13/2012 1.11.0.63801)
"0F81152D3B5D40D8F497EC1750B8EFF11FEED116" = Windows-Treiberpaket - Phase One / Mamiya V-Grip USB Driver (09/28/2010 1.1.0.1)
"A35BD68D4A1B3E191138E3C9AA417190A9468F7E" = Windows-Treiberpaket - Leaf Imaging Ltd. Image (02/11/2010 )
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"Logitech Gaming Software" = Logitech Gaming Software 8.30
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Neat Image Standalone_is1" = Neat Image v7.3.0 Demo Standalone
"Oloneo HDRengine" = Oloneo HDRengine
"Oloneo PhotoEngine" = Oloneo PhotoEngine
"PanoramaStudio2Pro" = PanoramaStudio 2.3 Pro ((deinstallieren))
"PhotomatixPro42x64_is1" = Photomatix Pro version 4.2.6
"SDKSetup_7.1.7600.0.30514" = Microsoft Windows SDK for Windows 7 (7.1)
"SNS-HDR Home_is1" = SNS-HDR Home v1.4.22
"SNS-HDR Lite_is1" = SNS-HDR Lite v1.4.14
"SNS-HDR Pro_is1" = SNS-HDR Pro v1.4.22
"sp6" = Logitech SetPoint 6.32
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 4.01 (64-Bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01C3630A-7FD2-46DF-B514-A4B829B0021A}" = aerosoft's - German Airports 2 X - FSX
"{02BA6B72-F4CF-4EEE-B144-825F4225B823}" = WOT Statistics
"{02F744CB-0E04-40DA-A50C-58F49D8E5A0C}_is1" = CaptainSim 727 PRO FULL PACK 2.1
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{04A3A6B0-8E19-49BB-82FF-65C5A55F917D}" = Acronis*True*Image*Home 2011
"{04B73EB2-7538-4CC4-BBD6-5463E508B69B}" = aerosoft's - Balearic Islands X for FSX
"{073B36E0-84D5-4561-92B1-35A807EF253A}" = PMDGMD11X_PW_DL3
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A297C87-BF52-43FD-AD75-EE72228E4457}" = aerosoft's - Mega Airport Amsterdam FSX
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{0F5E7FC8-3D49-47DA-9A51-6A8B4BE393B0}" = aerosoft's - Mega Airport Paris CDG X
"{0F6047EC-36A9-4735-840F-2BAA134D4B94}" = Aerosoft's - Keflavik X
"{1592B9A6-E23D-4B57-9D3D-BB98F1EF55F6}" = SEVENCORE
"{17440258-DB48-49DE-8391-79900477490C}" = aerosoft's - Madeira X
"{17BA8B2D-BF89-4D10-B9D1-1CC5F322A6BB}" = aerosoft's - Maldives X
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1B0FBB9A-995D-47CD-87CD-13E68B676E4F}" = Mass Effect
"{1C5510F5-5452-4411-A54C-3DA055D8A793}" = Aerosoft's - German Airfields 2
"{1C5F9FED-6D15-4260-843A-487CFEB76D7C}" = Machinery HDR Effects
"{1E90660B-8460-498E-B781-44FF5D99396E}" = Navigraph nDAC 3
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812CT}_is1" = World of Tanks - Common Test
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1" = World of Tanks
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C8PD}_is1" = World of Tanks - Physics Preview
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20708FD5-E94D-4097-A21E-E28564CDBC06}" = PMDG 737 8900 NGX
"{22DA31EE-2DEA-4DB7-9301-3222F91826F7}" = PMDGMD11XF_PW_FXF
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2336573C-3213-48AA-A306-8309BA9BD92C}" = Aerosoft's - Airbus X
"{26405538-F6B6-4EDC-8C58-6D291ADA2D38}" = PMDG_BAe_JS4100_3M
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 21
"{2A9A269C-1C36-493C-96D8-60B23FAB2E10}" = FSC
"{336CBE20-6E47-43D2-9CF2-FAB241A3CCD4}" = PMDGMD11X_GE_AM
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{34B32B70-8081-11E2-89AF-B8AC6F98CCE3}" = Google Earth Plug-in
"{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help
"{35489B42-C438-441E-B246-A2C52B52FF6A}" = X Graphics
"{370187B9-6964-38D0-851F-6C4898B0C2B1}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x86
"{3A8DED06-80E7-4555-AA1F-FF4A2A4D353C}" = Aerosoft's - DHC-6 Twin Otter X
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{3C9D6BFF-3316-4F33-A8EE-54A21684ED14}" = PMDGMD11XF_PW_MPF2
"{3DB1F8B4-96A5-45B8-9C50-CB5828A0B1C6}" = PMDGMD11X_GE_LH
"{3E977FB7-0A6F-4B7D-AE5A-0C080F71D951}" = CoolerMaster Trigger
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{40C5DFE3-3B86-4151-A225-C7B28ACEFEB7}" = Aerosoft's - Simcheck Airbus A300B4-200
"{417FC1D9-A946-4638-B02C-FD9AE0E96E95}" = Aerosoft's - German Airfields 3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C7F54EE-DC36-431F-9978-DA678D77C4BA}" = aerosoft's - Tahiti X
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CFCC6FD-AEA2-4208-99A6-45CBF9DFFD82}" = Real Environment Xtreme
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{4F23F6D6-1648-4AB2-A86E-827B7772CA99}" = PMDG_BAe_JS4100_EV
"{50CE738D-60A0-4721-92A5-5C0BD329A687}" = PMDG_BAe_JS4100_AX2
"{534A31BD-20F4-46b0-85CE-09778379663C}" = Mass Effect™ 3
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{559C7AA8-E526-8C65-88FC-FD7A9C366E38}" = Adobe Lens Profile Downloader
"{55F78BA4-3D29-4F66-8D89-36E45C3750B6}" = Active Sky Evolution
"{5B545767-D712-44C3-A894-AC5FA62331BA}" = PMDGMD11X_PW_SR2
"{5BDEA9E0-E55B-45A7-93F7-6B8F68F851E5}" = Topaz InFocus
"{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}" = Battlefield 1942™
"{60BA9208-43BA-4D24-AD54-11EC0A3453EC}" = Snapseed
"{61957FA7-34C1-4F46-871C-A0FD49848832}" = Aerosoft's - HelgolandX
"{61C63F60-152B-4D28-B357-6DB81837FA9B}" = Aerosoft's - German Airfields 1
"{62B7012A-D02C-4981-9D37-634DF40E9578}" = aerosoft's - Santorini X
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{6360C5E9-2842-4213-88B9-47D814FAAD54}" = aerosoft's - German Airports 3 X - FSX
"{636D1606-79EE-4A33-8A16-DECF8B45B92B}" = PMDGMD11X_GE_US
"{64392EEB-38EF-45FD-822D-5C75CA136860}_is1" = Incomedia WebSite X5 v9 - Evolution
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6583D00E-0924-4950-8BE9-5D09FE70B333}" = MTX
"{6884A1E7-6557-4018-B917-FD11327AAAD4}" = PMDG_BAe_JS4100_VNE
"{68E6762C-20CA-41B2-8720-1B178B2C6AED}" = DxO FilmPack 2.0
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6D6A26D5-492A-49BD-B30D-546B2F3E4793}" = Real Environment Xtreme - Overdrive
"{6E57CA24-C027-4D88-8E94-D1EE92F8864C}" = FollowMe
"{6E58FAA6-751E-4EE6-A3DD-24431DCCB76A}" = SILKYPIX Developer Studio 4.0 for Tamron
"{70864384-DD19-44CB-A999-A917F32F623D}" = aerosoft's - Approaching Innsbruck X
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72FF9BBB-80A1-4A3C-8ABD-A6149BD884A0}" = EireSim-Alicante FSX
"{757F55B9-A5B6-41D6-A126-2B1C0066EA91}" = Aerosoft's - AspenX
"{75D84EF7-0D8C-4E70-B3FA-7B42A5D4E0EB}" = Mass Effect 2
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{76E2A1A0-CE72-48A0-8D8E-767A1B0C2191}" = PhotoFrame 4.6.3 Free
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{78456F0E-278E-4C0D-8B64-2B0151248CA3}" = Active Sky Advanced
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7A5E396C-8D6E-4C63-AA5F-805ED6C911E6}" = PMDG744XF_GE_JLF
"{7BF771B4-83AE-44C3-A870-068A673FF6C9}" = aerosoft's - Andras Field
"{7D606567-5047-451A-B49E-29FCB6012B4E}" = Microsoft Flight Simulator X: Acceleration
"{7F3AD00A-1819-4B15-BB7D-08B3586336D7}" = 3DMark06
"{8117EA22-035F-4880-86AE-AC7C4F1FA3E2}" = Topaz ReMask 3
"{8233F99B-C4C2-44E9-8486-374E9B300BF2}" = aerosoft's - Mega Airport Madrid Barajas
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{858F7CD6-B08D-4C68-8295-DFE2FFF683F5}" = Active Sky X
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{8F00580B-19EC-4709-896D-D21E542630DD}" = Aerosoft's - Piper Cheyenne FSX
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90447E05-DE8E-470D-8D3E-C871D2AE74AF}" = aerosoft's - Nice Cote dAzur X
"{9158FF30-78D7-40EF-B83E-451AC5334640}" = Adobe Photoshop CS5.1
"{922A8108-6233-4AD6-AFBB-6404D8FA80AF}" = PowerNap
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{930945C3-064B-4ACD-A004-436A4783FCD9}" = FlyLogic's - Bern-Belp X
"{97C97546-024D-40E1-A16E-255C3BAAAC16}" = PMDGMD11X_GE_CO
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9BFAD985-B7E2-40FB-B9F9-DEEEAFB25780}_is1" = WoT Skin Installer version 1.1
"{9C6C0D2A-E2C0-4160-B139-5951A72EC80F}" = WOT Statistics
"{9D158D03-2166-445F-8F47-B86FB8909674}" = PTLens
"{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR
"{A0663B00-3376-42C1-B719-995B9CB44DEF}" = Aerosoft's - Hawaii Dillingham X
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A4095642-9995-42B1-B589-D8E7AD6B11DA}" = Just Flight - Air Hauler
"{A4F1F449-DB1C-40AC-AEC9-9973D4234D28}" = PMDGMD11XF_GE_FXF1
"{A75A7BEA-7A33-46FF-A2CD-3B0AF8023903}" = SIGMA Optimization Pro
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA9F7D49-5B32-4635-887A-EC0D526D877C}" = Real Environment Xtreme 2.0
"{AAF496CC-92FE-42B3-80AA-86ECF4250B69}" = Aerosoft's - German Airfields 11
"{ABB4DB59-0284-414D-9346-4992E1856E7F}" = PMDGMD11X_GE_AA
"{AC50C05D-9D57-40F5-B2EF-AC402F14312B}_is1" = Dell Display Manager
"{AC5E0CD0-F560-4504-B8C1-3D4F268AA7EF}" = X-Rite Device Services Manager
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.6) - Deutsch
"{AD6C554F-5050-40B1-B84D-51D74A09C7E4}" = Aerosoft's - Mega Airport Budapest
"{AE0FB74F-8E5D-41DF-9EC6-061B6390189B}" = Aerosoft's - German Airfields 9 - Nordbayern
"{B0F7B3B5-E856-4558-BD7C-BDA32943C783}" = Just Flight - 757 Jetliner Freemium
"{B59C0CF6-03D4-4357-ABD2-4A6EBD91B980}_is1" = WoT Hitbox Installer version 1.83
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{B7429839-9FAE-448E-8413-4888DCFE064F}" = Aerosoft's - Piper Cheyenne FSX
"{B99C3D18-BA4B-4D65-A500-D364E3D2A8A3}" = SIGMA Photo Pro 5
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{BF05DD52-4D84-474D-A7ED-F1DCAAE39E82}" = PMDG744XF_RR_CVF3
"{C04C1DFC-25BC-40CB-A2FB-CFA606D0165D}" = calibre
"{C0E7FAD8-F8AE-4819-AEBF-D92562315EEE}" = Mailsoft's - Switzerland Professional X
"{C40C3C3D-97CF-44B5-836C-766E374464B3}" = 3DMark Vantage
"{C53ED289-218E-4A1B-8760-E7A11B6EB682}" = Skat 9.0
"{C59E019B-0952-4B72-A382-68A72224F88F}" = GNS400W-500W Trainer
"{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
"{CA328CDF-A284-445E-AAE7-B24A11E97201}" = MechWarrior Online
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CB3B7C24-30A1-4961-8039-94919F5ED2EE}" = Noiseware Community Edition
"{CB858C75-8537-4B71-9080-2A4F7D51F128}" = Aerosoft's - Mega Airport Brussels X
"{CEBA70F1-D6C8-4F9C-A04E-D051BB358F60}" = FSX Planner
"{CED6EAB9-9FFD-44B2-939A-D77905AD35F3}" = PMDG_MD11_FSX
"{CF56984D-35C6-4ADB-9075-394978A427FB}" = Microsoft Flight Simulator X: Acceleration SDK
"{CFA5C901-7687-4259-9A64-072926E043FD}" = Mailsoft's - Kleinflugplätze Schweiz Teil 6 X
"{CFDD2CFF-C388-4BEC-85F0-1921C9F57F14}" = aerosoft's - Aerosoft Airport Pack
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D08A5DFE-F0C2-74FC-DD56-A3B371E9344D}" = EA Shared Game Component: Activation
"{D0D3DD91-88FE-4A37-80C5-A036D97E6A89}" = PMDG_BAe_JS4100_T3
"{D145DF3E-0DB1-4ABC-90E4-E89BA713B01B}" = Mailsoft's - Sion X
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{E0BF8C31-2745-4186-A08D-05401FC95AE3}" = Aerosoft's - Twin Otter X - Mission Pack
"{E4197D6B-F046-33E7-ABDE-51FF373FDC76}" = Windows SDK IntellisenseNFX
"{E4298CF5-9C36-4519-9089-FF7A43EA5C5D}" = aerosoft's - German Airports 1 - Stuttgart X
"{E5390E6D-3012-42EF-9F19-156B1B362372}_is1" = Aerosoft - Oslo Gardermoen X (ENGM)
"{E7F6DE96-C3E6-4B05-8EF2-71B7B447CB9C}" = Aerosoft's - Bush Hawk XP
"{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1" = War Thunder Launcher 1.0.1.192
"{EDCEE320-0FB3-4197-9F86-8C1CCF2278FB}" = PMDG 747-400/400F for FSX
"{EE11CFFC-898C-4875-8A63-8B732A9AD43B}" = Aerosoft's - Aerosoft Launcher
"{EF308386-425F-4EA8-949D-298770677F78}" = aerosoft's - Iceland X
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1A6C690-C12C-4E7A-B4BD-958678215418}" = 3DMark
"{F293A032-EB67-4ADC-8646-F1AA7F9E0143}" = Aerosoft's - Luxembourg Airports
"{F3CA05B7-B4C0-4C9B-AAA6-16B868B35DF2}" = TrackIR5
"{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X
"{F6096C02-08BB-42A2-8683-C24703D4B370}" = PMDG_BAe_JS4100_4Z
"{F6DD0D9E-C9C4-4CB9-91D4-39D665042151}" = German Landmarks FSX
"{FB50347E-1E79-4BE5-8DE8-DDFCBC74D35A}" = PMDG_BAe_JS4100_N401TJ
"{FB647DBE-2231-405D-AC36-C73246CBE305}" = PMDG BAe JS4100
"{FD881E1D-1A29-4E8D-B918-EFFD272EC17C}" = PMDG_BAe_JS4100_HKG
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"16fsxun" = 16 Airports X-Generation Bundle FSX v1.0
"18fsxun" = 18 Airports X-Generation Bundle FSX v1.0
"767CAPTAIN" = 767 Captain (767-300 Base Pack)
"A2A Accusim for the Wings of Silver B377" = A2A Accusim for the Wings of Silver B377
"A2A B17 Accusim" = A2A B17 Accusim
"A2A Captain of the Ship" = A2A Captain of the Ship
"A2A Piper J3 Cub" = A2A Piper J3 Cub
"A2A Piper J3 Cub Accusim" = A2A Piper J3 Cub Accusim
"A2A Wings of Silver B377 Stratocruiser" = A2A Wings of Silver B377 Stratocruiser
"Addictive Pitts" = Addictive Pitts
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AdobeLensProfileDownloader" = Adobe Lens Profile Downloader
"Aeroworx X-treme King Air B200 v.2.1 Update" = Aeroworx X-treme King Air B200 v.2.1 Update
"Afterburner" = MSI Afterburner 2.2.1
"Age of Conan_is1" = Age of Conan: Unchained
"AivlaSoft EFB" = AivlaSoft EFB
"AKESOFT FORONDA-X FSX 1.00" = AKESOFT FORONDA-X FSX 1.00
"AKESOFT VALENCIA-X FSX 1.00" = AKESOFT VALENCIA-X FSX 1.00
"Anchorage Photorealistic" = Anchorage Photorealistic
"ArmA 2" = ArmA 2 Uninstall
"AVMWLANCLI" = AVM FRITZ!WLAN
"Battlelog Web Plugins" = Battlelog Web Plugins
"BattlEye for A2" = BattlEye Uninstall
"Beech Duke 2009F1.dl.1.502 (V1.5)" = RealAir Beech Duke 2009
"C337H SKYMASTER HD SERIES FSX" = C337H SKYMASTER HD SERIES FSX
"Canon RAW Codec" = Canon RAW Codec
"Carenado - C185F Skywagon FSX" = Carenado - C185F Skywagon FSX
"Carenado A36 Bonanza FSX" = Carenado A36 Bonanza FSX
"Carenado Baron 58 FSX" = Carenado Baron 58 FSX
"Carenado C 152 II" = Carenado C 152 II
"Carenado C172N FSX" = Carenado C172N FSX
"Carenado C208B Grand Caravan" = Carenado C208B Grand Caravan
"Carenado C340 II FSX" = Carenado C340 II FSX
"Carenado Commander 114 FSX" = Carenado Commander 114 FSX
"Carenado CT210M Centurion II FSX" = Carenado CT210M Centurion II FSX
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Cheat Engine 6.2_is1" = Cheat Engine 6.2
"Color Efex Pro 3.0 Complete Stand-Alone" = Color Efex Pro 3.0 Complete
"ColorChecker Passport_is1" = ColorChecker Passport 1.0.2
"ColorMunki Smile_is1" = ColorMunki Smile
"com.ea.Activation.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Shared Game Component: Activation
"ConcordeX for FSX_is1" = ConcordeX for FSX v1.2
"CrossLoop_is1" = CrossLoop 2.81
"DDS Converter 2.1" = DDS Converter 2.1
"Dfine 2.0 Stand-Alone" = Dfine 2.0
"Digital Photo Professional" = Canon Utilities Digital Photo Professional
"DokanLibrary" = Dokan Library 0.6.0
"E751CAPTAIN_FSX" = '757 Captain' Soundset 1.4
"EA Installer.1522861523" = EA Installer
"Eiresim Shannon Ultimate FsXV1.0" = Eiresim Shannon Ultimate FsX
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EOS Utility" = Canon Utilities EOS Utility
"EPSON Scanner" = EPSON Scan
"ESN Sonar-0.70.4" = ESN Sonar
"Eye-One Match_is1" = Eye-One Match 3.6.2
"F1Connect" = Connect
"f1mustang_FSX" = Flight1 Citation Mustang
"FileZilla Client" = FileZilla Client 3.5.3
"FinalMediaPlayer_is1" = Final Media Player 2011
"Flickr Uploadr" = Flickr Uploadr 3.2.1
"FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Microsoft Flight Simulator X: Acceleration
"Fly the MADDOG 2008" = Fly the MADDOG 2008
"Fraps" = Fraps
"FS Panel Studio for FSX" = FS Panel Studio for FSX Build 22767
"FS2Crew Start Center" = FS2Crew Start Center
"FS2Crew: FeelThere Wilco A320 Edition " = FS2Crew: FeelThere Wilco A320 Edition
"FS2Crew: iFly737NG Button Control Edition" = FS2Crew: iFly737NG Button Control Edition
"FS2Crew: PMDG Jetstream Button Control Edition" = FS2Crew: PMDG Jetstream Button Control Edition
"FSBuild 2.3" = FSBuild 2.3
"FSBuild2.4_is1" = FSBuild v2.4 Update
"FSDreamTeam OHareX 2.0_is1" = FSDreamTeam OHareX 2.0
"FSDreamTeam ZurichX_is1" = FSDreamTeam ZurichX 2.0.3
"FSWidgets Electronic Flight Bag for FSX_is1" = FSWidgets - EFB for FSX
"FSX Missions - A321 Lufthansa" = FSX Missions - A321 Lufthansa
"Google Chrome" = Google Chrome
"Ground Environment X Europe" = Ground Environment X Europe
"Guild Wars 2" = Guild Wars 2
"HDR Efex Pro" = HDR Efex Pro
"i1_driver_installer_utility_i1Match_is1" = i1_driver_installer_utility_i1Match version 1.0
"i1Diagnostics_is1" = i1Diagnostics
"iFly Jets - The 737NG for FSX" = iFly Jets - The 737NG for FSX
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{6E58FAA6-751E-4EE6-A3DD-24431DCCB76A}" = SILKYPIX Developer Studio 4.0 for Tamron
"InstallShield_{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X
"Juneau 1.2 Photorealistic" = Juneau 1.2 Photorealistic
"JustFlight DC-3 Legends of Flight" = JustFlight DC-3 Legends of Flight
"Legacy 'The Luxury Aircraft Collection'" = Legacy 'The Luxury Aircraft Collection'
"LICB FSX beta" = LICB FSX beta
"MagniDriver" = marvell 91xx driver
"Mega Airport Barcelona X1.0" = Mega Airport Barcelona X
"MegaSceneryX_is1" = Hawaii Oahu
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"MILVIZ/NemethDesigns Sikorsky CH-54A & Erickson Air-Crane S-64E for Flight Simulator X" = MILVIZ/NemethDesigns Sikorsky CH-54A & Erickson Air-Crane S-64E for Flight Simulator X
"MyTraffic X Professional 5.4" = MyTraffic X Professional 5.4
"NavyField2 EU" = NavyField2
"Neat Image_is1" = Neat Image v6.0 Pro+
"Nemeth Designs MD 500 Defender for Microsoft Flight Simulator X" = Nemeth Designs MD 500 Defender for Microsoft Flight Simulator X
"Nemeth Designs MD Helicopters MD902 Explorer for FSX" = Nemeth Designs MD Helicopters MD902 Explorer for FSX
"Nik Collection" = Nik Collection
"NIS" = Norton Internet Security
"Noise Ninja (Standalone Version)_is1" = Noise Ninja 2 (Standalone Version)
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"Origin" = Origin
"Pano2VR" = Pano2VR - Garden Gnome Software
"Picture Style Editor" = Canon Utilities Picture Style Editor
"Pole to Pole FSX" = Pole to Pole FSX
"PortraitProfessionalStudio10_is1" = Portrait Professional Studio 10.9
"PunkBusterSvc" = PunkBuster Services
"Radar Contact v4.3_is1" = Radar Contact Version 4.3
"Revo Uninstaller" = Revo Uninstaller 1.94
"RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Flight Simulator X
"RXPGNS32_is1" = Reality XP Garmin GNS WAAS for FSX/9 Ver. 1.4
"Sacred Underworld_is1" = Sacred Underworld
"SERIES X GMX-SX Avionics Suite by SimFlyer" = SERIES X GMX-SX Avionics Suite by SimFlyer
"SERIES X GNS-SX Avionics Suite by SimFlyer" = SERIES X GNS-SX Avionics Suite by SimFlyer
"SeriesX GPX-SX Avionics Suite by SimFlyer" = SeriesX GPX-SX Avionics Suite by SimFlyer
"Sharpener Pro 3.0 Stand-Alone" = Sharpener Pro 3.0
"Silver Efex Pro for Stand-Alone" = Silver Efex Pro
"SimFlyer® GMX-SX (SR3) for Microsoft® FS9 / FSX" = SimFlyer® GMX-SX (SR3) for Microsoft® FS9 / FSX
"SimFlyer® GNS-SX (SR3) for Microsoft® FS9 / FSX" = SimFlyer® GNS-SX (SR3) for Microsoft® FS9 / FSX
"softOSD Client" = softOSD Client (Build 1445)
"SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Flight Simulator X Service Pack 1
"SpeedFan" = SpeedFan (remove only)
"StarConflictLauncher_is1" = Star Conflict Launcher 1.0.1.17
"Steam App 113420" = Fallen Earth
"Steam App 12750" = GRID
"Steam App 12840" = DiRT 2
"Steam App 201700" = DiRT Showdown
"Steam App 210990" = Pro Cycling Manager 2012
"Steam App 212070" = Star Conflict
"Steam App 212680" = FTL: Faster Than Light
"Steam App 217750" = Age of Conan: Unchained - EU version
"Steam App 218230" = PlanetSide 2
"Steam App 221360" = Wizardry Online
"Steam App 230410" = Warframe
"Steam App 231060" = Ragnarok Online 2
"Steam App 231350" = 3DMark Demo
"Steam App 24010" = Train Simulator 2013
"Steam App 43110" = Metro 2033
"Steam App 440" = Team Fortress 2
"Steam App 44320" = DiRT 3
"Steam App 4500" = S.T.A.L.K.E.R.: Shadow of Chernobyl
"Steam App 49520" = Borderlands 2
"Steam App 7650" = X-COM: Terror from the Deep
"Steam App 9900" = Star Trek Online
"TeamViewer 8" = TeamViewer 8
"The KMPlayer" = The KMPlayer (remove only)
"The SW / Vilnius International1.0" = The SW / Vilnius International
"Topaz Adjust 5" = Topaz Adjust 5
"Topaz Adjust 5 (64-bit)" = Topaz Adjust 5 (64-bit)
"Topaz B&W Effects" = Topaz B&W Effects
"Topaz B&W Effects (64-bit)" = Topaz B&W Effects (64-bit)
"Topaz Clean 3" = Topaz Clean 3
"Topaz Clean 3 (64-bit)" = Topaz Clean 3 (64-bit)
"Topaz DeJpeg 4" = Topaz DeJpeg 4
"Topaz DeJpeg 4 (64-bit)" = Topaz DeJpeg 4 (64-bit)
"Topaz DeNoise 5" = Topaz DeNoise 5
"Topaz DeNoise 5 (64-bit)" = Topaz DeNoise 5 (64-bit)
"Topaz Detail 2" = Topaz Detail 2
"Topaz Detail 2 (64-bit)" = Topaz Detail 2 (64-bit)
"Topaz Fusion Express 2" = Topaz Fusion Express 2
"Topaz Fusion Express 2 (64-bit)" = Topaz Fusion Express 2 (64-bit)
"Topaz InFocus" = Topaz InFocus
"Topaz InFocus (64-bit)" = Topaz InFocus (64-bit)
"Topaz Lens Effects" = Topaz Lens Effects
"Topaz Lens Effects (64-bit)" = Topaz Lens Effects (64-bit)
"Topaz ReMask 3" = Topaz ReMask 3
"Topaz ReMask 3 (64-bit)" = Topaz ReMask 3 (64-bit)
"Topaz Simplify 3" = Topaz Simplify 3
"Topaz Simplify 3 (64-bit)" = Topaz Simplify 3 (64-bit)
"Trusted Software Assistant_is1" = File Type Assistant
"tsimlipqxx" = Trieste FSX
"UK2000 Belfast Xtreme" = Remove UK2000 Belfast Xtreme files
"UK2000 Birmingham Xtreme FSX" = UK2000 Birmingham Xtreme FSX
"UK2000 Bristol Xtreme" = Remove UK2000 Bristol Xtreme files
"UK2000 Edinburgh Xtreme" = Remove UK2000 Edinburgh Xtreme files
"UK2000 Gatwick Xtreme FSX" = UK2000 Gatwick Xtreme FSX
"UK2000 Glasgow Xtreme" = Remove UK2000 Glasgow Xtreme files
"UK2000 Heathrow Xtreme" = UK2000 Heathrow Xtreme FSX
"UK2000 Liverpool Xtreme FSX" = UK2000 Liverpool Xtreme FSX
"UK2000 London City Xtreme FSX" = UK2000 London City Xtreme FSX
"UK2000 Stansted Xtreme FSX" = UK2000 Stansted Xtreme FSX
"UK2000 Sutton Bank" = UK2000 Sutton Bank
"UK2000 VFR Scenery Volume1" = UK2000 VFR Scenery Volume1 files
"UseNeXT by Tangysoft_is1" = UseNeXT by Tangysoft
"ViMaCore X" = VistaMare ViMaCore X
"VIRTUALI Addon ManagerX 2.8.0.10_is1" = VIRTUALI Addon ManagerX
"Viveza Stand-Alone" = Viveza
"VLC media player" = VLC media player 2.0.2
"WebTemp_is1" = WebTemp 3.38 (kostenlose Version)
"Wings of POWER II: B17" = Wings of POWER II: B17
"World of Warcraft" = World of Warcraft
"X752CAPTAIN_FSX" = '757-200 Captain' (Base Package) 1.4
"Xvid_is1" = Xvid MPEG-4 Video Codec
"ZMBV" = Zip Motion Block Video codec (Remove Only)
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" ACG's IWM Duxford AI Pack FSX" = ACG's IWM Duxford AI Pack FSX
" ACG's IWM Duxford FSX" = ACG's IWM Duxford FSX
"{4f004f4a-1930-4b55-83e6-61660211787f}" = MechWarrior Online
"097dbf5de184dfda" = FS Economy client for FSX
"171a3bd25b2ddd36" = vroute.info
"61b70e4b67ea6493" = CoPilot
"757 American Airlines (Astrojet livery) v1.01" = 757 American Airlines (Astrojet livery) v1.01
"757 American Airlines (One World livery) v1.03" = 757 American Airlines (One World livery) v1.03
"757 American Airlines v1.01" = 757 American Airlines v1.01
"Aerosoft Mega Airport Munich v 1.00 for FSX" = Aerosoft Mega Airport Munich v 1.00 for FSX
"Airbus Series Vol.1 Deluxe (FSX)" = Airbus Series Vol.1 Deluxe (FSX)
"Airbus Series Vol.2 (FS X)" = Airbus Series Vol.2 (FS X)
"Amazon Kindle" = Amazon Kindle
"C172N SKYHAWK II FLOAT FSX" = C172N SKYHAWK II FLOAT FSX
"Captain Sim UHDT Base pack v1.02" = Captain Sim UHDT Base pack v1.02
"Carenado C208B Super Cargomaster Expansion Pack HD" = Carenado C208B Super Cargomaster Expansion Pack HD
"Carenado Piper Cherokee FSX" = Carenado Piper Cherokee FSX
"Carenado's Beechcraft Mentor T34B FSX" = Carenado's Beechcraft Mentor T34B FSX
"Carenado's C SKYLANE II RG R182" = Carenado's C SKYLANE II RG R182
"Carenado's SKYLANE C182Q FSX" = Carenado's SKYLANE C182Q FSX
"Douglas DC2 for Flightsimulator X" = Douglas DC2 for Flightsimulator X
"Dropbox" = Dropbox
"Eaglesoft Development Group Columbia 400X 1.5" = Eaglesoft Development Group Columbia 400X 1.5
"Eaglesoft Development Group Piper Twin Comanche X" = Eaglesoft Development Group Piper Twin Comanche X
"E-Jets Series (FSX)" = E-Jets Series (FSX)
"ERJ145LR American Eagle (v1.02)" = ERJ145LR American Eagle (v1.02)
"ESC Sceneries - Milan X" = ESC Sceneries - Milan X
"FeelThere E-Jets v.2" = FeelThere E-Jets v.2
"FeelThere ERJ v.2 SP1" = FeelThere ERJ v.2 SP1
"Fokker 70-100 FSX" = Fokker 70-100 FSX
"FSCaptain" = FSCaptain
"FsxAdventures Aer Lingus Missions v1.00" = FsxAdventures Aer Lingus Missions v1.00
"FsxAdventures EasyJet Missions Vol 1. v1.0" = FsxAdventures EasyJet Missions Vol 1. v1.0
"FsxAdventures KLM Missions v1.00" = FsxAdventures KLM Missions v1.00
"FTX AU GOLD Version 1.0" = FTX AU GOLD Version 1.0
"GamersFirst LIVE!" = GamersFirst LIVE!
"Level-D 767-300 for FSX" = Level-D 767-300 for FSX
"Livery pack Douglas DC2 for FSX" = Livery pack Douglas DC2 for FSX
"Lotus Simulations L-39 Albatros" = Lotus Simulations L-39 Albatros
"MiG-17 for FSX" = MiG-17 for FSX
"PA28RT ARROW IV FSX" = PA28RT ARROW IV FSX
"PT Tu-154B-2 FSX" = PT Tu-154B-2 FSX
"SOE-EverQuest" = EverQuest
"SOE-PlanetSide 2 Beta" = PlanetSide 2 Beta
"SuperTrafficBoard V2.3" = SuperTrafficBoard V2.3
"the Douglas DC2 for FS9 and FSX" = the Douglas DC2 for FS9 and FSX
"the Douglas DC2 Servicepack for FSX" = the Douglas DC2 Servicepack for FSX
"Ultimate Airliners - Super 80 FSX" = Ultimate Airliners - Super 80 FSX
"Ultimate Airliners - Super 80 Professional" = Ultimate Airliners - Super 80 Professional
"Ultimate Terrain X - Europe" = Ultimate Terrain X - Europe
"UnityWebPlayer" = Unity Web Player
"VFR Short Fields X - Vol.3 Quebec" = VFR Short Fields X - Vol.3 Quebec
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 17.06.2013 02:49:21 | Computer Name = Keller | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WorldOfTanks.exe, Version: 0.8.5.0,
Zeitstempel: 0x5170f15d Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.6161,
Zeitstempel: 0x4dace5b9 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000561e9 ID des fehlerhaften
Prozesses: 0x1b44 Startzeit der fehlerhaften Anwendung: 0x01ce6b221e71c2a7 Pfad der
fehlerhaften Anwendung: E:\World_of_Tanks\WorldOfTanks.exe Pfad des fehlerhaften
Moduls: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCR90.dll
Berichtskennung:
09537bfb-d71a-11e2-b251-002683161dc8
Error - 17.06.2013 07:05:09 | Computer Name = Keller | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: vlc.exe, Version: 2.0.2.0, Zeitstempel:
0x4feb87c5 Name des fehlerhaften Moduls: vlc.exe, Version: 2.0.2.0, Zeitstempel:
0x4feb87c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000016d5 ID des fehlerhaften Prozesses:
0x1cc8 Startzeit der fehlerhaften Anwendung: 0x01ce6b49a0175029 Pfad der fehlerhaften
Anwendung: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe Pfad des fehlerhaften Moduls:
C:\Program Files (x86)\VideoLAN\VLC\vlc.exe Berichtskennung: c5881386-d73d-11e2-b251-002683161dc8
Error - 17.06.2013 12:44:11 | Computer Name = Keller | Source = WinMgmt | ID = 10
Description =
Error - 17.06.2013 12:46:12 | Computer Name = Keller | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
WMI herstellen, um Antiviren, AntiSpyware- und Firewallprogramme von Drittanbietern
zu überwachen.
Error - 17.06.2013 16:43:01 | Computer Name = Keller | Source = WinMgmt | ID = 10
Description =
Error - 17.06.2013 16:44:30 | Computer Name = Keller | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
WMI herstellen, um Antiviren, AntiSpyware- und Firewallprogramme von Drittanbietern
zu überwachen.
Error - 17.06.2013 17:58:28 | Computer Name = Keller | Source = WinMgmt | ID = 10
Description =
Error - 17.06.2013 18:00:06 | Computer Name = Keller | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
WMI herstellen, um Antiviren, AntiSpyware- und Firewallprogramme von Drittanbietern
zu überwachen.
Error - 17.06.2013 19:22:52 | Computer Name = Keller | Source = WinMgmt | ID = 10
Description =
Error - 17.06.2013 19:24:43 | Computer Name = Keller | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
WMI herstellen, um Antiviren, AntiSpyware- und Firewallprogramme von Drittanbietern
zu überwachen.
[ OSession Events ]
Error - 02.08.2011 00:30:28 | Computer Name = Keller | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 1
seconds with 0 seconds of active time. This session ended with a crash.
Error - 24.08.2012 05:35:00 | Computer Name = Keller | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 44
seconds with 0 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 17.06.2013 17:58:43 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 17:58:50 | Computer Name = Keller | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem
Fehler beendet: %%-2147467262.
Error - 17.06.2013 18:00:05 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 18:03:03 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 18:03:05 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 19:22:08 | Computer Name = Keller | Source = Service Control Manager | ID = 7000
Description = Der Dienst "PDIHWCTL" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error - 17.06.2013 19:22:34 | Computer Name = Keller | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
acedrv05 TPkd
Error - 17.06.2013 19:22:48 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
Error - 17.06.2013 19:24:19 | Computer Name = Keller | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem
Fehler beendet: %%-2147467262.
Error - 17.06.2013 19:24:42 | Computer Name = Keller | Source = WMPNetworkSvc | ID = 866292
Description =
< End of report >
|
|
18.06.2013, 07:58
| #6 |
| | PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber auf Gmer Anhang, zu viele Zeichen |
|
18.06.2013, 08:39
| #7 |
| | PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber auf Das beschriebene Problem hatte ich nun seit 6 Tagen. Es tritt heute nicht mehr auf. 15min gewartet und alles funktioniert noch...*beliebigen Fluch einsetzen* Geändert von Nowater (18.06.2013 um 09:07 Uhr) |
|
18.06.2013, 10:54
| #8 | |
| /// TB-Ausbilder | PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber auf Ich befürchte leider, dass Zitat:
Wir suchen nicht gezielt nach solchen Hinweisen, aber wenn wir sie sehen, dann können wir nicht mehr beide Augen zudrücken. Deshalb:  Cracks und KeygensDie Logfiles deuten stark darauf hin, dass du nicht legal erworbene Software einsetzt. Nebst ihrer Illegalität sind Cracks und Patches aus dubioser Quelle auch sehr oft mit Schädlingen versehen, womit man sich also fast schon vorsätzlich infiziert. Wir haben uns hier auf dem Board darauf geeinigt, dass wir an dieser Stelle nicht weiter bereinigen, da wir ein solches Vorgehen nicht unterstützen. Wir haben dich in unserer Anleitung unter Punkt 8 der Foren-Regeln auch unmissverständlich darauf hingewiesen, wie wir damit umgehen werden. Diese Software hat ihren Preis und die Softwarefirmen leben von diesen Einnahmen. Als Alternative gibt es überall jede Menge sehr gute Freeware oder abgespeckte, günstig zu erwerbende Versionen. Unsere Empfehlung hier lautet, einen sauberen Neuanfang zu vollziehen, und unsere Hilfe beschränkt sich daher auf das Neuaufsetzen und Absichern deines Systems. Fragen dazu beantworten wir dir aber weiterhin gerne und zwar in unserem Unterforum Alles rund um Windows.
__________________ cheers, Leo |
|
| Themen zu PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber auf |
| anzeige, anzeigetreiber, drehen, geschieht, hängt, kurzem, leerlauf, lüfter, maus, minute, minuten, nichts, nutze, problem, sitze, sobald, unterbrochen, windows |
Linear-Darstellung
