Avira meldet EXP/CVE-2011-3402.G

PhoenixStyle

Hallo liebe Leute.
Avia hat das Obige gestern einfach gemeldet.
Da ich gesehen hab, das diese Datei sich in der Cache von Firefox befinden soll, hab dich die natürlich sofort geleert und mein System um einen Tag zurückgesetzt.
Habe dann Virenscans mit Avira und Malwarebytes gemacht, gefunden wurde nichts mehr, dennoch, bin immer misstrauisch bei sowas.
Nunja, hier die Logfiles:
AviraMalwarebytes:
Neueste:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.07.01.08

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16618
Amarylis :: AMARYLIS-PC [Administrator]

01.07.2013 22:46:22
MBAM-log-2013-07-02 (05-48-22).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 406213
Laufzeit: 1 Stunde(n), 49 Minute(n), 26 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0

(Ende)

Älterer:
Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.01.11.08

Windows 7 x86 NTFS
Internet Explorer 9.0.8112.16421
Amarylis :: AMARYLIS-PC [Administrator]

11.01.2013 13:43:15
mbam-log-2013-01-11 (13-43-15).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 373255
Laufzeit: 51 Minute(n), 31 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Hier noch OTL
OTL logfile created on: 01.07.2013 22:46:54 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Amarylis\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,25 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 52,70% Memory free
6,49 Gb Paging File | 4,60 Gb Available in Paging File | 70,82% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 931,41 Gb Total Space | 477,53 Gb Free Space | 51,27% Space Free | Partition Type: NTFS

Computer Name: AMARYLIS-PC | User Name: Amarylis | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Amarylis\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Adobe Systems, Inc.)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avscan.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avcenter.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - C:\Users\Amarylis\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Programme\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Programme\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation)
PRC - C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)


========== Modules (No Company Name) ==========

MOD - C:\Windows\System32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\ba39e27ea796912fce296963622dfbae\WindowsFormsIntegration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\766ccafdc4a09b964aa9286a15bca48a\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\cc347b5b70f4434141acf25f0f295c1e\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\5ea93652e4752c75bc6fbb195b4eb864\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\866894ebe5258bf9f45d6b063229e990\System.Xaml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a9594959e951127f16eb49644ba92f79\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\153143f74d840484b510d8cf5187796b\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\7cfbbd029ef945fbcdaedd24b2b67a24\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\dfeff31ab1e7cd3480c8942290c92f5d\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b573c6a62bb88df0ee2af59b6a8ca910\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\af18b8a8f56494da44cc448f3b9704a5\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\43cd41484df96d15df949eb17dd88152\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\233661f3a2b632e9553915c8639637d0\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\2f9e0112e10f9e70d3430d0be9863976\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\15872842e3e63ddf0f720f406706198e\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3f95a6d480ed1ebe45cf27b770ba94ed\mscorlib.ni.dll ()
MOD - C:\Programme\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll ()
MOD - C:\Programme\Avira\AntiVir Desktop\sqlite3.dll ()
MOD - C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Programme\Common Files\Apple\Apple Application Support\libxml2.dll ()


========== Services (SafeList) ==========

SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) -- C:\Programme\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (AMD FUEL Service) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
SRV - (xsherlock) -- C:\Windows\System32\xsherlock.xem (Wellbia.com Co., Ltd.)
SRV - (npggsvc) -- C:\Windows\System32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (wlidsvc) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (xhunter1) -- C:\Windows\xhunter1.sys File not found
DRV - (XDva399) -- C:\Windows\system32\XDva399.sys File not found
DRV - (XDva397) -- C:\Windows\system32\XDva397.sys File not found
DRV - (vtany) -- C:\Windows\vtany.sys File not found
DRV - (MSICDSetup) -- D:\CDriver.sys File not found
DRV - (EagleXNt) -- C:\Windows\system32\drivers\EagleXNt.sys File not found
DRV - (catchme) -- C:\Users\Amarylis\AppData\Local\Temp\catchme.sys File not found
DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (apf003) -- C:\Windows\System32\apf003.sys ()
DRV - (amdkmdag) -- C:\Windows\System32\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV - (amdkmdap) -- C:\Windows\System32\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV - (AtiHDAudioService) -- C:\Windows\System32\drivers\AtihdW73.sys (Advanced Micro Devices)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (AODDriver4.2) -- C:\Programme\ATI Technologies\ATI.ACE\Fuel\i386\aoddriver2.sys (Advanced Micro Devices)
DRV - (L1C) -- C:\Windows\System32\drivers\L1C62x86.sys (Atheros Communications, Inc.)
DRV - (RTCore32) -- C:\Programme\MSI Afterburner\RTCore32.sys ()
DRV - (AtiPcie) -- C:\Windows\System32\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV - (amdiox86) -- C:\Windows\System32\drivers\amdiox86.sys (Advanced Micro Devices)
DRV - (MTsensor) -- C:\Windows\System32\drivers\ASACPI.sys ()
DRV - (PAC207) -- C:\Windows\System32\drivers\PFC027.SYS (PixArt Imaging Inc.)
DRV - (NPPTNT2) -- C:\Windows\System32\npptNT2.sys (INCA Internet Co., Ltd.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.nexon.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C2 6B 4E D2 D1 86 CD 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..extensions.enabledAddons: %7Be9876d64-8bac-4287-bdc4-0f0c56804b4f%7D:2.0
FF - prefs.js..extensions.enabledAddons: %7B2c93446d-612b-416d-9af0-b7355797b611%7D:4.7
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@kr.gameclub.com/WebStarter: C:\Users\Amarylis\AppData\Roaming\GameClub_en\NPMicroGamesCOM.dll (Microgames, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.com/NexonPlugWebExtension: C:\ProgramData\Nexon\NexonPlug\npPlugWire_1.0.0.0.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@nexon.com/NxGame: C:\ProgramData\Nexon\NGM\npNxGame.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\@kr.gameclub.com/WebStarter: C:\Users\Amarylis\AppData\Roaming\GameClub_en\NPMicroGamesCOM.dll (Microgames, Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2012.08.30 19:14:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Amarylis\AppData\Roaming\mozilla\Extensions
[2013.06.10 09:08:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Amarylis\AppData\Roaming\mozilla\Firefox\Profiles\a8i0ya25.default\extensions
[2013.03.14 21:33:13 | 000,676,098 | ---- | M] () (No name found) -- C:\Users\Amarylis\AppData\Roaming\mozilla\firefox\profiles\a8i0ya25.default\extensions\jid0-0PGffAcVvhUBieFYkRVVc5w6lIU@jetpack.xpi
[2013.06.10 09:08:18 | 000,018,689 | ---- | M] () (No name found) -- C:\Users\Amarylis\AppData\Roaming\mozilla\firefox\profiles\a8i0ya25.default\extensions\{2c93446d-612b-416d-9af0-b7355797b611}.xpi
[2013.05.23 14:55:04 | 000,269,448 | ---- | M] () (No name found) -- C:\Users\Amarylis\AppData\Roaming\mozilla\firefox\profiles\a8i0ya25.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2013.06.10 09:08:18 | 000,016,121 | ---- | M] () (No name found) -- C:\Users\Amarylis\AppData\Roaming\mozilla\firefox\profiles\a8i0ya25.default\extensions\{e9876d64-8bac-4287-bdc4-0f0c56804b4f}.xpi
[2013.06.25 20:45:04 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
[2013.06.25 20:45:08 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

O1 HOSTS File: ([2013.01.11 17:47:26 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Programme\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Monitor] C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Amarylis\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware ] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {99CAAA27-FA0C-4FA4-B88A-4AB1CC7A17FE} hxxp://www.netgame.com/mplugin/mglaunch_USAv1005.cab (MGLaunch_v1004 Class)
O16 - DPF: {B1437251-01BF-47ff-8254-A4CD22E0E2BF} (GameClub Web Starter)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{55D37D3D-692D-4D1F-B6D0-6BA817F9AC99}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Programme\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Programme\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013.07.01 22:44:31 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2013.07.01 22:44:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.07.01 22:44:19 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.07.01 22:44:19 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.07.01 22:43:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Amarylis\Desktop\OTL.exe
[2013.06.25 20:45:04 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.06.15 18:12:05 | 000,000,000 | ---D | C] -- C:\Users\Amarylis\AppData\Roaming\AnvSoft
[2013.06.13 22:44:10 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.06.13 22:44:09 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.06.13 22:41:34 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.06.13 22:41:34 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013.06.13 22:41:34 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.06.13 22:41:33 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.06.13 22:41:33 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013.06.13 22:41:33 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013.06.13 22:41:33 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013.06.13 22:41:33 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013.06.13 10:51:28 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013.06.13 10:51:22 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
[2013.06.13 10:51:18 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
[2013.06.13 10:51:17 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
[2013.06.13 10:51:09 | 003,968,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013.06.13 10:51:09 | 003,913,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013.06.08 22:06:16 | 000,000,000 | ---D | C] -- C:\Windows\PixArt
[2013.06.04 18:30:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remember Me
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.07.01 22:47:21 | 000,014,208 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.07.01 22:47:21 | 000,014,208 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.07.01 22:45:17 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2013.07.01 22:44:20 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.07.01 22:43:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Amarylis\Desktop\OTL.exe
[2013.07.01 22:39:55 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.07.01 22:39:49 | 2615,762,944 | -HS- | M] () -- C:\hiberfil.sys
[2013.07.01 21:22:34 | 1129,987,928 | ---- | M] () -- C:\Users\Amarylis\Desktop\part 2.wmv
[2013.07.01 16:27:10 | 000,001,050 | ---- | M] () -- C:\Users\Amarylis\Desktop\Maurice sein Bullshit da er es immer vergiss, weil er zu bekifft ist..rtf
[2013.07.01 16:27:07 | 000,001,523 | ---- | M] () -- C:\Users\Amarylis\Desktop\Handout.rtf
[2013.06.30 22:29:01 | 002,292,150 | ---- | M] () -- C:\Users\Amarylis\Desktop\Unbenannt.png
[2013.06.30 11:31:23 | 000,001,770 | ---- | M] () -- C:\Users\Amarylis\Desktop\Hypothyreose.rtf
[2013.06.30 02:22:05 | 000,696,620 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.06.30 02:22:05 | 000,651,938 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.06.30 02:22:05 | 000,147,916 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.06.30 02:22:05 | 000,120,870 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.06.29 09:14:14 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.06.29 09:14:14 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.06.27 11:29:16 | 000,067,168 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avnetflt.sys
[2013.06.25 13:14:17 | 000,001,649 | ---- | M] () -- C:\Users\Public\Desktop\Deadpool.lnk
[2013.06.22 22:10:52 | 000,003,398 | ---- | M] () -- C:\Users\Amarylis\Desktop\Biologybullshit.rtf
[2013.06.08 13:40:02 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.06.08 13:13:19 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.06.04 18:30:51 | 000,000,950 | ---- | M] () -- C:\Users\Public\Desktop\Remember Me.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.07.01 22:44:20 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.07.01 21:01:21 | 1129,987,928 | ---- | C] () -- C:\Users\Amarylis\Desktop\part 2.wmv
[2013.07.01 15:41:25 | 000,001,050 | ---- | C] () -- C:\Users\Amarylis\Desktop\Maurice sein Bullshit da er es immer vergiss, weil er zu bekifft ist..rtf
[2013.06.30 22:29:00 | 002,292,150 | ---- | C] () -- C:\Users\Amarylis\Desktop\Unbenannt.png
[2013.06.30 11:16:44 | 000,001,523 | ---- | C] () -- C:\Users\Amarylis\Desktop\Handout.rtf
[2013.06.27 14:25:57 | 000,001,770 | ---- | C] () -- C:\Users\Amarylis\Desktop\Hypothyreose.rtf
[2013.06.25 13:14:17 | 000,001,649 | ---- | C] () -- C:\Users\Public\Desktop\Deadpool.lnk
[2013.06.15 21:56:06 | 000,003,398 | ---- | C] () -- C:\Users\Amarylis\Desktop\Biologybullshit.rtf
[2013.06.04 18:30:51 | 000,000,950 | ---- | C] () -- C:\Users\Public\Desktop\Remember Me.lnk
[2013.03.13 21:49:26 | 000,016,304 | ---- | C] () -- C:\Windows\System32\apl003.sys
[2013.03.13 21:49:26 | 000,013,232 | ---- | C] () -- C:\Windows\System32\apf003.sys
[2013.03.09 22:19:08 | 000,000,600 | ---- | C] () -- C:\Users\Amarylis\AppData\Local\PUTTY.RND
[2013.03.09 19:53:59 | 000,000,000 | ---- | C] () -- C:\Windows\System32\Access.dat
[2013.01.18 15:31:08 | 000,665,329 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2013.01.18 15:31:08 | 000,230,452 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik.dat
[2013.01.18 15:31:08 | 000,230,064 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik_nd.dat
[2013.01.18 15:31:07 | 000,073,984 | ---- | C] () -- C:\Windows\System32\ativce02.dat
[2013.01.11 17:41:25 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013.01.11 17:41:25 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013.01.11 17:41:25 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013.01.11 17:41:25 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013.01.11 17:41:25 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013.01.01 23:20:18 | 000,180,224 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.12.10 18:41:55 | 000,004,608 | ---- | C] () -- C:\Users\Amarylis\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.11.27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\System32\kdbsdk32.dll
[2012.09.28 17:45:16 | 000,246,272 | ---- | C] () -- C:\Windows\System32\rtvcvfw64.dll
[2012.09.28 17:45:06 | 000,247,296 | ---- | C] () -- C:\Windows\System32\rtvcvfw32.dll
[2012.09.10 22:37:22 | 000,338,432 | ---- | C] () -- C:\Windows\System32\sqlite36_engine.dll
[2012.08.31 00:56:52 | 000,000,012 | ---- | C] () -- C:\Windows\System32\ssnac.dat
[2012.08.30 19:06:27 | 000,200,468 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2012.08.30 18:59:00 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2012.08.30 18:58:55 | 000,036,794 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2012.08.30 18:56:04 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.08.30 18:52:48 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2012.08.30 18:52:48 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2012.08.30 18:52:47 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2011.09.28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011.09.19 09:07:46 | 000,015,360 | ---- | C] () -- C:\Windows\System32\bdmjpeg.dll
[2011.09.19 09:07:32 | 000,058,368 | ---- | C] () -- C:\Windows\System32\bdmpegv.dll

========== ZeroAccess Check ==========

[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 05:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >

OTL Extras logfile created on: 01.07.2013 22:46:54 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Amarylis\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,25 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 52,70% Memory free
6,49 Gb Paging File | 4,60 Gb Available in Paging File | 70,82% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 931,41 Gb Total Space | 477,53 Gb Free Space | 51,27% Space Free | Partition Type: NTFS

Computer Name: AMARYLIS-PC | User Name: Amarylis | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{22357CD7-AF69-49E8-B8D9-77A8C1DAD486}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{A1A2E60E-F57A-461E-8A4E-70536B95B231}" = lport=2869 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{253944AD-EE6E-4832-8335-67875B16D52A}" = protocol=17 | dir=in | app=c:\program files\electronic arts\burnout(tm) paradise the ultimate box\burnoutlauncher.exe |
"{26C5A0EC-A53A-40BD-A038-967061AD9745}" = protocol=6 | dir=in | app=c:\nexon\vindictus eu\en-eu\nmservice.exe |
"{2AAC3BA3-B882-4774-9AD7-D51BB2E202CA}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{2EF1FFD8-7DF9-46AE-AC51-A28402AE95B1}" = protocol=6 | dir=in | app=c:\program files\electronic arts\burnout(tm) paradise the ultimate box\burnoutparadise.exe |
"{37242B13-93A9-4BA8-BCC0-C254783DEBF7}" = protocol=17 | dir=in | app=c:\program files\electronic arts\burnout(tm) paradise the ultimate box\burnoutconfigtool.exe |
"{3A70A001-CCA5-4D27-A926-A5C8F001A446}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{3E3624A3-45A0-4942-9013-1275F7C278E8}" = protocol=17 | dir=in | app=c:\program files\lost planet 2\lp2dx9.exe |
"{44F809FB-9AE1-4CB8-8C94-57348C508867}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{47DF40D1-132E-4229-95E5-879D2DEFFAE7}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{4E344483-5281-46E8-B2D8-278FFBD077CB}" = protocol=17 | dir=in | app=c:\nexon\vindictus eu\en-eu\nmservice.exe |
"{53ACAD56-ABED-439D-BAE5-F7F4813549B8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{5A4914A3-E2A2-4D31-B637-6B416921962E}" = protocol=17 | dir=in | app=c:\programdata\nexon\ngm\ngm.exe |
"{5AC44BC6-D858-4B31-AADC-E08371B1D3CA}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"{5C82F409-93A3-466E-A675-0B26D0D8B023}" = protocol=6 | dir=in | app=c:\program files\lost planet 2\lp2dx11.exe |
"{6032CD80-4280-4757-8F71-C1A9C91187DC}" = protocol=17 | dir=in | app=c:\program files\electronic arts\burnout(tm) paradise the ultimate box\burnoutparadise.exe |
"{63DB2B65-AFFB-4C51-A7D9-83309C886159}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{7C962115-EC54-4B17-A325-B6EE985E0CDF}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{81676D82-59E6-4766-B166-8AB1182EF332}" = protocol=6 | dir=in | app=c:\programdata\nexon\common\nmservice.exe |
"{8389E64A-D2B3-4F0F-A204-01A780782B37}" = protocol=6 | dir=in | app=c:\program files\lost planet 2\lp2dx9.exe |
"{AF2073D5-7626-4391-8430-C760D59E4F06}" = protocol=6 | dir=in | app=c:\program files\electronic arts\burnout(tm) paradise the ultimate box\burnoutconfigtool.exe |
"{AF3389A6-DFCE-4403-BF66-523B4B42D30B}" = dir=in | app=%systemdrive%\games\dust an elysian tail\dustaet.exe |
"{B365E2D9-5D22-4E85-A975-BC9E375507C7}" = protocol=17 | dir=in | app=c:\programdata\nexon\common\nmservice.exe |
"{B96D352A-B50A-4626-8DCB-833C0E3CBE4E}" = dir=in | app=%systemdrive%\games\deadpool\binaries\dp.exe |
"{BB742C6A-4569-4E38-89A7-FDA976F7D2BD}" = protocol=17 | dir=in | app=c:\program files\lost planet 2\lp2dx11.exe |
"{C888B52A-5313-4530-AA77-023DDFFD3AD4}" = protocol=6 | dir=in | app=c:\program files\gameforge4d\elsword_de\data\x2.exe |
"{DB111C21-3D1C-4C9B-B677-2AC73D5EAE2A}" = protocol=17 | dir=in | app=c:\program files\gameforge4d\elsword_de\data\x2.exe |
"{DF1B1F63-F8A9-4B2B-ADD1-40C0A391EB0D}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{EFA7EC0E-7872-4FC6-B814-C620C9395D9F}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{F2432EC9-206F-484D-AC8C-E702EC3947BF}" = protocol=6 | dir=in | app=c:\program files\electronic arts\burnout(tm) paradise the ultimate box\burnoutlauncher.exe |
"{F77D04ED-2A6B-48A6-BE81-4274B4038935}" = protocol=6 | dir=in | app=c:\programdata\nexon\ngm\ngm.exe |
"TCP Query User{0D8F14E2-F916-491B-BC1A-E4DE2851AA9B}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"TCP Query User{36F0C279-4C80-4DA0-998F-51CCFED4C6F2}C:\games\tera\tera-launcher.exe" = protocol=6 | dir=in | app=c:\games\tera\tera-launcher.exe |
"TCP Query User{5A543077-C4B6-4419-ABE6-4D1455EA5B58}C:\users\amarylis\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\amarylis\appdata\local\akamai\netsession_win.exe |
"TCP Query User{7C0633D8-44A5-449A-89DB-B5B6C9DB1376}C:\games\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe" = protocol=6 | dir=in | app=c:\games\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe |
"TCP Query User{9A738A6A-7433-4C2D-B0E4-1E0D1A9CBE9D}C:\games\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=c:\games\guild wars 2\gw2.exe |
"TCP Query User{B44DBF8C-ED19-4840-B3DE-6012919455EA}C:\program files\assassins creed iii\ac3sp.exe" = protocol=6 | dir=in | app=c:\program files\assassins creed iii\ac3sp.exe |
"TCP Query User{C8014424-CAF4-4B16-8B91-53AEB69B4A3F}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"TCP Query User{D63AA31E-6E1E-4DA6-BFB3-E6376B4ED7E6}C:\users\amarylis\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\amarylis\appdata\local\akamai\netsession_win.exe |
"TCP Query User{F49E53AD-1BBF-4BEB-9A93-B77D8C54CA42}C:\program files\black_box\alice madness returns\alice2\binaries\win32\alicemadnessreturns.exe" = protocol=6 | dir=in | app=c:\program files\black_box\alice madness returns\alice2\binaries\win32\alicemadnessreturns.exe |
"TCP Query User{FC45E452-E91F-410F-A118-0C79DF3CD033}C:\program files\kingdoms of amalur reckoning\reckoning.exe" = protocol=6 | dir=in | app=c:\program files\kingdoms of amalur reckoning\reckoning.exe |
"TCP Query User{FF604CE2-BF3C-4566-9D09-5C7B6DE96EA8}C:\program files\dishonored\binaries\win32\dishonored.exe" = protocol=6 | dir=in | app=c:\program files\dishonored\binaries\win32\dishonored.exe |
"UDP Query User{0E27F503-1878-4042-93E2-7A56515D4EFF}C:\program files\black_box\alice madness returns\alice2\binaries\win32\alicemadnessreturns.exe" = protocol=17 | dir=in | app=c:\program files\black_box\alice madness returns\alice2\binaries\win32\alicemadnessreturns.exe |
"UDP Query User{37C4A82E-3CBF-48D9-9A22-1ACBCF59584B}C:\games\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe" = protocol=17 | dir=in | app=c:\games\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe |
"UDP Query User{4383FBE5-84D4-432A-8C2F-DA86338DAF8C}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{5FC719AA-6E5D-4B94-BA6E-77C5C40D01D5}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{63ABD2E3-8DD2-47FD-8CDD-C15D7DBC8857}C:\games\borderlands.2-kaos\binaries\win32\borderlands2.exe" = protocol=17 | dir=in | app=c:\games\borderlands.2-kaos\binaries\win32\borderlands2.exe |
"UDP Query User{7B2829D6-F3CC-422B-8760-D782A994F9FA}C:\program files\dishonored\binaries\win32\dishonored.exe" = protocol=17 | dir=in | app=c:\program files\dishonored\binaries\win32\dishonored.exe |
"UDP Query User{7D4197F5-4AEC-40B6-BF7D-FD9DF7B72D85}C:\program files\assassins creed iii\ac3sp.exe" = protocol=17 | dir=in | app=c:\program files\assassins creed iii\ac3sp.exe |
"UDP Query User{817D48ED-15F5-4C95-9B12-BDFD8089D541}C:\program files\kingdoms of amalur reckoning\reckoning.exe" = protocol=17 | dir=in | app=c:\program files\kingdoms of amalur reckoning\reckoning.exe |
"UDP Query User{9B3C0B9D-AAB1-4ADD-8636-F3047042EB22}C:\games\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=c:\games\guild wars 2\gw2.exe |
"UDP Query User{C61B641D-85EA-4D98-8AD3-A0DC17A4BDA1}C:\users\amarylis\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\amarylis\appdata\local\akamai\netsession_win.exe |
"UDP Query User{E0E1BDD8-8B01-4EBA-BF8F-DAF00744F9AB}C:\users\amarylis\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\amarylis\appdata\local\akamai\netsession_win.exe |
"UDP Query User{EA4CA9F2-61CC-4B78-AC37-76C51D5F4A4D}C:\games\tera\tera-launcher.exe" = protocol=17 | dir=in | app=c:\games\tera\tera-launcher.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0022473A-566D-C1EE-AB93-803213B49AEB}" = CCC Help Chinese Traditional
"{0215A1A0-D807-48AE-836D-98095B114525}" = Catalyst Control Center Localization All
"{02499AE2-4D59-8F33-6124-F9813BE19E39}" = CCC Help Finnish
"{027336B2-478C-7F14-DB5E-A7FCDF05DA90}" = CCC Help Russian
"{051F523A-3564-534C-6DDF-2BA723BBD7C7}" = CCC Help Korean
"{07DFFE8F-2E2C-91D2-C075-06768ECB87ED}" = AMD Drag and Drop Transcoding
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0A415628-AF51-7176-FDD3-CDBB52769E7D}" = CCC Help Polish
"{0BAC2C5A-CF42-14C1-F635-076CC988DA03}" = CCC Help German
"{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support
"{153E1BC2-BEBE-53F2-9BB3-586B986AFE35}" = CCC Help Czech
"{154F9A77-7E4A-F25B-80B6-E7642B6EC1C1}" = CCC Help Swedish
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FFA1B8C-F9E0-53E6-B95D-1555C1F5FF8B}" = Catalyst Control Center InstallProxy
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{21A6EAD5-5F1F-EF43-D2D6-63C3C3B181B9}" = CCC Help Spanish
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{289AC7E0-0AEE-4a7b-913C-709D9803D23E}" = Nexon Game Manager
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{314369AB-A2A0-A005-0FC2-669FB6CE6766}" = AMD Fuel
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E71C1C2-081A-AA76-A56A-F7E7515C5B27}" = CCC Help Thai
"{415ADF7E-6DB8-4481-86C0-1CEC0163CC7B}" = Nexon Game Manager
"{46CDDE4F-31B2-47D1-8245-932679506882}_is1" = Lost Planet 2
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CBA0D52-6393-A13C-A40E-4A8933FEC891}" = CCC Help Dutch
"{4D53090A-CE35-42BD-B377-831000018301}" = Fable III
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{4F198874-3C7D-5983-02EB-9E234C43F174}" = AMD Steady Video Plug-In
"{53783948-63E0-AF2F-CBD1-3B738BD6039C}" = CCC Help English
"{541D9C75-2484-F3E0-D846-4FF89336DF50}" = AMD Catalyst Install Manager
"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync
"{64A6F6D9-1096-89F1-1674-41D49DC830BA}" = CCC Help Hungarian
"{6AD9F5F3-5BD0-4000-BD9C-B536CF86D988}" = iTunes
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7C572102-08F2-76CF-B8B4-AF1FAAEAE218}" = CCC Help Greek
"{7D94193E-C68D-4339-DD3B-50361839B76E}" = Catalyst Control Center Graphics Previews Common
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie
"{85D750D6-BC45-4AC4-09B5-D9070FFEB721}" = CCC Help Danish
"{887868A2-D6DE-3255-AA92-AA0B5A59B874}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{8B1170EE-027B-02A5-0651-AC9DF9421BAE}" = CCC Help Norwegian
"{8F1ADE4D-EFAC-4F5A-B346-23C2687FAF50}" = Apple Mobile Device Support
"{909E3607-A0C9-99B1-03E6-D4CF7FB059A5}" = CCC Help Portuguese
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A996B6A-846E-4A89-B9C4-17546B7BE49F}" = Burnout(TM) Paradise The Ultimate Box
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = TERA
"{A7496F46-78AE-4DB2-BCF5-95F210FA6F96}" = Windows Live Movie Maker
"{A9A581A3-E96C-D77B-952B-25AEBB193695}" = CCC Help Japanese
"{AC675A5A-5760-8111-0B01-C740BDF7B8F6}" = CCC Help French
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B6751D2F-95E1-7265-950E-6A44E7B2DCCF}" = AMD Accelerated Video Transcoding
"{B7CAEF79-827E-81C8-B12C-D393B79641B3}" = AMD VISION Engine Control Center
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CCC9F30F-E821-0FDD-D56C-CE6D119E2DC8}" = CCC Help Turkish
"{CD5172A1-6985-F38A-74E9-6EB65C1164AB}" = ccc-utility
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D4493171-6B29-D47E-B132-1592EE1073EE}" = CCC Help Italian
"{D4E5A687-797D-44B1-8F96-4FD7A24166A9}" = DEVIL MAY CRY 4
"{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E9E919D5-3B4D-F4A0-EFD0-2FA44094D87A}" = CCC Help Chinese Standard
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1CB589B-12E1-6DD0-0F7A-AF2DB33EF611}" = AMD Media Foundation Decoders
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Afterburner" = MSI Afterburner 2.3.0
"Avira AntiVir Desktop" = Avira Free Antivirus
"Bandicam" = Bandicam
"BandiMPEG1" = Bandisoft MPEG-1 Decoder
"CCleaner" = CCleaner
"Deadpool_is1" = Deadpool
"Doctor Who: The Eternity Clock_is1" = Doctor Who: The Eternity Clock
"Dust: An Elysian Tail_is1" = Dust: An Elysian Tail
"Elsword_DE_is1" = Elsword_DE
"GFWL_{4E4D0FA1-F880-4CCB-999A-501000008200}" = Dark Souls Prepare to Die Edition
"Guild Wars 2" = Guild Wars 2
"IrfanView" = IrfanView (remove only)
"Kingdoms of Amalur Reckoning_is1" = Kingdoms of Amalur Reckoning
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mozilla Firefox 22.0 (x86 de)" = Mozilla Firefox 22.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NCLauncher_GameForge" = NC Launcher (GameForge)
"pcsx2-r5350" = PCSX2 - Playstation 2 Emulator
"Scribblenauts Unlimited_is1" = Scribblenauts Unlimited
"Venetica_is1" = Venetica
"Vindictus EU" = Vindictus EU
"VLC media player" = VLC media player 2.0.3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.20 (32-Bit)
"Ys Origin_is1" = Ys Origin version 1

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 30.06.2013 23:37:47 | Computer Name = Amarylis-PC | Source = MsiInstaller | ID = 11310
Description =

Error - 30.06.2013 23:38:10 | Computer Name = Amarylis-PC | Source = MsiInstaller | ID = 11310
Description =

Error - 01.07.2013 07:02:06 | Computer Name = Amarylis-PC | Source = MsiInstaller | ID = 11310
Description =

Error - 01.07.2013 07:02:26 | Computer Name = Amarylis-PC | Source = MsiInstaller | ID = 11310
Description =

Error - 01.07.2013 11:20:06 | Computer Name = Amarylis-PC | Source = MsiInstaller | ID = 11310
Description =

Error - 01.07.2013 11:20:37 | Computer Name = Amarylis-PC | Source = MsiInstaller | ID = 11310
Description =

Error - 01.07.2013 15:26:30 | Computer Name = Amarylis-PC | Source = MsiInstaller | ID = 11310
Description =

Error - 01.07.2013 15:27:02 | Computer Name = Amarylis-PC | Source = MsiInstaller | ID = 11310
Description =

Error - 01.07.2013 16:29:16 | Computer Name = Amarylis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: firefox.exe, Version: 22.0.0.4917,
Zeitstempel: 0x51c06b1b Name des fehlerhaften Moduls: xul.dll, Version: 22.0.0.4917,
Zeitstempel: 0x51c06a5b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00173668 ID des fehlerhaften
Prozesses: 0xe84 Startzeit der fehlerhaften Anwendung: 0x01ce7698f473adc3 Pfad der
fehlerhaften Anwendung: C:\Program Files\Mozilla Firefox\firefox.exe Pfad des fehlerhaften
Moduls: C:\Program Files\Mozilla Firefox\xul.dll Berichtskennung: e5aa460a-e28c-11e2-9ec0-c860009cd408

[ System Events ]
Error - 25.03.2013 04:48:14 | Computer Name = Amarylis-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk4\DR4 gefunden.

Error - 25.03.2013 04:48:16 | Computer Name = Amarylis-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error - 25.03.2013 04:48:19 | Computer Name = Amarylis-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.

Error - 27.03.2013 20:35:07 | Computer Name = Amarylis-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error - 27.03.2013 21:07:22 | Computer Name = Amarylis-PC | Source = DCOM | ID = 10005
Description =

Error - 27.03.2013 21:07:22 | Computer Name = Amarylis-PC | Source = Service Control Manager | ID = 7038
Description = Der Dienst "upnphost" konnte sich nicht als "NT AUTHORITY\LocalService"
mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%50 Vergewissern
Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
Management Console (MMC).

Error - 27.03.2013 21:07:22 | Computer Name = Amarylis-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "UPnP-Gerätehost" wurde aufgrund folgenden Fehlers nicht
gestartet: %%1069

Error - 02.04.2013 20:00:34 | Computer Name = Amarylis-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?03.?04.?2013 um 01:59:31 unerwartet heruntergefahren.

Error - 02.04.2013 20:00:35 | Computer Name = AMARYLIS-PC | Source = BugCheck | ID = 1001
Description =

Error - 02.04.2013 20:00:49 | Computer Name = Amarylis-PC | Source = Microsoft-Windows-WHEA-Logger | ID = 20
Description = Schwerwiegender Hardwarefehler. Komponente: AMD Northbridge Fehlerquelle:
3 Fehlertyp: 7 Prozessor-ID: 0 Die Detailansicht dieses Eintrags beinhaltet weitere
Informationen.


< End of report >

Vielen dank schonmal.