Popups mit Sicherheitswarnung beim Surfen

OTL Extras logfile created on: 17.07.2013 10:49:19 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Keksinator\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
5,95 Gb Total Physical Memory | 3,85 Gb Available Physical Memory | 64,77% Memory free
11,90 Gb Paging File | 9,57 Gb Available in Paging File | 80,41% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 231,22 Gb Total Space | 128,92 Gb Free Space | 55,76% Space Free | Partition Type: NTFS
Drive D: | 17,87 Gb Total Space | 15,97 Gb Free Space | 89,37% Space Free | Partition Type: NTFS
Drive F: | 136,72 Gb Total Space | 16,48 Gb Free Space | 12,06% Space Free | Partition Type: NTFS
Drive G: | 79,65 Gb Total Space | 59,54 Gb Free Space | 74,75% Space Free | Partition Type: NTFS
 
Computer Name: KEKS-HQ | User Name: Keksinator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01CA6D5B-5CD7-415E-9765-2376DB98BD46}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{0333916F-BFCF-4982-92E3-A48DDF55B988}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{03DCEB7A-8F65-4EC8-9B98-43515BE0BA95}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{0FB9107E-459C-481E-BD49-268FF9FE7A4F}" = lport=137 | protocol=17 | dir=in | app=system | 
"{1269B876-BD95-4247-A205-B8CF934F887F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{1446434F-2C93-40C4-9D67-E5C6FE44F167}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{15879250-6AF2-43CD-A5EE-1B7EEF5A9B62}" = rport=139 | protocol=6 | dir=out | app=system | 
"{18E44233-352E-4EEA-94E5-3D65C6653088}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{1D8C90DB-2717-4065-99AE-53CF91A6793B}" = lport=10244 | protocol=6 | dir=in | app=system | 
"{21C9AA2A-903E-4E2E-AAF2-7DCA4BA9E2B5}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2301E067-556F-49D4-BB2B-243D15E08A0D}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2A52AE01-F339-440A-BA4A-283589D7F419}" = rport=138 | protocol=17 | dir=out | app=system | 
"{3150B6A5-BB20-463D-B6E8-AA0C5A24AB18}" = lport=10244 | protocol=6 | dir=in | app=system | 
"{3526E06F-029E-4FFA-8A70-50CFDC2278BA}" = lport=138 | protocol=17 | dir=in | app=system | 
"{354A3CD6-1DBF-4F54-B535-536B84340D0F}" = rport=137 | protocol=17 | dir=out | app=system | 
"{395F9107-FCEC-4F3A-85DA-F6EBE99A4E9B}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe | 
"{3BF01366-7C5C-4118-9A19-D0CB155221AF}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{40DE9ABE-7EE8-4144-9254-FD284D3B10EA}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{47FED6E1-95A6-4553-A6CC-7160F2033255}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{49A17900-A267-4E67-B15A-CCC646BCEF6C}" = lport=3390 | protocol=6 | dir=in | app=system | 
"{4B90EFBB-D58E-4811-9313-B521F2D1F7A4}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{4DAAFEB6-698B-4DFA-B711-EAEB5EF3CD2C}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe | 
"{50BDCCE4-2C4F-465A-A33E-279764050A52}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{59E8736A-CF05-44E2-AFA9-4D439718BD32}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{61135340-AE69-4DEA-8BF9-28331BEB8781}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{63EC1E07-67A9-4870-B95C-22AF8E943389}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe | 
"{65E6309D-9175-462C-A9FB-85E95AB08B33}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe | 
"{693FB7BF-AA62-454C-880F-263FA7CEEEDC}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{6C764802-F920-4C1E-B47D-5C488F983726}" = lport=445 | protocol=6 | dir=in | app=system | 
"{6F86A1A6-304F-47B2-9FFB-A83D97ECC11F}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{7062A374-1E06-4AB6-BCA3-68331ECC7AE3}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{70BABEE9-85DC-4B7C-AB71-B48613E92EBF}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe | 
"{716E0986-B73B-4469-AF98-B57BD25A89B2}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{748DD890-1BE7-4610-B1DC-563306402110}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{798D59A6-43D0-4982-B5F2-FD19569A95F1}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{7DEAD44C-5D65-40E3-AAAE-B0624D52AB99}" = lport=3390 | protocol=6 | dir=in | app=system | 
"{7E0220D0-8C94-4AFD-8DE7-9B402A1C06C9}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{8248360A-3981-4124-829E-E05ADE51BB0D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{89ED7DDA-3A75-48E8-A74C-B9DA696B60AE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{8A5814D3-4F05-4F8B-AD8D-85400251ED3D}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{960694C9-90C2-4850-9496-04FE105D8C17}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{96E11A8A-6541-4545-B693-E019A772EDB4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{9FA25255-92EF-4B1A-8418-26879B4AF9C1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{A65A4DC0-C591-4E1C-9C51-1C0E7A3DE09E}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{BAA8BB81-351A-4570-8E3D-F76F99A5F4A6}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{BAD70B84-2E26-41FF-AE93-6C6B81BD017E}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{BB1184D5-64A9-4289-854F-63E45866F5AC}" = lport=139 | protocol=6 | dir=in | app=system | 
"{BE6E98EB-E01C-433B-B6D0-5C681BF29142}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{C1C7D231-A5FF-43DC-AF21-DDC8CDB3EF80}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{CD4B022C-5BA7-4AD6-9C83-E8F444CF5B6B}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{D356E127-D5F6-4241-A99D-B66E79A4BD4A}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{D5CD9E36-0B39-4B33-B0C2-4EFD0F0EA1D9}" = rport=445 | protocol=6 | dir=out | app=system | 
"{DBAB7FFF-D390-462D-BDA2-63A0D0A9B189}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{E9D607FA-AD0D-4588-B8D0-044584415D8D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{ED6FFF63-E147-4EDA-BAFD-52FF44A75F43}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{EFA17821-620B-4D4E-8C17-750DDA5DF74A}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{F345D75D-5F6E-4993-9358-12C29CF5AAA4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{F9D6508F-620E-4865-96C7-5268F723EC93}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{068993E3-3D3B-4043-985B-9474C8672238}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{0787DE92-87F1-4089-9B46-4B8A2D5D50A7}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{159587CD-02EB-4BCF-A9D3-BD6526C3A3D4}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{15A84204-71D0-424D-91AC-AA466EBBB49C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{1AE1F2EE-987C-4FFD-A74E-EFCEB3D43DD1}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"{1AEE2219-AB4C-42B3-8D4E-CFB8FE40E4B2}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\tom clancy's rainbow six vegas 2\binaries\r6vegas2_game.exe | 
"{1B5D25D9-E936-4E02-BF28-6EAC9736A87B}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe | 
"{1BE08D6C-8031-4EF2-85F5-EC694167D61F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{1E15BFC6-1C62-4EDA-A58F-903D668ECE27}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe | 
"{1E3BC72B-5F4E-4BB5-8975-6AE38CC864F3}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe | 
"{1E6D4B05-E960-4732-8B39-C7EE0C5E375A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{1F284524-6393-44E0-A62D-ABE7274A261A}" = dir=in | app=c:\windows\system32\ezsharedsvchost.exe | 
"{224E7D27-FE12-437E-A7C9-4C07A98796FD}" = protocol=6 | dir=in | app=c:\program files (x86)\codemasters\of dragon rising\ofdr.exe | 
"{264F4BCB-E1E7-4AB9-8E4B-1519A17BA27E}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\call of duty - world at war\codwaw.exe | 
"{28AF4B04-4A19-4B59-A6E9-61D3C42D5AD3}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{362FFF1F-2D6E-49DA-9B80-35B6BB966EF1}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\call of duty - world at war\codwawmp.exe | 
"{3F054D4E-52ED-4369-9F26-FD9C9D30BEE4}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | 
"{43166388-9A11-403C-8FC2-575AAA0718B8}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcrmgr.exe | 
"{43450DF1-016F-425F-9D90-3BD136736060}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{441275C7-E858-4136-9F6A-C34358CDE9D1}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\call of duty - world at war\codwawmp.exe | 
"{4BB0FC47-A588-43D4-9C5D-0452B7710B1F}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\crytek\crysis\bin64\crysis.exe | 
"{4DA6E6F8-E1AF-4443-90B9-36D287C669E0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{4FF483B2-CEF2-4958-BA01-E62CEC243AFE}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{52847772-9879-4A80-B933-EA9AA1C5F6D3}" = protocol=6 | dir=in | app=c:\users\keksinator\appdata\roaming\dropbox\bin\dropbox.exe | 
"{5EA75390-47B4-44D8-8126-6EDBA9A6840C}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{5EA77261-8B06-4163-8DC8-74DFEA5FF233}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{5EE24FDE-F8B5-4E64-A314-7D1A39DE0FBD}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe | 
"{5F33BD93-DFD3-41D2-A784-431A82D01A46}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | 
"{5F6180E1-7B1D-4222-8DA4-902474ADC7B7}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\crytek\crysis\bin32\crysisdedicatedserver.exe | 
"{63B56B27-F3F3-4005-AFF9-97CC76327ACA}" = protocol=6 | dir=out | app=system | 
"{67F8047C-175C-4B22-A13E-B0FC61B21510}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\crytek\crysis\bin64\crysisdedicatedserver.exe | 
"{68447FB4-36AB-406A-83F0-A3B2DA817056}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"{68A903D4-37A8-41F4-BFEE-83EBC0B24A8A}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\need for speed world\gamelauncher.exe | 
"{6B109C57-F5DB-4F25-8015-9BB8FE537B39}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe | 
"{6DD9B046-507D-48A2-A64C-FAA0A47B42AF}" = protocol=6 | dir=in | app=c:\program files (x86)\sierra entertainment\world in conflict\wic.exe | 
"{738D4A3C-E1F5-4916-924B-1F18E4A8109E}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{7C3834BE-0CA7-42B4-87CA-2B16B4E729AD}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{7CD6BF75-492E-4624-9864-61DDE00C2D3B}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe | 
"{7DEED58A-8FE9-4FD1-87BC-A66B55CA0634}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\need for speed world\gamelauncher.exe | 
"{7E9DE957-7102-434E-B2ED-CC3635861E45}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{81D99214-6253-40A5-B113-526EFA1D7C25}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{829F9EF6-42C9-43CC-B373-D6154F5649AA}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{88639D5E-D198-49FB-82F2-F90B72E9FEE6}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe | 
"{8AE33071-95D7-466B-BD6C-77972650DA7E}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\simcity\simcity\simcity.exe | 
"{8BAD78BE-172C-43A5-ACA9-4BF416F19022}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{8CDFB99A-BF65-459F-A6CE-BF17127BCC9D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{8F416F64-F3AD-42E3-A489-1B1094F6C5C5}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe | 
"{9215EF7E-C332-4693-BD5C-F21812943AC7}" = dir=in | app=c:\program files (x86)\easybits for kids\ezdesktop.exe | 
"{9267B2A7-6AD5-4E16-8601-097A2C63C818}" = protocol=17 | dir=in | app=c:\program files (x86)\codemasters\of dragon rising\ofdr.exe | 
"{967162C4-794D-4D42-BF67-005CA293E2FD}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | 
"{9E652948-F7CF-4BAF-805C-0D062148F287}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe | 
"{A26B8306-165A-4DA4-B39D-EECBD711FDB5}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{A26E5E42-9963-4C4D-BF56-46F41CD37D06}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\simcity\simcity\simcity.exe | 
"{A6CE9D04-985B-48ED-AAE2-14EF1BBFE2BD}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | 
"{A832F121-BF14-4F3D-BF3C-537C6864C253}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{A8DEF76C-B46E-4934-BA44-DA9B8E7795EA}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\crytek\crysis\bin32\crysis.exe | 
"{AD30A438-102F-47F6-BEBE-94780ED012DF}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcrmgr.exe | 
"{B28554FB-5072-425A-8256-0108BA6A4DA0}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | 
"{B3628F8E-EA9E-46A7-B9CA-CFDF1F3C473A}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\x64\3\hp2014mc.exe | 
"{B49B8683-63CD-424F-80B1-A924688CACCD}" = protocol=6 | dir=in | app=c:\program files (x86)\sierra entertainment\world in conflict\wic_online.exe | 
"{B4E35021-FD85-4329-91BD-FC31B52B03D1}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\crytek\crysis\bin32\crysis.exe | 
"{B57806F5-7F3E-4AED-B5D6-2DAEA86FF362}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | 
"{B5EA0FAE-E73C-4E3A-B418-43E16DFC868D}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"{BAC7301E-4326-435A-BB15-A50E36DD7225}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\tom clancy's rainbow six vegas 2\binaries\r6vegas2_launcher.exe | 
"{C0997674-C4DC-4A46-A488-83E239DE4E10}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe | 
"{C16F6FE9-BAC4-4CBF-AA17-36021133F106}" = protocol=17 | dir=in | app=c:\program files (x86)\sierra entertainment\world in conflict\wic.exe | 
"{C37845C4-EC4F-41EC-AB20-1916C4BE8E68}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{C5AA069E-4918-48BD-97B9-5D5E30BBA370}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{CF58DFD0-2027-4DAD-8973-7152310348B7}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\crytek\crysis\bin64\crysisdedicatedserver.exe | 
"{D1392E78-D188-463A-895E-EAF3B6DBAFD8}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | 
"{D483B42F-8881-47AF-9515-5D64798C94A8}" = protocol=17 | dir=in | app=c:\users\keksinator\appdata\roaming\dropbox\bin\dropbox.exe | 
"{D6932BF6-67C0-4C11-A0A6-EF160E835DC1}" = protocol=6 | dir=in | app=c:\program files (x86)\sierra entertainment\world in conflict\wic_ds.exe | 
"{D8BAD76D-67D3-4AFB-B702-9D65A2F317CA}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | 
"{D8BCD4A0-E87E-40A8-B5F8-26B259DDD4DE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{D960BCEB-D4F6-42EA-8650-7D2A74B23312}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{D9F4D516-7D20-425A-9E7B-3F596A17C68E}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | 
"{DD5670A1-81C0-4BC0-98AC-4BA75D3CF8FF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{DDDBB4FC-E666-4155-A617-FAF03362AE23}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe | 
"{E24FF590-78BF-4CEF-A2E7-727DEAB436DB}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\tom clancy's rainbow six vegas 2\binaries\r6vegas2_game.exe | 
"{E35E4089-AD65-4505-B278-8E8A40253B92}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\x64\3\hp2014mc.exe | 
"{E4B6690B-96FD-4F6D-80FD-63DE40549197}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\crytek\crysis\bin64\crysis.exe | 
"{E68FA099-D4C3-4374-80B4-B94D2E5F6C8E}" = protocol=17 | dir=in | app=c:\program files (x86)\sierra entertainment\world in conflict\wic_online.exe | 
"{E82DEF7A-5EB7-40AD-928F-CFC96E1571A4}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\tom clancy's rainbow six vegas 2\binaries\r6vegas2_launcher.exe | 
"{E9FCABE9-F3C0-4148-A3C1-3D45E6BC9C1E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{EA8C0E79-FA4A-4D22-B108-02A026C12D0C}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\crytek\crysis\bin32\crysisdedicatedserver.exe | 
"{EE687812-7F48-4862-AAF5-7F6E685777EC}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe | 
"{F2C2910E-2EF8-4AB5-9C51-652FE18ED3E4}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"{F306D449-C4F8-4706-9A17-AF337FB3A821}" = protocol=17 | dir=in | app=c:\program files (x86)\sierra entertainment\world in conflict\wic_ds.exe | 
"{F5B07570-92CD-4228-8930-706DEC463161}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | 
"{F67C8E9E-AD37-4837-96C7-06B8CEF53854}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\call of duty - world at war\codwaw.exe | 
"{F7B74A81-6463-4BE5-B063-4010F139407E}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{F80C2C93-B9C3-43A3-A66C-67199D445D3B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{FC272043-48D6-4D89-AE3C-AA3EDA989496}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{FD09BB54-AC99-4641-B817-D9957FFC3290}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe | 
"TCP Query User{075F995B-6607-4B8F-B477-1701EE15C3D9}G:\quake 3 - area\quake3.exe" = protocol=6 | dir=in | app=g:\quake 3 - area\quake3.exe | 
"TCP Query User{254F1F02-2C91-4B81-9140-D3FA845E32D6}C:\program files (x86)\stronghold 3\bin\win32_release\stronghold3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\stronghold 3\bin\win32_release\stronghold3.exe | 
"TCP Query User{282B7191-7525-4F22-A4AE-9038EE08A8CA}C:\sierra\empire earth\empire earth.exe" = protocol=6 | dir=in | app=c:\sierra\empire earth\empire earth.exe | 
"TCP Query User{2F9273D8-765D-48AE-86C3-83CCD70F0589}C:\users\keksinator\appdata\local\temp\rarsfx0\bie_kms.exe" = protocol=6 | dir=in | app=c:\users\keksinator\appdata\local\temp\rarsfx0\bie_kms.exe | 
"TCP Query User{40050736-847A-4758-8BC8-320EAC15B2E8}C:\users\keksinator\downloads\dreamset236x64\dreamset.exe" = protocol=6 | dir=in | app=c:\users\keksinator\downloads\dreamset236x64\dreamset.exe | 
"TCP Query User{558B9B15-5023-47BA-AEA4-896DC2473891}C:\program files (x86)\stronghold 3\bin\win32_release\stronghold3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\stronghold 3\bin\win32_release\stronghold3.exe | 
"TCP Query User{866B4B13-6038-45CD-980C-CAB9930DC8B3}G:\receiver\dreamset236x64\dreamset.exe" = protocol=6 | dir=in | app=g:\receiver\dreamset236x64\dreamset.exe | 
"TCP Query User{9EAA855F-85AD-47BB-BDCE-90FB41A41A15}C:\users\keksinator\dropbox\receiver\dreamset236x64\dreamset.exe" = protocol=6 | dir=in | app=c:\users\keksinator\dropbox\receiver\dreamset236x64\dreamset.exe | 
"TCP Query User{A082981F-9584-47F5-A27D-73839BE23262}G:\cs 1.6\hl.exe" = protocol=6 | dir=in | app=g:\cs 1.6\hl.exe | 
"TCP Query User{A9DC47DE-598E-4FF2-9AAC-E83EA95AD2BA}C:\windrop\eggdrop.exe" = protocol=6 | dir=in | app=c:\windrop\eggdrop.exe | 
"TCP Query User{C87E8A02-2F0E-461A-A66E-9695A7E0C2CC}C:\programdata\battle.net\agent\agent.998\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe | 
"TCP Query User{CEDD2F38-1B1D-47D6-AB5C-A296D0180F0A}G:\weisseradler-script 1.071\weisseradler-script.exe" = protocol=6 | dir=in | app=g:\weisseradler-script 1.071\weisseradler-script.exe | 
"TCP Query User{D67D5DC2-B59E-47F3-84CA-549489555D17}C:\program files (x86)\icq7.7\icq.exe" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"TCP Query User{DB1AC5E5-CA17-4C78-90F2-F885E1603D3B}C:\users\keksinator\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\keksinator\appdata\roaming\spotify\spotify.exe | 
"TCP Query User{F0899E6B-44EC-4534-90C0-54A2A9999675}C:\program files (x86)\client\client.exe" = protocol=6 | dir=in | app=c:\program files (x86)\client\client.exe | 
"TCP Query User{FE2E4AC6-9DB2-4BB1-870E-5C352D48C18A}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | 
"UDP Query User{22A6C42F-CD52-4A8F-80F0-7CE18B63E09E}C:\users\keksinator\dropbox\receiver\dreamset236x64\dreamset.exe" = protocol=17 | dir=in | app=c:\users\keksinator\dropbox\receiver\dreamset236x64\dreamset.exe | 
"UDP Query User{39DAE8E6-A80F-49E7-B6DA-1FA3CA5B4566}C:\users\keksinator\appdata\local\temp\rarsfx0\bie_kms.exe" = protocol=17 | dir=in | app=c:\users\keksinator\appdata\local\temp\rarsfx0\bie_kms.exe | 
"UDP Query User{4186AF74-193D-42A2-8391-06FBE2F2F34D}G:\receiver\dreamset236x64\dreamset.exe" = protocol=17 | dir=in | app=g:\receiver\dreamset236x64\dreamset.exe | 
"UDP Query User{56205203-BD2E-4100-91FB-61735E45A07C}C:\programdata\battle.net\agent\agent.998\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe | 
"UDP Query User{563386F2-48FC-45CF-9957-C512762332EE}C:\program files (x86)\client\client.exe" = protocol=17 | dir=in | app=c:\program files (x86)\client\client.exe | 
"UDP Query User{563FB846-E68B-46B7-B1E0-CC102EE0C9EE}G:\weisseradler-script 1.071\weisseradler-script.exe" = protocol=17 | dir=in | app=g:\weisseradler-script 1.071\weisseradler-script.exe | 
"UDP Query User{5E4CCE8B-0B7A-418F-AA7E-56F2EDEFF36F}C:\program files (x86)\stronghold 3\bin\win32_release\stronghold3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\stronghold 3\bin\win32_release\stronghold3.exe | 
"UDP Query User{7980043C-8952-41AE-93EE-DFDAAAFB1FD6}G:\quake 3 - area\quake3.exe" = protocol=17 | dir=in | app=g:\quake 3 - area\quake3.exe | 
"UDP Query User{ADADFC91-770A-458B-8CF6-0D85DE2352A6}C:\program files (x86)\stronghold 3\bin\win32_release\stronghold3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\stronghold 3\bin\win32_release\stronghold3.exe | 
"UDP Query User{CB62DEFE-00ED-4C58-9649-1C2D91C0CB67}C:\users\keksinator\downloads\dreamset236x64\dreamset.exe" = protocol=17 | dir=in | app=c:\users\keksinator\downloads\dreamset236x64\dreamset.exe | 
"UDP Query User{CFAD0D23-BD78-460B-AE82-805C3996D328}G:\cs 1.6\hl.exe" = protocol=17 | dir=in | app=g:\cs 1.6\hl.exe | 
"UDP Query User{D3111A10-C070-4500-9334-B9898BB2914E}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | 
"UDP Query User{DA26BBBE-5A7B-4A6E-8FC6-85D45F0E57ED}C:\users\keksinator\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\keksinator\appdata\roaming\spotify\spotify.exe | 
"UDP Query User{E990D15A-6FAE-4563-BA74-20463E22F00F}C:\program files (x86)\icq7.7\icq.exe" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"UDP Query User{F5F299FF-3389-458D-8369-F205673E02DE}C:\sierra\empire earth\empire earth.exe" = protocol=17 | dir=in | app=c:\sierra\empire earth\empire earth.exe | 
"UDP Query User{FEF42626-EF19-4805-84A4-1C31A6C4A4D3}C:\windrop\eggdrop.exe" = protocol=17 | dir=in | app=c:\windrop\eggdrop.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{054EF02F-95D8-48F4-9EEB-2F9CE3072ED8}" = AuthenTec TrueAPI
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86416024FF}" = Java(TM) 6 Update 24 (64-bit)
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{45DB21FA-B3F4-20D9-A21C-5CDEB23315AC}" = ccc-utility64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}" = Cisco Systems VPN Client 5.0.07.0440
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{7B4DEBE1-E3E3-45BD-88E6-6C3CA9EEED36}" = HP 3D DriveGuard
"{7C54D017-21BB-43AE-9746-33E78AF4A425}" = Validity WBF DDK
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A11B072-9CE7-ABB9-2F65-EC971A7B839D}" = ATI Catalyst Install Manager
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Broadcom 802.11 Wireless LAN Adapter" = Broadcom 802.11 Wireless LAN Adapter
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"SynTPDeinstKey" = Synaptics TouchPad Driver
"VLC media player" = VLC media player 2.0.2
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{00A42832-B21A-4296-B5F4-D296D0BC4A3E}" = HP Quick Launch
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{064A929A-4DE8-40CF-A901-BD40C14E4D25}" = PDF Architect
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0CDD00EB-1DC3-C181-DB3C-F954B2BDAB6D}" = CCC Help Chinese Standard
"{108069CB-B8B1-4858-82A4-E4BD5A749EFB}" = CCC Help Greek
"{118F296E-18AC-AAC1-78F9-B0FF8279D009}" = Catalyst Control Center Graphics Previews Common
"{166E80E3-7B0C-D22C-3EAE-A66860DF48E7}" = CCC Help Danish
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1B121E56-4949-83AE-B8A7-9D01EBB7CB29}" = CCC Help Italian
"{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}" = Windows Live Messenger
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{210A03F5-B2ED-4947-B27E-516F50CBB292}" = HP Setup
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 25
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2F5BCBDC-7C08-FBC2-31B0-1D83C3247CAD}" = CCC Help Dutch
"{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}" = Need For Speed™ World
"{3C5AB11A-2DDB-49E6-9FC0-CFD88A7DDFE4}" = HP Documentation
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{41C160D7-9255-A4EB-55FB-FC3D5FE6BED3}" = CCC Help Portuguese
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{483539DB-FA71-4C45-8438-55D3DCFDECC8}" = HP Software Framework
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.5
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{56709CD7-06E8-B205-56A6-110DC5090A9A}" = PX Profile Update
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5A38BA9E-D1B3-E7C2-F3B9-623359AFEDAA}" = CCC Help Thai
"{5E63C0AB-19B0-47D4-842E-6B324EB0614B}" = HP Connection Manager
"{602586CF-6ABD-1DBA-641A-959E5A999861}" = CCC Help Chinese Traditional
"{6146B9DC-C33D-11E2-BDE1-984BE15F174E}" = Evernote v. 4.6.6
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.2.0
"{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}" = HP Support Assistant
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7132DF7E-C237-0D66-77A0-F1F378520605}" = CCC Help Japanese
"{71892F91-1F22-4CC7-9ACC-5F5A530CBCCB}" = Xbox Dvd Menu
"{73E0D3A0-9C30-4F59-ABBF-6233686FB396}_is1" = ConTEXT v0.98.6
"{751A4ABF-A3BC-AA70-3252-C285F10A265B}" = Catalyst Control Center Localization All
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}" = ICQ7.7
"{7A5B032B-CCF0-43BE-D0B9-28FFA0B0B034}" = CCC Help Norwegian
"{7E659C5C-4DF1-499B-B802-77BAE9ABE4D4}" = Razer Diamondback 3G
"{7F3203C1-25BD-E32E-F470-2332E1AD5EDF}" = Catalyst Control Center Profiles Mobile
"{807CE83D-F17E-5F76-035F-3525EAE8978F}" = CCC Help Hungarian
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{85E719A1-1E6B-B44A-62AC-824E5DDD0415}" = CCC Help Turkish
"{872B1C80-38EC-4A31-A25C-980820593900}" = HP Power Manager
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.PROPLUS_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0407-1000-0000000FF1CE}_Office14.PROPLUS_{594128C9-2CDF-43CE-8103-DC100CF013B6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.PROPLUS_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.PROPLUS_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90F50409-6000-11D3-8CFE-0150048383C9}" = Visual Basic for Applications (R) Core
"{90F60409-6000-11D3-8CFE-0150048383C9}" = Visual Basic for Applications (R) Core - English
"{91252C0A-59F9-42F9-9181-B9CC74F592C0}" = Vodafone Mobile Connect Lite
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{949D6B51-10E8-4CD4-A81E-064E38240415}" = Catalyst Control Center - Branding
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{9957DA6E-DE8D-0DED-2897-B1F4FBEF300E}" = CCC Help English
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AD5C619-D41C-2D47-C2A0-AB02D6C4A7D4}" = CCC Help German
"{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}" = HP On Screen Display
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{AF405820-19DE-03BA-1B41-0797EA62F213}" = CCC Help Finnish
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B3CAF031-3289-5C18-149A-C350C0B43D6D}" = Catalyst Control Center InstallProxy
"{B4E7C6D9-8824-147E-721F-004F52D6418E}" = CCC Help Russian
"{BB51D3AF-1115-1676-0D33-CE5BBCCD8B00}" = CCC Help Polish
"{BCFAA37D-A6DB-43BF-A351-43F183E52D07}" = HP SimplePass 2011
"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C5BAB8E1-73B4-4DA9-9911-B82C98CCB088}" = SentinelLM 7.2.0.21 Server
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D481EA96-2313-4A7C-98EE-710D1AF884AC}" = Microsoft Visual Studio 2005 Tools for Applications - ENU
"{DBCD5E64-7379-4648-9444-8A6558DCB614}" = Recovery Manager
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E62FA27C-3F19-FC14-424D-F1CEE432604F}" = CCC Help Czech
"{E7F752BB-8B7B-2906-9CD2-8B25CAD7B303}" = CCC Help Spanish
"{E815530E-14D8-E337-3D21-6A1AB5F9DDD9}" = Catalyst Control Center
"{EAFA49E7-56AC-67B2-17E9-75F466884000}" = CCC Help French
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Display Audio Driver
"{F5307A59-A5A2-C48F-BDD3-6C88E83203A6}" = CCC Help Korean
"{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}" = SimCity™
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FFFCCF57-5102-C54C-778C-C613EC82F647}" = CCC Help Swedish
"7-Zip" = 7-Zip 9.20
"abgx360" = abgx360 v1.0.6
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Avira AntiVir Desktop" = Avira Free Antivirus
"Client" = Client
"DAEMON Tools Lite" = DAEMON Tools Lite
"Diablo III" = Diablo III
"DivX Setup" = DivX-Setup
"EasyBits Magic Desktop" = Magic Desktop
"Foxit Reader_is1" = Foxit Reader
"HP DVB-T TV Tuner" = HP DVB-T TV Tuner 8.0.64.43
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"Lyrics@LyricsContainer.co" = LyricsContainer
"MediaMonkey_is1" = MediaMonkey 4.0
"Microsoft Visual Studio 2005 Tools for Applications - ENU" = Microsoft Visual Studio 2005 Tools for Applications - ENU
"Mozilla Firefox 8.0.1 (x86 de)" = Mozilla Firefox 8.0.1 (x86 de)
"Mozilla Thunderbird 15.0.1 (x86 de)" = Mozilla Thunderbird 15.0.1 (x86 de)
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Origin" = Origin
"PunkBusterSvc" = PunkBuster Services
"PuTTY_is1" = PuTTY version 0.62
"Space_Tanks_is1" = Spacetanks Premium V.1.02
"Stronghold 3 (c) THQ_is1" = Stronghold 3 (c) THQ version 1
"UnLock Phone" = UnLock Phone 1.3
"UnLock Root" = UnLock Root 3.1
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome
"Mozilla Firefox 15.0.1 (x86 de)" = Mozilla Firefox 15.0.1 (x86 de)
"Spotify" = Spotify
"Tropico 4" = Tropico 4 1.00
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 16.07.2013 18:34:24 | Computer Name = Keks-HQ | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC 
 
Error - 16.07.2013 18:34:24 | Computer Name = Keks-HQ | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC 
 
Error - 16.07.2013 18:34:24 | Computer Name = Keks-HQ | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC 
 
Error - 16.07.2013 18:34:24 | Computer Name = Keks-HQ | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC 
 
Error - 16.07.2013 18:34:24 | Computer Name = Keks-HQ | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC 
 
Error - 16.07.2013 18:34:24 | Computer Name = Keks-HQ | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC 
 
Error - 16.07.2013 18:34:24 | Computer Name = Keks-HQ | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC 
 
Error - 16.07.2013 18:34:24 | Computer Name = Keks-HQ | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC 
 
Error - 17.07.2013 01:56:42 | Computer Name = Keks-HQ | Source = WinMgmt | ID = 10
Description = 
 
Error - 17.07.2013 01:56:54 | Computer Name = Keks-HQ | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 17.07.2013 04:34:25 | Computer Name = Keks-HQ | Source = SentinelKeysServer | ID = 8
Description = 
 
[ Hewlett-Packard Events ]
Error - 07.05.2013 18:09:55 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 30  TargetSite: Void UpdateAndDetect()  
 
Error - 14.05.2013 18:10:25 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 30  TargetSite: Void UpdateAndDetect()  
 
Error - 21.05.2013 18:17:01 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 30  TargetSite: Void UpdateAndDetect()  
 
Error - 28.05.2013 18:04:27 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 30  TargetSite: Void UpdateAndDetect()  
 
Error - 04.06.2013 18:18:44 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 30  TargetSite: Void UpdateAndDetect()  
 
Error - 11.06.2013 19:04:16 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 30  TargetSite: Void UpdateAndDetect()  
 
Error - 18.06.2013 18:14:33 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 30  TargetSite: Void UpdateAndDetect()  
 
Error - 25.06.2013 14:41:12 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 40  TargetSite: Void UpdateAndDetect()  
 
Error - 02.07.2013 14:34:18 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 30  TargetSite: Void UpdateAndDetect()  
 
Error - 09.07.2013 14:40:55 | Computer Name = Keks-HQ | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Message: One HP Active Check Local Mode job already running.  StackTrace:
   bei HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetect()

   bei HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
 Boolean localScan)  Source: HP.ActiveCheckLocalMode.SessionManager    Name: hpsa_service.exe
Version:
 06.00.01.01  Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
 de-DE  RAM: 6091  Ram Utilization: 40  TargetSite: Void UpdateAndDetect()  
 
[ HP Connection Manager Events ]
Error - 12.07.2013 14:37:28 | Computer Name = Keks-HQ | Source = hpCMSrv | ID = 5
Description = 2013/07/12 20:37:28.902|00001A1C|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 13.07.2013 05:26:41 | Computer Name = Keks-HQ | Source = hpCMSrv | ID = 5
Description = 2013/07/13 11:26:41.368|0000034C|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 14.07.2013 04:57:27 | Computer Name = Keks-HQ | Source = hpCMSrv | ID = 5
Description = 2013/07/14 10:57:27.647|00000FE4|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 14.07.2013 06:57:20 | Computer Name = Keks-HQ | Source = hpCMSrv | ID = 5
Description = 2013/07/14 12:57:20.078|00000BA4|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 14.07.2013 18:37:56 | Computer Name = Keks-HQ | Source = hpCMSrv | ID = 5
Description = 2013/07/15 00:37:56.480|00000BFC|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 15.07.2013 09:45:29 | Computer Name = Keks-HQ | Source = hpCMSrv | ID = 5
Description = 2013/07/15 15:45:29.624|00000FD0|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 15.07.2013 13:13:46 | Computer Name = Keks-HQ | Source = hpCMSrv | ID = 5
Description = 2013/07/15 19:13:46.102|0000182C|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 15.07.2013 18:13:11 | Computer Name = Keks-HQ | Source = hpCMSrv | ID = 5
Description = 2013/07/16 00:13:11.004|00001090|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 16.07.2013 18:34:26 | Computer Name = Keks-HQ | Source = hpCMSrv | ID = 5
Description = 2013/07/17 00:34:26.417|000010A0|Error      |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
 failed [hr:0x800706BA]
 
Error - 17.07.2013 04:41:57 | Computer Name = Keks-HQ | Source = hpMobile | ID = 5
Description = 2013.07.17 10:41:57.993|000016E8|Error      |[HP.Mobile]Wlan::UpdateProperties{void()}|Die
 Daten sind unzulässig. (Ausnahme von HRESULT: 0x8007000D)
 
[ HP Software Framework Events ]
Error - 15.05.2012 15:28:33 | Computer Name = Keks-HQ | Source = CaslWmi | ID = 5
Description = 2012.05.15 21:28:33.489|0000137C|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 15.05.2012 15:38:15 | Computer Name = Keks-HQ | Source = CaslWmi | ID = 5
Description = 2012.05.15 21:38:15.202|00001A20|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 16.05.2012 13:21:24 | Computer Name = Keks-HQ | Source = CaslWmi | ID = 5
Description = 2012.05.16 19:21:24.522|000013CC|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 16.05.2012 18:28:20 | Computer Name = Keks-HQ | Source = CaslWmi | ID = 5
Description = 2012.05.17 00:28:20.193|00000B70|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 17.05.2012 03:45:42 | Computer Name = Keks-HQ | Source = CaslWmi | ID = 5
Description = 2012.05.17 09:45:42.367|000011C4|Error      |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
 0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state
 
Error - 05.06.2012 14:24:29 | Computer Name = Keks-HQ | Source = CaslSmBios | ID = 5
Description = 2012.06.05 20:24:29.436|0000111C|Error      |[CaslWmi]CommandPanelBrightness::GetCurrentPanelBrightnessFromOS{hpCasl.enReturnCode(CaslWmi.enPanelBrightnessDataType,ushort&)}|Exception
 occurred in querying WMI for WmiMonitorBrightness: 'Nicht unterstützt '
 
Error - 05.06.2012 14:26:28 | Computer Name = Keks-HQ | Source = CaslSmBios | ID = 5
Description = 2012.06.05 20:26:28.460|00001820|Error      |[CaslWmi]CommandPanelBrightness::GetCurrentPanelBrightnessFromOS{hpCasl.enReturnCode(CaslWmi.enPanelBrightnessDataType,ushort&)}|Exception
 occurred in querying WMI for WmiMonitorBrightness: 'Nicht unterstützt '
 
Error - 04.08.2012 19:00:23 | Computer Name = Keks-HQ | Source = CaslSmBios | ID = 5
Description = 2012.08.05 01:00:23.080|00000960|Error      |[CaslWmi]CommandPanelBrightness::GetCurrentPanelBrightnessFromOS{hpCasl.enReturnCode(CaslWmi.enPanelBrightnessDataType,ushort&)}|Exception
 occurred in querying WMI for WmiMonitorBrightness: 'Nicht unterstützt '
 
Error - 31.12.2012 11:23:46 | Computer Name = Keks-HQ | Source = CaslSmBios | ID = 5
Description = 2012.12.31 16:23:46.235|00001280|Error      |[CaslWmi]CommandPanelBrightness::GetCurrentPanelBrightnessFromOS{hpCasl.enReturnCode(CaslWmi.enPanelBrightnessDataType,ushort&)}|Exception
 occurred in querying WMI for WmiMonitorBrightness: 'Nicht unterstützt '
 
Error - 28.02.2013 07:03:55 | Computer Name = Keks-HQ | Source = CaslSmBios | ID = 5
Description = 2013.02.28 12:03:55.873|000007EC|Error      |[CaslWmi]CommandPanelBrightness::GetCurrentPanelBrightnessFromOS{hpCasl.enReturnCode(CaslWmi.enPanelBrightnessDataType,ushort&)}|Exception
 occurred in querying WMI for WmiMonitorBrightness: 'Nicht unterstützt '
 
[ Media Center Events ]
Error - 05.02.2012 15:13:55 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 20:13:55 - Directory konnte nicht abgerufen werden (Fehler: Die zugrunde
 liegende Verbindung wurde geschlossen: Für den geschützten SSL/TLS-Kanal konnte
 keine Vertrauensstellung hergestellt werden..)  
 
Error - 05.02.2012 16:16:32 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 21:16:32 - Directory konnte nicht abgerufen werden (Fehler: Die zugrunde
 liegende Verbindung wurde geschlossen: Für den geschützten SSL/TLS-Kanal konnte
 keine Vertrauensstellung hergestellt werden..)  
 
Error - 11.02.2012 11:21:24 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 16:21:24 - Fehler beim Herstellen der Internetverbindung.  16:21:24 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 11.02.2012 11:21:32 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 16:21:30 - Fehler beim Herstellen der Internetverbindung.  16:21:30 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 11.02.2012 12:21:37 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 17:21:37 - Fehler beim Herstellen der Internetverbindung.  17:21:37 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 11.02.2012 12:21:43 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 17:21:42 - Fehler beim Herstellen der Internetverbindung.  17:21:42 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 11.02.2012 13:21:48 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 18:21:48 - Fehler beim Herstellen der Internetverbindung.  18:21:48 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 11.02.2012 13:21:53 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 18:21:53 - Fehler beim Herstellen der Internetverbindung.  18:21:53 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 11.02.2012 14:21:58 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 19:21:58 - Fehler beim Herstellen der Internetverbindung.  19:21:58 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 11.02.2012 14:22:03 | Computer Name = Keks-HQ | Source = MCUpdate | ID = 0
Description = 19:22:03 - Fehler beim Herstellen der Internetverbindung.  19:22:03 
-     Serververbindung konnte nicht hergestellt werden..  
 
[ System Events ]
Error - 17.07.2013 02:22:36 | Computer Name = Keks-HQ | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet 
wurde:   %%-2140993535
 
Error - 17.07.2013 04:41:58 | Computer Name = Keks-HQ | Source = PNRPSvc | ID = 102
Description = 
 
Error - 17.07.2013 04:41:58 | Computer Name = Keks-HQ | Source = PNRPSvc | ID = 102
Description = 
 
Error - 17.07.2013 04:41:58 | Computer Name = Keks-HQ | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet 
wurde:   %%-2140993535
 
Error - 17.07.2013 04:41:58 | Computer Name = Keks-HQ | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:   %%-2140993535
 
Error - 17.07.2013 04:41:58 | Computer Name = Keks-HQ | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:   %%-2140993535
 
Error - 17.07.2013 04:41:58 | Computer Name = Keks-HQ | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet 
wurde:   %%-2140993535
 
Error - 17.07.2013 04:49:32 | Computer Name = Keks-HQ | Source = PNRPSvc | ID = 102
Description = 
 
Error - 17.07.2013 04:49:32 | Computer Name = Keks-HQ | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
 beendet:   %%-2140993535
 
Error - 17.07.2013 04:49:32 | Computer Name = Keks-HQ | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
 Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet 
wurde:   %%-2140993535
 
 
< End of report >