| |
| |||||||
Log-Analyse und Auswertung: OTL Analyse "Problem: search conduit" nach codec installationWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
26.01.2014, 14:02
| #1 |
| |  OTL Analyse "Problem: search conduit" nach codec installation OTL Extras logfile created on: 26.01.2014 13:54:30 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\hanFX\Downloads 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16476) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,89 Gb Total Physical Memory | 5,20 Gb Available Physical Memory | 65,89% Memory free 9,14 Gb Paging File | 6,06 Gb Available in Paging File | 66,29% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 111,45 Gb Total Space | 24,59 Gb Free Space | 22,06% Space Free | Partition Type: NTFS Drive E: | 465,73 Gb Total Space | 225,15 Gb Free Space | 48,34% Space Free | Partition Type: NTFS Drive F: | 465,62 Gb Total Space | 459,11 Gb Free Space | 98,60% Space Free | Partition Type: FAT32 Computer Name: **** | User Name: **** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) [HKEY_USERS\S-1-5-21-1102202105-3208666232-3045638287-1000\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = AC 1C AE C5 46 9F CE 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 ========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0014DC3D-746C-473A-A86E-BE7CAA78D1B7}" = lport=20010 | protocol=17 | dir=in | name=war thunder | "{098C3D08-FD40-4554-8D75-74C28F88D4BA}" = lport=8090 | protocol=6 | dir=in | name=war thunder | "{1A65135C-BE0A-4F4B-AABC-605E749B1EF2}" = lport=80 | protocol=6 | dir=in | name=war thunder | "{27239B5C-E4B2-4CB6-B630-96A1D27B139B}" = lport=57885 | protocol=17 | dir=in | name=pando media booster | "{332C0A29-98D9-42BC-9677-ABF05E230905}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{44BE8475-83D4-4140-9BFF-91A82FD0B33E}" = lport=20443 | protocol=6 | dir=in | name=war thunder | "{45EC8EAE-3C8E-41D1-839A-733EEF1A5ABE}" = lport=7850 | protocol=6 | dir=in | name=war thunder | "{5669BAC8-8DF5-49A8-9B78-D2833209C929}" = lport=20010 | protocol=17 | dir=in | name=war thunder | "{5C30CCC9-9AF6-4F86-A6CB-02BA9EDFB26D}" = lport=20443 | protocol=6 | dir=in | name=war thunder | "{66BD45F0-1F65-44D3-9F7E-BCB280DB7BC2}" = lport=443 | protocol=6 | dir=in | name=war thunder | "{67BE669A-51FA-434F-B5A8-D6750FA14505}" = lport=8090 | protocol=6 | dir=in | name=war thunder | "{67C8CE1D-0F9B-4D73-BF6A-DFC7CCB56932}" = lport=3478 | protocol=17 | dir=in | name=war thunder | "{69481968-7AB7-49E5-8D1F-EDF8AB9D5772}" = lport=57885 | protocol=17 | dir=in | name=pando media booster | "{6A0409B0-7FE8-4E5E-8F81-6733FC28F8F8}" = lport=6881 | protocol=6 | dir=in | name=war thunder | "{6ADC3E2C-4D0C-49B3-8188-5C9468440005}" = lport=27022 | protocol=6 | dir=in | name=war thunder | "{6F3A1264-D7B1-4F79-A976-8DD07BFFAA01}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe | "{7A72DF51-17BF-42B4-A4AA-40B68CBB4AEB}" = lport=7850 | protocol=6 | dir=in | name=war thunder | "{851ECDF2-8283-4DFB-B137-03C4F4F8341B}" = lport=33333 | protocol=6 | dir=in | name=war thunder | "{9D5D3A24-3C7A-4ED3-A166-BECAB6BEDC49}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{A9CFEAC1-7C3B-40AC-B786-E37EF5014A00}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{BFD74451-4D26-442F-8A16-EBD193BFEC9E}" = lport=3478 | protocol=17 | dir=in | name=war thunder | "{D095D6E8-8699-4C48-8083-D8A8655BFEDE}" = lport=27022 | protocol=6 | dir=in | name=war thunder | "{DABA7C46-87B2-4A1C-AFA7-7A1C9CBF5566}" = lport=57885 | protocol=6 | dir=in | name=pando media booster | "{E3483504-9BBD-4826-B479-3CC1746A039B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{E9E3EADE-8F59-4C40-9B35-73893C4B4922}" = lport=33333 | protocol=6 | dir=in | name=war thunder | "{EB814B13-1EB5-40CF-81AD-49418E3367F6}" = lport=443 | protocol=6 | dir=in | name=war thunder | "{FCBDE76B-486A-4F4B-874B-B715E55EEE76}" = lport=6881 | protocol=6 | dir=in | name=war thunder | "{FD60DDEC-41F9-408A-9CCF-E34195368C74}" = lport=57885 | protocol=6 | dir=in | name=pando media booster | "{FF9FEA42-037A-4319-B551-DAB399DFE6FC}" = lport=80 | protocol=6 | dir=in | name=war thunder | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{00C0C678-E0A7-4270-998F-8CF436673CCB}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike source\hl2.exe | "{02CD4EB3-E8D6-47CC-ACC5-C1069468D286}" = protocol=17 | dir=in | app=a:\spiele\starcraft ii\starcraft ii public test.exe | "{031D3929-C60D-4F65-824F-CD7D5EB99FE3}" = dir=out | name=@{microsoft.bingfinance_3.0.1.299_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} | "{03C0AA81-8944-43AA-BC9E-CD8632865EA3}" = dir=in | app=a:\programme\itunes.exe | "{056EBDE8-950B-4AB7-8F9B-1F7723567E64}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2359\agent.exe | "{059F7AA0-FD88-464E-A13B-57BDC3CB1745}" = protocol=6 | dir=in | app=a:\spiele\battle.net\battle.net.exe | "{06B82DF1-3BA2-4274-8087-0976FE8D8131}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2045\agent.exe | "{08A5A6F5-200F-453C-B002-F31FFB2055B2}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\showdown\binaries\showdown.exe | "{096C1230-A383-4A79-9E0E-295A73324FB7}" = dir=out | name=@{microsoft.bingweather_2.0.0.288_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} | "{09880C36-C615-4974-8B8A-0C494DCF3D34}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\breezer_midclan@web.de\counter-strike source\hl2.exe | "{0B72641F-B32C-4D43-9488-E3FFD0300B76}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\war of the roses\run_game.exe | "{0D73D982-40E7-4059-8A13-7782F2F16537}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | "{0DA53D09-5227-40EC-BDDA-F9B90B113142}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | "{0E69A29C-153D-4FF0-B7B7-3BD1AD0156E7}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{0F7EA0E4-8990-445A-81FA-211146BEA552}" = dir=out | name=@{microsoft.zunevideo_1.3.59.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{0FDFCF67-2930-4C44-9C1D-4B9D7BC61832}" = dir=out | name=sonicwall mobile connect | "{10CB54B2-7BF9-49FC-8030-B7BB117D9462}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe | "{116246EA-9430-4EBC-BB53-66E8CF4CC295}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{12943AC6-4488-418A-8E59-A0DBB315A24E}" = protocol=17 | dir=in | app=a:\spiele\ca\combat arms eu\nmservice.exe | "{1353B849-1683-4CBF-BBF5-1ED30D9DC2C5}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | "{13E16D53-5A5D-4FAC-9C78-DA1E49AF79B2}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{1492043E-0B4E-435E-B61B-A5B9496EE877}" = protocol=17 | dir=in | app=c:\program files (x86)\raptr\raptr.exe | "{1540500F-1576-4CE8-A9F0-9CD42DC4D8E9}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\3dmark\bin\x64\3dmark.exe | "{162FDEE4-A772-48CB-9668-0AA0812E5121}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\company of heroes 2\reliccoh2.exe | "{1657EB97-A944-4260-9323-46E4671681C3}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{1738D950-A48B-4499-88EA-2DE96692BF18}" = protocol=6 | dir=in | app=c:\users\hanfx\desktop\mirc\mirc.exe | "{1863BF78-FE3A-44A5-9017-24674E8A2E0B}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{192E7986-7FF3-4D37-A820-C3B2A44DA75F}" = dir=in | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | "{199DE317-705E-42C7-9D2D-F27411B5F891}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\day of defeat source\hl2.exe | "{1BB2434A-08E9-4EB4-B47C-BDAD80FC5C79}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2328\agent.exe | "{1C5AECFD-3FD4-4336-BE0F-30C05A4A76C3}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe | "{1D11427A-9ACD-4910-ACDF-86886530D87D}" = dir=out | name=windows_ie_ac_001 | "{1E167EAA-778D-45D0-A55F-DE3A49A0940B}" = dir=out | name=@{microsoft.bingtravel_3.0.1.202_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} | "{1ED14347-E49F-4C1C-8293-CC36DB488D1D}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{1FAA2D53-CE37-4717-A8B7-14BB6A1BBDE1}" = dir=in | name=screw throttling | "{202A41DE-AB6D-4B3D-B3E0-143B0C396B1B}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | "{244A4CE9-57B8-4D65-B52B-AA1B156C7E28}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\half-life\hl.exe | "{250347F5-398F-4FED-A193-5A2B3E49E463}" = protocol=17 | dir=in | app=a:\spiele\starcraft ii\starcraft ii.exe | "{256D131B-37D8-4B76-87E2-80F6E3958ECD}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{280593C4-5456-4F53-9374-ED82AEC1CEC2}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\company of heroes 2\reliccoh2.exe | "{29580BD0-EEF9-4F31-AC77-1ADA66677929}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{2D0DE857-1C8A-4D2F-9E5A-46B8359057A8}" = dir=out | name=@{microsoft.bingfinance_1.7.0.29_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} | "{2E28362C-D384-4E37-9E33-F9E0B6824492}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\showdown\binaries\showdown.exe | "{2E38928D-E8BE-426A-81C6-7EC09F5BB1E9}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{2EF21311-2F0D-4AD3-8CA7-031789E9FFA2}" = dir=out | name=google search | "{2FD86C70-07F0-4B54-8F53-5C4B5D01D672}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2514\agent.exe | "{2FE6F2D3-407B-4058-ADEA-CE48A89E4099}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{2FF62C0B-924D-45EF-B841-3882390E2DD0}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{30B01BFF-4406-4CB7-BDA8-3A5F969EE317}" = dir=out | name=@{microsoft.bingsports_1.7.0.26_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} | "{30D5A2CD-2ABF-4F53-8A2C-8108B98A0723}" = dir=in | name=hp printer control | "{31BA4F54-EC5C-464B-A451-B55CFD2C687C}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{355F033E-1B9E-4DC1-8923-8AA5FC8AF375}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2045\agent.exe | "{360649CD-8589-4C10-AB27-7549079BB3FD}" = protocol=6 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{370462A8-B336-47A0-839D-510A7D36C39E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2514\agent.exe | "{374F741B-B9EB-4254-8329-6282E89437C9}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{38EB62A4-94D7-454D-8EE1-500554815ED1}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\3dmark\bin\x86\3dmark.exe | "{3994A366-9CC5-4527-89B5-4C6605CA8AA4}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{39F40B65-5CB0-4630-AD52-2567330271C5}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2426\agent.exe | "{3A0D88F8-CEE9-46DD-9BFC-84AF4F062059}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\torchlight ii\modlauncher.exe | "{3A328593-CA6E-4A15-BFC1-ABBE06CDE9AD}" = dir=in | name=check point vpn | "{3A6EA37B-61A6-4500-8B6D-4E1D0ED0DF30}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{3B293C84-2837-4431-A0E7-FFC84D6A7C9F}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{3D1086B0-12C1-4AF1-A9C5-9F151300E1C2}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\tomb raider\tombraider.exe | "{3E1A2BF8-7DAB-4D7E-85F0-FD72A2D2B2C8}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2045\agent.exe | "{3E3D242A-A987-434E-A800-0400153010AE}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\torchlight ii\modlauncher.exe | "{3EF5307E-3D01-4023-88F5-3D6C86A9F59B}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | "{3FD9E505-E764-4161-B9C4-E5D4767E4322}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\showdown\binaries\showdown.exe | "{4010A31F-F790-495E-BC91-BC58CEF45A5D}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | "{404002FB-B268-48E2-A520-EFFC94C3AA94}" = protocol=17 | dir=in | app=c:\program files (x86)\raptr\raptr_im.exe | "{41BF3BCC-4A74-4950-80A4-BB45A40D3D91}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\mark_of_the_ninja\bin\game.exe | "{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn | "{42EAF8E5-CD4E-4900-9D7C-CC225364ACEB}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe | "{4524D095-813E-4797-BF6D-02A2C89EF503}" = protocol=17 | dir=in | app=a:\spiele\warthunder\launcher.exe | "{462ED979-38C0-4182-BA62-E55DB8A1FD19}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\company of heroes 2\reliccoh2.exe | "{4780453B-EEB8-4F0D-A4B2-01B39E1240A7}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\company of heroes 2\reliccoh2.exe | "{48812824-4450-46C3-8017-ED165B947D76}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2293\agent.exe | "{49A726AC-15AF-47D5-A740-EA61E24EF0D1}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\tacticalintervention\bin\tacint.exe | "{4A3324ED-282D-48D1-B705-A5387BEE0AF8}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{4B71D49D-EB7F-4967-9C5C-E6B51C172C95}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2359\agent.exe | "{4CC980A3-EC36-4435-B866-7CC9FE1635C6}" = protocol=17 | dir=in | app=c:\users\hanfx\appdata\roaming\spotify\spotify.exe | "{4DC107D3-078A-4BD9-91B1-14BF1B8B56DB}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20321_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{4E93F291-5CC0-463A-8092-A80257DCF1AA}" = protocol=6 | dir=in | app=a:\spiele\starcraft ii\starcraft ii public test.exe | "{4F4702C2-F1B6-41A3-A0EA-8B9909BD4BA7}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\day of defeat source\hl2.exe | "{502B5A6D-FEF7-4416-8114-0A55DC61EAB8}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe | "{515FFA77-715C-499F-93ED-03302FEC961B}" = dir=out | name=@{microsoft.bingmaps_1.5.1.240_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{51776808-515C-4312-905C-0BAF689B6610}" = protocol=6 | dir=in | app=c:\users\hanfx\appdata\local\google\google talk plugin\googletalkplugin.exe | "{519CEBBE-1BA4-4A5F-A60B-99A5F582640C}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\tacticalintervention\bin\tacint.exe | "{5264BBC3-CAB3-4402-AE62-A14B7A61B96D}" = dir=out | name=juniper networks junos pulse | "{5432A3F4-2B0F-4037-BF81-A50A1559F191}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe | "{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{55423B00-FAFA-4DAD-B6FD-F68558CF959A}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe | "{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect | "{5B165EE0-CC90-4204-ABD9-AC270BAD19FA}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\bin\sdklauncher.exe | "{5C34C4AC-A68E-4EF3-BA79-11401BAC2788}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{5E0DA497-7E38-43D6-9065-CAF183BE3A1D}" = dir=out | name=@{microsoft.bingweather_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} | "{5E15AE89-BE83-4DA9-BCA6-C6BB452D95E7}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect | "{5F90F88E-B660-481E-A8C0-18788390E2CE}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{60A473B7-D47F-4731-996D-FB9ED70A64C2}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\3dmark\bin\x86_steam_beta\3dmark.exe | "{62AC2853-C804-431B-B668-F288D7D078D6}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20321_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{6376C890-961C-4532-8E29-1D603E989185}" = protocol=6 | dir=in | app=c:\users\hanfx\appdata\roaming\dropbox\bin\dropbox.exe | "{6397C227-9205-4A47-9318-9E1A6B566F59}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe | "{653BEEDF-CF0F-420D-B605-EA92CE4E689A}" = protocol=17 | dir=in | app=a:\spiele\warthunder\aces.exe | "{65B6248D-1FB1-404A-8BB1-AE40C5D6B4D9}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\3dmark\bin\x86\3dmark.exe | "{6621968A-3BBD-4ED4-97AB-F8DF4A3C6036}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe | "{69717CA5-10FF-40B8-B6F7-FEB8B4AD38E1}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{6B04F951-A4C2-4167-B718-248C90CD2EF1}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe | "{6B6BC497-7A4E-4315-AECF-A26E63B0F5CF}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{6E826235-5C0A-411A-A2AC-5D8B95E516FF}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\torchlight ii\torchlight2.exe | "{70337012-9E6E-419A-9DA5-4065C162A052}" = dir=out | name=@{ad2f1837.hpscanandcapture_30.0.207.0_neutral__v10z8vjag6ke6?ms-resource://ad2f1837.hpscanandcapture/resources/apptitle} | "{7227411B-A61D-4BA9-809D-267E464BB905}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe | "{74684889-25A3-44FD-963D-3D20A89A9539}" = dir=out | name=@{microsoft.xboxlivegames_1.1.134.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{7476A8D9-B08F-43A6-895B-57F74D79CEF8}" = protocol=17 | dir=in | app=c:\users\hanfx\appdata\local\google\google talk plugin\googletalkplugin.exe | "{74CD7B2C-DE16-42D3-B78D-64ABE398B88F}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | "{74CD96E6-CF1D-4DCE-A219-3C9AC047E773}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\3dmark\bin\x86_steam_beta\3dmark.exe | "{75628F19-0759-461F-AAD9-3D916297B0A8}" = dir=out | name=@{microsoft.zunemusic_2.2.299.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{75C34867-2588-49B9-8655-FC9F4E045390}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{76AEB85F-1C8B-4E80-BEA6-6643A9E87B08}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | "{772973C1-EBED-4842-838E-AC4E5EE921A9}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2426\agent.exe | "{78183BBD-37D0-4D2F-BFFD-1E683BD063C6}" = protocol=17 | dir=in | app=a:\spiele\steamapps\common\counter-strike global offensive\csgo.exe | "{79C4CC7E-600F-4636-800A-1C595703D502}" = protocol=17 | dir=in | app=a:\spiele\bf3\battlefield 4\bf4_x86.exe | "{7A869656-EE49-41A4-A8CF-74A5880E615D}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.1.201_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} | "{7AEE3249-97A4-48B4-964A-DDDA3D4282B4}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2293\agent.exe | "{7C3792D3-3E96-466F-9E7D-BD36B5E61D38}" = protocol=6 | dir=in | app=a:\spiele\ca\combat arms eu\nmservice.exe | "{7C432E16-04E9-4933-BE32-48BE99D0FEF2}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe | "{7C8EA53F-953B-4074-A70C-99F5CA46C75C}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{7ED5E363-B3A1-49E8-A391-C6CF9430584B}" = dir=out | name=@{microsoft.bingsports_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} | "{802F5431-588B-4651-AE84-550E2431319E}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\mark_of_the_ninja\bin\game.exe | "{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{813B5CE2-1325-4EB8-A380-7998A51F2F94}" = protocol=6 | dir=in | app=a:\spiele\steamapps\common\counter-strike global offensive\csgo.exe | "{8168037A-472E-4CAB-B4E1-6F1556764E39}" = protocol=6 | dir=in | app=a:\spiele\steam.exe | "{81A8A807-A561-405B-B96F-3514886B9B42}" = dir=in | name=skype | "{81AB8E9A-04BD-4CBC-82E0-5A4DF4895D0B}" = dir=out | name=@{microsoft.zunemusic_1.4.18.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{8336D25D-3C2B-4E94-8575-180D15196DE0}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{83FC5025-49C4-4A69-974C-B1FB936CB050}" = dir=out | name=skype | "{8423192A-37AD-4604-A190-63416307B740}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{86168085-858F-45AF-82F6-296D40EC58D0}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe | "{86956FBC-E601-48E0-9994-D1483F68F1E2}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{86D0FF98-D0A6-4D79-BA92-33E255A66CFC}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{872B43BD-69ED-4770-8062-D1DD562A73A4}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe | "{8777BBE0-E603-4E1D-A343-4DB5FFFB2A4B}" = dir=out | name=hp printer control | "{8844E3DD-DA8A-4171-BD24-2D8B6678B2BE}" = protocol=17 | dir=in | app=a:\spiele\bf3\battlefield 3\bf3.exe | "{89A5AEB8-0AFC-4AD3-84EB-7B4DBF53227E}" = dir=out | name=@{microsoft.bingmaps_2.0.2210.2401_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{89D7D6D2-AFDA-40D7-87F1-AEF426EE4B91}" = dir=in | name=@{ad2f1837.hpscanandcapture_30.0.207.0_neutral__v10z8vjag6ke6?ms-resource://ad2f1837.hpscanandcapture/resources/apptitle} | "{8A0BE3B8-E87A-42EF-AA31-D9F84F4EB99C}" = dir=in | app=c:\program files\hp\hp deskjet 3050a j611 series\bin\hpnetworkcommunicatorcom.exe | "{8BE1DCA4-C4FD-4596-879F-D4D2262C380F}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2045\agent.exe | "{8BFF8706-D79B-4548-9520-01CC054A4EC1}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{8C5F31DB-036C-4C7B-AEF4-9A01A1C2CD35}" = protocol=17 | dir=in | app=a:\spiele\bf3\battlefield 4 beta\bf4.exe | "{8E48B1F6-6C62-4DF6-A185-3117A89A91DB}" = dir=out | name=fotor | "{8E89304C-7A24-4951-A4A7-0339D7203E48}" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "{8ED5C5F5-1E76-48D5-8375-143907000F04}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{8F298505-B55E-4992-A4C2-BAD904570EE4}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2293\agent.exe | "{8FFC2C97-3050-485F-81DA-A5B9795F1427}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{916F1653-91A9-45AD-8B84-8FDF1DD80DE7}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{918A51A8-DA3E-42FB-B3F2-0EFFB9AD2544}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{91D22A61-B925-45D0-A45D-B9C6ABF26D2B}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{91FD4985-8E1E-443F-A55B-4609199ACEBE}" = dir=out | name=windows_ie_ac_001 | "{938D6652-34F7-4423-9008-8D9BA9C39F27}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\bin\sdklauncher.exe | "{9507DEF4-AFDE-4926-A939-FB0F098C9B28}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2293\agent.exe | "{95304940-1FBD-454F-8AAA-5EB2A4D121E4}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{95C9022D-5513-4C6E-BD87-047E78A9C857}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{96109DE3-C1F9-4147-8C54-A1A1C5258657}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\torchlight ii\modlauncher.exe | "{9691996E-0DF4-428A-9C16-415831F4E183}" = dir=in | app=c:\program files\hp\hp deskjet 3050a j611 series\bin\hpnetworkcommunicator.exe | "{96FA328F-F514-4113-8E5F-0F46F4503D9B}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\arcticcombat\gamelauncher_gp\mappingaccount.exe | "{99725FD5-B33C-4646-A0B7-772716799AA3}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{9AB2AB46-52AC-4F06-9FAB-DF170FE76D3F}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{9BC11306-D35E-4D0F-A2AE-CA8CF3EDE7C4}" = dir=out | name=f5 vpn | "{9DEB2512-7084-427D-B2D2-7C8AB85DD0E3}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\tomb raider\tombraider.exe | "{9E3631FB-AFB9-4340-B7F7-AAC4C2EB3005}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{9F7E562E-83B6-44DE-B91A-7A178907E5D7}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{A227E5C0-2C3A-4322-B51A-1BEEDD36F537}" = protocol=6 | dir=in | app=a:\spiele\starcraft ii\starcraft ii.exe | "{A31174EC-3A37-4313-BD62-6B5BA5122417}" = dir=out | name=@{microsoft.bingnews_2.0.0.273_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} | "{A336E4D7-7863-42F5-BEF2-110D87575587}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\mark_of_the_ninja\bin\game.exe | "{A3535C32-81A9-425F-AF9B-B79936592AB5}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2328\agent.exe | "{A50B0147-A345-4FAA-8C41-2BDDEA0F46D8}" = dir=in | name=juniper networks junos pulse | "{A624A1B4-1868-49E6-A42E-0066434D2267}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} | "{A6C0EE91-1B95-4C40-8E84-88CFCF155D4C}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | "{A922DF21-A91F-4DF5-AF5E-5D5AD28D5B97}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{A96685E4-B691-45D0-95BE-BF3C344CCFB5}" = dir=out | name=dropbox | "{A9F6DED5-72B1-4818-BCA7-DFE38E9669C3}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{AA0C7D8A-6C6D-426A-B5D7-9ACFDDFEDE7D}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\bin\sdklauncher.exe | "{AB19DC75-23DF-46B4-9989-D902C12D8120}" = protocol=6 | dir=in | app=a:\spiele\bf3\battlefield 4\bf4_x86.exe | "{AD0EDF8F-3702-464E-ABF0-4C0DBC97CA72}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{AD1763A8-E452-405A-82BC-16A6DACF638A}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{AF22A269-D81B-4CA8-975B-D5A972C1581F}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe | "{AF2DEF8E-6F90-4AD2-A2AD-4693EA7FBE3E}" = protocol=17 | dir=in | app=c:\program files (x86)\perfect world entertainment\neverwinter_en\neverwinter\live\gameclient.exe | "{B04F58E7-3117-4CA4-91C8-9B1F305BF6B0}" = protocol=6 | dir=in | app=c:\program files (x86)\perfect world entertainment\neverwinter_en\neverwinter\live\gameclient.exe | "{B1103850-81B4-4D84-89EF-E3449E4D9759}" = protocol=6 | dir=in | app=c:\program files (x86)\raptr\raptr_im.exe | "{B17CB025-64DB-4BC3-B278-69D3B692A6DC}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2391\agent.exe | "{B1D40B90-5CE2-4FC9-9C79-943304D37281}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | "{B370ED29-47EB-4382-9E74-393D575D27FA}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe | "{B3E9A149-CEF9-4D45-94E6-BFEDEE0F29B5}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{B406F487-3C40-4E9A-B0D9-23D55E35E565}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{B427C70D-E778-45E9-B3E7-B11CD6D729BA}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\half-life\hl.exe | "{B5F5AC54-72D2-4A05-ABD7-E475ADB08E15}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\company of heroes 2\reliccoh2.exe | "{B6346786-7826-4198-AE17-EE5DC0055038}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | "{B6DF6E83-D0C8-447A-928E-BAF8DBC9F6D8}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{B74AF648-52DA-45EE-A734-73AFF88319DF}" = dir=out | app=c:\program files\eslwire\wire.exe | "{B78C8A22-B79A-4A3E-8BE5-F9AD39AAB3A1}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike source\hl2.exe | "{B992EE76-361C-4CE7-868B-A4CBA83403DB}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\showdown\binaries\showdown.exe | "{B9CD360E-EF13-44CF-A66A-23679E915427}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\3dmark\bin\x64\3dmark.exe | "{BA833805-69DA-41BB-B347-BB89454E09E5}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2514\agent.exe | "{BBDDFF78-5E0D-49C3-8FE6-455EE992AC32}" = dir=out | name=@{microsoft.zunevideo_2.2.299.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{BD616911-4760-4CED-8F9E-FDD288B16038}" = protocol=6 | dir=in | app=c:\users\hanfx\appdata\roaming\spotify\spotify.exe | "{BD636E5D-A638-4B96-86B6-0736C7324DA3}" = dir=in | name=f5 vpn | "{BDA5729C-4EE6-423C-A300-84601C3097AF}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{BF14E359-F66C-4531-99F3-E8064813C057}" = protocol=17 | dir=in | app=a:\spiele\battle.net\battle.net.exe | "{BFDB7D50-160D-4C20-A5FC-053C8AC78C58}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe | "{C0510237-65A4-4EB6-AB52-75C416D6F0E6}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{C1D3C3CA-8304-4BF0-A536-BBF4EC78DD68}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | "{C1E1DD2E-A2B6-4485-8C71-057555F03358}" = protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{C1EA7052-7147-443F-935F-4867F822A387}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2514\agent.exe | "{C2A77928-4181-45C5-BFC4-4ED88EC8DAB6}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe | "{C382EFFB-B519-44DB-9408-474BD5839788}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2391\agent.exe | "{C5700083-D1F6-4549-90C4-AAEB3B6BEF89}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{C5FF0FD2-2EB8-4AEC-B39C-D8EB163AA38F}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\mark_of_the_ninja\bin\game.exe | "{C6A6DC29-1542-40D5-A67E-2B553E039D97}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\3dmark\bin\x64_steam_beta\3dmark.exe | "{C700D2C3-625A-4F19-B478-7CD76BE02FAC}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\company of heroes 2\reliccoh2.exe | "{C8114BF3-1BA9-403C-AEBB-F5D015DBE1E2}" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "{C982A81E-B06C-4868-A9D4-A4F20DBBC087}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe | "{CAAC38AD-86D2-47B2-8DE8-D1309290BDE0}" = protocol=1 | dir=in | name=hlsw icmp | "{CC794B5C-C7A9-412F-AD55-6DD3EEAA1EA9}" = protocol=17 | dir=in | app=a:\spiele\bf3\battlefield 4\bf4.exe | "{CD96AE4F-0AA0-487A-8DBA-74EC48875AD9}" = protocol=6 | dir=in | app=a:\spiele\warthunder\launcher.exe | "{CF2B7B80-CA96-4A4B-8DE8-3B1B9515F72F}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\3dmark\bin\x64_steam_beta\3dmark.exe | "{D491275D-85D3-4B6F-BB99-1E70BB2D119D}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\torchlight ii\modlauncher.exe | "{D5C08086-E256-4B95-A3B4-9E9EE372F5B9}" = protocol=17 | dir=in | app=a:\spiele\steam.exe | "{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn | "{D71C4C0D-A84F-437D-BC27-F553F9B91D00}" = protocol=6 | dir=in | app=c:\program files (x86)\raptr\raptr.exe | "{D7C87868-A83C-4FD5-BE21-033A65D37FCB}" = protocol=6 | dir=in | app=a:\spiele\bf3\battlefield 3\bf3.exe | "{D8EE2222-42C2-47D9-91D9-630D907E3B9C}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\dota 2 beta\dota.exe | "{D9504B9C-D913-462B-B24B-EB31DF95629C}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\csgo.exe | "{DAB7C7C2-B8B1-4262-9D0D-01ADB6A6DF86}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn | "{DBA87CD1-9CF5-4A12-B183-0CFCEFE6E83B}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\arcticcombat\gamelauncher_gp\mappingaccount.exe | "{DE21F964-E968-4659-A9C2-0B31D6B3C11D}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{E06D5E11-1612-4B63-A7DC-999F77EDB5AF}" = dir=out | name=@{microsoft.bingtravel_1.7.0.26_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} | "{E0ED990D-79BF-4A7F-A987-FCA22346F79A}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\torchlight ii\torchlight2.exe | "{E1C274CC-BA2C-4D9C-B733-66F13DA4C116}" = dir=in | name=sonicwall mobile connect | "{E1D9134A-967B-4785-AE5C-E4F908BFB12D}" = protocol=6 | dir=in | app=a:\spiele\bf3\battlefield 4 beta\bf4.exe | "{E2567F76-AAB5-4403-B212-733E696B0AF3}" = dir=in | app=c:\program files\eslwire\wire.exe | "{E3522075-DD8B-4DA2-9884-9AF59A4C40C7}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe | "{E448AD59-CCB6-484E-AB0C-4F2312F7E53A}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe | "{E47ED94B-FCD0-4C10-A039-DF74DE1398C2}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\company of heroes 2\reliccoh2.exe | "{E75807ED-A044-477D-9A82-E75D724598AA}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\war of the roses\run_game.exe | "{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{E9183C83-C39F-4505-AFD9-85F8313CBE4D}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\tacticalintervention\bin\tacint.exe | "{E93FB185-6A18-4FA6-BB18-165D56558D04}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike global offensive\bin\sdklauncher.exe | "{E9DCEB89-EF43-4CA2-9B42-50B01D209A6A}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\company of heroes 2\reliccoh2.exe | "{EA2BA761-9430-474F-96DB-89BEA76A4DB3}" = dir=in | app=c:\program files\hp\hp deskjet 3050a j611 series\bin\devicesetup.exe | "{EAA6672A-8A2B-4AD9-A5F2-D631D870F13A}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{EB0BA926-125D-4096-A3A0-996662FE9EE5}" = dir=out | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | "{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn | "{ECC4368D-E00E-4813-95CA-7A812763307F}" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\tacticalintervention\bin\tacint.exe | "{ECE12551-058B-44FD-8100-3C0ED92494B4}" = protocol=6 | dir=in | app=a:\spiele\warthunder\aces.exe | "{ED44A9FF-E4A6-48F5-8550-7A038500D142}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{EDBB68AC-0333-4387-8D04-BA79F90B230C}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{EE2FF6CA-64E3-49F0-9CB7-C2AD736F27FE}" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\breezer_midclan@web.de\counter-strike source\hl2.exe | "{F17F976A-7F51-4D46-9C36-63FE403C1D43}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{F3304DA2-0D9F-46BD-8800-08D0BDA98CB8}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{F4CEF4FE-138B-44D9-B8CB-D3A2A82CBB33}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe | "{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client | "{F66BC53A-EEAC-412C-9483-563DF01A98CA}" = protocol=17 | dir=in | app=c:\users\hanfx\desktop\mirc\mirc.exe | "{F67E1B7F-DC18-4920-B54D-5836F9CD9615}" = protocol=6 | dir=in | app=a:\spiele\bf3\battlefield 4\bf4.exe | "{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client | "{F7B23C3C-888B-411B-9986-130DE01F072E}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{F87F361C-8FBC-4778-AD86-DEE56D8166CA}" = dir=out | name=@{microsoft.bingnews_3.0.1.285_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/apptitle} | "{FA97B5A5-4953-471B-9DA3-98E5F3E33B8F}" = protocol=17 | dir=in | app=c:\users\hanfx\appdata\roaming\dropbox\bin\dropbox.exe | "{FE716FB8-2F03-4F2C-8A45-5FC09916F423}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{FF2DF0CB-AEDA-4A95-985C-CAD73C1B24E8}" = dir=out | name=check point vpn | "TCP Query User{03FE8437-273B-4C27-8ED1-35146D189C0A}A:\spiele\csgo\steam.exe" = protocol=6 | dir=in | app=a:\spiele\csgo\steam.exe | "TCP Query User{05994AFF-9066-4CAF-88B8-C40BCDA93631}C:\users\hanfx\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\hanfx\appdata\local\akamai\netsession_win.exe | "TCP Query User{07686882-E6BB-4FCD-923B-03DCF26E3433}C:\programdata\battle.net\agent\agent.954\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | "TCP Query User{1BEA66B9-2D0F-4B90-B02B-6B57C67199F0}A:\spiele\starcraft ii\versions\base26490\sc2.exe" = protocol=6 | dir=in | app=a:\spiele\starcraft ii\versions\base26490\sc2.exe | "TCP Query User{2880C628-F2CB-42F6-9580-9653381C1DD0}A:\spiele\wowp\wowplauncher.exe" = protocol=6 | dir=in | app=a:\spiele\wowp\wowplauncher.exe | "TCP Query User{2FFBB1B8-0174-4FE0-8665-868FEE5E13F6}A:\spiele\starcraft ii\versions\base24944\sc2.exe" = protocol=6 | dir=in | app=a:\spiele\starcraft ii\versions\base24944\sc2.exe | "TCP Query User{3282272F-5461-4E45-9250-B46F4EC2677C}A:\spiele\ca\combat arms eu\engine.exe" = protocol=6 | dir=in | app=a:\spiele\ca\combat arms eu\engine.exe | "TCP Query User{372CB4CD-EF78-4AC2-BDD9-A82FA9B4CA09}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | "TCP Query User{3D7D0A16-4B0E-42DE-85A4-E9555A9760AC}C:\program files (x86)\hearthstone\hearthstone.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "TCP Query User{443C4F39-EBDF-4878-97FD-5BD44959DA82}C:\programdata\battle.net\agent\agent.beta.2581\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe | "TCP Query User{4F1C8A07-5C12-4642-AD51-CAF36749BB81}C:\users\hanfx\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\hanfx\appdata\roaming\spotify\spotify.exe | "TCP Query User{542060B1-5689-4BD9-8D73-1536EB139F07}C:\program files (x86)\perfect world entertainment\neverwinter_en\neverwinter\live\gameclient.exe" = protocol=6 | dir=in | app=c:\program files (x86)\perfect world entertainment\neverwinter_en\neverwinter\live\gameclient.exe | "TCP Query User{6607211D-9449-425B-B80A-64512631CD97}C:\program files (x86)\diablo iii\diablo iii.exe" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | "TCP Query User{7AE2CBB4-62B8-4887-9818-EA400E7F473E}A:\spiele\warthunder\aces.exe" = protocol=6 | dir=in | app=a:\spiele\warthunder\aces.exe | "TCP Query User{8841C6BA-7DFA-49F2-B9BA-1CA1FB30EF65}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | "TCP Query User{9BA4E6CC-8745-4B61-9183-AF8CF881F6E3}C:\program files (x86)\hp\common\hpdevicedetection3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hp\common\hpdevicedetection3.exe | "TCP Query User{B7D965AA-3C4B-494D-BDE0-369365DF9346}A:\programme\ffsplit\ffsplit.exe" = protocol=6 | dir=in | app=a:\programme\ffsplit\ffsplit.exe | "TCP Query User{C9C03FC7-D0CB-4DEA-B7AE-D056F6748AD8}C:\program files (x86)\hlsw\hlsw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hlsw\hlsw.exe | "TCP Query User{CEAA9B90-8C0F-4BB5-AF5F-E241D2459EAC}A:\spiele\csgo\steamapps\common\day of defeat source\hl2.exe" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\day of defeat source\hl2.exe | "TCP Query User{D638A4B3-25D4-483F-9CBF-459CFB17D9B3}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | "TCP Query User{E39262DD-2E79-4FC5-8246-AD6C85439F29}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | "TCP Query User{EF64531B-1D75-4F37-87C4-F95A0191EE9B}A:\spiele\csgo\steam.exe" = protocol=6 | dir=in | app=a:\spiele\csgo\steam.exe | "TCP Query User{F081CE88-333C-463C-994D-43817DB798AB}A:\spiele\wowp\worldofwarplanes.exe" = protocol=6 | dir=in | app=a:\spiele\wowp\worldofwarplanes.exe | "TCP Query User{F0E70172-EEEA-4076-8A4F-CFF11F1871FE}A:\spiele\bf3\command and conquer 4\data\cnc4.game" = protocol=6 | dir=in | app=a:\spiele\bf3\command and conquer 4\data\cnc4.game | "TCP Query User{F29CE5A6-D1D5-4B3B-89D0-61FD41CD3C35}A:\spiele\csgo\steamapps\common\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike source\hl2.exe | "TCP Query User{F486B5E4-3B09-4621-B403-850AE3A29484}C:\program files (x86)\hlsw\hlsw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hlsw\hlsw.exe | "TCP Query User{F6764CB7-9BA5-4B5A-8D49-22DED26814FB}A:\spiele\hon\hon.exe" = protocol=6 | dir=in | app=a:\spiele\hon\hon.exe | "TCP Query User{FD15D252-D824-463F-B744-F790B8281C23}A:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe" = protocol=6 | dir=in | app=a:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe | "TCP Query User{FD36292D-2326-45DB-B225-25976F1DA8F6}C:\users\hanfx\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\hanfx\appdata\roaming\dropbox\bin\dropbox.exe | "TCP Query User{FF672ABC-527B-4573-8E09-99F72F97D4E0}C:\users\hanfx\desktop\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\users\hanfx\desktop\mirc\mirc.exe | "UDP Query User{0802E78F-7C0A-4FCA-96AF-9FBD90452BF7}A:\spiele\starcraft ii\versions\base24944\sc2.exe" = protocol=17 | dir=in | app=a:\spiele\starcraft ii\versions\base24944\sc2.exe | "UDP Query User{13DBD222-EBD0-4437-906F-96F73F9D7D64}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | "UDP Query User{1BBF1E9C-500D-4D98-B4A2-DD91F4F050C3}A:\spiele\csgo\steamapps\common\day of defeat source\hl2.exe" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\day of defeat source\hl2.exe | "UDP Query User{1C2F7410-8FAE-484D-9FCC-27C04D1B7AE1}A:\spiele\bf3\command and conquer 4\data\cnc4.game" = protocol=17 | dir=in | app=a:\spiele\bf3\command and conquer 4\data\cnc4.game | "UDP Query User{20D2A578-506E-438B-8FE0-A07B3A2247AA}C:\program files (x86)\hearthstone\hearthstone.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "UDP Query User{33D9EB09-D904-4214-8546-79FE018C6A2A}A:\spiele\csgo\steamapps\common\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=a:\spiele\csgo\steamapps\common\counter-strike source\hl2.exe | "UDP Query User{384F2EDD-D258-4F5C-B752-44FB74ADB987}C:\users\hanfx\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\hanfx\appdata\roaming\spotify\spotify.exe | "UDP Query User{45044274-EA4A-47BE-8519-6B790FCFD02A}C:\programdata\battle.net\agent\agent.954\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | "UDP Query User{5788A42F-EC83-4501-9664-26ACE33FB5D3}A:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe" = protocol=17 | dir=in | app=a:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe | "UDP Query User{6286761A-AC15-494C-9695-239D7099C6BD}C:\program files (x86)\diablo iii\diablo iii.exe" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | "UDP Query User{6C5D4DDA-0ACB-4F1B-94D1-3C7830093CA6}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | "UDP Query User{77648885-E3A5-4243-AAAD-789DFD5223E1}A:\programme\ffsplit\ffsplit.exe" = protocol=17 | dir=in | app=a:\programme\ffsplit\ffsplit.exe | "UDP Query User{7B3D7575-0244-416E-8A11-00AC9D998F76}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | "UDP Query User{7E0F778C-BB8C-4307-9716-60C14E167B0E}C:\programdata\battle.net\agent\agent.beta.2581\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe | "UDP Query User{8712F56C-96C0-4BEF-A6BE-196582F946ED}C:\program files (x86)\hlsw\hlsw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hlsw\hlsw.exe | "UDP Query User{878659BB-EC7E-4491-9FDE-EBBFFEB5F98B}A:\spiele\wowp\worldofwarplanes.exe" = protocol=17 | dir=in | app=a:\spiele\wowp\worldofwarplanes.exe | "UDP Query User{99E20D29-4399-4A3A-9B3E-4334B2191CD0}A:\spiele\warthunder\aces.exe" = protocol=17 | dir=in | app=a:\spiele\warthunder\aces.exe | "UDP Query User{9E47FE00-D219-4750-9322-57F3FD8178D9}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe | "UDP Query User{A28C747B-EBED-4D9C-8A6A-932E7FED314E}A:\spiele\ca\combat arms eu\engine.exe" = protocol=17 | dir=in | app=a:\spiele\ca\combat arms eu\engine.exe | "UDP Query User{A30C1B98-50EE-4D52-AC8A-A4E88A248FE6}C:\users\hanfx\desktop\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\users\hanfx\desktop\mirc\mirc.exe | "UDP Query User{A333805A-7F52-4694-9177-70C2C4A8F126}C:\users\hanfx\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\hanfx\appdata\local\akamai\netsession_win.exe | "UDP Query User{AE2DBA6B-2E01-4F6F-B331-15642FF02FEB}C:\program files (x86)\hlsw\hlsw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hlsw\hlsw.exe | "UDP Query User{B88EB736-7383-453D-85FD-21D26A1DA7CB}C:\program files (x86)\hp\common\hpdevicedetection3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hp\common\hpdevicedetection3.exe | "UDP Query User{BFB8BA51-219D-4BC0-9AE4-8B47D4531727}A:\spiele\hon\hon.exe" = protocol=17 | dir=in | app=a:\spiele\hon\hon.exe | "UDP Query User{E4BC050D-6BC5-4D55-8A43-2FA5BEEBE3E2}C:\users\hanfx\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\hanfx\appdata\roaming\dropbox\bin\dropbox.exe | "UDP Query User{EC197ED8-91DC-4227-A4CC-8B2151C4E191}A:\spiele\csgo\steam.exe" = protocol=17 | dir=in | app=a:\spiele\csgo\steam.exe | "UDP Query User{F0A83FFF-CF3A-45F1-BB02-D5964293C5DF}A:\spiele\wowp\wowplauncher.exe" = protocol=17 | dir=in | app=a:\spiele\wowp\wowplauncher.exe | "UDP Query User{F2F693BD-A964-404B-BAC3-51989149180B}A:\spiele\starcraft ii\versions\base26490\sc2.exe" = protocol=17 | dir=in | app=a:\spiele\starcraft ii\versions\base26490\sc2.exe | "UDP Query User{F6E2A999-AACF-43D3-9483-F70317B4D6F5}A:\spiele\csgo\steam.exe" = protocol=17 | dir=in | app=a:\spiele\csgo\steam.exe | "UDP Query User{F840F5D6-4DF3-42BA-A4C1-F79A60A88BD8}C:\program files (x86)\perfect world entertainment\neverwinter_en\neverwinter\live\gameclient.exe" = protocol=17 | dir=in | app=c:\program files (x86)\perfect world entertainment\neverwinter_en\neverwinter\live\gameclient.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp 1.0 RC4 "{15C339CD-5C22-1B4F-8F72-19597C95E00A}" = AMD Wireless Display v3.0 "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{2A91ED4C-888B-4681-90E0-65E8253D0589}" = AMD Accelerated Video Transcoding "{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 "{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}" = Apple Mobile Device Support "{345841F8-F9F9-9910-134E-49162B7FDDAD}" = ccc-utility64 "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{5CE7E3F5-9803-4F32-AA89-2D8848A80109}" = Microsoft LifeCam "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}" = Cisco Systems VPN Client 5.0.07.0440 "{61ADDE9C-3AE6-46FC-9127-DFFF637AED03}" = HP Deskjet 3050A J611 series - Grundlegende Software für das Gerät "{690285C2-2481-44FB-8402-162EA970A6DD}" = Logitech Gaming Software "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour "{72EF03F5-0507-4861-9A44-D99FD4C41418}" = Paint.NET v3.5.11 "{764384C5-BCA9-307C-9AAC-FD443662686A}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 "{81E20D41-C277-4526-934D-F2380AF91B78}" = iCloud "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{853A112F-241F-E344-4636-103C25D3751E}" = AMD Catalyst Install Manager "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation "{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 "{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 "{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}" = iTunes "{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64 "Advanced x64Components_is1" = x64 Components v4.4.6 "CyberGhost VPN 5_is1" = CyberGhost 5 "ESL Wire_is1" = ESL Wire 1.17.3 "GIMP-2_is1" = GIMP 2.8.10 "Logitech Gaming Software" = Logitech Gaming Software 8.46 "TAP-Windows" = TAP-Windows 9.9.2 "TeamSpeak 3 Client" = TeamSpeak 3 Client "WinRAR archiver" = WinRAR 4.20 (64-Bit) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{03D562B5-C4E2-4846-A920-33178788BE00}" = Windows Live Communications Platform "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{0F929651-F516-4956-90F2-FFBD2CD5D30E}" = Photo Gallery "{0FD66C6F-4023-4C74-AF8E-9B8B2053868E}" = Fotogalerie "{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}" = Windows Live SOXE Definitions "{15134cb0-b767-4960-a911-f2d16ae54797}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 "{1812E293-E2D1-3072-0ED4-C15163533D7E}" = CCC Help Swedish "{22154f09-719a-4619-bb71-5b3356999fbf}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 "{23B93929-FAD4-40E5-96C6-0E977BB87204}" = Windows Live Essentials "{25087F13-EBE7-C817-CA31-08C196F73B23}" = CCC Help Hungarian "{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 51 "{29043AAA-3A1A-D36B-C1CB-E201FA72C16A}" = CCC Help Dutch "{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 "{3C7F465C-765F-A038-60BE-03B7301B0161}" = CCC Help Norwegian "{3D6AD258-61EA-35F5-812C-B7A02152996E}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 "{42321261-5D40-644C-1235-927141D4FA20}" = CCC Help Portuguese "{4281435C-AD1D-4C8A-B9C0-3961C08EF142}_is1" = GoogleClean "{446CF7B3-EE4D-1C10-E2B7-87C1C8517FE8}" = CCC Help Korean "{450BED09-F405-87EE-CD52-5055B1EF8F72}" = CCC Help Chinese Standard "{45898170-E68C-4F02-AA35-C2186BF347A3}" = Movie Maker "{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support "{49DC9658-D26A-4AAB-A83A-2655B8033056}" = Photo Common "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4D628C2E-D9F7-2D3A-E610-00F4D52F219F}" = CCC Help Polish "{4E711815-5F4E-47F2-B1E1-C0B43A8D57F3}" = AIVIA GHOST "{5179641A-DC14-3A2E-BD53-480D4136C368}" = Google Talk Plugin "{553B5DE6-496A-4328-DE0B-D1C83F7FE4D8}" = CCC Help Turkish "{56D4499E-AC3E-4B8D-91C9-C700C148C44B}" = Google Drive "{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}" = Windows Live Installer "{5EA2099A-0249-1D98-5387-0BEF207D72AA}" = AMD Catalyst Control Center "{6066D3FE-3692-4449-A3C8-D1EAA2C0E9E7}" = Movie Maker "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{632396AA-8A78-A9A4-0945-7E24DF3F5B6C}" = CCC Help French "{64592305-22DF-6756-FD51-1B7234D4C6AB}" = CCC Help Russian "{6B6923B9-8719-425B-916C-CD2908F31AAF}" = Windows Live SOXE "{6DC13EFF-D4FF-65B6-7538-8B3E6075853F}" = Catalyst Control Center InstallProxy "{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}" = HP Update "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{7BC48761-EE54-AA23-5607-0D11B7550CFB}" = CCC Help Italian "{7C58E0C8-89FB-7E36-158C-5DC0B57027D9}" = CCC Help Czech "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert "{87270A4A-EDE9-BFDF-AE0C-0FBDEEA5D4BD}" = CCC Help Thai "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{8A9FC225-75F6-4B5D-911C-0ED230565643}" = HP Product Detection "{8B1A559A-FB9D-42F5-A8A7-2F132CF28414}" = Catalyst Control Center "{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX "{8C0CAA7A-3272-4991-A808-2C7559DE3409}" = Shark007 Advanced Codecs "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110 "{8F1ABC89-3D34-1D8B-DF69-EC9198604283}" = CCC Help Spanish "{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System "{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010 "{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010 "{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010 "{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010 "{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010 "{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010 "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010 "{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010 "{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010 "{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010 "{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010 "{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010 "{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010 "{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends "{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6 "{95716cce-fc71-413f-8ad5-56c2892d4b3a}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 "{96DAF3C6-C2D4-5804-E219-86C034A02355}" = CCC Help Japanese "{97DDCAB8-B770-4089-A10F-67568069D78A}" = HP Deskjet 3050A J611 series Hilfe "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BB69BDB-FE40-24D2-3822-828FB6DF6DE2}" = CCC Help German "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{a1909659-0a08-4554-8af1-2175904903a1}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 "{A71019D0-8C9D-DB8D-2801-CBFC736FF307}" = CCC Help Danish "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.05) - Deutsch "{B26438B4-BF51-49C3-9567-7F14A5E40CB9}" = Dolby Home Theater v4 "{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation "{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime "{B99E1A30-E349-FA3B-80F7-FB55EBC40996}" = CCC Help Chinese Traditional "{BB377379-D9C0-C2A4-E7D3-CCC17732DCB4}" = Catalyst Control Center InstallProxy "{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo "{C28E9DF6-C68D-18DF-076C-7E92B9F30A96}" = CCC Help English "{C68D4599-2D2A-2060-39D0-0B3DEA861657}" = Catalyst Control Center Localization All "{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}" = Windows Live Photo Common "{C7F2CDD1-60FC-49F3-A079-9BD84E4F083B}_is1" = FW_UPDATE "{CB79256B-C0E0-40C6-8EB7-BDD796203581}" = Catalyst Control Center - Branding "{CCC7C18E-1BEA-409F-B7A9-6C9740B99119}" = Windows Live UX Platform Language Pack "{CED8E25B-122A-4E80-B612-7F99B93284B3}" = Arc "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E3445598-4424-4EE2-B71C-C23325F7FB71}" = Windows Live PIMT Platform "{E7D4E834-93EB-351F-B8FB-82CDAE623003}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 "{F07DD099-4BB2-44E9-8E64-FE9B781E8C02}" = ASUS Phoebus Audio Sound Card "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}" = Windows Live UX Platform "{F940E929-2FFF-1F4E-7ECB-DE1B0377D627}" = CCC Help Finnish "{FB4D076A-DEFD-4EAF-AD63-70D5A3BC262A}" = ASUS MultiFrame "{FB8AF07B-42FB-4746-058A-B6A063472452}" = CCC Help Greek "{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 "Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.6 "Battle.net" = Battle.net "Diablo III" = Diablo III "ESN Sonar-0.70.4" = ESN Sonar "Free YouTube Download_is1" = Free YouTube Download version 3.2.20.1230 "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.12.11.812 "Google Chrome" = Google Chrome "Hearthstone" = Hearthstone "HLSW_is1" = HLSW v1.4.0.2 "HP Photo Creations" = HP Photo Creations "Microsoft DirectX SDK (June 2010)" = Microsoft DirectX SDK (June 2010) "mIRC" = mIRC "Mozilla Firefox 25.0 (x86 de)" = Mozilla Firefox 25.0 (x86 de) "MozillaMaintenanceService" = Mozilla Maintenance Service "Office14.PROPLUSR" = Microsoft Office Professional Plus 2010 "Open Broadcaster Software" = Open Broadcaster Software "Open Codecs" = Xiph.Org Open Codecs 0.85.17777 "OpenAL" = OpenAL "Origin" = Origin "Plus-HD-4.2" = Plus-HD-4.2 "PunkBusterSvc" = PunkBuster Services "StarCraft II" = StarCraft II "Steam App 10" = Counter-Strike "Steam App 200710" = Torchlight II "Steam App 203160" = Tomb Raider "Steam App 204080" = The Showdown Effect "Steam App 214560" = Mark of the Ninja "Steam App 231430" = Company of Heroes 2 "Steam App 240" = Counter-Strike: Source "Steam App 300" = Day of Defeat: Source "Steam App 570" = Dota 2 "Steam App 730" = Counter-Strike: Global Offensive "Steam App 745" = Counter-Strike: Global Offensive - SDK "TeamViewer 8" = TeamViewer 8 "WinLiveSuite" = Windows Live Essentials ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-1102202105-3208666232-3045638287-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Dropbox" = Dropbox "MusicManager" = Music Manager "Spotify" = Spotify ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 27.11.2013 18:33:19 | Computer Name = hanFX-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: League of Legends.exe, Version: 3.14.0.738, Zeitstempel: 0x52945869 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x918 Startzeit der fehlerhaften Anwendung: 0x01ceebc0aa25fd6c Pfad der fehlerhaften Anwendung: A:\Spiele\League of Legends\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.0\deploy\League of Legends.exe Pfad des fehlerhaften Moduls: unknown Berichtskennung: e9b19a16-57b3-11e3-beed-bc5ff47c461c Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error - 30.11.2013 14:49:55 | Computer Name = hanFX-PC | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 30.11.2013 14:49:55 | Computer Name = hanFX-PC | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 1907 Error - 30.11.2013 14:49:55 | Computer Name = hanFX-PC | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 1907 Error - 30.11.2013 14:49:57 | Computer Name = hanFX-PC | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 30.11.2013 14:49:57 | Computer Name = hanFX-PC | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 3829 Error - 30.11.2013 14:49:57 | Computer Name = hanFX-PC | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 3829 Error - 01.12.2013 06:24:46 | Computer Name = hanFX-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.3.9600.16441, Zeitstempel: 0x5265dec8 Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.9600.16384, Zeitstempel: 0x5215f944 Ausnahmecode: 0x40000015 Fehleroffset: 0x0000000000055326 ID des fehlerhaften Prozesses: 0xcf8 Startzeit der fehlerhaften Anwendung: 0x01ceedf8f05ff147 Pfad der fehlerhaften Anwendung: C:\WINDOWS\Explorer.EXE Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\msvcrt.dll Berichtskennung: cc909bc4-5a72-11e3-bef1-bc5ff47c461c Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error - 01.12.2013 18:09:27 | Computer Name = hanFX-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: League of Legends.exe, Version: 3.14.0.738, Zeitstempel: 0x52945869 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x2318 Startzeit der fehlerhaften Anwendung: 0x01ceeee1fe15c877 Pfad der fehlerhaften Anwendung: A:\Spiele\League of Legends\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.0\deploy\League of Legends.exe Pfad des fehlerhaften Moduls: unknown Berichtskennung: 3dafd9a2-5ad5-11e3-bef2-bc5ff47c461c Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error - 02.12.2013 14:25:08 | Computer Name = hanFX-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: League of Legends.exe, Version: 3.14.0.738, Zeitstempel: 0x52945869 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x1b70 Startzeit der fehlerhaften Anwendung: 0x01ceef8bd2d3e218 Pfad der fehlerhaften Anwendung: A:\Spiele\League of Legends\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.0\deploy\League of Legends.exe Pfad des fehlerhaften Moduls: unknown Berichtskennung: 1267fc9c-5b7f-11e3-bef3-bc5ff47c461c Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error - 03.12.2013 00:51:39 | Computer Name = hanFX-PC | Source = Microsoft-Windows-CAPI2 | ID = 513 Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . [ System Events ] Error - 19.01.2014 17:53:11 | Computer Name = hanFX-PC | Source = DCOM | ID = 10010 Description = Error - 20.01.2014 16:57:10 | Computer Name = hanFX-PC | Source = DCOM | ID = 10016 Description = Error - 21.01.2014 12:01:06 | Computer Name = hanFX-PC | Source = DCOM | ID = 10016 Description = Error - 21.01.2014 20:46:20 | Computer Name = hanFX-PC | Source = DCOM | ID = 10010 Description = Error - 22.01.2014 14:46:22 | Computer Name = hanFX-PC | Source = DCOM | ID = 10016 Description = Error - 24.01.2014 09:01:30 | Computer Name = hanFX-PC | Source = DCOM | ID = 10016 Description = Error - 24.01.2014 21:47:59 | Computer Name = hanFX-PC | Source = Schannel | ID = 36888 Description = Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252. Error - 24.01.2014 21:48:20 | Computer Name = hanFX-PC | Source = Schannel | ID = 36888 Description = Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 252. Error - 25.01.2014 09:45:51 | Computer Name = hanFX-PC | Source = DCOM | ID = 10016 Description = Error - 26.01.2014 08:10:58 | Computer Name = hanFX-PC | Source = DCOM | ID = 10016 Description = < End of report > |
|
26.01.2014, 14:03
| #2 |
| | OTL Analyse "Problem: search conduit" nach codec installation OTL Logfile:
__________________Code:
ATTFilter OTL logfile created on: 26.01.2014 13:54:30 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\hanFX\Downloads 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16476) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,89 Gb Total Physical Memory | 5,20 Gb Available Physical Memory | 65,89% Memory free 9,14 Gb Paging File | 6,06 Gb Available in Paging File | 66,29% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 111,45 Gb Total Space | 24,59 Gb Free Space | 22,06% Space Free | Partition Type: NTFS Drive E: | 465,73 Gb Total Space | 225,15 Gb Free Space | 48,34% Space Free | Partition Type: NTFS Drive F: | 465,62 Gb Total Space | 459,11 Gb Free Space | 98,60% Space Free | Partition Type: FAT32 Computer Name: **** | User Name: **** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\hanFX\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Users\hanFX\AppData\Roaming\Spotify\spotify.exe (Spotify Ltd) PRC - C:\Users\hanFX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd) PRC - C:\Users\hanFX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) PRC - C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) PRC - A:\Spiele\csgo\Steam.exe (Valve Corporation) PRC - C:\Users\hanFX\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) PRC - C:\Windows\SysWOW64\PnkBstrA.exe () PRC - C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google) PRC - A:\Programme\plugins\ts3overlay\InstallHook.exe () PRC - C:\Users\hanFX\Documents\GIGABYTE\AIVIA GHOST\Tilt.exe () PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) PRC - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH) PRC - C:\Users\hanFX\Documents\GIGABYTE\AIVIA GHOST\GHOSTOPEN.exe () PRC - C:\Windows\System\ATLOISAService.exe (Cmedia Electronics Inc.) PRC - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.) PRC - C:\Windows\SysWOW64\ExMgr.exe () ========== Modules (No Company Name) ========== MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\wx._core_.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\_ssl.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\wx._controls_.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\wx._windows_.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\wx._gdi_.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\wx._misc_.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\_hashlib.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\unicodedata.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\pysqlite2._sqlite.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\windows._lib_cacheinvalidation.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\pythoncom27.dll () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32com.shell.shell.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\_elementtree.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\pyexpat.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\wx._wizard.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32file.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\pywintypes27.dll () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32security.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32api.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\_ctypes.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\wx._html2.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\_socket.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32inet.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32process.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\_multiprocessing.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32pdh.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32pipe.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32ts.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32event.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32profile.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\win32crypt.pyd () MOD - C:\Users\hanFX\AppData\Local\Temp\_MEI55442\select.pyd () MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () MOD - C:\Users\hanFX\AppData\Roaming\Spotify\Data\libcef.dll () MOD - C:\Users\hanFX\AppData\Roaming\Spotify\Data\libglesv2.dll () MOD - C:\Users\hanFX\AppData\Roaming\Spotify\Data\SpotifyHelper.exe () MOD - C:\Users\hanFX\AppData\Roaming\Spotify\Data\libegl.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\libglesv2.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\libegl.dll () MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ffmpegsumo.dll () MOD - A:\Spiele\csgo\bin\chromehtml.dll () MOD - C:\Users\hanFX\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll () MOD - A:\Spiele\csgo\libavresample-1.dll () MOD - A:\Spiele\csgo\bin\libcef.dll () MOD - A:\Spiele\csgo\SDL2.dll () MOD - A:\Spiele\csgo\libavutil-52.dll () MOD - C:\Users\hanFX\AppData\Roaming\Dropbox\bin\libcef.dll () MOD - A:\Programme\plugins\ts3overlay\InstallHook.exe () MOD - C:\Users\hanFX\Documents\GIGABYTE\AIVIA GHOST\Tilt.exe () MOD - A:\Spiele\csgo\bin\avcodec-53.dll () MOD - A:\Spiele\csgo\bin\avformat-53.dll () MOD - A:\Spiele\csgo\bin\avutil-51.dll () MOD - C:\Users\hanFX\Documents\GIGABYTE\AIVIA GHOST\GHOSTOPEN.exe () MOD - C:\Windows\SysWOW64\ExSrv.dll () MOD - C:\Windows\SysWOW64\ExMgr.exe () ========== Services (SafeList) ========== SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (WSService) -- C:\Windows\SysNative\WSService.dll (Microsoft Corporation) SRV:64bit: - (BrokerInfrastructure) -- C:\Windows\SysNative\bisrv.dll (Microsoft Corporation) SRV:64bit: - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation) SRV:64bit: - (AppXSvc) -- C:\Windows\SysNative\AppXDeploymentServer.dll (Microsoft Corporation) SRV:64bit: - (workfolderssvc) -- C:\Windows\SysNative\workfolderssvc.dll (Microsoft Corporation) SRV:64bit: - (IEEtwCollectorService) -- C:\WINDOWS\SysNative\IEEtwCollector.exe (Microsoft Corporation) SRV:64bit: - (AppReadiness) -- C:\Windows\SysNative\AppReadiness.dll (Microsoft Corporation) SRV:64bit: - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation) SRV:64bit: - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation) SRV:64bit: - (lfsvc) -- C:\Windows\SysNative\GeofenceMonitorService.dll (Microsoft Corporation) SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SRV:64bit: - (MsKeyboardFilter) -- C:\Windows\SysNative\KeyboardFilterSvc.dll (Microsoft Corporation) SRV:64bit: - (vmms) -- C:\Windows\SysNative\vmms.exe (Microsoft Corporation) SRV:64bit: - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation) SRV:64bit: - (WEPHOSTSVC) -- C:\Windows\SysNative\wephostsvc.dll (Microsoft Corporation) SRV:64bit: - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation) SRV:64bit: - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation) SRV:64bit: - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation) SRV:64bit: - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation) SRV:64bit: - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation) SRV:64bit: - (vmicvss) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicrdv) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicguestinterface) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation) SRV:64bit: - (smphost) -- C:\Windows\SysNative\smphost.dll (Microsoft Corporation) SRV:64bit: - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation) SRV:64bit: - (ScDeviceEnum) -- C:\Windows\SysNative\ScDeviceEnum.dll (Microsoft Corporation) SRV:64bit: - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation) SRV:64bit: - (TimeBroker) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation) SRV:64bit: - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation) SRV:64bit: - (NcbService) -- C:\Windows\SysNative\ncbservice.dll (Microsoft Corporation) SRV:64bit: - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation) SRV:64bit: - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation) SRV:64bit: - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation) SRV:64bit: - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation) SRV:64bit: - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (ArcService) -- C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe (Perfect World Entertainment Inc) SRV - (CGVPNCliService) -- C:\Programme\CyberGhost 5\Service.exe (CyberGhost S.R.L) SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation) SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe () SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (lfsvc) -- C:\Windows\SysWOW64\GeofenceMonitorService.dll (Microsoft Corporation) SRV - (PrintNotify) -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation) SRV - (StorSvc) -- C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation) SRV - (smphost) -- C:\Windows\SysWOW64\smphost.dll (Microsoft Corporation) SRV - (EslWireHelper) -- C:\Programme\EslWire\service\WireHelperSvc.exe () SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (TeamViewer8) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH) SRV - (ATLMonitorService) -- C:\Windows\System\MonitorService.exe (Cmedia Electronics Inc) SRV - (Futuremark SystemInfo Service) -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe (Futuremark Corporation) SRV - (ATLOISAService) -- C:\Windows\System\ATLOISAService.exe (Cmedia Electronics Inc.) SRV - (CVPND) -- C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.) SRV - (MSCamSvc) -- C:\Programme\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation) SRV - (osppsvc) -- C:\Programme\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation) DRV:64bit: - (intaud_WaveExtensible) -- C:\Windows\SysNative\drivers\intelaud.sys (Intel Corporation) DRV:64bit: - (iwdbus) -- C:\Windows\SysNative\drivers\iwdbus.sys (Intel Corporation) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (ESLWireAC) -- C:\Windows\SysNative\drivers\ESLWireACD.sys (<Turtle Entertainment>) DRV:64bit: - (intelpep) -- C:\Windows\SysNative\drivers\intelpep.sys (Microsoft Corporation) DRV:64bit: - (USBXHCI) -- C:\Windows\SysNative\drivers\USBXHCI.SYS (Microsoft Corporation) DRV:64bit: - (pdc) -- C:\Windows\SysNative\drivers\pdc.sys (Microsoft Corporation) DRV:64bit: - (spaceport) -- C:\Windows\SysNative\drivers\spaceport.sys (Microsoft Corporation) DRV:64bit: - (SerCx2) -- C:\Windows\SysNative\drivers\SerCx2.sys (Microsoft Corporation) DRV:64bit: - (hvservice) -- C:\Windows\SysNative\drivers\hvservice.sys (Microsoft Corporation) DRV:64bit: - (pvhdparser) -- C:\Windows\SysNative\drivers\pvhdparser.sys (Microsoft Corporation) DRV:64bit: - (passthruparser) -- C:\Windows\SysNative\drivers\passthruparser.sys (Microsoft Corporation) DRV:64bit: - (vhdparser) -- C:\Windows\SysNative\drivers\vhdparser.sys (Microsoft Corporation) DRV:64bit: - (lunparser) -- C:\Windows\SysNative\drivers\lunparser.sys (Microsoft Corporation) DRV:64bit: - (WFPLWFS) -- C:\Windows\SysNative\drivers\wfplwfs.sys (Microsoft Corporation) DRV:64bit: - (VMSVSP) -- C:\Windows\SysNative\drivers\vmswitch.sys (Microsoft Corporation) DRV:64bit: - (VMSVSF) -- C:\Windows\SysNative\drivers\vmswitch.sys (Microsoft Corporation) DRV:64bit: - (VMSP) -- C:\Windows\SysNative\drivers\vmswitch.sys (Microsoft Corporation) DRV:64bit: - (VMSMP) -- C:\Windows\SysNative\drivers\vmswitch.sys (Microsoft Corporation) DRV:64bit: - (stornvme) -- C:\Windows\SysNative\drivers\stornvme.sys (Microsoft Corporation) DRV:64bit: - (USBHUB3) -- C:\Windows\SysNative\drivers\USBHUB3.SYS (Microsoft Corporation) DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation) DRV:64bit: - (VerifierExt) -- C:\Windows\SysNative\drivers\VerifierExt.sys (Microsoft Corporation) DRV:64bit: - (kbldfltr) -- C:\Windows\SysNative\drivers\kbldfltr.sys (Microsoft Corporation) DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV:64bit: - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation) DRV:64bit: - (Vid) -- C:\Windows\SysNative\drivers\Vid.sys (Microsoft Corporation) DRV:64bit: - (vmbusr) -- C:\Windows\SysNative\drivers\vmbusr.sys (Microsoft Corporation) DRV:64bit: - (storvsp) -- C:\Windows\SysNative\drivers\storvsp.sys (Microsoft Corporation) DRV:64bit: - (vpcivsp) -- C:\Windows\SysNative\drivers\vpcivsp.sys (Microsoft Corporation) DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\drivers\AtihdWB6.sys (Advanced Micro Devices) DRV:64bit: - (condrv) -- C:\Windows\SysNative\drivers\condrv.sys (Microsoft Corporation) DRV:64bit: - (Fs_Rec) -- C:\WINDOWS\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (dam) -- C:\Windows\SysNative\drivers\dam.sys (Microsoft Corporation) DRV:64bit: - (acpiex) -- C:\Windows\SysNative\drivers\acpiex.sys (Microsoft Corporation) DRV:64bit: - (TPM) -- C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation) DRV:64bit: - (mvumis) -- C:\Windows\SysNative\drivers\mvumis.sys (Marvell Semiconductor, Inc.) DRV:64bit: - (GPIOClx0101) -- C:\Windows\SysNative\drivers\msgpioclx.sys (Microsoft Corporation) DRV:64bit: - (msgpiowin32) -- C:\Windows\SysNative\drivers\msgpiowin32.sys (Microsoft Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (LSI_SSS) -- C:\Windows\SysNative\drivers\lsi_sss.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (LSI_SAS3) -- C:\Windows\SysNative\drivers\lsi_sas3.sys (LSI Corporation) DRV:64bit: - (ADP80XX) -- C:\Windows\SysNative\drivers\adp80xx.sys (PMC-Sierra) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (3ware) -- C:\Windows\SysNative\drivers\3ware.sys (LSI) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (EhStorTcgDrv) -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys (Microsoft Corporation) DRV:64bit: - (EhStorClass) -- C:\Windows\SysNative\drivers\EhStorClass.sys (Microsoft Corporation) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (VSTXRAID) -- C:\Windows\SysNative\drivers\VSTXRAID.SYS (VIA Corporation) DRV:64bit: - (UCX01000) -- C:\Windows\SysNative\drivers\UCX01000.SYS (Microsoft Corporation) DRV:64bit: - (UASPStor) -- C:\Windows\SysNative\drivers\uaspstor.sys (Microsoft Corporation) DRV:64bit: - (sdstor) -- C:\Windows\SysNative\drivers\sdstor.sys (Microsoft Corporation) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology, Inc.) DRV:64bit: - (storahci) -- C:\Windows\SysNative\drivers\storahci.sys (Microsoft Corporation) DRV:64bit: - (SpbCx) -- C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation) DRV:64bit: - (SerCx) -- C:\Windows\SysNative\drivers\SerCx.sys (Microsoft Corporation) DRV:64bit: - (wpcfltr) -- C:\Windows\SysNative\drivers\wpcfltr.sys (Microsoft Corporation) DRV:64bit: - (tap0901) -- C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project) DRV:64bit: - (CLFS) -- C:\Windows\SysNative\drivers\clfs.sys (Microsoft Corporation) DRV:64bit: - (ReFS) -- C:\WINDOWS\SysNative\drivers\refs.sys (Microsoft Corporation) DRV:64bit: - (UEFI) -- C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation) DRV:64bit: - (vpci) -- C:\Windows\SysNative\drivers\vpci.sys (Microsoft Corporation) DRV:64bit: - (WpdUpFltr) -- C:\Windows\SysNative\drivers\WpdUpFltr.sys (Microsoft Corporation) DRV:64bit: - (WdFilter) -- C:\Windows\SysNative\drivers\WdFilter.sys (Microsoft Corporation) DRV:64bit: - (WdNisDrv) -- C:\Windows\SysNative\drivers\WdNisDrv.sys (Microsoft Corporation) DRV:64bit: - (WdBoot) -- C:\Windows\SysNative\drivers\WdBoot.sys (Microsoft Corporation) DRV:64bit: - (ahcache) -- C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation) DRV:64bit: - (BasicDisplay) -- C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation) DRV:64bit: - (BasicRender) -- C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation) DRV:64bit: - (HyperVideo) -- C:\Windows\SysNative\drivers\HyperVideo.sys (Microsoft Corporation) DRV:64bit: - (mshidumdf) -- C:\Windows\SysNative\drivers\mshidumdf.sys (Microsoft Corporation) DRV:64bit: - (acpitime) -- C:\Windows\SysNative\drivers\acpitime.sys (Microsoft Corporation) DRV:64bit: - (acpipagr) -- C:\Windows\SysNative\drivers\acpipagr.sys (Microsoft Corporation) DRV:64bit: - (BthAvrcpTg) -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys (Microsoft Corporation) DRV:64bit: - (kdnic) -- C:\Windows\SysNative\drivers\kdnic.sys (Microsoft Corporation) DRV:64bit: - (xusb22) -- C:\Windows\SysNative\drivers\xusb22.sys (Microsoft Corporation) DRV:64bit: - (gencounter) -- C:\Windows\SysNative\drivers\vmgencounter.sys (Microsoft Corporation) DRV:64bit: - (npsvctrig) -- C:\Windows\SysNative\drivers\npsvctrig.sys (Microsoft Corporation) DRV:64bit: - (bthhfhid) -- C:\Windows\SysNative\drivers\BthhfHid.sys (Microsoft Corporation) DRV:64bit: - (hyperkbd) -- C:\Windows\SysNative\drivers\hyperkbd.sys (Microsoft Corporation) DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation) DRV:64bit: - (BthHFEnum) -- C:\Windows\SysNative\drivers\bthhfenum.sys (Microsoft Corporation) DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:64bit: - (hidi2c) -- C:\Windows\SysNative\drivers\hidi2c.sys (Microsoft Corporation) DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation) DRV:64bit: - (netvsc) -- C:\Windows\SysNative\drivers\netvsc63.sys (Microsoft Corporation) DRV:64bit: - (NdisVirtualBus) -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys (Microsoft Corporation) DRV:64bit: - (NdisImPlatform) -- C:\Windows\SysNative\drivers\NdisImPlatform.sys (Microsoft Corporation) DRV:64bit: - (MsLldp) -- C:\Windows\SysNative\drivers\mslldp.sys (Microsoft Corporation) DRV:64bit: - (Ndu) -- C:\Windows\SysNative\drivers\Ndu.sys (Microsoft Corporation) DRV:64bit: - (FxPPM) -- C:\Windows\SysNative\drivers\fxppm.sys (Microsoft Corporation) DRV:64bit: - (bcmfn2) -- C:\Windows\SysNative\drivers\bcmfn2.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (iaStorAV) -- C:\Windows\SysNative\drivers\iaStorAV.sys (Intel Corporation) DRV:64bit: - (iaLPSSi_GPIO) -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys (Intel Corporation) DRV:64bit: - (iaLPSSi_I2C) -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys (Intel Corporation) DRV:64bit: - (RTL8168) -- C:\Windows\SysNative\drivers\Rt630x64.sys (Realtek ) DRV:64bit: - (SaiNtBus) -- C:\Windows\SysNative\drivers\SaiBus.sys (Saitek) DRV:64bit: - (SaiMini) -- C:\Windows\SysNative\drivers\SaiMini.sys (Saitek) DRV:64bit: - (ISCT) -- C:\Windows\SysNative\drivers\ISCTD64.sys () DRV:64bit: - (LGSHidFilt) -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys (Logitech Inc.) DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (busenum) -- C:\Windows\SysNative\drivers\SteelBus64.sys (SteelSeries Corporation) DRV:64bit: - (CmHdAudAddService) -- C:\Windows\SysNative\drivers\CMHDAudioV64.sys (C-Media Electronics Inc.) DRV:64bit: - (amdkmafd) -- C:\Windows\SysNative\drivers\amdkmafd.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.) DRV:64bit: - (I1KBFLTR) -- C:\Windows\SysNative\drivers\I1KBFLTR.sys () DRV:64bit: - (LADF_RenderOnly) -- C:\Windows\SysNative\drivers\ladfGSRamd64.sys (Logitech) DRV:64bit: - (LADF_CaptureOnly) -- C:\Windows\SysNative\drivers\ladfGSCamd64.sys (Logitech) DRV:64bit: - (CVPNDRVA) -- C:\Windows\SysNative\drivers\CVPNDRVA.sys () DRV:64bit: - (MSHUSBVideo) -- C:\Windows\SysNative\drivers\nx6000.sys (Microsoft Corporation) DRV:64bit: - (CVirtA) -- C:\Windows\SysNative\drivers\CVirtA64.sys (Cisco Systems, Inc.) DRV:64bit: - (DNE) -- C:\Windows\SysNative\drivers\dne64x.sys (Deterministic Networks, Inc.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = GIGA - Leidenschaft für Technik und Games [binary data] IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Suche IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE,de;q=0.5 IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 56 85 FB 71 9A F9 CE 01 [binary data] IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\..\SearchScopes,DefaultScope = {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\..\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = hxxp://search.conduit.com/Results.aspx?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPF24DFAD7-F3AE-4AE2-84B2-414ABCCA5D3F&q={searchTerms}&SSPV= IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local> ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Conduit Search" FF - prefs.js..browser.search.selectedEngine: "Conduit Search" FF - prefs.js..browser.startup.homepage: "hxxp://search.conduit.com/?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPF24DFAD7-F3AE-4AE2-84B2-414ABCCA5D3F&SSPV=" FF - prefs.js..extensions.enabledAddons: %7B635abd67-4fe9-1b23-4f01-e679fa7484c1%7D:3.1.0.20130818030116 FF - prefs.js..extensions.enabledAddons: 4a36b460-5966-4a44-96b2-c66dc9e96aef%40620c1174-9430-4c20-bd46-cf4730b71caf.com:0.93.90 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0 FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: A:\Programme\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll File not found FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.7: C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll File not found FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@perfectworld.com/npArcPlayNowPlugin: C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\hanFX\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\hanFX\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\hanFX\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\hanFX\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\hanFX\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 25.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 25.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.06.27 12:03:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hanFX\AppData\Roaming\mozilla\Extensions [2014.01.26 13:30:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hanFX\AppData\Roaming\mozilla\Firefox\Profiles\n5wnth76.default\extensions [2013.09.15 10:03:30 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\hanFX\AppData\Roaming\mozilla\Firefox\Profiles\n5wnth76.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2014.01.26 13:30:05 | 000,000,000 | ---D | M] ("Plus-HD-4.2") -- C:\Users\hanFX\AppData\Roaming\mozilla\Firefox\Profiles\n5wnth76.default\extensions\4a36b460-5966-4a44-96b2-c66dc9e96aef@620c1174-9430-4c20-bd46-cf4730b71caf.com [2014.01.26 13:42:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hanFX\AppData\Roaming\mozilla\Firefox\Profiles\n5wnth76.default\extensions\4a36b460-5966-4a44-96b2-c66dc9e96aef@620c1174-9430-4c20-bd46-cf4730b71caf.com\extensionData [2014.01.26 13:42:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hanFX\AppData\Roaming\mozilla\Firefox\Profiles\n5wnth76.default\extensions\4a36b460-5966-4a44-96b2-c66dc9e96aef@620c1174-9430-4c20-bd46-cf4730b71caf.com\extensionData\plugins [2014.01.26 13:42:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\hanFX\AppData\Roaming\mozilla\Firefox\Profiles\n5wnth76.default\extensions\4a36b460-5966-4a44-96b2-c66dc9e96aef@620c1174-9430-4c20-bd46-cf4730b71caf.com\extensionData\userCode [2014.01.26 13:33:26 | 000,000,861 | ---- | M] () -- C:\Users\hanFX\AppData\Roaming\mozilla\firefox\profiles\n5wnth76.default\searchplugins\conduit-search.xml [2013.12.08 20:52:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2013.12.08 20:52:25 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2013.12.08 20:52:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\distribution\extensions [2013.12.08 20:52:14 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Program Files (x86)\mozilla firefox\distribution\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: Suche CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll CHR - Extension: ProxTube = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.7_0\ CHR - Extension: ChromeAccess = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aeoigbhkilbllfomkmmilbfochhlgdmh\1.6_0\ CHR - Extension: Angry Birds = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\ CHR - Extension: Google Docs = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Google Drive = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Adblock Plus = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0\ CHR - Extension: Google-Suche = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: GFACE Experience Plugin = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdlfmdbdibkbfdpjocdaolcheehmpol\0.39.0_0\ CHR - Extension: Proxy link for YouTube\u2122 = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpccpcaielehgefaagocjkkgkafaabdp\1.2.3_0\ CHR - Extension: Plus-HD-4.2 = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikglgnekadileanonnapmgkeklpgjifk\1.26.90_0\crossrider CHR - Extension: Plus-HD-4.2 = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikglgnekadileanonnapmgkeklpgjifk\1.26.90_0\ CHR - Extension: Hangouts-Anruf = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbpgddbgniojgndnhlkjbkpknjhppkbk\2013.1114.1030.1_0\ CHR - Extension: HangPay = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\megjijdemeljijhjlohfekikknjofbmf\1.0_0\ CHR - Extension: FlashControl = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe\3.4.0_0\ CHR - Extension: Streetskaten = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmilifhaodminnjikamebfboilnbamap\1.1_0\ CHR - Extension: Google Wallet = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1\ CHR - Extension: Google Mail = C:\Users\hanFX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013.06.27 10:01:33 | 000,001,297 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 255.255.255.255 easyanticheat.se # misleading site O1 - Hosts: 255.255.255.255 www.easyanticheat.se # misleading site O1 - Hosts: 255.255.255.255 easyanticheat.com # misleading site O1 - Hosts: 255.255.255.255 www.easyanticheat.com # misleading site O1 - Hosts: 255.255.255.255 easyanticheat.info # misleading site O1 - Hosts: 255.255.255.255 www.easyanticheat.info # misleading site O1 - Hosts: 255.255.255.255 easyanticheat.org # misleading site O1 - Hosts: 255.255.255.255 www.easyanticheat.org # misleading site O2:64bit: - BHO: (Plus-HD-4.2) - {11111111-1111-1111-1111-110311921102} - C:\Program Files (x86)\Plus-HD-4.2\Plus-HD-4.2-bho64.dll (Plus HD) O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Plus-HD-4.2) - {11111111-1111-1111-1111-110311921102} - C:\Program Files (x86)\Plus-HD-4.2\Plus-HD-4.2-bho.dll (Plus HD) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (ArcPluginIEBHO Class) - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4:64bit: - HKLM..\Run: [GamecomSound] C:\Program Files\ASUS Phoebus Audio Sound Card\CPL\Phoebus_x64.exe () O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\WINDOWS\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.) O4:64bit: - HKLM..\Run: [Persistence] C:\WINDOWS\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [PheobusEX] C:\WINDOWS\syswow64\ExMgr.exe () O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [ghost] C:\Users\hanFX\Documents\GIGABYTE\AIVIA GHOST\ghostopen.exe () O4 - HKLM..\Run: [iTunesHelper] A:\Programme\iTunesHelper.exe (Apple Inc.) O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [Tilt] C:\Users\hanFX\Documents\GIGABYTE\AIVIA GHOST\Tilt.exe () O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [AE0301299C5A4A8D280F7B7EBC29D7C06AA9883A._service_run] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [Akamai NetSession Interface] "C:\Users\hanFX\AppData\Local\Akamai\netsession_win.exe" File not found O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [CyberGhost] C:\Program Files\CyberGhost 5\CyberGhost.EXE (CyberGhost S.R.L.) O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [GoogleDriveSync] C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google) O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log File not found O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [MusicManager] C:\Users\hanFX\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Google Inc.) O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent File not found O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe () O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [Spotify] C:\Users\hanFX\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [Spotify Web Helper] C:\Users\hanFX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd) O4 - HKU\S-1-5-21-1102202105-3208666232-3045638287-1000..\Run: [Steam] A:\Spiele\csgo\steam.exe (Valve Corporation) O4 - Startup: C:\Users\hanFX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\hanFX\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 File not found O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{11730A81-6ECC-4AA3-8947-8B1B93950BFF}: DhcpNameServer = 192.168.178.1 O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\WINDOWS\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation) O30 - LSA: Security Packages - (livessp) - File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.12.30 22:35:26 | 000,000,088 | ---- | M] () - F:\Autorun.inf -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2014.01.26 13:30:12 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Roaming\Shark007 [2014.01.26 13:30:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Shark007 [2014.01.26 13:30:09 | 003,554,304 | ---- | C] (x264vfw project) -- C:\WINDOWS\SysNative\x264vfw.dll [2014.01.26 13:30:09 | 001,631,552 | ---- | C] (MPC-HC Team) -- C:\WINDOWS\SysNative\VSFilter.dll [2014.01.26 13:30:09 | 000,361,472 | ---- | C] (fccHandler) -- C:\WINDOWS\SysNative\aacacm.acm [2014.01.26 13:30:09 | 000,180,736 | ---- | C] (fccHandler) -- C:\WINDOWS\SysNative\ac3acm.acm [2014.01.26 13:30:09 | 000,124,909 | ---- | C] (Open Source Software community project) -- C:\WINDOWS\SysNative\pthreadGC2.dll [2014.01.26 13:30:09 | 000,000,000 | ---D | C] -- C:\Program Files\Shark007 [2014.01.26 13:30:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Plus-HD-4.2 [2014.01.26 13:28:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs [2014.01.26 13:28:24 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Roaming\Advanced [2014.01.26 13:28:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Shark007 [2014.01.26 13:26:38 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Roaming\SpeedyPC Software [2014.01.26 13:26:38 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Roaming\DriverCure [2014.01.26 13:26:34 | 000,000,000 | ---D | C] -- C:\ProgramData\SpeedyPC Software [2014.01.26 13:26:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Advanced [2014.01.26 13:21:01 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Local\Apps [2014.01.25 01:11:38 | 000,000,000 | -H-D | C] -- C:\ArcTemp [2014.01.25 01:10:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment [2014.01.25 01:10:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Perfect World Entertainment [2014.01.24 14:28:08 | 000,000,000 | ---D | C] -- C:\Users\hanFX\Desktop\Programme [2014.01.24 14:06:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\de [2014.01.24 14:06:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live [2014.01.24 14:05:55 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Local\Windows Live [2014.01.24 14:05:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live [2014.01.20 22:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java [2014.01.19 15:05:26 | 001,328,960 | ---- | C] (MPC-HC Team) -- C:\WINDOWS\SysWow64\VSFilter.dll [2014.01.17 11:46:11 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Local\webkit [2014.01.17 11:43:14 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Local\gtk-2.0 [2014.01.17 11:43:09 | 000,000,000 | ---D | C] -- C:\Users\hanFX\.thumbnails [2014.01.17 11:42:16 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Local\fontconfig [2014.01.17 11:42:15 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Local\gegl-0.2 [2014.01.17 11:42:15 | 000,000,000 | ---D | C] -- C:\Users\hanFX\.gimp-2.8 [2014.01.17 11:38:03 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP 2 [2014.01.15 18:18:00 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2014.01.15 18:15:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center [2014.01.15 18:15:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Advanced Micro Devices, Inc [2014.01.15 18:15:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2014.01.15 18:14:27 | 000,637,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncHost.exe [2014.01.15 18:14:27 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll [2014.01.15 18:14:27 | 000,479,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncHost.exe [2014.01.15 18:14:26 | 004,106,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncEngine.dll [2014.01.15 18:14:26 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll [2014.01.15 18:14:25 | 018,577,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll [2014.01.15 18:14:25 | 003,210,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll [2014.01.15 18:14:25 | 002,804,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll [2014.01.15 18:14:25 | 002,142,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll [2014.01.15 18:14:25 | 002,131,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2014.01.15 18:14:25 | 001,928,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll [2014.01.15 18:14:24 | 013,925,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll [2014.01.15 18:14:24 | 002,617,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll [2014.01.15 18:14:24 | 002,295,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll [2014.01.15 18:14:24 | 001,399,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll [2014.01.15 18:14:24 | 001,374,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll [2014.01.15 18:14:24 | 001,371,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll [2014.01.15 18:14:24 | 001,204,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll [2014.01.15 18:14:24 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemEventsBrokerServer.dll [2014.01.15 18:14:24 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll [2014.01.15 18:14:23 | 001,415,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll [2014.01.15 18:14:23 | 001,227,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mispace.dll [2014.01.15 18:14:23 | 000,980,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mispace.dll [2014.01.15 18:14:23 | 000,809,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll [2014.01.15 18:14:23 | 000,764,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll [2014.01.15 18:14:23 | 000,745,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll [2014.01.15 18:14:23 | 000,669,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll [2014.01.15 18:14:23 | 000,663,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll [2014.01.15 18:14:23 | 000,589,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rastls.dll [2014.01.15 18:14:23 | 000,513,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rastls.dll [2014.01.15 18:14:23 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfds.dll [2014.01.15 18:14:23 | 000,461,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsGdiConverter.dll [2014.01.15 18:14:23 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfds.dll [2014.01.15 18:14:23 | 000,336,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsGdiConverter.dll [2014.01.15 18:14:23 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msieftp.dll [2014.01.15 18:14:23 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msieftp.dll [2014.01.15 18:14:23 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Graphics.dll [2014.01.15 18:14:23 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Graphics.dll [2014.01.15 18:14:23 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\deviceregistration.dll [2014.01.15 18:14:23 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ubpm.dll [2014.01.15 18:14:23 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll [2014.01.15 18:14:23 | 000,032,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ploptin.dll [2014.01.15 18:14:23 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bi.dll [2014.01.15 18:14:23 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BtaMPM.sys [2014.01.15 18:14:12 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winbici.dll [2014.01.15 14:20:16 | 003,395,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSService.dll [2014.01.15 14:20:16 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll [2014.01.15 14:20:15 | 000,848,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSShared.dll [2014.01.15 14:20:15 | 000,695,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSShared.dll [2014.01.15 14:20:15 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll [2014.01.15 14:20:15 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSClient.dll [2014.01.15 14:20:15 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSClient.dll [2014.01.15 14:20:14 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSCollect.exe [2014.01.15 14:20:12 | 000,787,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll [2014.01.14 13:10:25 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Local\Spotify [2014.01.14 13:10:14 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Roaming\Spotify [2014.01.13 21:30:42 | 000,000,000 | ---D | C] -- C:\Users\hanFX\Desktop\mirC [2014.01.10 22:47:36 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\project64 1.6 [2014.01.04 00:21:21 | 000,000,000 | ---D | C] -- C:\websymbols [2014.01.03 15:59:33 | 000,000,000 | ---D | C] -- C:\Program Files\TAP-Windows [2014.01.02 14:58:14 | 000,000,000 | ---D | C] -- C:\Users\hanFX\AppData\Roaming\QuickScan [2014.01.02 14:57:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Speed Up [2013.12.29 14:40:07 | 000,000,000 | ---D | C] -- C:\Users\hanFX\Desktop\1. BA [2013.12.27 16:03:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2013.12.27 16:03:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies ========== Files - Modified Within 30 Days ========== [2014.01.26 13:45:55 | 027,590,656 | ---- | M] () -- C:\WINDOWS\SysNative\vmguest.iso [2014.01.26 13:44:51 | 001,776,918 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2014.01.26 13:44:51 | 000,764,340 | ---- | M] () -- C:\WINDOWS\SysNative\perfh007.dat [2014.01.26 13:44:51 | 000,722,278 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat [2014.01.26 13:44:51 | 000,159,160 | ---- | M] () -- C:\WINDOWS\SysNative\perfc007.dat [2014.01.26 13:44:51 | 000,135,394 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat [2014.01.26 13:40:47 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2014.01.26 13:39:32 | 000,001,980 | ---- | M] () -- C:\Users\hanFX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3050A J611 series (Kopie 1).lnk [2014.01.26 13:39:06 | 000,001,122 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2014.01.26 13:39:05 | 000,002,144 | ---- | M] () -- C:\WINDOWS\tasks\Plus-HD-4.2-firefoxinstaller.job [2014.01.26 13:39:05 | 000,002,134 | ---- | M] () -- C:\WINDOWS\tasks\Plus-HD-4.2-chromeinstaller.job [2014.01.26 13:39:04 | 000,001,346 | ---- | M] () -- C:\WINDOWS\tasks\Plus-HD-4.2-updater.job [2014.01.26 13:39:04 | 000,001,298 | ---- | M] () -- C:\WINDOWS\tasks\Plus-HD-4.2-codedownloader.job [2014.01.26 13:39:04 | 000,001,170 | ---- | M] () -- C:\WINDOWS\tasks\Plus-HD-4.2-enabler.job [2014.01.26 13:38:45 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys [2014.01.26 13:38:42 | 2480,275,455 | -HS- | M] () -- C:\hiberfil.sys [2014.01.26 13:38:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2014.01.26 13:29:04 | 000,001,126 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2014.01.26 13:18:35 | 000,000,460 | RHS- | M] () -- C:\ProgramData\ntuser.pol [2014.01.25 19:07:00 | 000,001,138 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1102202105-3208666232-3045638287-1000UA.job [2014.01.25 19:07:00 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1102202105-3208666232-3045638287-1000Core.job [2014.01.24 14:26:48 | 193,543,599 | ---- | M] () -- C:\Users\hanFX\Desktop\Soft Skills Frau Okotto.mp4 [2014.01.19 15:10:42 | 001,631,552 | ---- | M] (MPC-HC Team) -- C:\WINDOWS\SysNative\VSFilter.dll [2014.01.19 15:05:26 | 001,328,960 | ---- | M] (MPC-HC Team) -- C:\WINDOWS\SysWow64\VSFilter.dll [2014.01.18 02:33:53 | 000,005,129 | ---- | M] () -- C:\Users\hanFX\AppData\Local\recently-used.xbel [2014.01.17 22:56:50 | 000,485,552 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2014.01.16 14:52:38 | 000,001,099 | ---- | M] () -- C:\Users\hanFX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014.01.16 10:10:29 | 018,864,684 | ---- | M] () -- C:\Users\hanFX\Desktop\repetitorium.wav [2014.01.14 13:10:25 | 000,001,851 | ---- | M] () -- C:\Users\hanFX\Desktop\Spotify.lnk [2014.01.09 03:34:58 | 000,193,795 | ---- | M] () -- C:\Users\hanFX\Desktop\Spanisch_Intensivkurs_ANFAENGER_Februar_2014.pdf [2014.01.06 23:31:05 | 000,693,240 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe [2014.01.06 23:31:05 | 000,105,464 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl [2014.01.03 00:53:42 | 000,007,597 | ---- | M] () -- C:\Users\hanFX\AppData\Local\Resmon.ResmonCfg [2013.12.30 03:40:47 | 000,015,353 | ---- | M] () -- C:\Users\hanFX\Desktop\Klausuren WS 2013-2014 BA Tourism (1).pdf ========== Files Created - No Company Name ========== [2014.01.26 13:30:13 | 000,001,346 | ---- | C] () -- C:\WINDOWS\tasks\Plus-HD-4.2-updater.job [2014.01.26 13:30:11 | 000,001,170 | ---- | C] () -- C:\WINDOWS\tasks\Plus-HD-4.2-enabler.job [2014.01.26 13:30:10 | 000,001,298 | ---- | C] () -- C:\WINDOWS\tasks\Plus-HD-4.2-codedownloader.job [2014.01.26 13:30:09 | 002,231,296 | ---- | C] () -- C:\WINDOWS\SysNative\ac3filter.acm.new [2014.01.26 13:30:09 | 002,231,296 | ---- | C] () -- C:\WINDOWS\SysNative\ac3filter.acm [2014.01.26 13:30:09 | 000,580,096 | ---- | C] () -- C:\WINDOWS\SysNative\ac3filter.acm.old [2014.01.26 13:30:09 | 000,206,336 | ---- | C] () -- C:\WINDOWS\SysNative\unrar64.dll [2014.01.26 13:30:09 | 000,148,992 | ---- | C] ( ) -- C:\WINDOWS\SysNative\lagarith.dll [2014.01.26 13:30:05 | 000,002,144 | ---- | C] () -- C:\WINDOWS\tasks\Plus-HD-4.2-firefoxinstaller.job [2014.01.26 13:30:04 | 000,002,134 | ---- | C] () -- C:\WINDOWS\tasks\Plus-HD-4.2-chromeinstaller.job [2014.01.26 13:28:30 | 001,679,360 | ---- | C] () -- C:\WINDOWS\SysWow64\ac3filter.acm.new [2014.01.26 13:18:35 | 000,000,460 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2014.01.24 14:27:49 | 193,543,599 | ---- | C] () -- C:\Users\hanFX\Desktop\Soft Skills Frau Okotto.mp4 [2014.01.24 14:06:23 | 000,001,321 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk [2014.01.24 14:06:22 | 000,001,390 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk [2014.01.18 02:33:53 | 000,005,129 | ---- | C] () -- C:\Users\hanFX\AppData\Local\recently-used.xbel [2014.01.17 11:38:24 | 000,000,910 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk [2014.01.16 14:43:35 | 018,864,684 | ---- | C] () -- C:\Users\hanFX\Desktop\repetitorium.wav [2014.01.15 18:14:23 | 000,385,614 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml [2014.01.15 14:20:14 | 000,138,240 | ---- | C] () -- C:\WINDOWS\SysNative\OEMLicense.dll [2014.01.15 14:20:14 | 000,103,936 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll [2014.01.14 13:10:25 | 000,001,851 | ---- | C] () -- C:\Users\hanFX\Desktop\Spotify.lnk [2014.01.14 13:10:25 | 000,001,837 | ---- | C] () -- C:\Users\hanFX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk [2014.01.11 13:50:27 | 000,064,178 | ---- | C] () -- C:\Users\hanFX\Desktop\IMG-20131113-WA0002.jpg [2014.01.09 03:34:58 | 000,193,795 | ---- | C] () -- C:\Users\hanFX\Desktop\Spanisch_Intensivkurs_ANFAENGER_Februar_2014.pdf [2014.01.03 18:52:25 | 000,001,099 | ---- | C] () -- C:\Users\hanFX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014.01.03 00:53:42 | 000,007,597 | ---- | C] () -- C:\Users\hanFX\AppData\Local\Resmon.ResmonCfg [2013.12.30 03:40:47 | 000,015,353 | ---- | C] () -- C:\Users\hanFX\Desktop\Klausuren WS 2013-2014 BA Tourism (1).pdf [2013.12.21 00:02:44 | 000,280,064 | ---- | C] () -- C:\WINDOWS\SysWow64\igdmd32.dll [2013.12.21 00:02:40 | 000,182,272 | ---- | C] () -- C:\WINDOWS\SysWow64\igdde32.dll [2013.12.21 00:02:40 | 000,142,848 | ---- | C] () -- C:\WINDOWS\SysWow64\igdail32.dll [2013.12.13 10:23:14 | 000,123,392 | ---- | C] () -- C:\WINDOWS\SysWow64\amdhdl32.dll [2013.11.29 12:29:56 | 000,038,912 | ---- | C] () -- C:\WINDOWS\SysWow64\kdbsdk32.dll [2013.11.24 19:55:51 | 000,000,066 | ---- | C] () -- C:\WINDOWS\SysWow64\CMASIOSrv.ini [2013.11.24 19:55:50 | 000,183,012 | ---- | C] () -- C:\WINDOWS\Cmicnfg8.ini.cfl [2013.11.24 19:55:47 | 000,012,914 | ---- | C] () -- C:\WINDOWS\Cmicnfg8.ini.cfg [2013.11.24 19:55:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\Cmicnfg8.ini.imi [2013.10.27 16:03:47 | 000,000,037 | -HS- | C] () -- C:\Users\hanFX\AppData\Local\70149b02515b3bb20dd492.47983420 [2013.10.19 15:28:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2013.10.02 10:02:31 | 000,217,176 | ---- | C] () -- C:\WINDOWS\SysWow64\unrar.dll [2013.08.22 16:36:43 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat [2013.08.22 16:36:42 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT [2013.08.22 15:46:23 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2013.08.22 08:01:23 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2013.08.22 04:32:36 | 000,046,080 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2013.08.22 00:55:20 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2013.08.22 00:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat [2013.08.01 14:17:09 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini [2013.06.06 18:46:48 | 000,995,342 | ---- | C] () -- C:\WINDOWS\SysWow64\amdocl_as32.exe [2013.06.06 18:46:48 | 000,798,734 | ---- | C] () -- C:\WINDOWS\SysWow64\amdocl_ld32.exe [2013.03.29 13:05:19 | 000,214,392 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe [2013.03.29 13:05:19 | 000,076,888 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe [2013.02.23 14:14:40 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl [2013.02.23 14:14:37 | 000,204,800 | ---- | C] () -- C:\WINDOWS\SysWow64\ExMgr.exe [2013.02.23 14:14:37 | 000,086,016 | ---- | C] () -- C:\WINDOWS\SysWow64\ExSrv2.dll [2013.02.23 14:14:37 | 000,086,016 | ---- | C] () -- C:\WINDOWS\SysWow64\ExSrv.dll [2013.02.21 01:52:22 | 000,157,144 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsva.dat [2013.02.21 01:52:20 | 000,026,936 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsnl.dat [2013.02.21 01:52:14 | 000,003,917 | ---- | C] () -- C:\WINDOWS\SysWow64\atipblag.dat [2013.02.21 01:52:12 | 000,000,025 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsny.dat [2013.02.21 01:52:10 | 000,204,952 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsvl.dat [2013.02.05 21:47:32 | 000,000,003 | ---- | C] () -- C:\Users\hanFX\AppData\Local\user_data.ini [2013.02.01 14:37:08 | 001,186,175 | ---- | C] () -- C:\WINDOWS\unins000.exe [2013.02.01 14:37:08 | 000,006,747 | ---- | C] () -- C:\WINDOWS\unins000.dat [2012.08.17 06:14:20 | 000,000,081 | ---- | C] () -- C:\Users\hanFX\CTX.DAT ========== ZeroAccess Check ========== [2013.10.25 17:49:21 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013.11.23 12:49:06 | 021,196,664 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.11.23 09:19:35 | 018,642,504 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013.08.22 10:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2013.08.22 03:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013.08.22 10:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] ========== LOP Check ========== [2013.07.03 11:32:10 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\.mono [2014.01.26 13:28:32 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Advanced [2014.01.25 18:15:56 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Arc [2013.03.08 00:41:27 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Arrowhead [2013.10.31 19:46:34 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Battle.net [2013.07.23 17:11:19 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Command and Conquer 4 [2014.01.26 13:26:38 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\DriverCure [2014.01.26 13:39:35 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Dropbox [2014.01.24 14:02:49 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\DVDVideoSoft [2013.08.15 17:54:34 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\HLSW [2013.11.17 12:17:53 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\IrfanView [2013.01.20 20:18:07 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Leadertech [2013.12.16 09:59:31 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\library_dir [2013.01.23 21:56:00 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\LolClient [2013.08.29 13:39:21 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Mumble [2013.09.10 15:19:19 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\OBS [2013.01.22 02:24:41 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\OpenOffice.org [2013.07.20 05:59:17 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Origin [2014.01.02 14:58:14 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\QuickScan [2013.07.14 13:27:40 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\ROCCAT [2014.01.26 13:30:12 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Shark007 [2014.01.26 13:26:38 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\SpeedyPC Software [2014.01.26 13:39:32 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\Spotify [2013.02.08 12:24:09 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\SteelSeries [2013.08.01 14:22:30 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\TeamViewer [2013.11.13 20:07:49 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\ts3overlay [2013.03.03 00:38:43 | 000,000,000 | ---D | M] -- C:\Users\hanFX\AppData\Roaming\wargaming.net ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 220 bytes -> C:\Users\hanFX\SkyDrive:ms-properties < End of report > |
|
03.02.2014, 21:04
| #3 |
| /// TB-Ausbilder   | OTL Analyse "Problem: search conduit" nach codec installation Hallo und sorry für die Verzögerung.
__________________Dadurch dass du dir selbst eine Antwort geschrieben hast, ist dein Thema aus der Liste der noch unbeantworteten Threads und somit aus den Augen der Helfer verschwunden. Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
| Themen zu OTL Analyse "Problem: search conduit" nach codec installation |
| adobe reader xi, akamai, battle.net, bonjour, converter, cyberghost, desktop, downloader, error, excel, firefox, flash player, google, homepage, iexplore.exe, install.exe, logfile, mp3, problem, realtek, scan, security, server, shark, software, svchost.exe, system error, teamspeak, windows |
Linear-Darstellung
