Gestern abend war mein IE am rumspinnen und öffnete oben link massig viele Popups und im Hintergrund Werbung ohne Ende. Nachdem ich alle Fenster geschlossen hatte dachte ich mir erst nichts weiter dabei.Seit dem ist mein Internet allerdings langsam, der Seitenaufbau dauert länger als sonst und auch das Onlinespielen ist nahezu unmöglich geworden. Ich hab jetzt schon Angst das ich mir etwas eingefangen habe bei der Aktion =(

HJT LOG

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:44:19, on 16.04.2010
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.17037)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe
C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\regedit.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\StarCraft II Beta\Versions\Base14803\SC2.exe
C:\Program Files\StarCraft II Beta\Versions\Base14803\SC2.exe
C:\Program Files\Trillian\trillian.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://gosugamers.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SetPoint] C:\Program Files\Logitech\SetPoint\SetPoint.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [MobileConnect] %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Livestream Procaster] "C:\Program Files\Livestream Procaster\Procaster.exe" -autorun
O4 - HKCU\..\Run: [Power2GoExpress] NA
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [SMASH] "C:\Program Files\SoftMaker Office 2010\smash.exe"
O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Users\Kutluay\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
O4 - HKCU\..\Run: [tjlpds] RUNDLL32.EXE C:\Users\Kutluay\AppData\Local\Temp\mseimsso.dll,w
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O13 - Gopher Prefix: 
O16 - DPF: {571CB303-4267-4D92-B45C-9B79ACC18632} - hxxp://potplayer.daum.net/PotPlayer/v2/PotWeb.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {EF0D1A14-1033-41A2-A589-240C01EDC078} (PPLive Lite Class) - hxxp://dl.pplive.com/PluginSetup.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A3B4FA3F-419C-4D0F-B4AE-5D34B81FBFC8}: NameServer = 192.0.0.1
O20 - AppInit_DLLs: nmklo
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Samsung Update Plus - Unknown owner - C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

--
End of file - 6730 bytes
         

MBAM LOG

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Datenbank Version: 3985

Windows 6.0.6000
Internet Explorer 7.0.6000.17037

14.04.2010 03:16:37
mbam-log-2010-04-14 (03-16-37).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 248879
Laufzeit: 1 Stunde(n), 33 Minute(n), 57 Sekunde(n)

Infizierte Speicherprozesse: 9
Infizierte Speichermodule: 3
Infizierte Registrierungsschlüssel: 7
Infizierte Registrierungswerte: 16
Infizierte Dateiobjekte der Registrierung: 6
Infizierte Verzeichnisse: 0
Infizierte Dateien: 28

Infizierte Speicherprozesse:
C:\Windows\System32\net.net (Trojan.Downloader) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\mdm.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\lsass.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\setup.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\hexdump.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\taskmgr.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\geurge.exe (Trojan.Agent.Gen) -> No action taken.
C:\Windows\System32\reader_s.exe (Trojan.Agent) -> No action taken.
C:\Windows\services.exe (Trojan.Agent) -> No action taken.

Infizierte Speichermodule:
C:\Windows\System32\j43reu.dll (Trojan.Ertfor) -> No action taken.
C:\Windows\System32\msxsltsso.dll (Trojan.GootKit) -> No action taken.
C:\Windows\System32\nmklo.dll (Trojan.Agent) -> No action taken.

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{a9ba40a1-74f1-52bd-f431-00b15a2c8953} (Trojan.Ertfor) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a9ba40a1-74f1-52bd-f431-00b15a2c8953} (Trojan.Ertfor) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a9ba40a1-74f1-52bd-f431-00b15a2c8953} (Trojan.Ertfor) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\AGprotect (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\net (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor (Rogue.AntimalwareDoctor) -> No action taken.
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc (Rogue.AntimalwareDoctor) -> No action taken.

Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\reader_s (Trojan.FakeAlert.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\services (Trojan.FakeAlert.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\net (Trojan.Downloader) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hsf87efjhdsf87f3jfsdi7fhsujfd (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ewrgetuj (Trojan.Agent.Gen) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hf8wefhuaihf8ewfydiujhfdsfdf (Trojan.Ertfor) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\appreg70700.exe (Trojan.FakeAV) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a9ba40a1-74f1-52bd-f431-00b15a2c8953} (Trojan.Ertfor) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\gootkitsso (Trojan.GootKit) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\host (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\id (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\idstrf (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\winid (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\nofolderoptions (Hijack.FolderOptions) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\reader_s (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Services\del (Malware.Trace) -> No action taken.

Infizierte Dateiobjekte der Registrierung:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Spyware.Zbot) -> Data: c:\windows\system32\sdra64.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Spyware.Zbot) -> Data: system32\sdra64.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\Windows\system32\userinit.exe,C:\Windows\system32\sdra64.exe,) Good: (Userinit.exe) -> No action taken.

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Windows\System32\reader_s.exe (Trojan.FakeAlert.H) -> No action taken.
C:\Windows\services.exe (Trojan.FakeAlert.H) -> No action taken.
C:\Windows\System32\j43reu.dll (Trojan.Ertfor) -> No action taken.
C:\Windows\System32\net.net (Trojan.Downloader) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\mdm.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\lsass.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\setup.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\hexdump.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\taskmgr.exe (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\geurge.exe (Trojan.Agent.Gen) -> No action taken.
C:\Windows\System32\msxsltsso.dll (Trojan.GootKit) -> No action taken.
C:\Windows\System32\nmklo.dll (Trojan.Agent) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\bmtv3gi5j.exe (Trojan.Ertfor) -> No action taken.
C:\Users\Kutluay\AppData\Roaming\D52CCE0FA67A74F3098D983B74E7AE4C\appreg70700.exe (Trojan.FakeAV) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\524E.tmp (Rootkit.TDSS) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\acnmswoxre.exe (Trojan.Agent.Gen) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\el42vs7hpodki1a.exe (Trojan.Clicker) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\wxmcrensoa.exe (Trojan.Downloader) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\u0byoo.exe (Trojan.Ertfor) -> No action taken.
C:\Users\Kutluay\AppData\Local\Temp\gtk2AFE.tmp (Spyware.Passwords) -> No action taken.
C:\Windows\System32\drivers\ovjndgni.sys (Rootkit.Agent) -> No action taken.
C:\Windows\System32\drivers\zcomdpaa7.sys (Rootkit.Tent) -> No action taken.
C:\Windows\Temp\CA88.tmp (Rootkit.TDSS) -> No action taken.
C:\$Recycle.Bin\S-1-5-21-4080093333-732458210-2902676382-1000\$R0I4B0Y\lazylaunch.exe (Hacktool.Gen) -> No action taken.
C:\Windows\System32\cooper.mine (Trojan.FakeAlert) -> No action taken.
C:\Windows\System32\sdra64.exe (Spyware.Zbot) -> No action taken.
         

OTL LOGFILE

OTL logfile created on: 14.04.2010 00:34:26 - Run 1
OTL by OldTimer - Version 3.2.1.1     Folder = C:\Users\Kutluay\Desktop
Windows Vista Home Premium Edition  (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 28,00% Memory free
6,00 Gb Paging File | 3,00 Gb Available in Paging File | 55,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 144,09 Gb Total Space | 42,10 Gb Free Space | 29,22% Space Free | Partition Type: NTFS
Drive D: | 144,00 Gb Total Space | 100,96 Gb Free Space | 70,11% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: LAPPI
Current User Name: Kutluay
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Kutluay\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\services.exe ()
PRC - C:\Windows\System32\reader_s.exe ()
PRC - C:\Users\Kutluay\AppData\Local\Temp\geurge.exe ( )
PRC - C:\Users\Kutluay\AppData\Local\Temp\taskmgr.exe ()
PRC - C:\Users\Kutluay\AppData\Local\Temp\hexdump.exe ()
PRC - C:\Users\Kutluay\AppData\Local\Temp\setup.exe ()
PRC - C:\Users\Kutluay\AppData\Local\Temp\lsass.exe ()
PRC - C:\Users\Kutluay\AppData\Local\Temp\mdm.exe ()
PRC - C:\Users\Kutluay\AppData\Local\Temp\rknfl.exe (Sound HD)
PRC - C:\Windows\System32\net.net (Privat)
PRC - C:\Programme\StarCraft II Beta\Versions\Base14803\SC2.exe (Blizzard Entertainment)
PRC - C:\Users\Kutluay\Desktop\MapHack v10a.exe (CraniX)
PRC - C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmplayer.exe (Microsoft Corporation)
PRC - C:\Programme\Trillian\trillian.exe (Cerulean Studios)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
PRC - C:\Programme\Common Files\Logishrd\KHAL2\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Programme\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)
PRC - C:\Programme\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone)
PRC - C:\Programme\Samsung\EBM\EasyBatteryMgr3.exe (SAMSUNG Electronics co., LTD.)
PRC - C:\Programme\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Programme\RocketDock\RocketDock.exe ()
PRC - C:\Programme\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Programme\Samsung\Easy Display Manager\dmhkcore.exe (SAMSUNG Electronics)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Windows\System32\agrsmsvc.exe (Agere Systems)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Kutluay\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Users\Kutluay\AppData\Local\Temp\mseimsso.dll ()
MOD - C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985d\msvcr80.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.20533_none_4634c4a0218d65c1\comctl32.dll (Microsoft Corporation)
MOD - C:\Programme\Logitech\SetPoint\lgscroll.dll (Logitech, Inc.)
MOD - C:\Programme\Logitech\SetPoint\GameHook.dll (Logitech, Inc.)
MOD - C:\Programme\RocketDock\RocketDock.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (DaumCleanerService) -- C:\Program Files\Daum\Cleaner\DaumCleanerService.exe (Daum Communications Corp.)
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (LBTServ) -- C:\Programme\Common Files\Logitech\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (VMCService) -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)
SRV - (Samsung Update Plus) -- C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe ()
SRV - (AgereModemAudio) -- C:\Windows\System32\agrsmsvc.exe (Agere Systems)
SRV - (IDriverT) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (zcomdpaa7) -- C:\Windows\System32\drivers\zcomdpaa7.sys ()
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (RMCAST) RMCAST (Pgm) -- C:\Windows\System32\drivers\rmcast.sys (Microsoft Corporation)
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (R300) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (LMouFilt) -- C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LUsbFilt) -- C:\Windows\System32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (adfs) -- C:\Windows\System32\drivers\adfs.sys (Adobe Systems, Inc.)
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (yukonwlh) -- C:\Windows\System32\drivers\yk60x86.sys (Marvell)
DRV - (AtiPcie) ATI PCI Express (3GIO) -- C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (Agere Systems)
DRV - (KMDFMEMIO) -- C:\Windows\System32\drivers\KMDFMEMIO.sys (SAMSUNG ELECTRONICS CO., LTD.)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://gosugamers.net/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
O1 HOSTS File: ([2008.12.12 00:33:32 | 000,000,791 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: ::1             localhost
O2 - BHO: (C:\Windows\system32\j43reu.dll) - {A9BA40A1-74F1-52BD-F431-00B15A2C8953} - C:\Windows\System32\j43reu.dll ()
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ewrgetuj] C:\Users\Kutluay\AppData\Local\Temp\geurge.exe ( )
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [Livestream Procaster] C:\Program Files\Livestream Procaster\Procaster.exe ()
O4 - HKLM..\Run: [MobileConnect] C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone)
O4 - HKLM..\Run: [net] C:\Windows\System32\net.net (Privat)
O4 - HKLM..\Run: [reader_s] C:\Windows\System32\reader_s.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [services] C:\Windows\services.exe ()
O4 - HKLM..\Run: [SetPoint] C:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKCU..\Run: [appreg70700.exe] C:\Users\Kutluay\AppData\Roaming\D52CCE0FA67A74F3098D983B74E7AE4C\appreg70700.exe (MS)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU..\Run: [DaumCleaner] C:\Program Files\Daum\Cleaner\DaumCleaner.exe (Daum Communications Corp.)
O4 - HKCU..\Run: [hf8wefhuaihf8ewfydiujhfdsfdf] C:\Users\Kutluay\AppData\Local\Temp\bmtv3gi5j.exe ()
O4 - HKCU..\Run: [hsf87efjhdsf87f3jfsdi7fhsujfd] C:\Users\Kutluay\AppData\Local\Temp\lsass.exe ()
O4 - HKCU..\Run: [Octoshape Streaming Services] C:\Users\Kutluay\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe (Octoshape ApS)
O4 - HKCU..\Run: [Power2GoExpress]  File not found
O4 - HKCU..\Run: [reader_s] C:\Users\Kutluay\reader_s.exe File not found
O4 - HKCU..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKCU..\Run: [SMASH] C:\Program Files\SoftMaker Office 2010\smash.exe (SoftMaker Software GmbH)
O4 - HKCU..\Run: [tjlpds] C:\Users\Kutluay\AppData\Local\Temp\mseimsso.DLL ()
O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoHotStart = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoHotStart = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {571CB303-4267-4D92-B45C-9B79ACC18632} hxxp://potplayer.daum.net/PotPlayer/v2/PotWeb.cab (PotWeb Control)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 139.7.30.126 192.168.1.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (nmklo) - C:\Windows\System32\nmklo.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\sdra64.exe) - C:\Windows\System32\sdra64.exe (Sound HD)
O21 - SSODL: GootkitSSO - {A1BAD51D-7F0E-4A95-A574-31E60A929272} - C:\Windows\System32\msxsltsso.dll ()
O22 - SharedTaskScheduler: {A9BA40A1-74F1-52BD-F431-00B15A2C8953} - hasiufhiusdfjdhfudd - C:\Windows\System32\j43reu.dll ()
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{55ed05fe-fdf0-11dd-9f05-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{55ed05fe-fdf0-11dd-9f05-806e6f6e6963}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe -- File not found
O33 - MountPoints2\{b92c600c-fc5d-11dd-99db-001377a990c4}\Shell - "" = AutoRun
O33 - MountPoints2\{b92c600c-fc5d-11dd-99db-001377a990c4}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe -- File not found
O33 - MountPoints2\{bd52594b-fc5f-11dd-9fc6-001377a990c4}\Shell - "" = AutoRun
O33 - MountPoints2\{bd52594b-fc5f-11dd-9fc6-001377a990c4}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe -- File not found
O33 - MountPoints2\{bd525973-fc5f-11dd-9fc6-001377a990c4}\Shell - "" = AutoRun
O33 - MountPoints2\{bd525973-fc5f-11dd-9fc6-001377a990c4}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe -- File not found
O33 - MountPoints2\{fb06b044-fc66-11dd-a32c-001377a990c4}\Shell - "" = AutoRun
O33 - MountPoints2\{fb06b044-fc66-11dd-a32c-001377a990c4}\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe -- File not found
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\setup_vmc_lite.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.04.14 00:32:26 | 000,561,664 | ---- | C] (OldTimer Tools) -- C:\Users\Kutluay\Desktop\OTL.exe
[2010.04.14 00:19:40 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hkapgnbl
[2010.04.14 00:04:16 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\stu2.exe
[2010.04.14 00:03:27 | 000,000,000 | ---D | C] -- C:\Users\Kutluay\AppData\Roaming\D52CCE0FA67A74F3098D983B74E7AE4C
[2010.04.14 00:03:10 | 000,036,648 | ---- | C] (Privat) -- C:\Windows\System32\net.net
[2010.04.12 00:14:45 | 000,000,000 | ---D | C] -- C:\Users\Kutluay\Documents\Meine empfangenen Dateien
[2010.04.11 19:32:33 | 000,058,880 | ---- | C] (CraniX) -- C:\Users\Kutluay\Desktop\MapHack v10a.exe
[2010.04.10 14:13:29 | 000,000,000 | ---D | C] -- C:\Users\Kutluay\Tracing
[2010.04.10 14:12:41 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft
[2010.04.10 14:12:31 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2010.04.10 14:12:24 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live SkyDrive
[2010.04.10 14:12:04 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live
[2010.04.10 14:11:45 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010.04.10 14:07:38 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Windows Live
[2010.04.01 16:32:18 | 000,000,000 | ---D | C] -- C:\Users\Kutluay\AppData\Roaming\Octoshape
[2010.04.01 16:32:18 | 000,000,000 | ---D | C] -- C:\Users\Kutluay\AppData\Roaming\Mozilla
[2010.03.31 03:20:22 | 000,671,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2010.03.31 03:20:22 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2010.03.31 03:20:21 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2010.03.31 03:20:20 | 001,830,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2010.03.31 03:20:20 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2010.03.31 03:20:19 | 000,459,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2010.03.31 03:20:19 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2010.03.31 03:20:19 | 000,347,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2010.03.31 03:20:19 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2010.03.31 03:20:19 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2010.03.31 03:20:19 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2010.03.31 03:20:19 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2010.03.31 03:20:18 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2010.03.31 03:20:18 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2010.03.31 03:20:18 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieencode.dll
[2010.03.31 03:20:18 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2010.03.31 03:20:18 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2010.03.31 03:20:18 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2010.03.31 03:20:18 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2010.03.31 03:20:17 | 001,383,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2010.03.31 03:20:17 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2010.03.31 03:20:17 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2010.03.27 12:48:12 | 000,000,000 | ---D | C] -- C:\Programme\DAUM
[2010.03.25 00:19:41 | 000,000,000 | ---D | C] -- C:\Users\Kutluay\AppData\Roaming\Ventrilo
[2010.03.25 00:19:27 | 000,000,000 | ---D | C] -- C:\Programme\Ventrilo
[2010.03.19 17:28:23 | 000,000,000 | ---D | C] -- C:\Programme\eBay
[2010.03.19 17:28:23 | 000,000,000 | ---D | C] -- C:\ProgramData\eBay
[2010.03.18 19:04:15 | 000,000,000 | ---D | C] -- C:\Users\Kutluay\AppData\Local\SF-Software
[2010.03.18 18:30:50 | 000,000,000 | ---D | C] -- C:\Programme\SF
[2010.03.18 18:30:49 | 000,000,000 | ---D | C] -- C:\ProgramData\SF
[2010.03.18 18:26:33 | 000,000,000 | ---D | C] -- C:\Programme\JDownloader
[2010.03.16 07:24:00 | 000,000,000 | R--D | C] -- C:\Users\Kutluay\Documents\Notes
[2006.11.24 07:14:44 | 000,139,264 | ---- | C] ( ) -- C:\Windows\System32\MACSSDK_wiz.dll
[2006.11.24 07:14:44 | 000,126,976 | ---- | C] ( ) -- C:\Windows\System32\MACSSDK.dll
 
========== Files - Modified Within 30 Days ==========
 
[2010.04.14 00:37:18 | 002,097,152 | -HS- | M] () -- C:\Users\Kutluay\NTUSER.DAT
[2010.04.14 00:36:47 | 000,845,824 | ---- | M] () -- C:\Windows\System32\drivers\ovjndgni.sys
[2010.04.14 00:32:36 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Users\Kutluay\Desktop\OTL.exe
[2010.04.14 00:19:40 | 000,032,768 | ---- | M] () -- C:\Windows\System32\23rh46g.4e
[2010.04.14 00:19:39 | 000,065,024 | ---- | M] () -- C:\Windows\System32\bb52fkri.few
[2010.04.14 00:19:38 | 000,186,368 | ---- | M] () -- C:\Windows\System32\cooper.mine
[2010.04.14 00:07:25 | 000,042,496 | ---- | M] () -- C:\Windows\System32\msxsltsso.dll
[2010.04.14 00:04:28 | 000,135,168 | ---- | M] () -- C:\Windows\System32\nmklo.dll
[2010.04.14 00:04:18 | 000,050,688 | ---- | M] () -- C:\Windows\services.exe
[2010.04.14 00:04:14 | 000,026,624 | ---- | M] () -- C:\Windows\System32\reader_s.exe
[2010.04.14 00:03:21 | 000,020,000 | ---- | M] () -- C:\Windows\System32\j43reu.dll
[2010.04.14 00:03:10 | 000,036,648 | ---- | M] (Privat) -- C:\Windows\System32\net.net
[2010.04.13 23:41:08 | 000,003,680 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.04.13 23:41:08 | 000,003,680 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.04.13 16:47:00 | 001,461,736 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010.04.13 16:47:00 | 000,641,344 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.04.13 16:47:00 | 000,610,142 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.04.13 16:47:00 | 000,116,706 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.04.13 16:47:00 | 000,103,924 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.04.13 16:43:25 | 000,000,422 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{650B5F1A-0A62-470F-910B-D384D04FDE11}.job
[2010.04.13 16:41:09 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.04.13 16:41:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.04.13 16:41:02 | 3219,308,544 | -HS- | M] () -- C:\hiberfil.sys
[2010.04.13 05:59:43 | 001,562,813 | -H-- | M] () -- C:\Users\Kutluay\AppData\Local\IconCache.db
[2010.04.11 23:37:55 | 000,000,008 | ---- | M] () -- C:\Users\Kutluay\AppData\Roaming\jdzarn.dat
[2010.04.06 03:12:59 | 010,487,748 | ---- | M] () -- C:\Users\Kutluay\Desktop\AllanValentine-The Outsider Renholder Apocalypse Mix.mp3
[2010.04.04 00:57:49 | 003,081,645 | ---- | M] () -- C:\Users\Kutluay\Desktop\Toony Feat. Kollegah & Farid Bang - Disco Bitch.mp3
[2010.03.28 09:31:07 | 000,058,880 | ---- | M] (CraniX) -- C:\Users\Kutluay\Desktop\MapHack v10a.exe
[2010.03.25 00:19:33 | 000,000,262 | ---- | M] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2010.03.25 00:19:28 | 000,000,752 | ---- | M] () -- C:\Users\Public\Desktop\Ventrilo.lnk
[2010.03.20 14:07:02 | 000,000,339 | ---- | M] () -- C:\Windows\win.ini
 
========== Files Created - No Company Name ==========
 
[2010.04.14 00:07:25 | 000,042,496 | ---- | C] () -- C:\Windows\System32\msxsltsso.dll
[2010.04.14 00:04:31 | 000,065,024 | ---- | C] () -- C:\Windows\System32\bb52fkri.few
[2010.04.14 00:04:31 | 000,032,768 | ---- | C] () -- C:\Windows\System32\23rh46g.4e
[2010.04.14 00:04:28 | 000,135,168 | ---- | C] () -- C:\Windows\System32\nmklo.dll
[2010.04.14 00:04:27 | 000,186,368 | ---- | C] () -- C:\Windows\System32\cooper.mine
[2010.04.14 00:04:20 | 000,050,688 | ---- | C] () -- C:\Windows\services.exe
[2010.04.14 00:04:14 | 000,026,624 | ---- | C] () -- C:\Windows\System32\reader_s.exe
[2010.04.14 00:03:21 | 000,020,000 | ---- | C] () -- C:\Windows\System32\j43reu.dll
[2010.04.11 23:38:48 | 000,845,824 | ---- | C] () -- C:\Windows\System32\drivers\ovjndgni.sys
[2010.04.11 23:37:55 | 000,000,008 | ---- | C] () -- C:\Users\Kutluay\AppData\Roaming\jdzarn.dat
[2010.04.06 03:12:59 | 010,487,748 | ---- | C] () -- C:\Users\Kutluay\Desktop\AllanValentine-The Outsider Renholder Apocalypse Mix.mp3
[2010.04.04 00:57:35 | 003,081,645 | ---- | C] () -- C:\Users\Kutluay\Desktop\Toony Feat. Kollegah & Farid Bang - Disco Bitch.mp3
[2010.03.25 00:19:28 | 000,000,752 | ---- | C] () -- C:\Users\Public\Desktop\Ventrilo.lnk
[2010.03.25 00:19:24 | 000,000,262 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009.06.16 17:57:16 | 000,000,039 | ---- | C] () -- C:\Programme\myini.ini
[2009.06.16 17:57:14 | 000,002,240 | ---- | C] () -- C:\Programme\uninstal.ini
[2009.04.01 15:29:25 | 000,098,400 | ---- | C] () -- C:\Programme\news.mtd
[2009.04.01 15:29:25 | 000,041,400 | ---- | C] () -- C:\Programme\kons.mtd
[2009.04.01 15:29:25 | 000,028,672 | ---- | C] () -- C:\Programme\news.ma1
[2009.04.01 15:29:25 | 000,012,288 | ---- | C] () -- C:\Programme\walks.ma1
[2009.04.01 15:29:25 | 000,012,288 | ---- | C] () -- C:\Programme\kons.ma1
[2009.04.01 15:29:25 | 000,012,000 | ---- | C] () -- C:\Programme\walks.mtd
[2009.04.01 15:24:07 | 000,428,032 | ---- | C] () -- C:\Programme\kons.blb
[2009.04.01 15:23:57 | 000,000,105 | ---- | C] () -- C:\Programme\readme.txt
[2009.04.01 15:23:42 | 000,008,192 | ---- | C] () -- C:\Programme\kons.ma2
[2009.04.01 15:21:42 | 002,163,712 | ---- | C] () -- C:\Programme\walks.blb
[2009.04.01 15:21:42 | 000,008,192 | ---- | C] () -- C:\Programme\walks.ma2
[2009.04.01 15:21:20 | 003,244,032 | ---- | C] () -- C:\Programme\news.blb
[2009.04.01 15:21:20 | 000,008,192 | ---- | C] () -- C:\Programme\news.ma2
[2009.03.29 12:18:20 | 000,728,064 | ---- | C] () -- C:\Programme\chtb0409.exe
[2009.02.01 12:47:20 | 1218,772,992 | ---- | C] () -- C:\Programme\rondommlit.iso
[2008.12.19 01:28:05 | 000,053,760 | ---- | C] () -- C:\Users\Kutluay\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.12.11 16:33:58 | 000,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2008.12.11 13:35:51 | 000,004,744 | ---- | C] () -- C:\Windows\HotFixList.ini
[2008.12.11 13:25:30 | 000,000,135 | R--- | C] () -- C:\Windows\System32\lngEng.ini
[2008.12.11 13:25:30 | 000,000,117 | ---- | C] () -- C:\Windows\System32\lngKor.ini
[2008.12.11 13:20:56 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2008.12.11 12:36:17 | 000,000,680 | ---- | C] () -- C:\Users\Kutluay\AppData\Local\d3d9caps.dat
[2008.12.11 12:36:16 | 000,524,288 | -HS- | C] () -- C:\Users\Kutluay\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms
[2008.12.11 12:36:16 | 000,524,288 | -HS- | C] () -- C:\Users\Kutluay\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2008.12.11 12:36:16 | 000,262,144 | -H-- | C] () -- C:\Users\Kutluay\ntuser.dat.LOG1
[2008.12.11 12:36:16 | 000,065,536 | -HS- | C] () -- C:\Users\Kutluay\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2008.12.11 12:36:16 | 000,000,020 | -HS- | C] () -- C:\Users\Kutluay\ntuser.ini
[2008.12.11 12:36:16 | 000,000,000 | -H-- | C] () -- C:\Users\Kutluay\ntuser.dat.LOG2
[2008.12.11 12:36:15 | 002,097,152 | -HS- | C] () -- C:\Users\Kutluay\NTUSER.DAT
[2008.10.07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2008.06.23 14:02:02 | 000,097,410 | R--- | C] () -- C:\ProgramData\DeviceManager.xml.rc4
[2008.05.23 18:48:50 | 000,020,270 | ---- | C] () -- C:\ProgramData\DeviceInstaller.xml
[2007.12.24 19:39:53 | 000,003,640 | ---- | C] () -- C:\Programme\news.mti
[2007.12.24 19:36:35 | 000,003,640 | ---- | C] () -- C:\Programme\walks.mti
[2007.12.24 19:36:08 | 000,004,680 | ---- | C] () -- C:\Programme\kons.mti
[2007.08.07 02:31:18 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007.02.15 09:51:02 | 000,274,432 | ---- | C] () -- C:\Windows\System32\NDADLL.dll
[2006.11.29 10:00:28 | 000,307,200 | ---- | C] () -- C:\Windows\System32\LDBGenWizView.dll
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.10.09 03:01:28 | 000,061,440 | ---- | C] () -- C:\Windows\System32\AVSAudioWideStereoDMO.dll
[1999.10.19 05:56:42 | 000,030,234 | ---- | C] () -- C:\Programme\Uninstal.exe
< End of report >
         

sry für den doppelpost, aber ich hatte im ersten zu viele zeichen verwendet.

OTL EXTRAS LOGFILE

OTL Extras logfile created on: 14.04.2010 00:34:26 - Run 1
OTL by OldTimer - Version 3.2.1.1     Folder = C:\Users\Kutluay\Desktop
Windows Vista Home Premium Edition  (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 28,00% Memory free
6,00 Gb Paging File | 3,00 Gb Available in Paging File | 55,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 144,09 Gb Total Space | 42,10 Gb Free Space | 29,22% Space Free | Partition Type: NTFS
Drive D: | 144,00 Gb Total Space | 100,96 Gb Free Space | 70,11% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: LAPPI
Current User Name: Kutluay
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 1
"FirewallOverride" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0266AFC0-D901-4B37-BA2F-8321EF4E692C}" = rport=445 | protocol=6 | dir=out | app=system | 
"{0D0D7272-6A95-4FB1-874A-60F1BCFF6E00}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{0D5A96B8-7623-4E82-AD8A-7BFD43A7AB69}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{0EA67192-5675-4CF3-AA3F-B1F17DA5FE21}" = rport=138 | protocol=17 | dir=out | app=system | 
"{0F029371-BCA0-4707-B7D8-2911D6CF8CD3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{22409FD6-1801-43CB-A247-E5379E7CFF59}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{281AA182-FCC7-4824-96F3-5D0939A61F53}" = lport=6118 | protocol=17 | dir=in | name=starcraft2 | 
"{4A52B553-547A-4CDA-9360-A1EBAB8A0A8B}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{596B9D50-99B8-49BA-9936-B88A8578D3A7}" = lport=6112 | protocol=17 | dir=in | name=starcraft | 
"{5BD6C833-2A6C-468C-9FAA-6C08A85AB9B7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{6D9A9718-3D61-4F64-BC4F-63185F869962}" = lport=6118 | protocol=6 | dir=in | name=starcraft4 | 
"{6DE43B47-2CB8-4104-96F5-55F8F92208C9}" = lport=138 | protocol=17 | dir=in | app=system | 
"{794877B8-AC0C-4AA0-ADA2-D840E8553C16}" = lport=139 | protocol=6 | dir=in | app=system | 
"{8E37D7D6-F25B-4896-A754-BA9DF7F0A9DF}" = rport=137 | protocol=17 | dir=out | app=system | 
"{9494C2CC-B913-434A-9351-BFAC91BBE26B}" = lport=445 | protocol=6 | dir=in | app=system | 
"{950C7336-6A7F-45BF-AD66-A1AF1B7351B8}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 | 
"{95E01DC1-DAD0-402F-ADCF-D20F2EA6259F}" = rport=139 | protocol=6 | dir=out | app=system | 
"{BAE8289E-3824-4A69-9CC5-8E3D745CC6D0}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{DAB4A1E7-ACE1-42EA-8615-0272229D28C9}" = lport=137 | protocol=17 | dir=in | app=system | 
"{EE60E555-6D60-4C90-A8E1-5865BD63E3AC}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{FD2AECC7-809C-4688-B30E-3CFAC8F4721E}" = lport=6112 | protocol=6 | dir=in | name=starcraft3 | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00BEFA76-3236-4516-A139-2BE80F3835D5}" = protocol=6 | dir=in | app=c:\program files\daum\potplayer\daumvsvr.exe | 
"{084E2DD2-DB31-4927-98E3-DEAA5832422C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{0E3A74EB-4FDE-480A-9487-69143EF46685}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{1891079F-2F0E-4025-B4F6-FE7E3A9AF60D}" = protocol=6 | dir=in | app=c:\program files\ventrilo\ventrilo.exe | 
"{1AFBF609-0BEE-4542-B72D-03D9DAFACF5A}" = dir=in | app=c:\program files\cyberlink\powerdvd\powerdvd.exe | 
"{4281474D-B773-4D1B-A6F6-E88D6053CBD0}" = protocol=17 | dir=in | app=c:\program files\spiele\starcraft ii beta\starcraft ii.exe | 
"{43BFDDBE-2813-4F63-9D77-17B83504F60A}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{47F855DA-ED75-42EB-811C-AAB91F75E527}" = protocol=6 | dir=in | app=c:\program files\starcraft ii beta\starcraft ii.exe | 
"{5707C958-9C42-4F3D-A79B-5F77024A69D7}" = protocol=17 | dir=in | app=c:\program files\starcraft ii beta\starcraft ii.exe | 
"{583D0F46-6E91-4F7A-A3F8-250CB3F392DB}" = protocol=17 | dir=in | app=c:\program files\activision\x-men origins - wolverine(tm)\binaries\wolverine.exe | 
"{5B07C066-527A-4C05-97D3-A3F929455E89}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{62A693AD-749B-4683-8D65-C31CF7B2E6D4}" = protocol=17 | dir=in | app=c:\program files\ventrilo\ventrilo.exe | 
"{71994F4C-85D7-46B2-8197-4593672EFB4D}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{7C10A01C-261B-456E-8CCA-997849CA4835}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{8228AB7D-78BB-48AB-9CD9-35FD61414E39}" = protocol=6 | dir=in | app=c:\program files\activision\x-men origins - wolverine(tm)\binaries\wolverine.exe | 
"{8C6049F8-2B82-4DA9-989A-0BABA72DE9E3}" = protocol=6 | dir=in | app=c:\program files\spiele\starcraft ii beta\starcraft ii.exe | 
"{B758D1A7-8F54-4A36-B4E3-4ABFA744C877}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{CC1668D2-304B-4A6C-B8BD-4549D48DC64E}" = protocol=6 | dir=in | app=c:\windows\services.exe | 
"{CF69DDD5-05D6-4CAF-B433-629E3B9A43EE}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{D35EB09B-06FB-4BE1-ADAE-FD7B2F8F75E5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{DDD848F9-62BF-4942-970E-114DB87BFD44}" = protocol=17 | dir=in | app=c:\windows\services.exe | 
"{E104DED1-9D30-4CE7-8837-9016B3F9DCAC}" = protocol=17 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe | 
"{E1653B73-1C60-4DB8-8D82-4ED6CCDEE667}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe | 
"{E1A4037C-486C-4676-B723-D4EF1DBE1E6D}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{F6E5C61D-391F-4DD9-A048-81777EF5C8D1}" = protocol=6 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe | 
"{FE8D5519-A367-404B-86DF-E777897DA831}" = protocol=17 | dir=in | app=c:\program files\daum\potplayer\daumvsvr.exe | 
"TCP Query User{10B2679D-FA61-4FF8-8D26-2C490CE81CED}C:\program files\hamachi\hamachi.exe" = protocol=6 | dir=in | app=c:\program files\hamachi\hamachi.exe | 
"TCP Query User{115F198B-8909-4548-8D46-0ED2013BD60A}C:\program files\daum\potplayer\potplayer.exe" = protocol=6 | dir=in | app=c:\program files\daum\potplayer\potplayer.exe | 
"TCP Query User{187AC24B-DEFB-4934-87C9-62AE4017EAB7}C:\users\kutluay\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe" = protocol=6 | dir=in | app=c:\users\kutluay\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe | 
"TCP Query User{24935072-8B18-467D-BFA9-146DD807680E}C:\program files\starcraft ii beta\versions\base14259\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii beta\versions\base14259\sc2.exe | 
"TCP Query User{3791A1CB-7EC1-4708-9AA3-836F81F80691}C:\program files\trillian\trillian.exe" = protocol=6 | dir=in | app=c:\program files\trillian\trillian.exe | 
"TCP Query User{3A14741D-A75C-40BB-A525-DE69642AF33B}C:\program files\spiele\starcraft ii beta\versions\base14093\sc2.exe" = protocol=6 | dir=in | app=c:\program files\spiele\starcraft ii beta\versions\base14093\sc2.exe | 
"TCP Query User{490EAA09-7684-46A9-92D5-172AE591030E}C:\users\kutluay\downloads\wow-burningcrusade-dede-installer-downloader.exe" = protocol=6 | dir=in | app=c:\users\kutluay\downloads\wow-burningcrusade-dede-installer-downloader.exe | 
"TCP Query User{5540884F-3A90-426A-99C4-891CB67432BF}C:\program files\starcraft\starcraft.exe" = protocol=6 | dir=in | app=c:\program files\starcraft\starcraft.exe | 
"TCP Query User{5A9B138B-C7E9-486E-8175-D9C386F0E126}C:\program files\spiele\starcraft ii beta\versions\base14133\sc2.exe" = protocol=6 | dir=in | app=c:\program files\spiele\starcraft ii beta\versions\base14133\sc2.exe | 
"TCP Query User{5CA89FF2-3C79-4FC2-821A-AB166B748555}C:\program files\starcraft ii beta\versions\base14219\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii beta\versions\base14219\sc2.exe | 
"TCP Query User{6A3618B9-3ECD-4CBB-A1D1-DFBDB694F0AD}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{824ED8BA-CFB7-4E47-9C7C-7B75C99EFCC2}C:\users\kutluay\downloads\wow-dede-installer-downloader.exe" = protocol=6 | dir=in | app=c:\users\kutluay\downloads\wow-dede-installer-downloader.exe | 
"TCP Query User{825D92E6-8563-44CB-8FF7-96A7EE2A65EB}C:\program files\starcraft ii beta\versions\base14593\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii beta\versions\base14593\sc2.exe | 
"TCP Query User{91D4A180-68B1-415A-926E-3F14049E3AD3}C:\program files\starcraft ii beta\versions\base14803\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii beta\versions\base14803\sc2.exe | 
"TCP Query User{A7AC1A94-F65C-47B4-BACA-82AF85EC690C}C:\users\kutluay\downloads\wow-burningcrusade-dede-installer-downloader.exe" = protocol=6 | dir=in | app=c:\users\kutluay\downloads\wow-burningcrusade-dede-installer-downloader.exe | 
"TCP Query User{BA18B3B7-BFB8-47FF-804F-8A6E3AE5E394}C:\program files\starcraft ii beta\versions\base14621\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii beta\versions\base14621\sc2.exe | 
"TCP Query User{BE9C5A85-37CE-403A-82D9-8C11E652D91C}C:\program files\starcraft ii beta\versions\base14356\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii beta\versions\base14356\sc2.exe | 
"TCP Query User{C4EE73B1-E3B6-471A-AB5A-630D6F58BCB1}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"TCP Query User{C528C955-CABD-45EF-9397-B3D1E785BD0A}C:\program files\spiele\soldier of fortune\app\sof\sof.exe" = protocol=6 | dir=in | app=c:\program files\spiele\soldier of fortune\app\sof\sof.exe | 
"TCP Query User{E03C63CE-17D6-4F15-9385-8D9F576DE807}C:\users\kutluay\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" = protocol=6 | dir=in | app=c:\users\kutluay\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe | 
"TCP Query User{E0CACA53-1BB0-4B34-9559-A44BB76E90AE}C:\program files\trillian\trillian.exe" = protocol=6 | dir=in | app=c:\program files\trillian\trillian.exe | 
"TCP Query User{EACCB014-9B1E-44A6-AA10-B6FBF09B7DF2}C:\program files\spiele\sof-payback\sof3.exe" = protocol=6 | dir=in | app=c:\program files\spiele\sof-payback\sof3.exe | 
"TCP Query User{F013D9AE-D573-4145-B756-D651002EE218}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{02A91045-2D14-4CB8-BAB8-4E8EFF8A880E}C:\program files\spiele\soldier of fortune\app\sof\sof.exe" = protocol=17 | dir=in | app=c:\program files\spiele\soldier of fortune\app\sof\sof.exe | 
"UDP Query User{06A58F10-4E5C-4C32-B677-9A088E9D7155}C:\program files\starcraft ii beta\versions\base14803\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii beta\versions\base14803\sc2.exe | 
"UDP Query User{12F3E119-211F-485B-9353-DB2689F13FFC}C:\users\kutluay\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" = protocol=17 | dir=in | app=c:\users\kutluay\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe | 
"UDP Query User{1ED4BAD3-D328-43B4-9E0D-6BAD81A04432}C:\users\kutluay\downloads\wow-burningcrusade-dede-installer-downloader.exe" = protocol=17 | dir=in | app=c:\users\kutluay\downloads\wow-burningcrusade-dede-installer-downloader.exe | 
"UDP Query User{29DD2876-187D-49D2-9F28-7DD255C22CDB}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{3EAD4498-18D7-4AB8-95B0-D23A174ADBD4}C:\users\kutluay\downloads\wow-burningcrusade-dede-installer-downloader.exe" = protocol=17 | dir=in | app=c:\users\kutluay\downloads\wow-burningcrusade-dede-installer-downloader.exe | 
"UDP Query User{4D4FC51B-042D-4485-AD89-75E5B357AD9B}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"UDP Query User{56AFF2EE-82CC-4E90-AA93-182BB30E334B}C:\program files\spiele\starcraft ii beta\versions\base14093\sc2.exe" = protocol=17 | dir=in | app=c:\program files\spiele\starcraft ii beta\versions\base14093\sc2.exe | 
"UDP Query User{6058E2A6-27C9-47F8-91EA-134F6AB3E44B}C:\program files\starcraft\starcraft.exe" = protocol=17 | dir=in | app=c:\program files\starcraft\starcraft.exe | 
"UDP Query User{63ED35A9-869B-4ACF-A607-85C22F40F702}C:\program files\spiele\starcraft ii beta\versions\base14133\sc2.exe" = protocol=17 | dir=in | app=c:\program files\spiele\starcraft ii beta\versions\base14133\sc2.exe | 
"UDP Query User{65471686-BC4B-49F0-ABD4-AC80AF2179B0}C:\program files\starcraft ii beta\versions\base14593\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii beta\versions\base14593\sc2.exe | 
"UDP Query User{78876B40-190A-481B-A425-C18FBAFF30A8}C:\users\kutluay\downloads\wow-dede-installer-downloader.exe" = protocol=17 | dir=in | app=c:\users\kutluay\downloads\wow-dede-installer-downloader.exe | 
"UDP Query User{9DB242F3-F7D3-4EBA-9415-E6097EF7FEB7}C:\program files\daum\potplayer\potplayer.exe" = protocol=17 | dir=in | app=c:\program files\daum\potplayer\potplayer.exe | 
"UDP Query User{A096D49D-63A7-4630-BACE-CD9BFC767635}C:\users\kutluay\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe" = protocol=17 | dir=in | app=c:\users\kutluay\appdata\roaming\macromedia\flash player\www.macromedia.com\bin\octoshape\octoshape.exe | 
"UDP Query User{A40B6E06-70A3-4BBB-BF7B-D1030DCBC415}C:\program files\spiele\sof-payback\sof3.exe" = protocol=17 | dir=in | app=c:\program files\spiele\sof-payback\sof3.exe | 
"UDP Query User{BA187A3D-7302-4004-9FF4-361A54575416}C:\program files\starcraft ii beta\versions\base14219\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii beta\versions\base14219\sc2.exe | 
"UDP Query User{CBDF3847-BB6C-4902-A9F4-B0EDF1049643}C:\program files\starcraft ii beta\versions\base14259\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii beta\versions\base14259\sc2.exe | 
"UDP Query User{D29A59B6-3C42-4CE5-A9DD-E43195E785BC}C:\program files\hamachi\hamachi.exe" = protocol=17 | dir=in | app=c:\program files\hamachi\hamachi.exe | 
"UDP Query User{D38B953E-E88B-4E07-9DF1-DFAC9656DB69}C:\program files\starcraft ii beta\versions\base14621\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii beta\versions\base14621\sc2.exe | 
"UDP Query User{DDB374A8-7B14-4412-8740-4976F4EEDB22}C:\program files\trillian\trillian.exe" = protocol=17 | dir=in | app=c:\program files\trillian\trillian.exe | 
"UDP Query User{E5339E11-F826-4C07-B7F6-7824027D695D}C:\program files\starcraft ii beta\versions\base14356\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii beta\versions\base14356\sc2.exe | 
"UDP Query User{F3FC05BC-D8BC-4884-9A69-100E0DAFF03F}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{F4EFE081-4356-41EC-B79B-41EB4E2604A2}C:\program files\trillian\trillian.exe" = protocol=17 | dir=in | app=c:\program files\trillian\trillian.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00AF10C1-44BD-4862-9D7F-24E6BA3E87FD}" = imagine digital freedom - Samsung
"{02EBDBB9-4600-41D3-B566-40CB861511D2}" = World of Warcraft FREE Trial
"{0323C306-8B8C-BB5F-E644-5BFE9A42A7BF}" = Catalyst Control Center Localization Hungarian
"{04983D37-2202-4295-94A2-8B547C66133F}" = Atheros WLAN Client
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{05349596-B41A-4A10-8F39-A9F91F66668F}" = Italienisch Teil 1 und 2
"{054CCA19-DADE-A3C9-171A-8735E23CA6FA}" = Catalyst Control Center Localization Italian
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{06A419C1-0509-4967-87F9-8761D8D6765D}" = ccc-core-static
"{08901F75-C0C0-4C33-9774-8EFF600E4F26}" = SF-Fixbrief 1.02
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution II
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1A8F390D-E05E-A124-3FB7-89E3E49F81E2}" = CCC Help Polish
"{1EBE1FE9-A341-3E9B-84C2-ABBB25F313E7}" = Catalyst Control Center Graphics Full New
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 16
"{2BC9740C-F4F1-4C90-B72E-3F9EDB694309}" = Livestream Procaster
"{2BE013D0-4CF4-AA57-05E1-19F9FACCF622}" = CCC Help English
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{2ED57AFF-081D-3B60-0C76-E51F68A9F0D8}" = Catalyst Control Center Localization Polish
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{32D6A58F-9659-446C-BBFC-E6F2B41F24DC}" = Samsung Magic Doctor
"{336D9EAB-B952-6023-C94C-8DE52AD75E7D}" = Catalyst Control Center Localization German
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{36753DE9-4B0F-1C39-D2C6-D9E9A1814FC3}" = CCC Help Hungarian
"{36BEAD11-8577-49AD-9250-E06A50AE87B0}" = Microsoft SOAP Toolkit 2.0 SP2
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go 5.0
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{4891561F-8CE7-1162-5967-E741306F7616}" = CCC Help Italian
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4AE31F12-E34D-83C1-BA1A-D65AF3BBB95F}" = Catalyst Control Center Localization Spanish
"{4C8E4664-A6A1-4847-61D0-D4FA02C42BB0}" = Skins
"{4EA8EA5D-8E46-4698-9BF7-2F2AD8E1C185}" = Easy Network Manager 3.0
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{5BE36E29-4207-2D14-1413-DF103390CC19}" = CCC Help French
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{61EE011A-A8D9-C1BD-962D-6342A371B1DB}" = ccc-utility
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{64F67489-76BB-4CDD-A236-F954BE774B35}" = NVIDIA PhysX
"{66845E09-545B-4498-01A1-BC0B4B213A33}" = Catalyst Control Center InstallProxy
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{685707A4-911C-468D-BFC4-64A50E5E3A0C}" = Samsung Update Plus
"{6A179A95-BA3E-8E61-D15F-A1DCC6ADBFD9}" = Catalyst Control Center Graphics Previews Vista
"{6DAC0917-50F5-7F70-9776-4215DA7E2D1B}" = CCC Help German
"{6F481C0F-B941-5E3F-CABD-0F23E718DF2C}" = Catalyst Control Center Core Implementation
"{6F730513-8688-4C3C-90A3-6B9792CE2EF3}" = Easy Battery Manager
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76E3C633-BC8E-E33D-8774-4A3DF581C8FE}" = CCC Help Portuguese
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{788F45B5-816D-2294-33DD-BF080093D54D}" = Catalyst Control Center Graphics Previews Common
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{7A14BF33-11BF-033B-02CC-732A30C09314}" = Catalyst Control Center Localization Greek
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{80B55F0E-5933-B1E8-4F05-4C386A2E61BD}" = Catalyst Control Center InstallProxy
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{82C0D164-1456-0361-4F39-58435427AFCB}" = Catalyst Control Center Graphics Full Existing
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8927E07C-97F7-4A54-88FB-D976F50DD46E}" = Turbo Lister 2
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A183127-7EDB-B2DD-7D87-70FBFA3A33C1}" = Catalyst Control Center Localization Portuguese
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8BCD9811-1084-4941-0222-F993DB70F182}" = ATI Catalyst Install Manager
"{8EBB8452-274B-465D-8324-00B0832FBB00}" = SoftMaker Office 2010
"{90850407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{90D73DED-670E-BE24-C645-C4D546A1F2C3}" = CCC Help Spanish
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{955597D8-E5E1-474D-B647-60AC44566D24}" = Play AVStation
"{9B0CCE51-B328-D4F7-C4A4-65723AF20574}" = Catalyst Control Center Core Implementation
"{A13C84F5-B2FC-823B-ADB2-6F5B2A6EE9DE}" = ccc-utility
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A72E0107-CFC5-16FB-BEA6-A74B94425ADD}" = CCC Help English
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AC76BA86-7AD7-1031-7B44-A81300000003}" = Adobe Reader 8.1.3 - Deutsch
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B395BC1D-CC06-425E-9049-4CD985EFF004}" = LightScribe  1.8.15.1
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BDC209E0-8D38-F913-5246-4376FC4C3EF5}" = Catalyst Control Center Localization French
"{BF313243-28F5-2434-0B5B-FAA0B8B30B1C}" = Catalyst Control Center Graphics Light
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint 2.0
"{C656142F-EFE1-44CD-BFAD-6CBC6DCB9860}" = Vodafone Mobile Connect Lite
"{C73B3D3A-2FDC-EE8F-F0E5-0269A85014D3}" = Catalyst Control Center Graphics Light
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding
"{D6F8B656-4127-D525-8893-8653D72DD136}" = Catalyst Control Center Graphics Previews Common
"{D9509DDD-74B4-A7CB-3669-7358BEE3C1AC}" = ccc-core-static
"{DB4DF8B5-E448-45E5-1C6C-0C276F828E10}" = Skins
"{DE6A3D43-B716-9973-9E2E-4620237464C4}" = Catalyst Control Center HydraVision Full
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{ECA89BA0-1C9B-237D-F59E-EC62534831A5}" = Catalyst Control Center Graphics Full New
"{ECB29C3B-4D64-17C0-430D-DEB933D76834}" = CCC Help Greek
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{ED862528-0058-F09F-F4B3-3E3276A3F3C7}" = Catalyst Control Center Graphics Full Existing
"{EF367AA4-070B-493C-9575-85BE59D789C9}" = Easy SpeedUp Manager
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FD53302C-8E7B-4730-8AD8-86A889BDBFAB}" = AVStation Now
"7-Zip" = 7-Zip 4.64
"AC3Filter_is1" = AC3Filter 1.63b
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"Agere Systems Soft Modem" = Agere Systems HDA Modem
"Cheatbook 04.2009" = Cheatbook 04.2009
"DaumCleaner" = Daum Ŭ¸®³Ê
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"Hamachi" = Hamachi 1.0.1.5
"ICCup Launcher_is1" = ICCup Launcher
"InstallShield_{05349596-B41A-4A10-8F39-A9F91F66668F}" = Italienisch Teil 1 und 2
"InstallShield_{4EA8EA5D-8E46-4698-9BF7-2F2AD8E1C185}" = Easy Network Manager 3.0
"InstallShield_{685707A4-911C-468D-BFC4-64A50E5E3A0C}" = Samsung Update Plus
"InstallShield_{955597D8-E5E1-474D-B647-60AC44566D24}" = Play AVStation
"InstallShield_{FD53302C-8E7B-4730-8AD8-86A889BDBFAB}" = AVStation Now
"JDownloader" = JDownloader
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MobileMod_3.0" = MobileMod 3.0
"MobilityDotNET" = DH Mobility Modder.NET
"net" = Advertisement Service
"PotPlayer" = Daum ÆÌÇ÷¹À̾î
"PSL Replay Uploader & Chaos Launcher_is1" = PSL Replay Uploader v1.11 & Chaos Launcher v0.5.2 for StarCraft
"RocketDock_is1" = RocketDock 1.3.5
"Starcraft" = Starcraft
"StarCraft II Beta" = StarCraft II Beta
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Trillian" = Trillian
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Antimalware Doctor" = Antimalware Doctor
"Octoshape add-in for Adobe Flash Player" = Octoshape add-in for Adobe Flash Player
"Octoshape Streaming Services" = Octoshape Streaming Services
 
========== Last 10 Event Log Errors ==========
 
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
 
< End of report >