| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware CeaseWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
13.05.2010, 07:35
| #1 |
| |  Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease Also es geht um wie folgt Das Antispyfortress fake antivirus programm der mir gefakte virus meldungen zeigt und dan mich auffordert die vollversion von einer sofwear zu kaufen die ich noch nie in meinem leben gesehn oder bewust installiert hab. Wie auch immer ich hab dan versucht mich schlau zu googlen aber was ich gefunden hab was eine seite die ein virusscanner namens Spyware Cease anbietet weil ich aber trotztdem skeptisch blieb und nicht gleich alles lade was angeblich "free" ist und nur bisschen wie ein virus scan aussieht googelte ich auch Spyware Cease nach und bin schlieslich auf das trojanerboard gekommen ich weiß jetzt zwar dass Spyware Cease auch fake ist und wie man das Spyware Cease ding entfernt aber wie ich des Antispyfortess entferne hab ich keine ahnung wie gesagt googeln bringt mich meistens auf gefakte Spyware Cease dinger. Ach ja und ein angeblichen pfad zum virus hab ich auch nicht gefunden %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe Wäre schon wenn ihr mir helfen könnt ich kan ab DI wider richtig an meinen PC bis dahin sollte er sauber sein aber ich check das Board 2-3 mal am tag wenn ich kann also  im vorraus ...ich kann mir vorstellen das das board überlasstet ist mit HILF MIR threats aber es gibt viel zu wenig HELFER  eigendlich schade ....und für alle die sich auskennen Yenec wars  |
|
14.05.2010, 10:47
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease Den gleichen Text bitte jetzt nochmal ohne Augenkrebs.
__________________  Dafür aber mit einigermaßen korrekter Punkt- und Kommasetzung. Normalerweise halte ich nichts von kleinkarierten Rechtschreibhinweisen, aber Deinen Text will ich mir so nicht antun
__________________ |
|
14.05.2010, 10:50
| #3 |
| | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease haha Augenkrebs
__________________ Sehr witzig hilft aber auch nicht viel weiter ... und auserdem glaub ich brauchst du kein . und , um den text zu verstehn Kurz und Knackig gesagt wer kennt den virus Antispyfortress und wie krieg ich den weg ganz einfach |
|
14.05.2010, 10:57
| #4 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware CeaseZitat:
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
14.05.2010, 11:10
| #5 |
| | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease Ok ich geb mein besstes :Es geht um ein fake Antivirusprogram , dass sich Antispyfortess nennt. Das prrogram sagt mir immer mein PC würde von irgendwelchen viren oder hackern angegriffen werden , was aber natürlich nicht stimmt. Es fordert mich auf Eine Vollversion Von der besagten softwear zu kaufen. Als ich darauf hin mich versucht hab schlau zu googeln , Fand ich einen angeblichen remover von der besagten software , nammens Spyware Cease (den teil wie ich auf das board gekommen bin lass ich aus) Auser dem besagten remover hab ich 2 pfade gefunden %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe der rest ist uninteresant für mein problem ich hoffe die . und , setztung stimmt und es is auch hoffendlich alles andere ok KEIN AUGENKREBS  |
|
14.05.2010, 11:59
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease Siehste, geht doch  Bitte einen Vollscan mit Malwarebytes machen und Log posten. Danach OTL: Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
__________________ --> Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease |
|
14.05.2010, 12:01
| #7 |
| | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease OK danke ich werde das resultat posten ... weil das "Virus" schliest oder lässt mich mein antivirenprogramm nicht öffnen egal was ich mache aber ich haffe mit dem programm gehts EDIT hier der sehr lange "LOG" OTL logfile created on: 14.05.2010 13:21:00 - Run 1 OTL by OldTimer - Version 3.2.4.1 Folder = C:\Users\Simon\Downloads 64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18904) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 8,00 Gb Total Physical Memory | 5,00 Gb Available Physical Memory | 68,00% Memory free 16,00 Gb Paging File | 14,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 366,72 Gb Total Space | 64,37 Gb Free Space | 17,55% Space Free | Partition Type: NTFS Drive D: | 550,13 Gb Total Space | 90,02 Gb Free Space | 16,36% Space Free | Partition Type: NTFS E: Drive not present or media not loaded Drive F: | 551,09 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: SIMON-PC Current User Name: Simon Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Users\Simon\Downloads\OTL.exe (OldTimer Tools) PRC - D:\Xfire\Xfire.exe (Xfire Inc.) PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) PRC - C:\Program Files (x86)\Opera\Opera.exe (Opera Software) PRC - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH) PRC - C:\Windows\SysWOW64\PnkBstrA.exe () PRC - C:\Program Files (x86)\Hide My IP 2009\HideMyIpSrv.exe () PRC - C:\Program Files (x86)\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH) PRC - C:\Program Files (x86)\a-squared Anti-Malware\a2service.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG) PRC - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG) PRC - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe (MAGIX AG) PRC - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (NewTech Infosystems, Inc.) PRC - C:\Program Files (x86)\UseNeXT\UseNeXT.exe () PRC - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated) PRC - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink) PRC - C:\Program Files (x86)\CPUCooL\CooLSrv.exe () PRC - C:\Windows\SysWOW64\IoctlSvc.exe (Prolific Technology Inc.) ========== Modules (SafeList) ========== MOD - C:\Users\Simon\Downloads\OTL.exe (OldTimer Tools) MOD - D:\Xfire\xfire_toucan_42628.dll (Xfire Inc.) MOD - C:\Windows\SysWOW64\comdlg32.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\msvcr71.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation) MOD - C:\Windows\SysWOW64\wsock32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.) SRV:64bit: - (FontCache) -- C:\Windows\SysNative\FntCache.dll (Microsoft Corporation) SRV:64bit: - (wlidsvc) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (npggsvc) -- C:\Windows\SysWow64\GameMon.des (INCA Internet Co., Ltd.) SRV - (TeamViewer5) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH) SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.) SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe () SRV - (HideMyIpSRV) -- C:\Program Files (x86)\Hide My IP 2009\HideMyIpSrv.exe () SRV - (TeamViewer4) -- C:\Program Files (x86)\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH) SRV - (a2AntiMalware) -- C:\Program Files (x86)\a-squared Anti-Malware\a2service.exe (Emsi Software GmbH) SRV - (fsssvc) -- C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (Nero BackItUp Scheduler 4.0) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG) SRV - (SeaPort) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (clr_optimization_v2.0.50727_64) -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (Fabs) -- C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe (MAGIX AG) SRV - (Microsoft Office Groove Audit Service) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe (Microsoft Corporation) SRV - (ETService) -- C:\Programme\Acer\Empowering Technology\Service\ETService.exe () SRV - (NTISchedulerSvc) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (NewTech Infosystems, Inc.) SRV - (NTIBackupSvc) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe (NewTech InfoSystems, Inc.) SRV - (nSvcIp) -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe () SRV - (FirebirdServerMAGIXInstance) -- C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe (MAGIX®) SRV - (eDataSecurity Service) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated) SRV - (Acer HomeMedia Connect Service) -- C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink) SRV - (CPUCooLServer) -- C:\Program Files (x86)\CPUCooL\CooLSrv.exe () SRV - (PLFlash DeviceIoControl Service) -- C:\Windows\SysWOW64\IoctlSvc.exe (Prolific Technology Inc.) SRV - (MSDTC) -- C:\Windows\SysWOW64\Msdtc [2006.11.02 15:34:14 | 000,000,000 | ---D | M] SRV - (vds) -- C:\Windows\SysWOW64\wbem\vds.mof () SRV - (VSS) -- C:\Windows\SysWOW64\wbem\vss.mof () ========== Driver Services (SafeList) ========== DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\DRIVERS\avgntflt.sys (Avira GmbH) DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\DRIVERS\fssfltr.sys (Microsoft Corporation) DRV:64bit: - (VClone) -- C:\Windows\SysNative\DRIVERS\VClone.sys (Elaborate Bytes AG) DRV:64bit: - (GearAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.) DRV:64bit: - (HdAudAddService) -- C:\Windows\SysNative\drivers\HdAudio.sys (Microsoft Corporation) DRV:64bit: - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\SysNative\drivers\usbaudio.sys (Microsoft Corporation) DRV:64bit: - (ElbyCDIO) -- C:\Windows\SysNative\Drivers\ElbyCDIO.sys (Elaborate Bytes AG) DRV:64bit: - (psdvdisk) -- C:\Windows\SysNative\DRIVERS\PSDVdisk.sys (Egis Incorporated) DRV:64bit: - (PSDNServ) -- C:\Windows\SysNative\DRIVERS\PSDNServ.sys (Egis Incorporated) DRV:64bit: - (PSDFilter) -- C:\Windows\SysNative\DRIVERS\psdfilter.sys (Egis Incorporated) DRV:64bit: - (nvamacpi) -- C:\Windows\SysNative\DRIVERS\NVAMACPI.sys (NVIDIA Corporation) DRV:64bit: - (adfs) -- C:\Windows\SysNative\drivers\adfs.sys (Adobe Systems, Inc.) DRV:64bit: - (NTIDrvr) -- C:\Windows\SysNative\Drivers\NTIDrvr.sys (NewTech Infosystems, Inc.) DRV:64bit: - (UBHelper) -- C:\Windows\SysNative\drivers\UBHelper.sys (NewTech Infosystems Corporation) DRV - (ElbyCDIO) -- C:\Windows\SysWOW64\ElbyCDIO.dll (Elaborate Bytes AG) DRV - (int15) -- C:\Windows\SysWOW64\drivers\int15_64.sys (Acer, Inc.) DRV - (adfs) -- C:\Windows\SysWOW64\drivers\adfs.sys (Adobe Systems, Inc.) DRV - (ntiopnp) -- C:\Windows\SysWOW64\drivers\ntiopnp.sys () DRV - (PSDFilter) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\PSDFilter.inf () DRV - (PSDNServ) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\PSDNserv.inf () DRV - (psdvdisk) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\PSDVDisk.inf () DRV - (PDNMp50) -- C:\Windows\SysWOW64\drivers\PDNMp50.sys (Printing Communications Assoc., Inc. (PCAUSA)) DRV - (PDNSp50) -- C:\Windows\SysWOW64\drivers\PDNSp50.sys (Printing Communications Assoc., Inc. (PCAUSA)) DRV - (Tcpip) -- C:\Windows\SysWOW64\wbem\tcpip.mof () DRV - (mpsdrv) -- C:\Windows\SysWOW64\wbem\mpsdrv.mof () DRV - (NPPTNT2) -- C:\Windows\SysWOW64\npptNT2.sys (INCA Internet Co., Ltd.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0309&m=aspire_m5711 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0309&m=aspire_m5711 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0309&m=aspire_m5711 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0309&m=aspire_m5711 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp64&d=0309&m=aspire_m5711 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://global.acer.com [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.plusnetwork.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B1 ED 9A 64 D8 57 CA 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Bing" FF - prefs.js..browser.search.defaulturl: "hxxp://www.bing.com/search?FORM=IEFM1&q=" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/" FF - prefs.js..extensions.enabledItems: {9AA46F4F-4DC7-4c06-97AF-5035170633FE}:20.1.0.4 FF - prefs.js..extensions.enabledItems: staff@hide-my-ip.com:1.0 FF - prefs.js..extensions.enabledItems: {AA994882-F391-4d2e-806F-8908DA4814ED}:1.11 FF - prefs.js..keyword.URL: "hxxp://www.google.de/search?q=" FF - prefs.js..network.proxy.share_proxy_settings: true FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2009.09.11 09:13:43 | 000,000,000 | ---D | M] -- C:\Users\Simon\AppData\Roaming\mozilla\Extensions [2010.03.03 22:43:45 | 000,000,000 | ---D | M] -- C:\Users\Simon\AppData\Roaming\mozilla\Firefox\Profiles\bdm4zk77.default\extensions [2009.09.14 12:50:16 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Simon\AppData\Roaming\mozilla\Firefox\Profiles\bdm4zk77.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.04.11 13:32:48 | 000,000,000 | ---D | M] (kikin plugin (JDownloader Edition)) -- C:\Users\Simon\AppData\Roaming\mozilla\Firefox\Profiles\bdm4zk77.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED} [2010.01.29 14:39:40 | 000,001,681 | ---- | M] () -- C:\Users\Simon\AppData\Roaming\Mozilla\FireFox\Profiles\bdm4zk77.default\searchplugins\ask.uk.xml [2009.09.11 10:28:50 | 000,002,171 | ---- | M] () -- C:\Users\Simon\AppData\Roaming\Mozilla\FireFox\Profiles\bdm4zk77.default\searchplugins\bing.xml O1 HOSTS File: ([2010.01.02 20:10:37 | 000,000,794 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Programme\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) O2:64bit: - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\ActiveToolBand.dll (Egis) O2:64bit: - BHO: (Windows Live ID-Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.5.4723.1820\swg64.dll (Google Inc.) O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Windows Live ID-Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.) O2 - BHO: (no name) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - No CLSID value found. O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files (x86)\kikin\ie_kikin.dll (kikin) O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:64bit: - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.) O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.) O3:64bit: - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.) O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.) O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4:64bit: - HKLM..\Run: [LifeChat] C:\Program Files\Microsoft LifeChat\LifeChat.exe (Microsoft Corporation) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [MSicom] C:\Users\Simon\AppData\Local\Temp\MSicomm.exe (JAKfe) O4 - HKLM..\Run: [VirtualCloneDrive] C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG) O4 - HKCU..\Run: [AARC] C:\Users\Simon\Documents\SYS\WRInjector.exe File not found O4 - HKCU..\Run: [CHIHelper] C:\Users\Simon\AppData\Local\Temp\CHIHelper.exe File not found O4 - HKCU..\Run: [MSicomm] C:\Users\Simon\AppData\Local\Temp\MSicomm.exe (JAKfe) O4 - HKCU..\Run: [msnmsgr] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) O4 - HKCU..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - HKCU..\Run: [vvtujpsm] C:\Users\Simon\AppData\Local\lyrdfmtox\yvdebuxtssd.exe File not found O4 - HKCU..\Run: [xxlpwjwp] C:\Users\Simon\AppData\Local\bwntectht\qmmdjaetssd.exe File not found O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - Startup: C:\Users\Simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk = D:\Xfire\Xfire.exe (Xfire Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O8:64bit: - Extra context menu item: Add to AMV Converter... - C:\Program Files (x86)\MP3 Player Utilities 4.03\AMVConverter\grab.html () O8:64bit: - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll (Google Inc.) O8:64bit: - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files (x86)\MP3 Player Utilities 4.03\MediaManager\grab.html () O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files (x86)\MP3 Player Utilities 4.03\AMVConverter\grab.html () O8 - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll (Google Inc.) O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files (x86)\MP3 Player Utilities 4.03\MediaManager\grab.html () O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files (x86)\kikin\ie_kikin.dll (kikin) O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: HP Intelligente Auswahl - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.) O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysNative\HMIPCore.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysNative\HMIPCore.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysNative\HMIPCore.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysNative\HMIPCore.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\SysNative\HMIPCore.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWow64\HMIPCore.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWow64\HMIPCore.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWow64\HMIPCore.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWow64\HMIPCore.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\SysWow64\HMIPCore.dll () O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {4944924A-64E4-49C1-AC97-ABA3927262FE} hxxp://channel.dontblynk.com/Launcher/StWbUsa.CAB (StWbUsa Control) O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab (UnoCtrl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Simon\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\Simon\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.12.04 14:18:56 | 000,000,062 | R--- | M] () - F:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{15bd90eb-a12b-11de-9884-0022684c26ec}\Shell - "" = AutoRun O33 - MountPoints2\{15bd90eb-a12b-11de-9884-0022684c26ec}\Shell\AutoRun\command - "" = J:\DE_Fallout_3_DLC.EXE -- File not found O33 - MountPoints2\{1e44345b-a2b5-11de-9cac-0022684c26ec}\Shell - "" = AutoRun O33 - MountPoints2\{1e44345b-a2b5-11de-9cac-0022684c26ec}\Shell\AutoRun\command - "" = K:\autorun.exe -- File not found O33 - MountPoints2\{27a13f03-3cda-11df-b0ca-bed06ff0df4c}\Shell\AutoRun\command - "" = F:\AUTORUN.EXE -- File not found O33 - MountPoints2\{2ba2aa8a-439c-11df-b76a-a902428d9713}\Shell - "" = AutoRun O33 - MountPoints2\{2ba2aa8a-439c-11df-b76a-a902428d9713}\Shell\AutoRun\command - "" = P:\Autorun.exe -- File not found O33 - MountPoints2\{a3db007b-f075-11de-a39e-0022684c26ec}\Shell - "" = AutoRun O33 - MountPoints2\{a3db007b-f075-11de-a39e-0022684c26ec}\Shell\AutoRun\command - "" = F:\Zombie_Driver_Setup.exe -- [2009.12.04 14:18:56 | 465,683,579 | R--- | M] () O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.05.14 13:03:09 | 000,000,000 | ---D | C] -- C:\Users\Simon\AppData\Roaming\Malwarebytes [2010.05.14 13:02:53 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010.05.14 13:02:52 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010.05.14 13:02:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010.05.14 13:02:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.05.14 11:40:04 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll [2010.05.14 11:40:04 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll [2010.05.14 11:40:04 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll [2010.05.14 11:40:04 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll [2010.05.14 11:40:03 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll [2010.05.14 11:40:03 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll [2010.05.14 11:40:02 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll [2010.05.14 11:40:02 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll [2010.05.13 12:35:25 | 000,000,000 | ---D | C] -- C:\Users\Simon\Desktop\HALF LIFE 2² [2010.05.13 09:44:39 | 000,000,000 | ---D | C] -- C:\Users\Simon\AppData\Local\SKIDROW [2010.05.12 23:04:09 | 000,000,000 | ---D | C] -- C:\Users\Simon\AppData\Local\bwntectht [2010.05.12 20:12:20 | 000,000,000 | ---D | C] -- C:\Users\Simon\Desktop\DCIM [2010.05.12 15:08:37 | 000,000,000 | ---D | C] -- C:\Users\Simon\AppData\Local\SimsonsXD [2010.05.04 12:13:42 | 000,000,000 | ---D | C] -- C:\Users\Simon\AppData\Local\storage [2010.05.02 16:50:52 | 000,000,000 | ---D | C] -- C:\Users\Simon\Desktop\Neuer Ordner [2010.04.30 18:02:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Chicken Invaders 3 [2010.04.30 18:02:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ReflexiveArcade [2010.04.30 17:25:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2010.04.27 22:16:24 | 000,000,000 | ---D | C] -- C:\Users\Simon\Documents\Prince of Persia [2010.04.15 21:33:15 | 000,000,000 | ---D | C] -- C:\Users\Simon\Documents\ICQ [2010.04.15 17:36:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ASIO4ALL v2 [2010.04.15 17:36:35 | 000,225,280 | ---- | C] (Propellerhead Software AB) -- C:\Windows\SysWow64\rewire.dll [2010.04.15 17:36:34 | 000,000,000 | ---D | C] -- C:\Users\Simon\Documents\Image-Line [2010.04.15 17:36:25 | 001,554,944 | ---- | C] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) -- C:\Windows\SysWow64\vorbis.acm [2010.04.15 17:36:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VstPlugins [2010.04.15 17:36:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Outsim [2010.04.15 17:34:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Image-Line [2010.04.15 07:57:07 | 004,697,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2010.04.15 07:57:05 | 000,612,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2010.04.15 07:57:05 | 000,420,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbscript.dll [2010.04.15 07:57:03 | 000,220,672 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysWow64\l3codecp.acm [2010.04.15 07:57:03 | 000,181,760 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysNative\l3codecp.acm [2010.04.15 07:57:03 | 000,072,192 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysNative\l3codeca.acm [2010.04.15 07:57:03 | 000,062,464 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysWow64\l3codeca.acm [2010.04.14 18:26:22 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll [2010.04.14 18:26:22 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll [2010.04.14 18:25:44 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2010.04.14 18:25:44 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll [2009.03.03 10:46:58 | 000,049,152 | R--- | C] ( ) -- C:\Windows\Interop.IWshRuntimeLibrary.dll [7 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.05.14 13:25:35 | 004,456,448 | ---- | M] () -- C:\Users\Simon\ntuser.dat [2010.05.14 13:02:56 | 000,000,852 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.05.14 12:56:11 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010.05.14 12:56:11 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010.05.14 12:46:12 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2010.05.14 12:46:12 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2010.05.14 12:46:12 | 000,122,904 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2010.05.14 12:46:12 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2010.05.14 12:35:45 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010.05.14 12:35:45 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010.05.14 11:43:35 | 000,000,695 | ---- | M] () -- C:\Users\Simon\Desktop\SamHD.exe - Verknüpfung.lnk [2010.05.14 08:36:38 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\LogConfigTemp.xml [2010.05.14 08:35:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.05.13 15:46:13 | 000,524,288 | -HS- | M] () -- C:\Users\Simon\ntuser.dat{94924c0e-27a9-11df-91f4-ddc3be78d3e4}.TMContainer00000000000000000001.regtrans-ms [2010.05.13 15:46:13 | 000,065,536 | -HS- | M] () -- C:\Users\Simon\ntuser.dat{94924c0e-27a9-11df-91f4-ddc3be78d3e4}.TM.blf [2010.05.13 15:46:09 | 006,348,120 | -H-- | M] () -- C:\Users\Simon\AppData\Local\IconCache.db [2010.05.12 21:25:40 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2010.05.12 21:25:40 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010.05.12 07:53:43 | 003,024,768 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010.05.11 19:10:58 | 000,119,608 | ---- | M] () -- C:\Users\Simon\AppData\Local\GDIPFONTCACHEV1.DAT [2010.05.11 13:02:25 | 000,289,509 | ---- | M] () -- C:\Windows\[00]CSS PCA Mappack - Summerfeelings Uninstaller.exe [2010.05.07 21:52:46 | 000,041,872 | ---- | M] () -- C:\Windows\SysWow64\xfcodec.dll [2010.05.07 21:52:46 | 000,027,536 | ---- | M] () -- C:\Windows\SysNative\xfcodec64.dll [2010.05.05 13:19:57 | 000,007,916 | ---- | M] () -- C:\Users\Simon\AppData\Local\d3d9caps.dat [2010.05.02 20:06:06 | 001,447,804 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.05.02 20:06:06 | 000,628,672 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.05.02 20:06:06 | 000,595,748 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.05.02 20:06:06 | 000,127,400 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.05.02 20:06:06 | 000,105,078 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.05.01 11:29:19 | 000,000,748 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk [2010.04.30 17:05:54 | 000,000,130 | ---- | M] () -- C:\Users\Simon\AppData\Roaming\default.rss [2010.04.30 17:05:51 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini [2010.04.29 12:19:24 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010.04.29 12:19:14 | 000,024,664 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010.04.28 13:30:36 | 000,002,635 | ---- | M] () -- C:\Users\Simon\Desktop\Microsoft Office Publisher 2007.lnk [2010.04.18 16:44:31 | 000,000,982 | ---- | M] () -- C:\Users\Simon\Desktop\TeamSpeak 3 Client.lnk [7 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.05.14 13:02:56 | 000,000,852 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.05.14 12:36:26 | 663,635,616 | ---- | C] () -- C:\Users\Simon\Desktop\sr-zomdrv.bin [2010.05.14 12:36:26 | 000,000,075 | ---- | C] () -- C:\Users\Simon\Desktop\sr-zomdrv.cue [2010.05.14 11:43:35 | 000,000,695 | ---- | C] () -- C:\Users\Simon\Desktop\SamHD.exe - Verknüpfung.lnk [2010.05.14 11:12:57 | 1576,402,944 | ---- | C] () -- C:\Users\Simon\Desktop\Ms89-number.slevin.xvid.avi [2010.05.11 13:02:25 | 000,289,509 | ---- | C] () -- C:\Windows\[00]CSS PCA Mappack - Summerfeelings Uninstaller.exe [2010.05.07 21:52:46 | 000,041,872 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll [2010.05.07 21:52:46 | 000,027,536 | ---- | C] () -- C:\Windows\SysNative\xfcodec64.dll [2010.04.18 16:44:31 | 000,000,982 | ---- | C] () -- C:\Users\Simon\Desktop\TeamSpeak 3 Client.lnk [2010.03.21 15:17:49 | 000,000,033 | ---- | C] () -- C:\Windows\GunzLauncher.INI [2010.01.29 22:45:33 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2010.01.29 21:47:35 | 000,164,352 | -HS- | C] () -- C:\Windows\SysWow64\SC.dll [2010.01.06 15:59:27 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2010.01.01 10:19:17 | 000,000,036 | ---- | C] () -- C:\Windows\Tiny_Run.ini [2009.12.17 18:33:14 | 000,196,608 | ---- | C] () -- C:\Windows\SysWow64\HMIPCore.dll [2009.12.12 19:55:24 | 000,000,300 | ---- | C] () -- C:\Windows\game.ini [2009.12.05 20:49:03 | 000,000,741 | ---- | C] () -- C:\Windows\disney.ini [2009.11.20 15:33:37 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll [2009.11.13 19:42:17 | 000,081,920 | R--- | C] () -- C:\Windows\SysWow64\srctrl.dll [2009.11.06 11:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2009.10.22 19:25:50 | 000,000,228 | ---- | C] () -- C:\Windows\wininit.ini [2009.10.02 19:31:38 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CmdLineExt03.dll [2009.10.01 16:59:51 | 001,475,582 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2009.09.27 11:44:25 | 000,000,166 | ---- | C] () -- C:\Windows\Clean.ini [2009.09.15 20:36:46 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll [2009.09.15 20:36:15 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.03.21 14:15:29 | 000,000,044 | ---- | C] () -- C:\Windows\Acer(Normal).ini [2009.03.21 14:15:29 | 000,000,042 | ---- | C] () -- C:\Windows\Acer(Wide).ini [2009.03.03 03:47:14 | 000,120,200 | ---- | C] () -- C:\Windows\SysWow64\DLLDEV32i.dll [2009.03.03 03:47:10 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini [2009.03.03 03:27:04 | 000,004,767 | ---- | C] () -- C:\Windows\Irremote.ini [2008.04.12 17:40:30 | 000,011,264 | ---- | C] () -- C:\Windows\SysWow64\drivers\ntiopnp.sys [2008.01.21 04:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini [2006.03.06 10:41:02 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\AMV_DecDLL.dll [2004.09.16 13:26:40 | 000,012,634 | ---- | C] () -- C:\Windows\SysWow64\drivers\ADFUUD.SYS [2004.09.16 13:26:40 | 000,012,634 | ---- | C] () -- C:\Windows\ADFUUD.SYS ========== Alternate Data Streams ========== @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:AB689DEA @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:4D066AD2 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:2634FC95 @Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:798A3728 @Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:5D7E5A8F @Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:F3176E45 @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP  AFD38AE@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:7CACEF61 < End of report > Geändert von SimsonsXD (14.05.2010 um 12:52 Uhr) |
|
14.05.2010, 12:54
| #8 |
| | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = Opera.HTML] -- Reg Error: Key error. File not found ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data] "VistaSp2" = 0D 2D CD A6 C2 36 CA 01 [binary data] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "oobe_av" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Uforia\Mercenary Wars\Bin\MWGame.exe" = C:\Uforia\Mercenary Wars\Bin\MWGame.exe:*:Enabled:MWGame -- ((c)BeeHiveSoft) "C:\Combat Arms EU\CombatArms.exe" = C:\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe -- (Nexon) "C:\Combat Arms EU\Engine.exe" = C:\Combat Arms EU\Engine.exe:*Enabled:Engine.exee.exe -- (Nexon) "c:\kos\game_sting_pak\sting.exe" = c:\kos\game_sting_pak\sting.exe:*:Enabled:½ºÆÿ¶óÀÎ -- () "C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes] "C:\Uforia\Mercenary Wars\Bin\MWGame.exe" = C:\Uforia\Mercenary Wars\Bin\MWGame.exe:*:Enabled:MWGame -- ((c)BeeHiveSoft) "C:\Combat Arms EU\CombatArms.exe" = C:\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe -- (Nexon) "C:\Combat Arms EU\Engine.exe" = C:\Combat Arms EU\Engine.exe:*Enabled:Engine.exer_Engine.exe" = [String data over 1000 bytes] -- (Nexon) "c:\kos\game_sting_pak\sting.exe" = c:\kos\game_sting_pak\sting.exe:*:Enabled:½ºÆÿ¶óÀÎ -- () "C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes] ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0438E068-5290-442F-A95E-2459746C09FC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{059A59CF-7445-43B9-B0BB-5F0CDB70C3D2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{1480D6B6-9BC5-45A9-B8BE-CDB8F3F86075}" = lport=2869 | protocol=6 | dir=in | app=system | "{14CE4DE8-E9F8-4679-AA05-87D8C34B2737}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 | "{167C044B-52F4-49AF-81B3-23899B976308}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{18C0DB29-E57C-4E82-BF14-B4614FDD1A6E}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{1975610A-4255-4404-978B-F42F749A7787}" = rport=138 | protocol=17 | dir=out | app=system | "{199F49FF-682E-44BD-9794-DD2EA14E08C0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{2BC21FC4-23AD-4081-BB8E-97B3D8077F4A}" = rport=10243 | protocol=6 | dir=out | app=system | "{34141772-C197-4915-993C-36C2DA80E240}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{3890D1AC-E4BC-4AF7-B721-4B29A40B789F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{3D02F54B-9E64-4CF1-A3DA-DE671F1D8563}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{4F001453-87AC-4683-AC59-274437CEF0B7}" = lport=138 | protocol=17 | dir=in | app=system | "{69B57F16-9FBD-4B9E-9915-DAC87B650516}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{77508F1E-69A1-4A8B-86A3-9421E8EBAD42}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{796EBD8B-D115-41FE-B877-479E2CDAF22E}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe | "{7977A921-148C-4EF6-98BC-6DC8A422DD8E}" = lport=2869 | protocol=6 | dir=in | app=system | "{83EA46CB-2B8C-4AB7-B65A-AF5D5694CC61}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{923B7298-0AD4-4BB6-B62A-1F648799C7FB}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{9903AAFB-73E3-4327-8F36-A0B2D5CCACC0}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=c:\windows\system32\spoolsv.exe | "{A2A9780A-06E9-4EDF-B1A7-31EB1CADCE28}" = rport=137 | protocol=17 | dir=out | app=system | "{CA7A1129-89F0-42E5-B98F-6F09275B1E7F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{D18C08B4-FC59-4D1E-BBBA-57BA00518A6E}" = lport=139 | protocol=6 | dir=in | app=system | "{D8F9BE1C-CB09-4B9F-BFE1-4E1E655E9EE4}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{DA8A0C3D-F5AF-4C21-B2C9-3C8B6CA069FF}" = lport=137 | protocol=17 | dir=in | app=system | "{DC087202-3F87-4BEA-9024-D23CFDBEF030}" = rport=139 | protocol=6 | dir=out | app=system | "{DF2EB73D-57A4-4D06-8902-E0F295F584E4}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{DFDCC871-701A-4751-A279-25C191B5CBBE}" = lport=10243 | protocol=6 | dir=in | app=system | "{EAE1514F-4885-4180-A68A-5BAE019562CF}" = lport=445 | protocol=6 | dir=in | app=system | "{EDEBA956-DB77-4A8E-B6C6-A01A645B6BFC}" = rport=445 | protocol=6 | dir=out | app=system | "{FDE82BCE-CD7B-4A09-97DA-E4B60FAD86F9}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=datei- und druckerfreigabe (spoolerdienst - rpc-epmap) | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{008E56B6-6BE7-440B-A74B-79E925165A14}" = protocol=17 | dir=in | app=c:\users\simon\appdata\local\temp\ijjioptimizer.exe | "{0389E286-CA9A-4F3A-9E66-A6B604E730F6}" = dir=in | app=c:\program files (x86)\acer arcade live\acer slideshow dvd\acer slideshow dvd.exe | "{06E08139-9F71-488A-990D-D7EE6D59A2EB}" = protocol=1 | dir=in | name=datei- und druckerfreigabe (echoanforderung - icmpv4 eingehend) | "{07598475-EA3E-46BF-9380-81B4D80FE0B8}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{0CF0C02C-C9AB-4547-B8D8-2310FF323BD2}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{0DFBD61D-A646-4509-8507-94CBA3F1D44C}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe | "{0E20CA89-A9DD-4A0E-8CCD-98FF8AA15F13}" = protocol=6 | dir=in | app=d:\bionic commando\bionic commando\bionic_commando.exe | "{0FE5E0F9-0F90-4020-BEB4-86E261D35575}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{11A7BCF4-4323-4802-ACC3-9FD55C6EE396}" = protocol=17 | dir=in | app=d:\tom clancy´s rainbow six vegas 2\binaries\r6vegas2_launcher.exe | "{1381CA59-9500-4821-9D02-91386D329610}" = protocol=17 | dir=in | app=d:\transformers - die rache\transformers2.exe | "{147C1CFE-4C74-42F4-90BD-4B3BB5B5BACA}" = protocol=17 | dir=in | app=d:\bionic commando\bionic commando\support\cap1-0101.exe | "{1938D286-7880-43F0-BA79-F5E2112B3104}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{1B69BADC-ADB9-47E6-868E-44C60D662077}" = protocol=6 | dir=in | app=d:\bionic commando\bionic commando\support\cap1-0101.exe | "{1B7B2F69-C63E-4844-8E1E-F7A09160CF91}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe | "{1EA4CFDD-1A78-465D-AEF3-891020B7BAF4}" = protocol=58 | dir=in | name=datei- und druckerfreigabe (echoanforderung - icmpv6 eingehend) | "{225FC219-0297-466C-A5FA-1BB5B59D54EB}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer.exe | "{24C79781-5D07-48D9-AFAC-A68CBE668704}" = protocol=1 | dir=out | name=datei- und druckerfreigabe (echoanforderung - icmpv4 ausgehend) | "{2680AFDF-747E-4415-81F6-726E19277B45}" = protocol=6 | dir=in | app=d:\prince of persia\princeofpersia_launcher.exe | "{283772DF-AB18-4D37-BAA1-1CFA596D314B}" = protocol=6 | dir=in | app=d:\assasins creed 2\assassinscreedii.exe | "{29405B70-E937-4AAD-B596-6CAD127FB329}" = protocol=17 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | "{2A685FA1-4BDA-4C0A-B794-B2EDB40AEE0F}" = protocol=6 | dir=in | app=d:\battlefield bad company 2\bfbc2updater.exe | "{2AB7E53C-85E4-4B39-923A-0C96E68E9F76}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{2D2B4061-AD60-4050-9F92-8B3C23C04017}" = protocol=17 | dir=in | app=d:\of dragon rising\ofdr.exe | "{2D32DCE6-7557-4A5D-8816-A39022A23359}" = protocol=6 | dir=in | app=d:\splinter cell conviction\src\system\gu.exe | "{2DB2B56C-CEDE-4167-9EC4-29F333ADEF1A}" = protocol=17 | dir=in | app=d:\farcry2\far cry 2\bin\farcry2.exe | "{2E8FF38E-005C-49FC-BACF-0D44BA8516A3}" = protocol=17 | dir=in | app=d:\frontlines-fuel of war\binaries\ffow.exe | "{327420CC-37B3-485D-B854-61E4873E3E52}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{34833C29-1241-4415-8668-DFD84AD9A0DA}" = protocol=6 | dir=in | app=d:\prince of persia\prince of persia.exe | "{367479AC-0206-4426-8B8D-96A1B6BB4471}" = dir=in | app=c:\program files (x86)\acer arcade live\acer homemedia connect\acer homemedia connect.exe | "{36FFBC1D-F68A-4792-8DAE-518DCD793C50}" = protocol=17 | dir=in | app=c:\combat arms eu\nmservice.exe | "{3980AF21-7F69-42B7-8B91-5CDCE0813A5B}" = protocol=6 | dir=in | app=d:\frontlines-fuel of war\binaries\ffow.exe | "{39BD54B2-CA36-4A42-8193-3FBD7ECE23AA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{3D9E3CB6-994E-4F54-B87C-9E21AC81A1BF}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer.exe | "{3DFD9276-28F5-4D9C-ABF3-3D6657207D73}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | "{3EDEBA64-5817-4F06-93AF-AFCDBC09A1EC}" = protocol=17 | dir=in | app=d:\burnout paradise the ultimate box\burnoutlauncher.exe | "{3F488212-74ED-4E2D-86D8-C691CB4FF12D}" = dir=in | app=c:\program files (x86)\acer arcade live\acer homemedia\acer homemedia.exe | "{414682F5-6BE3-4B81-938B-EF3EDAFED6B9}" = protocol=17 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\schedulersvc.exe | "{42FF1B4C-A136-417E-AF79-98BA2C6E0058}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe | "{443C6525-6097-4715-A8EE-A04F79C6DD9D}" = protocol=6 | dir=in | app=d:\resindent evil 5\re5dx10.exe | "{444867D5-C0A0-47A1-AAA8-D8CDE77601E9}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version4\teamviewer.exe | "{44932F41-3622-42C0-8ACA-897B1AE184EA}" = protocol=17 | dir=in | app=d:\burnout paradise the ultimate box\burnoutparadise.exe | "{449C046A-72CC-43D4-A392-A44CDDC7B412}" = protocol=17 | dir=in | app=d:\wolfenstein\mp\wolf2mplite.exe | "{44D47F96-450C-4417-95B1-AFB209B55CED}" = protocol=6 | dir=in | app=c:\program files (x86)\newtech infosystems\nti backup now 5\schedulersvc.exe | "{4501CDC4-E8A6-4EEA-B960-E618C852BC84}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{45FC2D53-9226-42E0-9208-04975D47A4EF}" = protocol=17 | dir=in | app=d:\batman arkham asylum\binaries\shippingpc-bmgame.exe | "{48B350A5-2068-40CB-8A89-5FE97B200BD6}" = protocol=6 | dir=in | app=c:\users\simon\appdata\local\temp\ijjioptimizer.exe | "{4A4E08D6-EB45-4D9E-BE34-30B4F602C5DF}" = protocol=6 | dir=in | app=d:\transformers - die rache\transformers2.exe | "{4AD9E7F6-0FF6-4608-97F1-E50F078A9371}" = protocol=17 | dir=in | app=d:\tom clancy´s rainbow six vegas 2\binaries\r6vegas2_game.exe | "{4BE89C72-7810-470D-8D52-E2C563CF74D9}" = protocol=17 | dir=in | app=d:\red faction guerrilla\rfg.exe | "{4FFE157D-9276-441B-85CA-899875418ED7}" = protocol=6 | dir=in | app=d:\call of duty 5 -w@w\codwaw.exe | "{5463ADE8-C342-4878-BCB8-8C376F4F2300}" = protocol=6 | dir=in | app=d:\prototype\prototypef.exe | "{55F1891A-07A1-4777-B370-80614A29F2E7}" = protocol=17 | dir=in | app=d:\bioshock 2\sp\builds\binaries\bioshock2.exe | "{567EB5EA-C0B0-4208-8037-03A34E8A81DB}" = protocol=6 | dir=in | app=d:\red faction guerrilla\rfg.exe | "{57B47768-3316-428D-AB42-8E2219769AD2}" = protocol=17 | dir=in | app=d:\gta iv\grand theft auto iv\launchgtaiv.exe | "{57E50C3B-909C-43D0-8E20-E1EF6FAA19D2}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{5ABD4176-8BE0-46BB-8E29-88F4B42E7A24}" = protocol=6 | dir=in | app=d:\resindent evil 5\re5dx9.exe | "{5AFBC360-2BCD-418A-89D4-9CE54B22EA4D}" = protocol=17 | dir=in | app=d:\assasins creed 2\assassinscreedii.exe | "{646C4A8A-6DC8-4414-BAD2-B0C1F7D6A20B}" = protocol=6 | dir=in | app=d:\wolfenstein\mp\wolf2mp.exe | "{67C1C770-D962-4835-8DCB-E22944A25527}" = protocol=6 | dir=in | app=d:\assasins creed 2\assassinscreediigame.exe | "{6BB27D10-CE1D-4317-8AC7-00972940C7B3}" = protocol=17 | dir=in | app=d:\assassin's creed\assassinscreed_dx10.exe | "{6DDD900A-EA01-458D-B102-6A25FAC5FE5A}" = dir=in | app=c:\program files (x86)\acer arcade live\acer dv magician\acer dv magician.exe | "{6E2451FA-7D57-410D-81E1-B142B670F114}" = protocol=6 | dir=in | app=d:\bioshock 2\mp\builds\binaries\bioshock2.exe | "{6EB32902-34BD-4E8C-808D-95DA60C70C08}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe | "{732AB754-3A00-45D2-BAE0-3A1CB130F8A7}" = protocol=6 | dir=in | app=d:\call of duty 5 -w@w\codwawmp.exe | "{756EA0C1-718E-4AB5-A67A-FF0437870C5E}" = protocol=6 | dir=in | app=d:\farcry2\far cry 2\bin\farcry2.exe | "{75AF027F-252A-4B92-92A0-6D7AA38BBF6D}" = protocol=6 | dir=in | app=c:\combat arms eu\nmservice.exe | "{77A80276-5353-4535-A40B-D8772863A4AB}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{7A09582C-D404-4DA2-AA97-F970AFCCEEF2}" = protocol=6 | dir=in | app=d:\gta iv\rockstar games social club\rgsclauncher.exe | "{7A8A6543-E55C-4FCE-83A2-955E3E865B25}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{7BA1AE6F-C117-4704-844C-0B8D14963017}" = protocol=17 | dir=in | app=d:\x-men origins - wolverine(tm)\binaries\wolverine.exe | "{7C9EAD3A-27EE-4E96-A071-B16E480DC550}" = protocol=17 | dir=in | app=d:\avatar\bin\avatarlauncher.exe | "{7F8F5FAB-3BDA-4F3B-B18F-9B7B729CEDBD}" = dir=in | app=c:\program files (x86)\acer arcade live\acer homemedia trial creator\acer homemedia trial creator.exe | "{82C79B91-59F4-42FC-8783-DE6E0F999AD1}" = protocol=6 | dir=in | app=d:\assassin's creed\assassinscreed_launcher.exe | "{83B85043-3FFC-48EA-88FD-EE4CCC5D9AEA}" = protocol=17 | dir=in | app=d:\mirror's edge\binaries\mirrorsedge.exe | "{863B374C-E9A7-4A8C-9323-E8A0B288D501}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{87C8F244-3C9C-43FB-96BA-E30939740CE9}" = protocol=6 | dir=in | app=d:\mirror's edge\binaries\mirrorsedge.exe | "{882AC8B5-4AA7-4A4F-86C3-8D6BF8B6A34B}" = protocol=17 | dir=in | app=d:\fear 1\fearxp2.exe | "{898B1132-2D8B-44C3-B73F-52AC63C035CC}" = protocol=6 | dir=in | app=d:\bioshock 2\sp\builds\binaries\bioshock2.exe | "{8A49D54F-9D4E-4799-BA94-B6387339F7DD}" = protocol=17 | dir=in | app=d:\bionic commando\bionic commando\bionic_commando.exe | "{8AAC4ED5-BB7C-4F3B-9FC1-5418B54CFF71}" = protocol=17 | dir=in | app=d:\wolfenstein\mp\wolf2mp.exe | "{8D20B162-EAF0-41D8-A190-84548FA74EC8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{8E31CF2E-FA79-4865-BB86-9A6E119D719B}" = protocol=6 | dir=in | app=d:\fear combat\fearmp.exe | "{8E3DEF20-8742-436D-8735-E1F9BB8A1D0C}" = protocol=6 | dir=in | app=d:\gta iv\grand theft auto iv\launchgtaiv.exe | "{8E97165B-CAF8-41D6-9005-E3CDE2A589AA}" = protocol=6 | dir=in | app=d:\call of duty 4 - modern warfare\iw3mp.exe | "{8F833ACB-5A4D-4C0B-B917-E8FADC88C12A}" = protocol=17 | dir=in | app=d:\unreal tournament 3\binaries\ut3.exe | "{901397EA-546D-4E06-AF5C-4BF963B3A1A5}" = protocol=6 | dir=in | app=d:\tom clancy´s rainbow six vegas 2\binaries\r6vegas2_launcher.exe | "{915601BE-C67F-4EE6-8ADF-56C064A671E4}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{94C24091-77A1-41F0-A491-3D4284C677BF}" = protocol=17 | dir=in | app=d:\resindent evil 5\re5dx10.exe | "{956DD0FD-03A3-44C9-B842-EA4419BCB1D1}" = protocol=17 | dir=in | app=d:\assassin's creed\assassinscreed_launcher.exe | "{97C6CFF5-0A1C-4F07-8BCD-DA1B0D46DC30}" = protocol=6 | dir=in | app=d:\burnout paradise the ultimate box\burnoutparadise.exe | "{9874BE68-754B-4704-839E-BF4A557DBB48}" = protocol=6 | dir=in | app=c:\program files (x86)\itunes\itunes.exe | "{9B140A74-A0F2-4C9B-A216-995E1337B533}" = protocol=6 | dir=in | app=d:\batman arkham asylum\binaries\shippingpc-bmgame.exe | "{9B34549D-08D5-4136-A0E7-40E6398D5682}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{9D1F2324-92EE-41BA-8CFC-9A934D1A609A}" = dir=in | app=c:\program files (x86)\acer arcade live\acer homemedia connect\kernel\dms\clmsserver.exe | "{9FA643B4-6F89-4E12-B278-1B960B3FD290}" = protocol=17 | dir=in | app=d:\assasins creed 2\assassinscreediigame.exe | "{A1446928-8BD8-4820-B681-4FB1621CBB49}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{A24503B0-64ED-4859-AE77-0A39BDDC6B53}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{A3C39FF2-C278-437F-9327-2D4F9BB638D7}" = protocol=17 | dir=in | app=d:\call of duty 4 - modern warfare\iw3mp.exe | "{A4A99DC9-5BA5-4C25-8A70-48969E1B3B2B}" = protocol=6 | dir=in | app=d:\x-men origins - wolverine(tm)\binaries\wolverine.exe | "{ABAE176F-5750-4F2B-97B6-E679768BDDBF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{AE1276C7-685F-4DDA-874E-630FCA3D678D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{AF4F7D1C-E998-4DCC-8E97-CD6653811C34}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{AFA04D9A-6EF8-45E4-AD5F-39AD1A6EF1A8}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe | "{B5EC20E4-BE0A-4784-8CE6-80867CA936C3}" = protocol=17 | dir=in | app=d:\assasins creed 2\uplaybrowser.exe | "{B5F8A53E-5CC4-4CD6-A3A5-0D0AF12F1EEF}" = protocol=58 | dir=out | name=datei- und druckerfreigabe (echoanforderung - icmpv6 ausgehend) | "{B62F7F91-9046-41CB-8C72-6CE0AF95ABEA}" = protocol=17 | dir=in | app=d:\battlefield bad company 2\bfbc2updater.exe | "{B6C9B762-0BA5-464D-9FC7-D2229D383FA2}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe | "{B89DE773-C2AD-4509-B402-562C7E969B7B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{BA14712C-D8CC-4675-BE35-2EEDADD184EC}" = protocol=6 | dir=in | app=d:\assassin's creed\assassinscreed_dx9.exe | "{BCAAEA6D-8894-474C-A8B2-C307D4C44443}" = protocol=17 | dir=in | app=d:\splinter cell conviction\src\system\conviction_game.exe | "{BD11B9E9-CA11-4522-BC68-0AF8146C1925}" = protocol=6 | dir=in | app=d:\avatar\bin\avatar.exe | "{BE88A4C3-F1E4-4C6B-9713-BF2551B1575B}" = protocol=17 | dir=in | app=d:\prince of persia\princeofpersia_launcher.exe | "{C0A18E0B-86E6-48B8-BA5E-4C4A0FC86807}" = protocol=6 | dir=out | app=system | "{C0E6FE08-F97D-41BE-BE9C-37CF49F41B49}" = protocol=6 | dir=in | app=d:\wolfenstein\mp\wolf2mplite.exe | "{C150072E-29C8-4EE2-8872-CDDCE7BBF20C}" = protocol=17 | dir=in | app=d:\splinter cell conviction\src\system\gu.exe | "{C2E98381-9903-42FE-AFC3-BCE638F17844}" = protocol=17 | dir=in | app=d:\call of duty 5 -w@w\codwawmp.exe | "{C5885424-98F3-453D-B293-9212C900DC30}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | "{C58A7F5F-36E6-424C-87C0-B65A2C5240D8}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{C6F32624-A4AC-4B5F-B617-E73113CC0D66}" = protocol=6 | dir=in | app=d:\burnout paradise the ultimate box\burnoutlauncher.exe | "{C8EEC285-EA79-4DE7-9592-5B2836F9C642}" = protocol=6 | dir=in | app=d:\splinter cell conviction\src\system\conviction_game.exe | "{C9025480-2B5C-495D-B134-A968F165AF8A}" = dir=in | app=c:\program files (x86)\acer arcade live\acer arcade live main page\acer arcade live.exe | "{CDB39EA2-1F0C-4540-974B-C56BDE72D400}" = protocol=6 | dir=in | app=d:\assassin's creed\assassinscreed_dx10.exe | "{CEA59BBE-A7E8-4D85-A43E-A0E759906F2B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{D0CAA9A2-D71D-47D3-94BB-EB64D35E66EE}" = dir=in | app=c:\program files (x86)\acer arcade live\acer videomagician\acer videomagician.exe | "{D37C7887-754B-4E7C-B0DF-8179060C6A9D}" = protocol=17 | dir=in | app=c:\program files (x86)\itunes\itunes.exe | "{D46A0271-5D69-4E9E-8127-D090CBA5F355}" = protocol=17 | dir=in | app=d:\burnout paradise the ultimate box\burnoutconfigtool.exe | "{D47DF71F-6AD7-46F5-BE16-592DD4FD3F30}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{D52C5F71-69E3-4329-87CC-3622E7BB8F36}" = protocol=6 | dir=in | app=d:\of dragon rising\ofdr.exe | "{D5B1F61C-1B3A-47FE-BEB7-23B8785D5123}" = dir=in | app=c:\program files (x86)\acer arcade live\acer dvdivine\acer dvdivine.exe | "{D81DE6A6-767A-4500-B99D-015779F0C724}" = protocol=6 | dir=in | app=d:\tom clancy´s rainbow six vegas 2\binaries\r6vegas2_game.exe | "{D9AB3778-0398-49CD-902D-7A42957A002C}" = protocol=17 | dir=in | app=d:\farcry2\far cry 2\bin\fc2launcher.exe | "{DA0B7802-3519-460A-9E06-44B97D896DC1}" = protocol=17 | dir=in | app=d:\call of duty 5 -w@w\codwaw.exe | "{DC5EA762-7477-4135-941C-EA4C420B224F}" = protocol=6 | dir=in | app=d:\unreal tournament 3\binaries\ut3.exe | "{DCF6A29C-57BA-43A1-9704-26EBE6B1D758}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{DE9C6F60-9C21-4C91-921E-F3B00BF09CAE}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{E3487E35-2844-4CA4-AD1F-C9A5862644D3}" = protocol=6 | dir=in | app=d:\burnout paradise the ultimate box\burnoutconfigtool.exe | "{E3F59EAE-F937-48D3-8F8C-353EB53D2F2C}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe | "{E457FB83-7CCA-4C5D-ACDA-11A93DF80FD4}" = protocol=17 | dir=in | app=d:\resindent evil 5\re5dx9.exe | "{E5746F9D-3723-40CF-9018-7278967CAFB9}" = protocol=6 | dir=in | app=k:\setup.exe | "{EDF85F1D-6849-4822-8D51-DCB3929830CB}" = protocol=17 | dir=in | app=d:\bioshock 2\mp\builds\binaries\bioshock2.exe | "{EEC42BDE-D1F2-49B6-9446-A91FADD1867F}" = protocol=6 | dir=in | app=d:\assasins creed 2\uplaybrowser.exe | "{EED182A0-CB9D-41C3-A678-F82CBC5271DA}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe | "{EEEA4522-7CD3-4E2B-BC10-611C9990BFC8}" = protocol=6 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | "{EFC04428-C9DC-42A6-8626-2B85EFF3D437}" = protocol=17 | dir=in | app=d:\prototype\prototypef.exe | "{F03E5B14-6D3B-4CCB-BD9A-C24A110630AA}" = protocol=17 | dir=in | app=k:\setup.exe | "{F3F451BC-DC0D-4552-A2EB-F1D110BDCD27}" = protocol=6 | dir=in | app=d:\avatar\bin\avatarlauncher.exe | "{F46D113D-AB67-4314-9906-6CA09D4FF8B5}" = protocol=6 | dir=in | app=d:\fear 1\fearxp2.exe | "{F4882B36-EC48-41C7-AB8C-CA1B47DA5542}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version4\teamviewer.exe | "{F76A2B8B-40C3-488B-954B-695B10C60B0C}" = protocol=17 | dir=in | app=d:\fear combat\fearmp.exe | "{F84813EA-75C0-482F-968F-5773D2D2A96D}" = protocol=17 | dir=in | app=d:\assassin's creed\assassinscreed_dx9.exe | "{F965F5BA-A895-4735-9562-3B0B88102ED9}" = protocol=17 | dir=in | app=d:\prince of persia\prince of persia.exe | "{FB576549-ABF5-49FE-BD0D-642553E88279}" = protocol=6 | dir=in | app=d:\farcry2\far cry 2\bin\fc2launcher.exe | "{FBFC01AA-D76A-420A-95E8-4E7112DE2ECB}" = protocol=17 | dir=in | app=d:\avatar\bin\avatar.exe | "{FE5BBD43-F71F-438C-B31B-4DB57168F808}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{FF6FD801-63BB-44E7-AF6E-ED248A738B88}" = protocol=17 | dir=in | app=d:\gta iv\rockstar games social club\rgsclauncher.exe | "TCP Query User{196B0271-083B-49F2-AC4C-DA08B2BD3897}C:\ijji\english\u_sf\soldierfront.exe" = protocol=6 | dir=in | app=c:\ijji\english\u_sf\soldierfront.exe | "TCP Query User{1B601FB6-4D6C-4111-9866-BAB312984726}D:\saints row 2\sr2_pc.exe" = protocol=6 | dir=in | app=d:\saints row 2\sr2_pc.exe | "TCP Query User{2A3922CA-93E1-4030-AACD-7B11A2BD7BCF}C:\program files (x86)\ijji\ijji reactor\reactor.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ijji\ijji reactor\reactor.exe | "TCP Query User{2FF23D53-D67C-4655-B481-9F2C18A14CFD}D:\borderlands\binaries\borderlands.exe" = protocol=6 | dir=in | app=d:\borderlands\binaries\borderlands.exe | "TCP Query User{30AD8EFB-6F5B-44F1-8E62-CE36E499CB19}D:\half life\hl2.exe" = protocol=6 | dir=in | app=d:\half life\hl2.exe | "TCP Query User{3628CAC8-CA78-483D-9129-8D12498FE121}D:\xfire\xfire.exe" = protocol=6 | dir=in | app=d:\xfire\xfire.exe | "TCP Query User{3ABAC964-2896-4CFF-B7A8-2DAEB2579603}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe | "TCP Query User{4238FA44-ED7A-4C60-878A-7D3A9E41061F}D:\dead space\dead space.exe" = protocol=6 | dir=in | app=d:\dead space\dead space.exe | "TCP Query User{423AD94D-E372-48B6-A0DB-3AB992BAB42C}D:\gta iv\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=d:\gta iv\grand theft auto iv\gtaiv.exe | "TCP Query User{54775918-E61E-4FD7-8B97-9AC0B438C9CA}C:\ijji\english\ava\binaries\ava.exe" = protocol=6 | dir=in | app=c:\ijji\english\ava\binaries\ava.exe | "TCP Query User{548AB0DD-EFAF-4964-8820-BA7DE71D73AE}D:\tom clancy's h.a.w.x\hawx.exe" = protocol=6 | dir=in | app=d:\tom clancy's h.a.w.x\hawx.exe | "TCP Query User{6E1A5696-FD2A-4A55-950C-49C9F7FAB032}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | "TCP Query User{6E503DF1-B104-4489-BFC6-6150A7BA866A}C:\users\simon\appdata\local\temp\rarsfx0\ppb.exe" = protocol=6 | dir=in | app=c:\users\simon\appdata\local\temp\rarsfx0\ppb.exe | "TCP Query User{76B58F92-E2CF-42D4-BB4F-D5ACD0CF2B5D}D:\turok\binaries\turokgame.exe" = protocol=6 | dir=in | app=d:\turok\binaries\turokgame.exe | "TCP Query User{85BB5DEE-C244-42D0-81AE-85CEFFBC0106}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "TCP Query User{8971A639-A0F8-4FBD-9401-18C1F2516F58}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | "TCP Query User{8FF77A57-E3F4-4DA2-85FF-2817BF135C25}C:\program files (x86)\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | "TCP Query User{9870F927-94C6-49E3-BAEE-7E9FFE3EC7F7}D:\k.o.s\game_sting_pak\sting.exe" = protocol=6 | dir=in | app=d:\k.o.s\game_sting_pak\sting.exe | "TCP Query User{9D2CEFC6-DD0D-4E8E-88DD-26A88E6CD164}C:\ijji\english\gunz\gunz.exe" = protocol=6 | dir=in | app=c:\ijji\english\gunz\gunz.exe | "TCP Query User{A50C2CF8-85EB-4877-8E55-09E550D30FDF}D:\gta4\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=d:\gta4\grand theft auto iv\gtaiv.exe | "TCP Query User{AC1088FB-5A62-4579-B81A-4A0D49F519DD}C:\program files (x86)\netdevil\warmonger\binaries\wmgame.exe" = protocol=6 | dir=in | app=c:\program files (x86)\netdevil\warmonger\binaries\wmgame.exe | "TCP Query User{BF0095C4-1A35-4E27-8726-86CE8249DEC9}C:\program files (x86)\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files (x86)\icq6.5\icq.exe | "TCP Query User{C038AD0E-3B79-4F23-85EB-C6A880AB0C55}D:\call of duty modern warfare 2\iw4mp.exe" = protocol=6 | dir=in | app=d:\call of duty modern warfare 2\iw4mp.exe | "TCP Query User{C26B51F4-A17C-4F59-B0C1-4FF7433F1EB1}D:\splinter cell conviction\src\system\uplaybrowser.exe" = protocol=6 | dir=in | app=d:\splinter cell conviction\src\system\uplaybrowser.exe | "TCP Query User{D3AD7FC6-449B-4C6F-90FF-782265EDE51C}D:\left 4 dead\left.4.dead.full-rip.xl-char1sma\left 4 dead_xl-char1sma\left4dead.exe" = protocol=6 | dir=in | app=d:\left 4 dead\left.4.dead.full-rip.xl-char1sma\left 4 dead_xl-char1sma\left4dead.exe | "TCP Query User{D4FE7F23-7DC8-4B70-93D6-05B85BA038B8}C:\program files (x86)\euro gunz v8.5.8\eurogunz.exe" = protocol=6 | dir=in | app=c:\program files (x86)\euro gunz v8.5.8\eurogunz.exe | "TCP Query User{E020C720-69F8-40AE-ADDB-F46EB90B5A3F}D:\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=d:\team fortress 2\hl2.exe | "TCP Query User{E388A205-CA5E-4234-A2F7-CA084B06761F}D:\counter strike\hl2.exe" = protocol=6 | dir=in | app=d:\counter strike\hl2.exe | "TCP Query User{EB95ABC3-D924-45ED-91C2-DA02F9236FE8}C:\program files (x86)\translatepro9\tmserver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\translatepro9\tmserver.exe | "TCP Query User{F1287954-50B8-4213-B188-BE61BE58D95D}C:\kos\game_sting_pak\sting.exe" = protocol=6 | dir=in | app=c:\kos\game_sting_pak\sting.exe | "TCP Query User{F6895A31-C3B3-4B83-BCD9-D34C72B03685}D:\left 4 dead 2\left4dead2.exe" = protocol=6 | dir=in | app=d:\left 4 dead 2\left4dead2.exe | "TCP Query User{F90C8877-FBA7-4340-9C5F-D01009A0C4EF}D:\command & conquer 4 tiberian twilight\data\cnc4.game" = protocol=6 | dir=in | app=d:\command & conquer 4 tiberian twilight\data\cnc4.game | "TCP Query User{FB1797C4-C570-4846-B848-C1AFE61872C9}D:\counter strike 1.6\hl.exe" = protocol=6 | dir=in | app=d:\counter strike 1.6\hl.exe | "UDP Query User{11E4FDBA-3570-488E-96ED-6B314905B889}D:\splinter cell conviction\src\system\uplaybrowser.exe" = protocol=17 | dir=in | app=d:\splinter cell conviction\src\system\uplaybrowser.exe | "UDP Query User{12E71F57-AFC5-4DA4-96D6-CA875BF9F008}C:\program files (x86)\euro gunz v8.5.8\eurogunz.exe" = protocol=17 | dir=in | app=c:\program files (x86)\euro gunz v8.5.8\eurogunz.exe | "UDP Query User{2EA5A10F-FF8F-472A-8791-240848C8F120}D:\tom clancy's h.a.w.x\hawx.exe" = protocol=17 | dir=in | app=d:\tom clancy's h.a.w.x\hawx.exe | "UDP Query User{35E2C395-DC49-40D0-B89F-5F7FD2723FA6}C:\program files (x86)\translatepro9\tmserver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\translatepro9\tmserver.exe | "UDP Query User{4035A351-DC9D-450A-A2C5-0A6F78102D6E}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe | "UDP Query User{43469C6C-2E46-4914-BBF6-0F91CC6EE57C}D:\counter strike\hl2.exe" = protocol=17 | dir=in | app=d:\counter strike\hl2.exe | "UDP Query User{58770333-B242-45B2-B6D8-CF96371ED9C0}D:\half life\hl2.exe" = protocol=17 | dir=in | app=d:\half life\hl2.exe | "UDP Query User{5C13C32D-9361-48A0-88B8-0FCC519D2074}D:\call of duty modern warfare 2\iw4mp.exe" = protocol=17 | dir=in | app=d:\call of duty modern warfare 2\iw4mp.exe | "UDP Query User{5F01F652-58CF-4F99-9ECC-94AF11D1B368}D:\borderlands\binaries\borderlands.exe" = protocol=17 | dir=in | app=d:\borderlands\binaries\borderlands.exe | "UDP Query User{64882823-5068-4BA1-BD8C-6BF8ED97E454}C:\ijji\english\gunz\gunz.exe" = protocol=17 | dir=in | app=c:\ijji\english\gunz\gunz.exe | "UDP Query User{6507D34C-13B3-4B63-9B23-22D6845DA440}C:\ijji\english\ava\binaries\ava.exe" = protocol=17 | dir=in | app=c:\ijji\english\ava\binaries\ava.exe | "UDP Query User{67821A0F-ACA4-432F-A86F-C4F459277A25}C:\program files (x86)\netdevil\warmonger\binaries\wmgame.exe" = protocol=17 | dir=in | app=c:\program files (x86)\netdevil\warmonger\binaries\wmgame.exe | "UDP Query User{689707BF-0184-403E-9ACD-BEA6ECA9E992}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "UDP Query User{78183062-9DF0-4554-8BEC-C7F5CB4F6CBB}C:\program files (x86)\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | "UDP Query User{8454CB31-A684-4241-80F9-8E5113BFB898}D:\xfire\xfire.exe" = protocol=17 | dir=in | app=d:\xfire\xfire.exe | "UDP Query User{8688E1E5-1E5B-490C-95DA-ABCBB8856112}D:\dead space\dead space.exe" = protocol=17 | dir=in | app=d:\dead space\dead space.exe | "UDP Query User{A42B11DB-46FB-45C9-805F-F9E2D79CCF04}C:\program files (x86)\ijji\ijji reactor\reactor.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ijji\ijji reactor\reactor.exe | "UDP Query User{AA9B3FC1-0CE2-46C5-A13E-EA1EDE7133DE}C:\ijji\english\u_sf\soldierfront.exe" = protocol=17 | dir=in | app=c:\ijji\english\u_sf\soldierfront.exe | "UDP Query User{AEC05293-E3ED-438F-BD82-172EF8534278}D:\turok\binaries\turokgame.exe" = protocol=17 | dir=in | app=d:\turok\binaries\turokgame.exe | "UDP Query User{B96FD55D-7496-4C21-9095-C6BC0F55C1A0}D:\gta4\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=d:\gta4\grand theft auto iv\gtaiv.exe | "UDP Query User{BA159C77-1101-4E1D-B139-B9E73E665E97}C:\kos\game_sting_pak\sting.exe" = protocol=17 | dir=in | app=c:\kos\game_sting_pak\sting.exe | "UDP Query User{BB2FEC89-D280-4094-AC56-8C3024BB4636}D:\saints row 2\sr2_pc.exe" = protocol=17 | dir=in | app=d:\saints row 2\sr2_pc.exe | "UDP Query User{CEB3D2F7-D1A3-4597-BC8B-7076ACB32572}D:\k.o.s\game_sting_pak\sting.exe" = protocol=17 | dir=in | app=d:\k.o.s\game_sting_pak\sting.exe | "UDP Query User{D026ECDD-C2E3-415E-A384-103FB782FF23}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe | "UDP Query User{DE3AAAB7-DFCE-4675-9A2E-B4832A6CC27B}C:\program files (x86)\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files (x86)\icq6.5\icq.exe | "UDP Query User{E3004AF0-6D9A-45D6-B910-2407A7AEE565}D:\gta iv\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=d:\gta iv\grand theft auto iv\gtaiv.exe | "UDP Query User{E3623AB0-2EE5-45E9-BB7B-89380B2F6D89}D:\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=d:\team fortress 2\hl2.exe | "UDP Query User{EA602E78-0EC0-4BBC-9E0F-9401E80A9019}D:\counter strike 1.6\hl.exe" = protocol=17 | dir=in | app=d:\counter strike 1.6\hl.exe | "UDP Query User{EC66F658-D334-4A56-B64D-3F0D6F04A169}D:\left 4 dead 2\left4dead2.exe" = protocol=17 | dir=in | app=d:\left 4 dead 2\left4dead2.exe | "UDP Query User{ECF0416D-9099-4D36-BBE5-09BA0C662FC5}D:\command & conquer 4 tiberian twilight\data\cnc4.game" = protocol=17 | dir=in | app=d:\command & conquer 4 tiberian twilight\data\cnc4.game | "UDP Query User{F052C1EF-C90D-4C02-AA1C-99C11D5CB9C6}C:\users\simon\appdata\local\temp\rarsfx0\ppb.exe" = protocol=17 | dir=in | app=c:\users\simon\appdata\local\temp\rarsfx0\ppb.exe | "UDP Query User{F913F966-EB77-4DB2-A893-8773A5948C3E}D:\left 4 dead\left.4.dead.full-rip.xl-char1sma\left 4 dead_xl-char1sma\left4dead.exe" = protocol=17 | dir=in | app=d:\left 4 dead\left.4.dead.full-rip.xl-char1sma\left 4 dead_xl-char1sma\left4dead.exe | "UDP Query User{FEF0F3B2-0EAB-42FC-BB05-1DC8BF759815}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{23170F69-40C1-2702-0465-000001000000}" = 7-Zip 4.65 (x64 edition) "{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64 "{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64 "{39107B20-EA1C-4974-881C-607300BB3C99}" = MobileMe Control Panel "{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll "{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64 "{78F697ED-EC97-4D8D-881D-838984EA9855}" = 64 Bit HP CIO Components Installer "{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager "{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64 "{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4 "{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4 "{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64 "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007 "{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{9EFC40E3-5F31-4F75-8445-286273F74D8E}" = Apple Mobile Device Support "{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64 "{B0EFB716-085B-4564-8060-212E41F5CE50}" = Windows Live ID-Anmelde-Assistent "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 "{C9C243B9-03BD-44BA-A592-AB09630AE2D2}" = iTunes "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit) "{DFA48C6E-A32B-4FC6-8170-4212DDCF7284}" = Microsoft LifeChat "{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4 "{F0A36649-873E-4832-A5F1-BF5DF8600BDB}" = Windows Live Family Safety "{FF1F4E8E-A833-4c4b-A14A-45D5B841B5D8}" = HP Photosmart C4400 All-In-One Driver Software 10.0 Rel .3 "HP Imaging Device Functions" = HP Imaging Device Functions 10.0 "HP Photosmart Essential" = HP Photosmart Essential 2.5 "HP Smart Web Printing" = HP Smart Web Printing "HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0 "HPExtendedCapabilities" = HP Customer Participation Program 10.0 "HPOCR" = OCR Software by I.R.I.S. 10.0 "Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "NVIDIA Display Control Panel" = NVIDIA Display Control Panel "NVIDIA Drivers" = NVIDIA Drivers "Shop for HP Supplies" = Shop for HP Supplies "WinRAR archiver" = WinRAR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "[00]CSS PCA Mappack - Summerfeelings" = [00]CSS PCA Mappack - Summerfeelings "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable "{02627EE5-EACA-4742-A9CC-E687631773E4}" = Nero ShowTime "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4 "{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4 "{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}" = Call of Duty(R) - World at War(TM) 1.6 Patch "{06645A45-8A8E-4984-9065-89864FDE8EC2}" = Rogue Warrior "{06F478B0-053F-45C7-B7F4-B81520345720}" = Ninja Blade "{086A7D8C-0A38-4C7F-819A-620275550D5C}" = Nero Burning ROM Help "{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club "{08F173A8-AB81-4760-AEB0-CE91F3B05AEF}" = Activision(R) "{098727E1-775A-4450-B573-3F441F1CA243}" = kuler "{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4 "{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4 "{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup "{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4 "{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4 "{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox "{12A76360-388E-4B27-ABEB-D5FC5378DD2A}" = HPPhotoSmartPhotobookWebPack1 "{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now Standard "{132888AE-EF67-41C5-BCA2-7D5D2488AB63}" = Acer HomeMedia Connect "{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime "{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2 "{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4 "{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4 "{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService "{19666E73-D9E5-44D4-8F33-037ED151ECBC}" = Firebird SQL Server - MAGIX Edition "{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR "{1A0D2EFC-C4FC-446A-8BC3-57A54CE5EADD}" = Opera 10.53 "{1A4052AB-BA77-44F7-8EE7-9F9131BFD7A6}" = OF Dragon Rising "{1BC3AF44-D80E-4744-A8E1-9BC540424AC9}" = Turok "{1C00C7C5-E615-4139-B817-7F4003DE68C0}" = Nero PhotoSnap Help "{1E99F5D7-4262-4C7C-9135-F066E7485811}" = System Requirements Lab "{1F61E0B1-1AB8-F15E-07C4-46D100A1D3F7}" = Borderlands "{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help "{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8 "{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 17 "{26FDF89A-FA65-4FA2-8522-37CC84DFDCEE}" = Mercenaries 2: World in Flames(tm) "{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie "{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch "{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed "{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE "{3521F7CF-9343-4C1F-AE5E-0D2A57A18D2B}" = Call of Duty(R) - World at War(TM) 1.5 Patch "{357FA7F2-AAED-4973-B51E-BA8C8801DB0E}" = Hunting Unlimited 2010 "{359CFC0A-BEB1-440D-95BA-CF63A86DA34F}" = Nero Recode "{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4 "{368BA326-73AD-4351-84ED-3C0A7A52CC53}" = Nero Rescue Agent "{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup "{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player "{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4 "{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2 "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform "{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4 "{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin "{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker "{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support "{41581EF5-45A7-11DA-9D78-000129760D75}" = Acer SlideShow DVD "{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger "{42AF51C0-4028-46CF-B616-FB1F75286457}" = A.V.A "{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision "{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension "{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter "{4A8B461A-9336-4CF9-98F4-14DD38E673F0}" = BioShock 2 "{4CACFCD9-F71B-413A-8DF5-1A6419D5CDC6}" = Cards_Calendar_OrderGift_DoMorePlugout "{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack "{4D87DC92-C328-46EC-A7B4-9C88129DC696}" = Dead Space™ "{4E79A60F-15D2-4BEC-91AD-E41EC42E61B0}" = Batman: Arkham Asylum "{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works "{4F923F90-46D1-4492-9CC6-13FBBA00E7EC}" = C4400 "{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}" = SmartWebPrintingOC "{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}" = DeviceDiscovery "{5454085C-840F-4070-8FAA-441000018301}" = BioShock 2 "{5454085C-840F-4070-8FAA-441000018302}" = BioShock 2 "{546feb74-0bad-4257-9a14-21f63a3915bb}" = Nero 9 "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV "{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress "{5ACE69F0-A3E8-44eb-88C1-0A841E700180}" = TrayApp "{5D7767FA-7FE8-4627-9F09-AEF7A25F1E07}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch "{5D9BE3C1-8BA4-4E7E-82FD-9F74FA6815D1}" = Nero Vision Help "{5E08ECD1-C98E-4711-BF65-8FD736B3F969}" = Nero RescueAgent Help "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053 "{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call "{60C731FB-C951-41CE-AD41-8E54C8594609}" = Nero Disc Copy Gadget Help "{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5 "{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner "{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4 "{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support "{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2 "{6530EB5E-F2BE-45D3-906B-E4AFFF2D1588}" = Windows Live-Geräte-Manager "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder "{675C161A-889A-4D35-8361-EA74BADCE0E6}" = Half-Life(R) 2 "{679EC478-3FF9-4987-B2FF-C2C2B27532A2}" = DocProc "{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4 "{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK "{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6B407945-AE16-4A2A-BAAF-497FE62EDED3}" = PS_AIO_03_C4400_Software_Min "{6B437F94-056F-4791-AF2C-0D10E2706AF0}" = PanoStandAlone "{6D316D67-DA52-4659-9C98-F479963534D6}" = Audiosurf "{6D8DDB4A-C263-40DE-BA16-AFDAD159D59A}" = Tom Clancy's Splinter Cell Conviction "{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder "{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar "{71C2828F-2678-4675-BDEC-895424861262}_is1" = C:\Program Files (x86)\Acer GameZone\GameConsole "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{750C87B8-AF19-4C3C-B791-50D9C83AE572}" = Call of Duty(R) - World at War(TM) 1.7 Patch "{75443B81-E1FC-4D79-80C0-5F0DF2A7F897}" = Conflict Global Storm "{75E607CF-7BAE-4B88-84B3-97F3DF44BA28}" = FEARCombat "{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{773421E8-AD7B-4DC8-AED1-9300D69E1659}" = Touchstone Installer "{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart "{77E33D87-255E-413E-9C8D-EED2A7F9BEBF}" = Nero Live Help "{780202E1-37A6-4066-AE69-F32003E89654}" = Sprachschnittstelle (SAPI 5.1) "{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights "{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{7C11154F-3539-4CB5-979D-EF7913473E53}" = Prince of Persia "{7E19B002-4CA3-4C9F-BA92-91D101B97219}" = James Cameron's AVATAR(tm): DAS SPIEL "{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}" = Activision(R) "{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management "{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan "{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update "{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4 "{82696435-8572-4D8B-A230-D1AA567D0F0F}" = Command & Conquer™ 4 Tiberian Twilight "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110052107}" = Beetle Junior "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110082360}" = Alien Shooter "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}" = Chicken Invaders 2 "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}" = Galapago "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111796363}" = Mystery Solitaire - Secret Island "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}" = Heroes of Hellas "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}" = Dream Day First Home "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114072167}" = Go-Go Gourmet "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11408540}" = Magic Match Adventures "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114717227}" = Magic Farm "{831ADB7A-8882-41B1-82F7-2746FEC3FA91}" = Crazy Taxi 3 "{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4 "{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4 "{85243696-5E58-4357-9CF8-3498C609941D}" = NeroLiveGadget Help "{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II "{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed "{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder "{880A5E6B-BB24-41D4-8B86-7F66314A6E92}" = SuddenAttackSEA_v7.00 "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch "{8A5323B7-45CB-48AB-B7E3-1C22BA63DA4C}" = Windows Vista Demo Screen Saver "{8A62C8DA-2DB7-4D94-B5BA-1D38FC36E830}" = Manhunt "{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86) "{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport "{8ADE24B2-DCA4-4A1E-8B52-A5B435522D9E}" = Soldier Front "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}" = MP3 Player Utilities 4.03 "{8CFA9151-6404-409A-AF22-4632D04582FD}" = Assassin's Creed "{8F1B6239-FEA0-450A-A950-B05276CE177C}" = Acer Empowering Technology "{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007 "{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007 "{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007 "{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007 "{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007 "{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007 "{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007 "{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-0407-1000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007 "{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007 "{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007 "{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{901DC58A-5C1B-4315-BA40-5AD3D3A463B9}" = ijji REACTOR "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{91C514E8-C92E-48E4-BDEE-DE3407837194}" = Wolfenstein(TM) 1.2 Patch "{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4 "{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch "{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM) "{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4 "{954B7F64-D1D4-476F-8919-99585D0A6ABF}" = PS_AIO_03_C4400_Software "{98A67610-A3B5-4098-A423-3708040026D3}" = "Nero SoundTrax Help "{99889189-C739-4A46-BA02-3B271A118957}" = F.E.A.R. Mission Perseus "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A996B6A-846E-4A89-B9C4-17546B7BE49F}" = Burnout(TM) Paradise The Ultimate Box "{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE™ "{9E1BAB75-EB78-440D-94C0-A3857BE2E733}" = System Requirements Lab "{9E78C42C-4FF9-4F41-BBC4-BF872606E79D}_is1" = Driver Robot 1.1.0.14 "{9E82B934-9A25-445B-B8DF-8012808074AC}" = Nero PhotoSnap "{9E9FDDE6-2C26-492A-85A0-05646B3F2795}" = NeroLiveGadget "{9F01A67B-7D67-482F-9D4F-D5980A440FD4}" = Call of Duty(R) - World at War(TM) 1.4 Patch "{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}" = Status "{A1C962E2-2426-49C6-A38B-9A07E40D607C}" = Microsoft Games for Windows - LIVE "{A209525B-3377-43F4-B886-32F6B6E7356F}" = Nero WaveEditor "{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}" = Red Faction Guerrilla "{A3F3F851-79F6-401B-B9ED-56BDB98AB98A}_is1" = Tom Clancy's H.A.W.X "{A5633652-3795-4829-BB0B-644F0279E279}" = Acer eDataSecurity Management "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A99968BE-C155-474C-0089-33239DEE1CE2}" = NFS Underground "{AA4BF92B-2AAF-11DA-9D78-000129760D75}" = Acer HomeMedia "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC08BBA0-96B9-431A-A7D0-D8598E493775}" = RESIDENT EVIL 5 "{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3.2 - Deutsch "{AD6BC5CC-2EF0-49C4-B33D-CDC8B2C4DC80}" = Nero Recode Help "{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4 "{AEDBD563-24BB-4EE3-8366-A654DAC2D988}" = Mirror's Edge™ "{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty(R) - World at War(TM) 1.1 Patch "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B145EC69-66F5-11D8-9D75-000129760D75}" = Acer DVDivine "{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles "{B29AD377-CC12-490A-A480-1452337C618D}" = Connect "{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center "{B580C409-E16F-44FF-904D-3AE94E113BE0}" = Acer HomeMedia Trial Creator "{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4 "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player "{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit "{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply "{BABAEBE4-9FFB-4B5D-9453-64FF11517CA2}" = Tom Clancy's Splinter Cell Chaos Theory "{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5 "{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module "{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT "{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter "{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86) "{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}" = Unreal Tournament 3 "{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem Driver "{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}" = Call of Duty(R) - World at War(TM) 1.5 Patch "{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant "{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail "{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4 "{C5A7CB6C-E76D-408F-BA0E-85605420FE9D}" = SoundTrax "{C9CE9393-B568-428D-AD5B-55452B9748DB}" = PS_AIO_03_C4400_ProductContext "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CB8251EE-C86B-410D-83B2-1E28E9DE2C2B}" = LG GSM PC Components "{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help "{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw "{CC862A04-B2B0-4A79-ADD2-4B76D6CF4DCD}" = Call of Duty(R) - World at War(TM) 1.4 Patch "{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg "{CE96F5A5-584D-4F8F-AA3E-9BAED413DB72}" = Nero CoverDesigner Help "{D025A639-B9C9-417D-8531-208859000AF8}" = NeroBurningROM "{D2E0F0CC-6BE0-490b-B08B-9267083E34C9}" = MarketResearch "{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas "{D4E5A687-797D-44B1-8F96-4FD7A24166A9}" = DEVIL MAY CRY 4 "{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM) "{D96021A9-B290-4783-B019-0E4000DA84CE}" = S4 League_EU "{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component "{D9DCF92E-72EB-412D-AC71-3B01276E5F8B}" = Nero ShowTime "{DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}" = Acer Product Registration "{DEA314C4-0929-4250-BC92-98E4C105F28D}" = NVIDIA PhysX "{DF6A95F5-ADC1-406A-BDC6-2AA7CC0182AA}" = Nero Live "{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01 "{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer "{E1071C00-B001-4633-B9C3-164C856D5730}" = Bionic Commando "{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update "{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock "{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM) "{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4 "{E498385E-1C51-459A-B45F-1721E37AA1A0}" = Movie Templates - Starter Kit "{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant "{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help "{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}" = Need for Speed™ Undercover "{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer "{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}" = Acer Arcade Live Main Page "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help "{F1861F30-3419-44DB-B2A1-C274825698B3}" = Nero Disc Copy Gadget "{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2 "{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter "{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}" = Copy "{F6BDD7C5-89ED-4569-9318-469AA9732572}" = Nero BurnRights Help "{F6EFFB76-4A07-11DA-9D78-000129760D75}" = Acer DV Magician "{F79A208D-D929-11D9-9D77-000129760D75}" = Acer VideoMagician "{F7B72805-2F58-4C04-AE9E-E7AD6A6EF62E}" = C4400_Help "{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4 "{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials "{F916C6DF-2601-4385-9500-C45FF398D4CB}" = Install(GE) "{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4 "{F9B37992-968C-4264-8449-489032FC28DE}" = Wolfenstein "{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool "{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All "{FD416706-875C-4B0B-A23A-9E740DAE029E}" = Tom Clancy's Rainbow Six Vegas 2 "{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner "Adobe AIR" = Adobe AIR "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4 "Alice" = Alice-Installationsdateien entfernen "Armed Forces Corps/DE-German_is1" = Armed Forces Corps "ASIO4ALL" = ASIO4ALL "Ask.com Search Assistant" = Ask.com Search Assistant 1.0.2 "a-squared Anti-Malware_is1" = a-squared Anti-Malware 4.5 "AT&T Labs' Natural Voices 1.4 - Desktop Runtime_is1" = AT&T Labs' Natural Voices 1.4 - Desktop Runtime "AT&T Labs' Natural Voices 1.4 Desktop - Klara 16k_is1" = AT&T Labs' Natural Voices 1.4 Desktop - Klara 16k "AT&T Labs' Natural Voices 1.4 Desktop - Mike 16k_is1" = AT&T Labs' Natural Voices 1.4 Desktop - Mike 16k "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "burnatonce_is1" = burnatonce "Cheat Engine 5.5_is1" = Cheat Engine 5.5 "Chicken Invaders 3 Free Trial_is1" = Chicken Invaders 3 Free Trial "Chicken Invaders 3_is1" = Chicken Invaders 3 "com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player "Combat Arms EU" = Combat Arms EU "Counter-Strike 1.6 V40.1" = Counter-Strike 1.6 V40.1 "Counter-Strike: Source v17" = Counter-Strike: Source v17 "CPUCooL" = CPUCooL (remove only) "DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters "EADM" = EA Download Manager "ENTERPRISE" = Microsoft Office Enterprise 2007 "EuroGrand Casino" = EuroGrand Casino "F.E.A.R. 2: Project Origin" = F.E.A.R. 2: Project Origin "Fallout Mod Manager_is1" = Fallout Mod Manager 0.10.3 "ffdshow_is1" = ffdshow [rev 2527] [2008-12-19] "FireWarriorA00" = FireWarrior "FL Studio 9" = FL Studio 9 "FLAC" = FLAC 1.2.1b (remove only) "Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2 "Free YouTube Download_is1" = Free YouTube Download 2.3 "Free YouTube to iPod Converter_is1" = Free YouTube to iPod Converter version 3.2 "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2 "Glitch_is1" = Glitch 1.3 "Gunz" = ijji - Gunz "Hardcore" = Hardcore "Hitman 2: Silent Assassin" = Hitman 2: Silent Assassin "HMIP2009_is1" = Hide My IP 2009 "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "IL Download Manager" = IL Download Manager "InstallShield_{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}" = Call of Duty(R) - World at War(TM) 1.6 Patch "InstallShield_{08F173A8-AB81-4760-AEB0-CE91F3B05AEF}" = Transformers - Die Rache-Spiel "InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now 5 "InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2 "InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8 "InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch "InstallShield_{3521F7CF-9343-4C1F-AE5E-0D2A57A18D2B}" = Call of Duty(R) - World at War(TM) 1.5 Patch "InstallShield_{5D7767FA-7FE8-4627-9F09-AEF7A25F1E07}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch "InstallShield_{750C87B8-AF19-4C3C-B791-50D9C83AE572}" = Call of Duty(R) - World at War(TM) 1.7 Patch "InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager "InstallShield_{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}" = X-Men Origins - Wolverine(TM) "InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch "InstallShield_{91C514E8-C92E-48E4-BDEE-DE3407837194}" = Wolfenstein(TM) 1.2 Patch "InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch "InstallShield_{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM) "InstallShield_{9F01A67B-7D67-482F-9D4F-D5980A440FD4}" = Call of Duty(R) - World at War(TM) 1.4 Patch "InstallShield_{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}" = Red Faction Guerrilla "InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty(R) - World at War(TM) 1.1 Patch "InstallShield_{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}" = Call of Duty(R) - World at War(TM) 1.5 Patch "InstallShield_{CC862A04-B2B0-4A79-ADD2-4B76D6CF4DCD}" = Call of Duty(R) - World at War(TM) 1.4 Patch "InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM) "InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM) "InstallShield_{F9B37992-968C-4264-8449-489032FC28DE}" = Wolfenstein "JDownloader" = JDownloader "kikin Plugin (JDownloader Edition)" = kikin Plugin (JDownloader Edition) 1.11 "Left4Dead2-hohesC_is1" = Left 4 Dead 2 - 2.0.0.8 "MAGIX Foto Manager 8 D" = MAGIX Foto Manager 8 "MAGIX Fotobuch" = MAGIX Fotobuch 3.6 "MAGIX Media Suite D" = MAGIX Media Suite "MAGIX Online Druck Service D" = MAGIX Online Druck Service 3.4.3.0 (D) "MAGIX Ringtone Maker SE D" = MAGIX Ringtone Maker SE "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Manhunt 2" = Manhunt 2 "Mercenary Wars" = Mercenary Wars "Messenger Plus! Live" = Messenger Plus! Live "Metro 2033_is1" = Metro 2033 "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Mozilla Firefox (3.5.8)" = Mozilla Firefox (3.5.8) "mufin player D" = mufin player "OpenAL" = OpenAL "OPERATION7" = OPERATION7 "oZone3D.Net FurMark_is1" = oZone3D.Net FurMark v1.7.0 "PoiZone" = PoiZone "PunkBusterSvc" = PunkBuster Services "Resident Evil 4_is1" = Resident Evil 4 1.10 "San Andreas Mod Installer1.1" = San Andreas Mod Installer "Saw" = Saw Game "Sawer" = Sawer "Serious Sam HD The First Encounter_is1" = Serious Sam HD The First Encounter "SMAC 2.7" = SMAC 2.7 "Software Informer_is1" = Software Informer 1.0 BETA "Söldner" = Söldner "ST6UNST #1" = BEWERBUNGS-MASTER "ST6UNST #2" = OMFGZ Infinite Dll Injector "ST6UNST #3" = BEWERBUNGSMASTER "SubtitleWorkshop" = Subtitle Workshop 2.51 "SystemRequirementsLab" = System Requirements Lab "Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2 "TeamViewer 4" = TeamViewer 4 "TeamViewer 5" = TeamViewer 5 "Toxic Biohazard" = Toxic Biohazard "translate pro 9" = translate pro 9 "Uninstall_is1" = Uninstall 1.0.0.1 "UseNeXT_is1" = UseNeXT "VirtualCloneDrive" = VirtualCloneDrive "Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner "WinLiveSuite_Wave3" = Windows Live Essentials "Xfire" = Xfire (remove only) "xp-AntiSpy" = xp-AntiSpy 3.97-3 "Zombie Driver" = Zombie Driver 1.0.3 ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{4B35F00C-E63D-40DC-9839-DF15A33EAC46}" = Grand Theft Auto Vice City "{974C4B12-4D02-4879-85E0-61C95CC63E9E}" = Fallout 3 "{E280923D-C5D9-4728-8C79-AC9A0DC75875}" = BioShock "Basketball" = Basketball "Brainkrieg" = Brainkrieg "Canabalt" = Canabalt "Casino Tropez" = Casino Tropez "Chuck Noris Facts" = Chuck Noris Facts "Europa Casino" = Europa Casino "Friday countdown" = Friday countdown "Galaxy Fighter" = Galaxy Fighter "Google Translator" = Google Translator "Hangman" = Hangman "I Can Has Cheezburger" = I Can Has Cheezburger "InstallShield_{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}" = Unreal Tournament 3 "Kos (usa)" = Sting "Ninja Ropes Extreme" = Ninja Ropes Extreme "Opera Command" = Opera Command "Phong" = Phong "PipePanic" = PipePanic "Sudoku-X" = Sudoku-X "TankWar" = TankWar "TeamSpeak 3 Client" = TeamSpeak 3 Client "Tic Tac Toe" = Tic Tac Toe "Time and Date 1.32" = Time and Date 1.32 "Video Poker" = Video Poker ========== Last 10 Event Log Errors ========== Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report > |
|
14.05.2010, 13:26
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease Was ist mit malwarebytes? Geht das nicht?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
14.05.2010, 13:27
| #10 |
| | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease Doch des läüft noch macht doch nix aus wenn ich nebenher surfe Edit hier is der malewarebite bericht Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4099 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18904 14.05.2010 14:59:25 LOG Malewarebite Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Durchsuchte Objekte: 370715 Laufzeit: 1 Stunde(n), 42 Minute(n), 58 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 11 Infizierte Registrierungswerte: 6 Infizierte Dateiobjekte der Registrierung: 1 Infizierte Verzeichnisse: 0 Infizierte Dateien: 21 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_CLASSES_ROOT\TypeLib\{f64c750b-279a-4586-b5a3-9df9fd1d4283} (Worm.Koobface) -> No action taken. HKEY_CLASSES_ROOT\Interface\{49aa4825-1220-452f-b6b0-8ae456842cb9} (Worm.Koobface) -> No action taken. HKEY_CLASSES_ROOT\Interface\{a3a37682-7161-4a3e-bc56-3ec0822a5913} (Worm.Koobface) -> No action taken. HKEY_CLASSES_ROOT\CLSID\{3e6454d1-c9c4-4e0e-8386-d2ca72968f92} (Worm.Koobface) -> No action taken. HKEY_CLASSES_ROOT\TypeLib\{9e0851d3-001a-49b3-baf0-d4a1f6f369b8} (Worm.Koobface) -> No action taken. HKEY_CLASSES_ROOT\Interface\{f2fd1401-e881-457d-a0b6-cf5001d7f04d} (Worm.Koobface) -> No action taken. HKEY_CLASSES_ROOT\CLSID\{b9742a63-fcf4-44ed-bc01-31d52ad8184b} (Worm.Koobface) -> No action taken. HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Casino Tropez (Adware.Casino) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken. HKEY_CURRENT_USER\Software\avsoft (Trojan.Fraudpack) -> No action taken. Infizierte Registrierungswerte: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files (x86)\HP\Digital Imaging\ncpmlinst2.dll (Worm.Koobface) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files (x86)\HP\Digital Imaging\ncuiapi2.dll (Worm.Koobface) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xxlpwjwp (Rogue.AntivirusSuite.Gen) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vvtujpsm (Rogue.AntivirusSuite.Gen) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\aarc (Trojan.Agent) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\winid (Malware.Trace) -> No action taken. Infizierte Dateiobjekte der Registrierung: HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> No action taken. Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: C:\$RECYCLE.BIN\S-1-5-21-3307000272-3728132036-2155629827-1000\$R0RS83Q.exe (Trojan.LVBP) -> No action taken. C:\Program Files (x86)\HP\Digital Imaging\ncpmlinst2.dll (Worm.Koobface) -> No action taken. C:\Program Files (x86)\HP\Digital Imaging\ncuiapi2.dll (Worm.Koobface) -> No action taken. C:\Users\Simon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQFO1XG0\2[1].exe (Rootkit.Dropper) -> No action taken. C:\Users\Simon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QF421Z0I\cg[1].ghh (Trojan.LVBP) -> No action taken. C:\Users\Simon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QF421Z0I\hypwhc[1].htm (Trojan.Downloader) -> No action taken. C:\Users\Simon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZP3IIDRW\ea[1].ghh (Trojan.Downloader) -> No action taken. C:\Users\Simon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZP3IIDRW\ic[1].ghh (Rootkit.Dropper) -> No action taken. C:\Users\Simon\AppData\Local\Temp\8577.tmp (Rootkit.Agent) -> No action taken. C:\Users\Simon\AppData\Local\Temp\950E.tmp (Rootkit.Agent) -> No action taken. C:\Users\Simon\AppData\Local\Temp\9D1D.tmp (Rootkit.Agent) -> No action taken. C:\Users\Simon\AppData\Local\Temp\ajfn.exe (Trojan.Downloader) -> No action taken. C:\Users\Simon\AppData\Local\Temp\bb2d126e.tmp (Trojan.Downloader) -> No action taken. C:\Users\Simon\AppData\Local\Temp\dgdfg.exe (Trojan.Downloader) -> No action taken. C:\Users\Simon\AppData\Local\Temp\sdfdfg.exe (Rootkit.Dropper) -> No action taken. C:\Users\Simon\Casino\Casino Tropez\casino.exe (Rogue.CasinoTropez) -> No action taken. C:\Users\Simon\Casino\Casino Tropez\_TropezSetup_7f96e4.exe (Rogue.CasinoTropez) -> No action taken. C:\Users\Simon\Casino\Europa Casino\_EuropaSetup_f2b34a_de.exe (Adware.Casino) -> No action taken. C:\Users\Simon\Desktop\Neuer Ordner\TuneUpUtilities2009KeygenAndDummyExe\Keygen(FFF)\TuneUp.Utilities.2009-keygen.exe (Trojan.Agent.CK) -> No action taken. C:\Users\Simon\Downloads\Malwarebytes' Anti-Malware 1.44 kEYGEN 1.1 [TheOrb666][h33t]\Malwarebyte's 1.44 kEYGEN 1.1 Final.exe (Dont.Steal.Our.Software) -> No action taken. C:\Users\Simon\Sonstiges\CA HACKS\MHS\Head.exe.exe (Trojan.Agent) -> No action taken. Geändert von SimsonsXD (14.05.2010 um 14:13 Uhr) |
|
14.05.2010, 16:18
| #11 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware CeaseZitat:
 Die (Be)nutzung von Cracks, Serials und Keygens ist illegal, somit gibt es im Trojaner-Board keinen weiteren Support mehr. Für Dich geht es hier weiter => Neuaufsetzen des Systems Bitte auch alle Passwörter abändern (für E-Mail-Konten, StudiVZ, Ebay...einfach alles!) da nicht selten in dieser dubiosen Software auch Keylogger und Backdoorfunktionen stecken. Danach nie wieder sowas anrühren!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
14.05.2010, 17:20
| #12 |
| | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease wie ihr meint ... ich meld mich ab aber ich werd ganz bestimmt nicht mein PC formatiren für alles aber ihr könnt mich alle mal  |
|
14.05.2010, 17:36
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease Du kannst den gut gemeinten Rat gerne annehmen und in Zukunft die Finger von diesem Dreck lassen. Aber wer nicht hören will, der wird wohl bald "fühlen" müssen: Internetanschluss gesperrt, Brief vom Staatsanwalt, Polizei nimmt Dir den Rechner weg...
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Fake Antivirus antispyfortess.com und ihre angeblichen remover zb Spyware Cease |
| ahnung, angeblich, antivirus, bietet, black, blue, check, data, entfernt, fake, fake antivirus, free, gen, google, installiert, kaufen, leben, meldungen, namens, nicht gefunden, programm, remover, seite, spyware, trotz, virusscan, vollversion |
Linear-Darstellung
