MSN Virus wie ENTFERNE ich den richtig?

OTL Extras logfile created on: 26.06.2010 17:52:26 - Run 2
OTL by OldTimer - Version 3.2.7.0     Folder = C:\Users\Administrator\Desktop
Windows Vista Ultimate Edition  (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18904)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 43,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 67,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 80,08 Gb Total Space | 5,64 Gb Free Space | 7,04% Space Free | Partition Type: NTFS
Drive D: | 152,81 Gb Total Space | 21,93 Gb Free Space | 14,35% Space Free | Partition Type: NTFS
Drive E: | 3,97 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: MARKUS-PC
Current User Name: Administrator
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-4205518892-3575212097-1054857883-500\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Eigene Dateien\mozilla\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Users\Public\winvsrnc.exe" = C:\Users\Public\winvsrnc.exe:*:Enabled:Windows System Updates -- ()
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{002FD5A8-0F26-4E9E-8165-4BDB23EE7C0C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{0B7E92B5-311A-4212-A742-6C3871714CB4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{16D29749-4BC5-44E9-8617-DA04227287D3}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{1DA77DC3-0D17-4289-9AC2-FFC564E229D4}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{1E1CFD7E-B020-444F-BA0E-39DEFF370AD2}" = lport=137 | protocol=17 | dir=in | app=system | 
"{2BD21225-AF33-41AA-AB5C-4217C5C93AAE}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 | 
"{49B0F3A7-4CD6-4A50-969E-E49C25CD0D19}" = rport=138 | protocol=17 | dir=out | app=system | 
"{4C843016-FF07-437A-A6C0-ACBA9EAF5888}" = lport=138 | protocol=17 | dir=in | app=system | 
"{539EB45B-303A-474C-8097-BF5692AE0B02}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{66011EC1-BE76-4EBB-8CEE-F6A187678D51}" = lport=445 | protocol=6 | dir=in | app=system | 
"{7E633D14-3C39-42ED-B392-42238452CD96}" = rport=445 | protocol=6 | dir=out | app=system | 
"{85A945FC-4F9C-40E1-B77A-6C500ADFD5F0}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{9540C9EE-CF78-4C75-96F1-2E915FFBB7C1}" = rport=137 | protocol=17 | dir=out | app=system | 
"{B0B6D790-3EA3-4B0E-B241-07A16EF80B89}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{D8E7D849-2A80-46E3-93D1-570CD05DBD3D}" = rport=139 | protocol=6 | dir=out | app=system | 
"{DF5D4736-6719-4353-9F1D-4ADEDBC12580}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{E0298326-F38F-4CDE-8C0D-531B1AD732D0}" = lport=139 | protocol=6 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01E22248-E65D-4976-BE4A-013A7696B7D9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{03AEEE27-B958-4C37-9669-E04474F9DB94}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | 
"{074BDE18-F1F8-4310-8C71-78144D2F97CF}" = protocol=6 | dir=in | app=d:\spiele\cod5\codwaw.exe | 
"{0C32897E-CB25-448C-A2F2-5EFAC3F1D3B9}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{0F1CC015-3604-45C7-916D-AE2A55A1C493}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{0FFA6342-F6A8-43D5-A2AF-486A52020FD6}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{20A8B426-C594-4F60-8C6A-6D2468A44B3A}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{39D34489-F9F2-4865-BD5C-AB01B503D0CC}" = protocol=6 | dir=in | app=d:\spiele\cod5\codwawmp.exe | 
"{3A831634-41AD-476B-9264-5220C18BCE12}" = protocol=6 | dir=in | app=d:\spiele\s.t.a.l.k.e.r. - shadow of chernobyl\bin\xr_3da.exe | 
"{3CA36795-5FB2-4EFA-95CF-BD88A2705D59}" = protocol=6 | dir=in | app=c:\users\administrator\desktop\steam\steamapps\l2p5792\counter-strike source\hl2.exe | 
"{5D4DE7AB-8F91-4EE9-A795-34999C26657F}" = protocol=6 | dir=in | app=d:\spiele\unreal\system\ut2004.exe | 
"{66F72285-AE83-48C4-B31D-6D2668461894}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{699B3CD5-AB0D-404C-802D-CE05905D8DBA}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{6CAFF1A9-0EA6-483F-A2D6-6637CF211E65}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{76C35B39-4F0D-4AED-A547-5DB1CA8E79A2}" = protocol=17 | dir=in | app=c:\users\administrator\desktop\steam\steamapps\l2p5792\counter-strike source\hl2.exe | 
"{99AF5431-E331-44C7-9EB7-E9A43268C8E1}" = protocol=17 | dir=in | app=d:\spiele\world of warcraft\backgrounddownloader.exe | 
"{A407DFBE-6308-491A-B64E-384B7C543A2A}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{A522FE29-ED4B-4BEF-BDF3-2EB7C526AEF9}" = protocol=17 | dir=in | app=d:\spiele\unreal\system\ut2004.exe | 
"{A6C38AA6-12E5-48D6-A530-44D465E244D0}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{A756F059-929F-4BCC-9A62-8138C873DD06}" = protocol=17 | dir=in | app=d:\spiele\s.t.a.l.k.e.r. - shadow of chernobyl\bin\xr_3da.exe | 
"{AB094AEA-F9BE-4E9A-9131-4D4A4A97043D}" = protocol=17 | dir=in | app=d:\spiele\cod5\codwaw.exe | 
"{B24B8B2C-FBDD-4454-A9EB-BBFE31A4C682}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{BCC17B9D-68AC-4CB0-B109-56CB6BB001BD}" = protocol=6 | dir=in | app=d:\spiele\world of warcraft\backgrounddownloader.exe | 
"{C0A40F48-0B26-450E-B0C0-F8510857A785}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | 
"{CBAA6A2E-7895-4685-B03B-361899EC55C4}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{CFB579E1-FFEC-4B16-AF21-BFF00A547701}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe | 
"{D4111019-D733-4BC1-8120-DD67B6B7CFB1}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{D45437B7-67D3-489A-A5CA-2E644CC5991D}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{D61195FC-2945-408D-A10E-4A52BF2BA896}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{D62FED09-3315-4F52-9D6A-394B4D773D39}" = protocol=17 | dir=in | app=d:\spiele\s.t.a.l.k.e.r. - shadow of chernobyl\bin\dedicated\xr_3da.exe | 
"{DCE1536C-838B-4A98-9668-EF6A463D7D4B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{DEA6A378-A763-4166-87EE-57BBF4BA6EC9}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{E57736FB-ECA9-4A90-AC69-09F7E74D2619}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{EF047AEC-7E3F-4CFF-8F51-22D028F583A2}" = protocol=6 | dir=in | app=d:\spiele\s.t.a.l.k.e.r. - shadow of chernobyl\bin\dedicated\xr_3da.exe | 
"{FEF4212D-D8E9-495C-9D06-E150B65AC2C8}" = protocol=17 | dir=in | app=d:\spiele\cod5\codwawmp.exe | 
"{FF4CBEC8-DDB9-4902-9769-F89980B557D7}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"TCP Query User{09623D41-3E1A-4CB7-B6AE-7FD2998E96A5}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{0CCA78ED-D3BD-4949-9207-CB9C6F5D5A6E}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"TCP Query User{0CEBB3BC-F3AD-4C13-A9D8-812FC85F023E}C:\users\administrator\desktop\games\spiele lan pati\css\hl2.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\games\spiele lan pati\css\hl2.exe | 
"TCP Query User{104FF35F-6A96-482F-98BD-1BBB8AD13A07}D:\spiele\flatout2\flatout2.exe" = protocol=6 | dir=in | app=d:\spiele\flatout2\flatout2.exe | 
"TCP Query User{17EBC1D5-1111-4C96-AA5E-950C13D63B03}D:\spiele\gotcha 2005\gotcha.exe" = protocol=6 | dir=in | app=d:\spiele\gotcha 2005\gotcha.exe | 
"TCP Query User{1CC19FF1-1BD1-43C9-A334-DA2B0CB6C46D}D:\temp\rar$ex00.539\teeworlds-0.5.1-win32\teeworlds_srv.exe" = protocol=6 | dir=in | app=d:\temp\rar$ex00.539\teeworlds-0.5.1-win32\teeworlds_srv.exe | 
"TCP Query User{208F0FA8-DC0F-4A93-A510-4C21F3890D47}C:\users\administrator\desktop\spiele lan pati\css\hl2.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\spiele lan pati\css\hl2.exe | 
"TCP Query User{20B0D85C-5188-4F53-9E95-391F4627D103}D:\spiele\world of padman\wop.exe" = protocol=6 | dir=in | app=d:\spiele\world of padman\wop.exe | 
"TCP Query User{222EE9E4-E86E-4DF1-9F58-953B53808E36}D:\spiele\gotcha 2005\gotcha.exe" = protocol=6 | dir=in | app=d:\spiele\gotcha 2005\gotcha.exe | 
"TCP Query User{357E248D-1F53-46D6-88E6-9674D0BAA63C}D:\spiele\css\tmnationsforever\tmforever.exe" = protocol=6 | dir=in | app=d:\spiele\css\tmnationsforever\tmforever.exe | 
"TCP Query User{370D3144-4D43-482A-A66C-02BB8D86AD07}D:\spiele\world of padman\wop.exe" = protocol=6 | dir=in | app=d:\spiele\world of padman\wop.exe | 
"TCP Query User{3D735B7D-154A-46C6-9BFE-AD849D32548B}D:\spiele\flatout2\flatout2.exe" = protocol=6 | dir=in | app=d:\spiele\flatout2\flatout2.exe | 
"TCP Query User{3FCD05B5-7B92-48E5-A5AA-4EB0B4D1F813}C:\users\administrator\desktop\spiele lan pati\tft\war3.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\spiele lan pati\tft\war3.exe | 
"TCP Query User{46D59E5C-4B86-4348-9C06-D9A64D01211C}D:\spiele\css\steamapps\flash35@gmx.de\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\css\steamapps\flash35@gmx.de\counter-strike source\hl2.exe | 
"TCP Query User{4B5B8571-DFBB-4E8D-835F-72E473AE0A15}C:\users\administrator\desktop\tft\war3.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\tft\war3.exe | 
"TCP Query User{5181B45F-3A5E-4223-8F8E-A78D3699510A}C:\users\administrator\desktop\teeworlds-0.5.1-win32\teeworlds_srv.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\teeworlds-0.5.1-win32\teeworlds_srv.exe | 
"TCP Query User{529AFC4A-5495-43BE-8FB3-1ACABAA89204}D:\spiele\terrorist takedown 2\rungameserver.exe" = protocol=6 | dir=in | app=d:\spiele\terrorist takedown 2\rungameserver.exe | 
"TCP Query User{59980532-7040-443F-85AE-D1570883DFD5}C:\windows\system32\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"TCP Query User{599BB080-C677-4C08-B6BB-261E11F66199}D:\temp\rar$ex04.935\volley.exe" = protocol=6 | dir=in | app=d:\temp\rar$ex04.935\volley.exe | 
"TCP Query User{5A785B82-BCE6-40D8-A22E-77ABB0D3F211}C:\users\administrator\desktop\dlrg\wacraft\war3.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\dlrg\wacraft\war3.exe | 
"TCP Query User{5C86F235-12A3-4CAF-B89B-E1F07DAFBC51}D:\spiele\css\tmnationsforever\tmforever.exe" = protocol=6 | dir=in | app=d:\spiele\css\tmnationsforever\tmforever.exe | 
"TCP Query User{6C9DE1B8-A630-44C0-B169-06A24F6ACE22}D:\spiele\css\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\css\counter-strike source\hl2.exe | 
"TCP Query User{74EAD64D-C797-4616-9D34-EBA88DE3A7EE}C:\users\administrator\desktop\games\spiele lan pati\css\hl2.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\games\spiele lan pati\css\hl2.exe | 
"TCP Query User{80C8CAB4-4E26-4B9E-AB3B-E877EAE0A66C}C:\users\administrator\desktop\steam\steamapps\l2p5792\day of defeat source\hl2.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\steam\steamapps\l2p5792\day of defeat source\hl2.exe | 
"TCP Query User{81358A51-2EFC-42FF-9874-C9E27E2A6F4D}D:\spiele\cod5\codwawmp.exe" = protocol=6 | dir=in | app=d:\spiele\cod5\codwawmp.exe | 
"TCP Query User{837ABB38-7C94-4D34-961C-5AEE143C85B0}D:\spiele\rollcage\direct3d\rollcage.exe" = protocol=6 | dir=in | app=d:\spiele\rollcage\direct3d\rollcage.exe | 
"TCP Query User{839029B8-D101-4B70-8A7C-6FA4D0283967}D:\spiele\metin\metin2.bin" = protocol=6 | dir=in | app=d:\spiele\metin\metin2.bin | 
"TCP Query User{85CB6E71-F358-47D8-89DD-946420FA91D8}C:\program files\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files\mirc\mirc.exe | 
"TCP Query User{86C5C525-946E-4713-853C-A85D7225B90D}D:\spiele\tmnationsforever\tmforever.exe" = protocol=6 | dir=in | app=d:\spiele\tmnationsforever\tmforever.exe | 
"TCP Query User{87535782-620E-4F51-B28C-9E6CD1C361F2}D:\spiele\css 1\css\steamapps\freddynator\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\css 1\css\steamapps\freddynator\counter-strike source\hl2.exe | 
"TCP Query User{883CA803-5795-415D-9434-7F097669F57E}C:\program files\blobby volley 2.0 alpha 6\blobby.exe" = protocol=6 | dir=in | app=c:\program files\blobby volley 2.0 alpha 6\blobby.exe | 
"TCP Query User{93EFE4C3-3292-4731-ABE2-77154DA18150}D:\spiele\tft\war3.exe" = protocol=6 | dir=in | app=d:\spiele\tft\war3.exe | 
"TCP Query User{966DFE50-734C-40F4-877C-025B24DA3939}C:\users\administrator\desktop\games\spiele lan pati\tft\war3.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\games\spiele lan pati\tft\war3.exe | 
"TCP Query User{96D0A77F-5751-46B3-8497-426DA92E0D8F}D:\temp\rar$ex00.763\volley.exe" = protocol=6 | dir=in | app=d:\temp\rar$ex00.763\volley.exe | 
"TCP Query User{993B2404-F98E-475B-ADBA-470439248D41}D:\spiele\css 1\css\steamapps\l2p5792\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\css 1\css\steamapps\l2p5792\counter-strike source\hl2.exe | 
"TCP Query User{9A289C49-D4B5-4CC3-B9D1-83095451ADF1}D:\temp\rar$ex00.498\volley.exe" = protocol=6 | dir=in | app=d:\temp\rar$ex00.498\volley.exe | 
"TCP Query User{9B325CF9-C176-48A7-95FA-DE739367682C}D:\spiele\css online\steamapps\rambomann16\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\css online\steamapps\rambomann16\counter-strike source\hl2.exe | 
"TCP Query User{A06F0269-F056-4CE6-8A03-16EF96BDB0C6}D:\temp\rar$ex00.600\volley.exe" = protocol=6 | dir=in | app=d:\temp\rar$ex00.600\volley.exe | 
"TCP Query User{A6BF8BAD-BCD7-40AC-83EA-8E610826EE42}C:\users\administrator\desktop\games\spiele lan pati\tft\war3.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\games\spiele lan pati\tft\war3.exe | 
"TCP Query User{ACFC2A85-158B-47B4-BFAA-33F08697F948}D:\spiele\tft\war3.exe" = protocol=6 | dir=in | app=d:\spiele\tft\war3.exe | 
"TCP Query User{B1DDE29D-16C4-46E9-85AD-3EB2451B2B97}D:\spiele\rollercoaster tycoon\rct.exe" = protocol=6 | dir=in | app=d:\spiele\rollercoaster tycoon\rct.exe | 
"TCP Query User{B4001850-DA35-42FC-B063-E3545854E756}C:\users\administrator\desktop\spiele lan pati\css\hl2.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\spiele lan pati\css\hl2.exe | 
"TCP Query User{C2373F0E-9A70-4C30-9CC0-7D71D6B3E2B9}D:\spiele\neuer ordner\css\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\neuer ordner\css\counter-strike source\hl2.exe | 
"TCP Query User{C47A3F9E-97A0-49ED-B41C-6B732F7036AA}C:\users\administrator\desktop\css\hl2.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\css\hl2.exe | 
"TCP Query User{C58F7A62-62CD-4DB0-B045-D2DE9BEEC6D1}D:\spiele\cod5\codwaw.exe" = protocol=6 | dir=in | app=d:\spiele\cod5\codwaw.exe | 
"TCP Query User{C5F7515A-D83B-4C57-8CBA-025357C8DD10}I:\spiele\warcraft\warcraft iii\war3.exe" = protocol=6 | dir=in | app=i:\spiele\warcraft\warcraft iii\war3.exe | 
"TCP Query User{CCBD13C1-2BBE-4C3C-A7EA-A2D73B57F562}D:\temp\rar$ex00.477\volley.exe" = protocol=6 | dir=in | app=d:\temp\rar$ex00.477\volley.exe | 
"TCP Query User{CE391ED8-560D-40DB-BA69-34C32D7C8254}D:\spiele\tmnationsforever\tmforever.exe" = protocol=6 | dir=in | app=d:\spiele\tmnationsforever\tmforever.exe | 
"TCP Query User{DC7A5B40-4D4E-4E2E-A40F-3E82635CA03A}D:\spiele\css 1\css\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\css 1\css\counter-strike source\hl2.exe | 
"TCP Query User{E6FF942E-4ACE-4D65-B177-0CEA09F39F19}D:\spiele\css\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\css\counter-strike source\hl2.exe | 
"TCP Query User{EBAAF56B-445D-478E-B4AB-1382A741B93E}D:\spiele\css 1\css\steamapps\didok1809\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\css 1\css\steamapps\didok1809\counter-strike source\hl2.exe | 
"TCP Query User{EFA1F86E-41D7-4FCC-9111-B46EE7C3162E}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"TCP Query User{F4BE6DFA-6E48-44CE-9565-D8A8BCBFA6EB}I:\spiele\warcraft\warcraft iii\war3.exe" = protocol=6 | dir=in | app=i:\spiele\warcraft\warcraft iii\war3.exe | 
"TCP Query User{F56411C7-2E1B-4160-A6B8-9552C751AD7C}D:\spiele\counter-strike source\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\counter-strike source\counter-strike source\hl2.exe | 
"TCP Query User{F6B6CD34-743C-4E8F-8CDC-8AC303A74141}D:\spiele\neuer ordner\css\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\neuer ordner\css\counter-strike source\hl2.exe | 
"TCP Query User{F8804A13-2FEE-4D60-A0CA-4070F32A4D0F}D:\temp\rar$ex00.373\volley.exe" = protocol=6 | dir=in | app=d:\temp\rar$ex00.373\volley.exe | 
"TCP Query User{F92061FA-709C-4DEC-B77B-B9237F869EBD}C:\users\administrator\desktop\css\hl2.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\css\hl2.exe | 
"TCP Query User{FF765F06-8019-4623-A979-B57178C68C03}D:\spiele\css\steamapps\flash35@gmx.de\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\spiele\css\steamapps\flash35@gmx.de\counter-strike source\hl2.exe | 
"UDP Query User{03D7C2F5-6FD2-4D55-AA62-F09F464366FB}D:\spiele\world of padman\wop.exe" = protocol=17 | dir=in | app=d:\spiele\world of padman\wop.exe | 
"UDP Query User{04102C2B-AC48-4592-8EE3-56F0A918275B}C:\users\administrator\desktop\games\spiele lan pati\tft\war3.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\games\spiele lan pati\tft\war3.exe | 
"UDP Query User{0C2554F1-E8E1-4C9A-A7E0-5C3DE749FDF8}I:\spiele\warcraft\warcraft iii\war3.exe" = protocol=17 | dir=in | app=i:\spiele\warcraft\warcraft iii\war3.exe | 
"UDP Query User{114E4649-33DA-4B07-9031-C4607482C251}D:\spiele\gotcha 2005\gotcha.exe" = protocol=17 | dir=in | app=d:\spiele\gotcha 2005\gotcha.exe | 
"UDP Query User{15F065C4-9FE5-4710-B0B7-8791154DDD9D}D:\spiele\css\steamapps\flash35@gmx.de\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\css\steamapps\flash35@gmx.de\counter-strike source\hl2.exe | 
"UDP Query User{169FB9B1-BAC1-45BF-88A6-72960CD54210}D:\temp\rar$ex00.600\volley.exe" = protocol=17 | dir=in | app=d:\temp\rar$ex00.600\volley.exe | 
"UDP Query User{18A3D339-BB28-437E-B42B-DC4EB114278A}D:\spiele\cod5\codwawmp.exe" = protocol=17 | dir=in | app=d:\spiele\cod5\codwawmp.exe | 
"UDP Query User{1C813B73-4612-48FE-82EE-43E05E0617FC}D:\spiele\neuer ordner\css\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\neuer ordner\css\counter-strike source\hl2.exe | 
"UDP Query User{1CE7C081-8D40-4489-BD4E-6548CDE8FA7B}D:\temp\rar$ex00.477\volley.exe" = protocol=17 | dir=in | app=d:\temp\rar$ex00.477\volley.exe | 
"UDP Query User{1EEE82B0-AD97-4F58-92DB-849DBBD5A7B3}D:\spiele\css\steamapps\flash35@gmx.de\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\css\steamapps\flash35@gmx.de\counter-strike source\hl2.exe | 
"UDP Query User{1F25BDF1-A318-4AED-BD27-028129C58F0E}D:\spiele\css 1\css\steamapps\freddynator\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\css 1\css\steamapps\freddynator\counter-strike source\hl2.exe | 
"UDP Query User{37AF2D54-F436-4AE0-9072-BC4E2BEB8E25}C:\program files\blobby volley 2.0 alpha 6\blobby.exe" = protocol=17 | dir=in | app=c:\program files\blobby volley 2.0 alpha 6\blobby.exe | 
"UDP Query User{3BE2BF15-9436-4A93-98E8-34CD7FC8AB2F}D:\spiele\css\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\css\counter-strike source\hl2.exe | 
"UDP Query User{3CC254F9-E3AF-4BA6-BA71-68D5AC21E93A}D:\spiele\css\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\css\counter-strike source\hl2.exe | 
"UDP Query User{3CD3318D-49EE-4FB6-8CCD-E5E2A11DA34A}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"UDP Query User{3E485C52-2F58-4F18-BE01-A3637543F36D}D:\temp\rar$ex00.539\teeworlds-0.5.1-win32\teeworlds_srv.exe" = protocol=17 | dir=in | app=d:\temp\rar$ex00.539\teeworlds-0.5.1-win32\teeworlds_srv.exe | 
"UDP Query User{3F0DC674-1ECA-4CC1-B555-BE10D5629570}D:\spiele\tft\war3.exe" = protocol=17 | dir=in | app=d:\spiele\tft\war3.exe | 
"UDP Query User{47C35876-1343-419F-9449-00D571B34570}D:\spiele\rollercoaster tycoon\rct.exe" = protocol=17 | dir=in | app=d:\spiele\rollercoaster tycoon\rct.exe | 
"UDP Query User{4C336680-36A8-4244-8E27-DC93EC9E692B}C:\users\administrator\desktop\dlrg\wacraft\war3.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\dlrg\wacraft\war3.exe | 
"UDP Query User{4E92FDBD-BB52-497B-B322-03D56820B42C}C:\users\administrator\desktop\spiele lan pati\css\hl2.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\spiele lan pati\css\hl2.exe | 
"UDP Query User{4F129F99-7D8E-486D-B705-D7AE876DA754}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"UDP Query User{55A70F23-DEA7-44BD-A155-90BD2ADDC32E}D:\spiele\cod5\codwaw.exe" = protocol=17 | dir=in | app=d:\spiele\cod5\codwaw.exe | 
"UDP Query User{561E73A0-F785-47A2-B37B-F5382EE9EE23}I:\spiele\warcraft\warcraft iii\war3.exe" = protocol=17 | dir=in | app=i:\spiele\warcraft\warcraft iii\war3.exe | 
"UDP Query User{5B5B3852-B2B4-4BA8-B18A-359C0533F55B}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{5BEF97DB-1F6A-4C2E-9DC1-4DBE610C8BAF}D:\spiele\css\tmnationsforever\tmforever.exe" = protocol=17 | dir=in | app=d:\spiele\css\tmnationsforever\tmforever.exe | 
"UDP Query User{60E56DAA-09DE-4B5B-A6D8-E962AC58268F}C:\users\administrator\desktop\css\hl2.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\css\hl2.exe | 
"UDP Query User{646A138A-203A-4751-BD80-003B2DE7096D}C:\users\administrator\desktop\tft\war3.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\tft\war3.exe | 
"UDP Query User{699EC9D3-5628-417F-AE5F-36B2B46CBB74}C:\users\administrator\desktop\spiele lan pati\css\hl2.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\spiele lan pati\css\hl2.exe | 
"UDP Query User{6E4EA5BE-F47D-4826-8699-9C0DE38BCE8B}D:\temp\rar$ex00.763\volley.exe" = protocol=17 | dir=in | app=d:\temp\rar$ex00.763\volley.exe | 
"UDP Query User{6ED42D58-59F5-475E-8D5D-BAB59F34FF8F}D:\temp\rar$ex00.498\volley.exe" = protocol=17 | dir=in | app=d:\temp\rar$ex00.498\volley.exe | 
"UDP Query User{703B5593-5D74-4DBD-B6F9-F6FF0516A3AC}D:\spiele\css 1\css\steamapps\l2p5792\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\css 1\css\steamapps\l2p5792\counter-strike source\hl2.exe | 
"UDP Query User{70C6331C-C5F0-4414-A863-87CBB65E36E9}D:\spiele\css 1\css\steamapps\didok1809\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\css 1\css\steamapps\didok1809\counter-strike source\hl2.exe | 
"UDP Query User{76ACBA95-6BDD-47C7-9FE2-D04688F5F735}D:\temp\rar$ex04.935\volley.exe" = protocol=17 | dir=in | app=d:\temp\rar$ex04.935\volley.exe | 
"UDP Query User{78B1DAE3-A133-4C64-A231-7875AE5BAF67}D:\spiele\world of padman\wop.exe" = protocol=17 | dir=in | app=d:\spiele\world of padman\wop.exe | 
"UDP Query User{799BBAC8-FEF3-4C7D-B7C2-3338EA505822}D:\spiele\gotcha 2005\gotcha.exe" = protocol=17 | dir=in | app=d:\spiele\gotcha 2005\gotcha.exe | 
"UDP Query User{8046AB84-80E6-4135-B151-9CF4AE719128}D:\spiele\terrorist takedown 2\rungameserver.exe" = protocol=17 | dir=in | app=d:\spiele\terrorist takedown 2\rungameserver.exe | 
"UDP Query User{936B7D0B-2A56-49A7-9238-65846ECC5BC9}D:\spiele\css\tmnationsforever\tmforever.exe" = protocol=17 | dir=in | app=d:\spiele\css\tmnationsforever\tmforever.exe | 
"UDP Query User{B63FF232-99F5-4DF0-82BA-75BC04064E14}D:\spiele\metin\metin2.bin" = protocol=17 | dir=in | app=d:\spiele\metin\metin2.bin | 
"UDP Query User{BA4B6C1C-AAFF-4E6F-BBAE-42DC9D4B1DFD}D:\spiele\css 1\css\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\css 1\css\counter-strike source\hl2.exe | 
"UDP Query User{C4342141-0BAB-4A84-9C57-ABAC19B22836}C:\users\administrator\desktop\css\hl2.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\css\hl2.exe | 
"UDP Query User{C5137E09-9933-498B-9D2E-1ED65E17CF42}D:\temp\rar$ex00.373\volley.exe" = protocol=17 | dir=in | app=d:\temp\rar$ex00.373\volley.exe | 
"UDP Query User{C54B5738-E99F-460E-9DEE-D3AF13C289D3}D:\spiele\neuer ordner\css\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\neuer ordner\css\counter-strike source\hl2.exe | 
"UDP Query User{C6B5F556-836C-41C6-BC96-54BA0568095A}D:\spiele\tmnationsforever\tmforever.exe" = protocol=17 | dir=in | app=d:\spiele\tmnationsforever\tmforever.exe | 
"UDP Query User{CB851B78-6D54-4FEF-B32B-29C43428A7C5}C:\users\administrator\desktop\steam\steamapps\l2p5792\day of defeat source\hl2.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\steam\steamapps\l2p5792\day of defeat source\hl2.exe | 
"UDP Query User{CCC376D3-C96D-48D1-B471-AE38DA0F215B}C:\users\administrator\desktop\games\spiele lan pati\css\hl2.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\games\spiele lan pati\css\hl2.exe | 
"UDP Query User{CDBAF3DD-6F55-4FFB-9D93-4B5060BEE9D7}C:\users\administrator\desktop\games\spiele lan pati\css\hl2.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\games\spiele lan pati\css\hl2.exe | 
"UDP Query User{CEA79047-AF10-4BF5-A0E5-ADCFF64F337E}D:\spiele\flatout2\flatout2.exe" = protocol=17 | dir=in | app=d:\spiele\flatout2\flatout2.exe | 
"UDP Query User{CEC83323-74B2-4417-89E9-5651CD4F150A}C:\windows\system32\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"UDP Query User{D2D1C439-9B0E-4858-9D02-2855C2233B57}D:\spiele\rollcage\direct3d\rollcage.exe" = protocol=17 | dir=in | app=d:\spiele\rollcage\direct3d\rollcage.exe | 
"UDP Query User{D39F65FF-6371-4AC8-B9F6-1531256CDC62}C:\users\administrator\desktop\teeworlds-0.5.1-win32\teeworlds_srv.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\teeworlds-0.5.1-win32\teeworlds_srv.exe | 
"UDP Query User{D91CC26B-8FC5-40D1-B760-0674D422AB00}D:\spiele\counter-strike source\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\counter-strike source\counter-strike source\hl2.exe | 
"UDP Query User{DA25F2C0-0733-4E58-9414-8D5FBB327F20}D:\spiele\css online\steamapps\rambomann16\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\spiele\css online\steamapps\rambomann16\counter-strike source\hl2.exe | 
"UDP Query User{E762A71D-C88A-44DB-B77A-17E09A0F248A}D:\spiele\flatout2\flatout2.exe" = protocol=17 | dir=in | app=d:\spiele\flatout2\flatout2.exe | 
"UDP Query User{ED074734-70F0-4069-A4F8-F833C177BC05}C:\program files\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files\mirc\mirc.exe | 
"UDP Query User{EDDE244E-43AB-43A0-8902-70BEDEDDD9B9}D:\spiele\tft\war3.exe" = protocol=17 | dir=in | app=d:\spiele\tft\war3.exe | 
"UDP Query User{F124A206-DBE7-404D-BE87-7C8D174A5E6F}C:\users\administrator\desktop\spiele lan pati\tft\war3.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\spiele lan pati\tft\war3.exe | 
"UDP Query User{F4EDF729-73E6-4645-AB63-77D5F4CD5467}D:\spiele\tmnationsforever\tmforever.exe" = protocol=17 | dir=in | app=d:\spiele\tmnationsforever\tmforever.exe | 
"UDP Query User{FFCBCE62-F8B7-4686-AF99-88ADD8D22B02}C:\users\administrator\desktop\games\spiele lan pati\tft\war3.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\games\spiele lan pati\tft\war3.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III
"{02F6993D-B763-4F40-8F93-2A9CD97586E3}" = Microsoft IntelliType Pro 6.3
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{1102B81E-73F2-339C-E299-C48D7CA32441}" = Catalyst Control Center Graphics Full Existing
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{14CF71FD-281E-91AD-941C-BFAA649C1E12}" = CCC Help German
"{14DCD95A-EBA3-4BF0-B7EF-533852E99BE6}" = LG PC Suite II
"{15422767-809D-8D9C-140D-99B39C9683DA}" = Catalyst Control Center Graphics Full New
"{186DB7E2-1C55-0715-12E1-7FC473D30A4C}" = Catalyst Control Center Graphics Previews Common
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1C04D433-2EDF-4AFB-B31B-C0B13065092F}" = MagicTune3.6_Client_pivot
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{2227E1FA-01F5-483C-AB0E-2A308E900B3D}" = InterVideo FilterSDK for Hauppauge
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{25BEC3AB-5CD4-481D-9143-215C1BBB189E}" = Sony Ericsson PC Suite
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}" = Java(TM) 6 Update 10
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{394DC0BC-5476-4260-B52C-BDE1BDEFA958}" = Unreal Tournament 2004
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMB36X Raid Configurer
"{3A1BBC38-2602-B555-24D3-942F01D8DC39}" = CCC Help English
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3EADDD5A-DA5B-4314-B6A3-00BF097E14E5}" = Gladiator
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{4B35F00C-E63D-40DC-9839-DF15A33EAC46}" = Grand Theft Auto Vice City
"{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}" = Junk Mail filter update
"{518FAB61-275A-4977-95B0-4EB92B8FEC70}" = Atlantis Evolution
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6419FBF5-2DB7-FF43-EE67-5448F868D080}" = Catalyst Control Center Core Implementation
"{66A9D30D-1464-4C7F-B2F3-507DADAF2595}" = Microsoft IntelliPoint 6.3
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0122-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9FA7B446-0DE0-C883-9DB4-AC9A35D60735}" = Catalyst Control Center HydraVision Full
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}" = iTunes
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1031-7B44-A70700000002}" = Adobe Reader 7.0.7 - Deutsch
"{ACB91656-A3D1-4E5F-82F0-D3E5200F1D06}" = Skins
"{B26E49E2-9521-4677-95CB-63B117D84BD8}" = Gun Metal
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem driver
"{C3F7C6EB-B6AD-CE5E-46BD-E6DE8EBB6E5A}" = Catalyst Control Center Graphics Previews Vista
"{C8E9FBF9-6CBE-AE9B-C8AB-2C8F5E32140C}" = ccc-core-static
"{C92E7DF1-624A-4D95-A4C4-18CB491B44A4}" = Sony Ericsson Device Data
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBB1BA2C-34DB-5947-BFFF-F52E3A542514}" = ATI Catalyst Install Manager
"{CCC66778-C62B-D147-A3AC-B6E2FAA61715}" = Fragen-Lern-CD 4.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding
"{D6BF6477-8369-489F-8DE6-3731F4B88560}" = Sony Ericsson PC Suite
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"{DDACB061-0C85-8A15-45C9-28415476762B}" = Catalyst Control Center Graphics Light
"{E182BF0C-B1C9-655A-0F65-1E511E8687AD}" = Catalyst Control Center Localization German
"{E4D15328-8C89-484B-B9AA-F5BE9EA6D01C}" = NVIDIA PhysX v8.10.17
"{ECE1F718-CDFD-7A05-BDB9-4D33BFE67D9C}" = ccc-utility
"{EE5BC0BB-9EDA-423C-8276-48857B735D68}" = Prince of Persia Warrior Within
"{EF5B1E83-1403-4F0E-A8E6-C169DF0CCE8C}" = LG PC Suite II
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F51D9393-BB14-4566-99BF-D6ED63AEFCD7}" = Natural Color
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{FC5A7E9B-2CAC-6261-7F34-817C6547ABF3}" = Catalyst Control Center InstallProxy
"4StoryDE_is1" = 4Story 3.3
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"aTube Catcher" = aTube Catcher
"AVery3DChristmas" = www.UselessCreations.com - A Very 3D Christmas Screensaver - Trial Version
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"AVMFBox" = AVM FRITZ!Box Dokumentation
"AVMFBoxPrinter" = AVM FRITZ!Box Druckeranschluss
"AVS DVD Player_is1" = AVS DVD Player version 2.4
"Brother HL-5050" = Brother HL-5050
"de.3m5.wendel.flcd.FLCDB.4E7DF207D694E815646D9C9DD7DC91A41EB7FD23.1" = Fragen-Lern-CD 4.0
"Deer Hunter 2005 Demo_is1" = Deer Hunter - The 2005 Season Demo
"Digitale Bibliothek" = Digitale Bibliothek
"Drakan - Order of the Flame" = Drakan - Order of the Flame
"Eintracht Frankfurt Screensave_is1" = Eintracht Frankfurt Screensave
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free Studio_is1" = Free Studio version 4.2
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2
"Funkyplot_is1" = Funkyplot 1.1.0-pre1
"Gothic" = Gothic
"Gothic II" = Gothic II
"Gothic II - Die Nacht des Raben" = Gothic II - Die Nacht des Raben
"GTA2" = GTA2
"Hauppauge German Help Files and Resources" = Hauppauge German Help Files and Resources
"Hauppauge WinTV" = Hauppauge WinTV
"Hauppauge WinTV DVB-T EPG Service" = Hauppauge WinTV DVB-T EPG Service
"Hauppauge WinTV Infrared Remote" = Hauppauge WinTV Infrared Remote
"Hauppauge WinTV Scheduler" = Hauppauge WinTV Scheduler
"Hauppauge WinTV TV Services" = Hauppauge WinTV TV Services
"ICQToolbar" = ICQ Toolbar
"Icy Tower v1.3.1_is1" = Icy Tower v1.3.1
"Icy Tower v1.4_is1" = Icy Tower v1.4
"Icy Tower_is1" = Icy Tower v1.3
"InstallShield_{3EADDD5A-DA5B-4314-B6A3-00BF097E14E5}" = Gladiator
"InstallShield_{518FAB61-275A-4977-95B0-4EB92B8FEC70}" = Atlantis Evolution
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"Mediothek Biologie 1" = Mediothek Biologie 1
"Messenger Plus! Live" = Messenger Plus! Live
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.0.17)" = Mozilla Firefox (3.0.17)
"Mplayer.com" = Mplayer.com
"OpenAL" = OpenAL
"Peggle" = Peggle (remove only)
"Peggle Deluxe 1.03" = Peggle Deluxe 1.03
"Peggle Nights Deluxe 1.0.3.5802" = Peggle Nights Deluxe 1.0.3.5802
"Peggle World of Warcraft Edition" = Peggle World of Warcraft Edition
"PokerStars.net" = PokerStars.net
"PunkBusterSvc" = PunkBuster Services
"RealPlayer 6.0" = RealPlayer
"RocketDock_is1" = RocketDock 1.3.5
"Steam App 240" = Counter-Strike: Source
"Steam App 320" = Half-Life 2: Deathmatch
"Steam App 340" = Half-Life 2: Lost Coast
"Steam App 400" = Portal
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TmNationsForever_is1" = TmNationsForever
"tt2_is1" = Terrorist Takedown 2 (1.01)
"Uninstall_is1" = Uninstall 1.0.0.1
"VLC media player" = VLC media player 0.9.4
"VTPlus32 für WinTV (German)" = VTPlus32 für WinTV (German)
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"Xvid_is1" = Xvid 1.2.1 final uninstall
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 15.04.2009 19:21:17 | Computer Name = Markus-PC | Source = Application Hang | ID = 1002
Description = Programm msnmsgr.exe, Version 14.0.8064.206 arbeitet nicht mehr mit
 Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: e90  Anfangszeit: 01c9be20bcaf5cf6  Zeitpunkt
 der Beendigung: 78
 
Error - 15.04.2009 19:22:08 | Computer Name = Markus-PC | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
 WMI herstellen, um Antivirus, AntiSpyware- und Firewallprogramme von Drittanbietern
 zu überwachen.
 
Error - 16.04.2009 05:49:10 | Computer Name = Markus-PC | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
 WMI herstellen, um Antivirus, AntiSpyware- und Firewallprogramme von Drittanbietern
 zu überwachen.
 
Error - 17.04.2009 08:16:31 | Computer Name = Markus-PC | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
 WMI herstellen, um Antivirus, AntiSpyware- und Firewallprogramme von Drittanbietern
 zu überwachen.
 
Error - 17.04.2009 11:38:19 | Computer Name = Markus-PC | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
 WMI herstellen, um Antivirus, AntiSpyware- und Firewallprogramme von Drittanbietern
 zu überwachen.
 
Error - 17.04.2009 19:25:51 | Computer Name = Markus-PC | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
 WMI herstellen, um Antivirus, AntiSpyware- und Firewallprogramme von Drittanbietern
 zu überwachen.
 
Error - 18.04.2009 06:16:15 | Computer Name = Markus-PC | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
 WMI herstellen, um Antivirus, AntiSpyware- und Firewallprogramme von Drittanbietern
 zu überwachen.
 
Error - 18.04.2009 08:52:48 | Computer Name = Markus-PC | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
 WMI herstellen, um Antivirus, AntiSpyware- und Firewallprogramme von Drittanbietern
 zu überwachen.
 
Error - 18.04.2009 14:00:09 | Computer Name = Markus-PC | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
 WMI herstellen, um Antivirus, AntiSpyware- und Firewallprogramme von Drittanbietern
 zu überwachen.
 
Error - 18.04.2009 18:19:12 | Computer Name = Markus-PC | Source = SecurityCenter | ID = 3
Description = Das Windows-Sicherheitscenter konnte keine Ereignisabfragen mit der
 WMI herstellen, um Antivirus, AntiSpyware- und Firewallprogramme von Drittanbietern
 zu überwachen.
 
[ System Events ]
Error - 20.06.2010 08:09:43 | Computer Name = Markus-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
 nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 
Error - 24.06.2010 12:35:14 | Computer Name = Markus-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
 nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 
Error - 25.06.2010 06:59:25 | Computer Name = Markus-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
 nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 
Error - 26.06.2010 06:01:02 | Computer Name = Markus-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 26.06.2010 06:54:03 | Computer Name = Markus-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "\Device\HarddiskVolume1" aus.
 
Error - 26.06.2010 06:54:03 | Computer Name = Markus-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "C:" aus.
 
Error - 26.06.2010 06:54:03 | Computer Name = Markus-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "\Device\HarddiskVolume1" aus.
 
Error - 26.06.2010 06:54:03 | Computer Name = Markus-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "\Device\HarddiskVolume1" aus.
 
Error - 26.06.2010 06:54:03 | Computer Name = Markus-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "\Device\HarddiskVolume1" aus.
 
Error - 26.06.2010 07:18:50 | Computer Name = Markus-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
 nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 
 
< End of report >