|
Plagegeister aller Art und deren Bekämpfung: Weiterleitung auf falsche Internetseiten (aks.com, kdirectory,...)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
17.10.2010, 16:34 | #1 |
| Weiterleitung auf falsche Internetseiten (aks.com, kdirectory,...) Hallo zusammen, auch bei mir ergibt sich das Problem, dass ich bei der Google Suche auf unerwünschte Seiten wie ask.com oder kdirectory.com weitergeleitet werde. Ich habe mich schon etwas in den Foren ungesehen und herausgefunden, dass es hierzu wohl nur individuelle Lösungen gibt. Ich habe bereits OTL laufen lassen und Malwarebytes installiert. Für die weiteren Schritte würde ich jedoch Eure Hilfe benötigen und würde mich über Eure Unterstützung sehr freuen. Viele Grüße, Johannes OTL Code: Code:
ATTFilter OTL logfile created on: 10/16/2010 2:10:28 PM - Run 1 OTL by OldTimer - Version 3.2.15.2 Folder = C:\Users\Johannes\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18943) Locale: 00000409 | Country: Vereinigte Staaten von Amerika | Language: ENU | Date Format: M/d/yyyy 3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 49.00% Memory free 6.00 Gb Paging File | 5.00 Gb Available in Paging File | 73.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 144.04 Gb Total Space | 79.70 Gb Free Space | 55.33% Space Free | Partition Type: NTFS Drive D: | 140.50 Gb Total Space | 44.39 Gb Free Space | 31.59% Space Free | Partition Type: NTFS Drive E: | 6.67 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Drive G: | 7.47 Gb Total Space | 0.14 Gb Free Space | 1.84% Space Free | Partition Type: FAT32 Computer Name: LIEGSALZ | User Name: Johannes | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Johannes\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe (Google) PRC - C:\Programme\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation) PRC - C:\Programme\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.) PRC - C:\Users\Johannes\AppData\Roaming\Dropbox\bin\Dropbox.exe () PRC - C:\Programme\Avira\AntiVir Desktop\avcenter.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avscan.exe (Avira GmbH) PRC - C:\Programme\Skype\Toolbars\Shared\SkypeNames2.exe (Skype Technologies S.A.) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme\FRITZ!DSL\IGDCTRL.EXE (AVM Berlin) PRC - C:\Programme\FRITZ!DSL\StCenter.exe (AVM Berlin) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Users\Johannes\AppData\Local\Temp\RtkBtMnt.exe (Realtek Semiconductor Corp.) PRC - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Windows\System32\conime.exe (Microsoft Corporation) PRC - C:\Windows\System32\audiodg.exe (Microsoft Corporation) PRC - C:\Programme\FRITZ!DSL\FwebProt.exe (AVM Berlin) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme\Acer\Acer Bio Protection\CompPtcVUI.exe (Arachnoid Biometrics Identification Group Corp.) PRC - C:\Programme\Acer\Acer Bio Protection\BASVC.exe () PRC - C:\Programme\Acer\Acer Bio Protection\PdtWzd.exe (Arachnoid Biometrics Identification Group Corp.) PRC - C:\Programme\RealVNC\VNC4\winvnc4.exe (RealVNC Ltd.) PRC - C:\Programme\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Inc.) PRC - C:\Programme\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe (CyberLink) PRC - C:\Programme\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (CyberLink Corp.) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) PRC - C:\Programme\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.) PRC - C:\Programme\Launch Manager\QtZgAcer.EXE (Dritek System Inc.) PRC - C:\Programme\Acer\Empowering Technology\Service\ETService.exe () PRC - C:\Programme\Acer\Empowering Technology\eAudio\eAudio.exe (Acer Incorporated) PRC - C:\Programme\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated) PRC - C:\Programme\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (Egis Incorporated) PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) PRC - C:\Programme\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe (NewTech InfoSystems, Inc.) PRC - C:\Programme\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe () PRC - C:\Programme\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe () PRC - C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) PRC - C:\Programme\Common Files\SPBA\upeksvr.exe (UPEK Inc.) PRC - C:\Programme\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) PRC - C:\Programme\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe (NewTech Infosystems, Inc.) PRC - C:\Programme\Windows Defender\MSASCui.exe (Microsoft Corporation) PRC - C:\Programme\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe () PRC - C:\Programme\Acer\Acer VCM\RS_Service.exe (Acer Incorporated) PRC - C:\ACER\Mobility Center\MobilityService.exe () PRC - C:\Windows\PLFSetI.exe () PRC - C:\Programme\Acer\Acer VCM\acp2HID.exe (Acer Inc.) PRC - C:\Programme\OpenVPN\bin\openvpn-gui.exe () ========== Modules (SafeList) ========== MOD - C:\Users\Johannes\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation) MOD - C:\Windows\System32\SysHook.dll () MOD - C:\Windows\System32\BtMmHook.dll (Broadcom Corporation.) MOD - C:\Programme\WIDCOMM\Bluetooth Software\BTKeyInd.dll () MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (GoogleDesktopManager-051210-111108) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google) SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation) SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (IGDCTRL) -- C:\Program Files\FRITZ!DSL\IGDCTRL.EXE (AVM Berlin) SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (IGBASVC) -- C:\Programme\Acer\Acer Bio Protection\BASVC.exe () SRV - (WinVNC4) -- C:\Program Files\RealVNC\VNC4\WinVNC4.exe (RealVNC Ltd.) SRV - (IAANTMON) Intel(R) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) SRV - (ETService) -- C:\Programme\Acer\Empowering Technology\Service\ETService.exe () SRV - (eDataSecurity Service) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated) SRV - (NTIBackupSvc) -- C:\Programme\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe (NewTech InfoSystems, Inc.) SRV - (NTISchedulerSvc) -- C:\Programme\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe () SRV - (BUNAgentSvc) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe (NewTech Infosystems, Inc.) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (CLHNService) -- C:\Programme\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe () SRV - (RS_Service) -- C:\Programme\Acer\Acer VCM\RS_Service.exe (Acer Incorporated) SRV - (MobilityService) -- C:\Acer\Mobility Center\MobilityService.exe () SRV - (OpenVPNService) -- C:\Programme\OpenVPN\bin\openvpnserv.exe () ========== Driver Services (SafeList) ========== DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation) DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH) DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH) DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH) DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH) DRV - (AlfaFF) -- C:\Windows\system32\Drivers\AlfaFF.sys (Alfa Corporation) DRV - (iaStor) -- C:\Windows\system32\DRIVERS\iaStor.sys (Intel Corporation) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) -- C:\Programme\Acer Arcade Deluxe\PlayMovie\000.fcl (Cyberlink Corp.) DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation) DRV - (L1E) -- C:\Windows\System32\drivers\L1E60x86.sys (Atheros Communications, Inc.) DRV - (psdvdisk) -- C:\Windows\System32\drivers\PSDVdisk.sys (Egis Incorporated) DRV - (PSDFilter) -- C:\Windows\system32\DRIVERS\psdfilter.sys (Egis Incorporated) DRV - (PSDNServ) -- C:\Windows\System32\drivers\PSDNServ.sys (Egis Incorporated) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.) DRV - (TcUsb) -- C:\Windows\System32\drivers\tcusb.sys (UPEK Inc.) DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics, Inc.) DRV - (RTSTOR) -- C:\Windows\System32\drivers\RTSTOR.sys (Realtek Semiconductor Corp.) DRV - (HSF_DPV) -- C:\Windows\System32\drivers\HSX_DPV.sys (Conexant Systems, Inc.) DRV - (HSXHWAZL) -- C:\Windows\System32\drivers\HSXHWAZL.sys (Conexant Systems, Inc.) DRV - (winachsf) -- C:\Windows\System32\drivers\HSX_CNXT.sys (Conexant Systems, Inc.) DRV - (btwaudio) -- C:\Windows\System32\drivers\btwaudio.sys (Broadcom Corporation.) DRV - (NTIDrvr) -- C:\Windows\System32\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.) DRV - (UBHelper) -- C:\Windows\System32\drivers\UBHelper.sys (NewTech Infosystems Corporation) DRV - (MegaSR) -- C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.) DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.) DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Corporation) DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.) DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems) DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company) DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.) DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic) DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation) DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation) DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.) DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation) DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd) DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.) DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic) DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic) DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.) DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex) DRV - (HSFHWAZL) -- C:\Windows\System32\drivers\VSTAZL3.SYS (Conexant Systems, Inc.) DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.) DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation) DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation) DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.) DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.) DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.) DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.) DRV - (NTIPPKernel) -- C:\Programme\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys (Cyberlink Corp.) DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.) DRV - (btwrchid) -- C:\Windows\System32\drivers\btwrchid.sys (Broadcom Corporation.) DRV - (btwavdt) -- C:\Windows\System32\drivers\btwavdt.sys (Broadcom Corporation.) DRV - (winbondcir) -- C:\Windows\System32\drivers\winbondcir.sys (Winbond Electronics Corporation) DRV - (int15) -- C:\Windows\System32\drivers\int15.sys () DRV - (DKbFltr) -- C:\Windows\System32\drivers\DKbFltr.sys (Dritek System Inc.) DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation) DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.) DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation) DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH) DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.) DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.) DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.) DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic) DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic) DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation) DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic) DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.) DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.) DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.) DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.) DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.) DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.) DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies) DRV - (tap0801) -- C:\Windows\System32\drivers\tap0801.sys (The OpenVPN Project) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g IE - HKLM\..\URLSearchHook: {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.) IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com [binary data] IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://global.acer.com [binary data] IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com [binary data] IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://global.acer.com [binary data] IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g IE - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com [binary data] IE - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.de/ IE - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\..\URLSearchHook: {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.) IE - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/16 13:21:50 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/16 13:21:28 | 000,000,000 | ---D | M] [2010/10/16 13:22:04 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\mozilla\Extensions [2010/10/16 13:22:12 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\mozilla\Firefox\Profiles\j9g7c9nr.default\extensions [2010/10/16 13:22:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Johannes\AppData\Roaming\mozilla\Firefox\Profiles\j9g7c9nr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010/10/16 13:22:12 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\mozilla\Firefox\Profiles\j9g7c9nr.default\extensions\staged-xpis [2010/10/16 13:21:28 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2010/09/14 23:32:39 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010/09/14 23:32:39 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010/09/14 23:32:39 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010/09/14 23:32:39 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010/09/14 23:32:39 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2006/09/18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found. O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Programme\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis) O2 - BHO: (Softonic Deutsch Toolbar) - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Programme\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.) O3 - HKLM\..\Toolbar: (Softonic Deutsch Toolbar) - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Programme\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.) O3 - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\..\Toolbar\WebBrowser: (Softonic Deutsch Toolbar) - {8DBB6D8E-E4A6-4E3B-9753-AF78B226441C} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [ArcadeDeluxeAgent] C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (CyberLink Corp.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [BkupTray] C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe () O4 - HKLM..\Run: [CLMLServer] C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe (CyberLink) O4 - HKLM..\Run: [eAudio] C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe (Acer Incorporated) O4 - HKLM..\Run: [eDataSecurity Loader] C:\Programme\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (Egis Incorporated) O4 - HKLM..\Run: [ePower_DMC] C:\Programme\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Inc.) O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google) O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [LManager] C:\Programme\Launch Manager\QtZgAcer.EXE (Dritek System Inc.) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [openvpn-gui] C:\Programme\OpenVPN\bin\openvpn-gui.exe () O4 - HKLM..\Run: [PlayMovie] C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.) O4 - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe () O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [WarReg_PopUp] C:\Programme\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Incorporated) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [ZPdtWzdVitaKey MC3000] C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe (Arachnoid Biometrics Identification Group Corp.) O4 - HKU\.DEFAULT..\Run: [FRITZ!protect] File not found O4 - HKU\S-1-5-18..\Run: [FRITZ!protect] File not found O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-4069621161-912532974-1855927034-1000..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - Startup: C:\Users\Johannes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Johannes\AppData\Roaming\Dropbox\bin\Dropbox.exe () O4 - Startup: C:\Users\Johannes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Protect.lnk = C:\Programme\FRITZ!DSL\FwebProt.exe (AVM Berlin) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Programme\Acer\Acer Bio Protection\PwdBank.exe () O9 - Extra 'Tools' menuitem : Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Programme\Acer\Acer Bio Protection\PwdBank.exe () O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\FRITZ!DSL\\sarah.dll () O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\FRITZ!DSL\sarah.dll (AVM Berlin) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\FRITZ!DSL\sarah.dll (AVM Berlin) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\FRITZ!DSL\sarah.dll (AVM Berlin) O10 - Protocol_Catalog9\Catalog_Entries\000000000039 - C:\Program Files\FRITZ!DSL\sarah.dll (AVM Berlin) O13 - gopher Prefix: missing O15 - HKU\.DEFAULT\..Trusted Domains: localhost ([]http in Local intranet) O15 - HKU\.DEFAULT\..Trusted Ranges: GD ([http] in Local intranet) O15 - HKU\S-1-5-18\..Trusted Domains: localhost ([]http in Local intranet) O15 - HKU\S-1-5-18\..Trusted Ranges: GD ([http] in Local intranet) O15 - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\..Trusted Domains: fritz.box ([]* in Lokales Intranet) O15 - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\..Trusted Domains: localhost ([]http in Lokales Intranet) O15 - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\..Trusted Ranges: GD ([http] in Lokales Intranet) O15 - HKU\S-1-5-21-4069621161-912532974-1855927034-1000\..Trusted Ranges: Range1 ([*] in Lokales Intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 93.188.162.84,93.188.161.224 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AWinNotifyVitaKey MC3000: DllName - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll - C:\Programme\Acer\Acer Bio Protection\WinNotify.dll (Arachnoid Biometrics Identification Group Corp.) O20 - Winlogon\Notify\spba: DllName - C:\Program Files\Common Files\SPBA\homefus2.dll - C:\Programme\Common Files\SPBA\homefus2.dll (UPEK Inc.) O24 - Desktop WallPaper: D:\liegsalz\archiv\Berlin-Calling_Sunset_Paul-Kalkbrenner.jpg O24 - Desktop BackupWallPaper: D:\liegsalz\archiv\Berlin-Calling_Sunset_Paul-Kalkbrenner.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2008/05/06 14:26:23 | 000,000,309 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O32 - AutoRun File - [2009/05/16 08:55:20 | 000,000,000 | ---D | M] - G:\Autorun.inf -- [ FAT32 ] O33 - MountPoints2\{c9707c94-3c72-11de-82ec-00238b1ed1ba}\Shell - "" = AutoRun O33 - MountPoints2\{c9707c94-3c72-11de-82ec-00238b1ed1ba}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- [2007/10/23 09:45:40 | 001,336,632 | R--- | M] () O33 - MountPoints2\E\Shell - "" = AutoRun O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\LaunchU3.exe -- [2007/10/23 09:45:39 | 001,336,632 | R--- | M] () O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation) NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: WudfPf - Driver SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906) ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5C9A6D70-ADB5-3123-4CFB-BB4EF9CB8F0F} - Internet Explorer ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {BECAB8C3-FA13-32A9-06E4-D3B85B60D00D} - Browser Customizations ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Macromedia Shockwave Flash ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) CREATERESTOREPOINT Error creating restore point. ========== Files/Folders - Created Within 30 Days ========== [2010/10/16 14:05:44 | 000,574,464 | ---- | C] (OldTimer Tools) -- C:\Users\Johannes\Desktop\OTL.exe [2010/10/16 14:02:20 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2010/10/16 14:02:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010/10/16 14:02:15 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010/10/16 14:02:15 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2010/10/16 13:21:42 | 000,000,000 | ---D | C] -- C:\Users\Johannes\AppData\Roaming\Mozilla [2010/10/16 13:21:42 | 000,000,000 | ---D | C] -- C:\Users\Johannes\AppData\Local\Mozilla [2010/10/16 13:21:25 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox [2010/10/16 13:20:40 | 008,368,928 | ---- | C] (Mozilla) -- C:\Users\Johannes\Desktop\Firefox Setup 3.6.10.exe [2010/10/16 12:23:15 | 000,000,000 | -HSD | C] -- C:\Windows\System32\%APPDATA% [2010/09/29 19:39:49 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2010/09/26 10:07:00 | 000,000,000 | ---D | C] -- C:\Programme\iPod [2010/09/26 10:06:50 | 000,000,000 | ---D | C] -- C:\Programme\iTunes [2010/09/26 09:59:08 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime [2008/07/22 10:01:25 | 000,049,152 | ---- | C] ( ) -- C:\Windows\Interop.IWshRuntimeLibrary.dll ========== Files - Modified Within 30 Days ========== [2010/10/16 14:02:24 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010/10/16 13:45:50 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Users\Johannes\Desktop\OTL.exe [2010/10/16 13:37:48 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010/10/16 13:24:51 | 001,441,160 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010/10/16 13:24:51 | 000,911,276 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010/10/16 13:24:50 | 003,332,350 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2010/10/16 13:24:46 | 001,014,778 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2010/10/16 13:21:33 | 000,001,728 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010/10/16 13:19:28 | 008,368,928 | ---- | M] (Mozilla) -- C:\Users\Johannes\Desktop\Firefox Setup 3.6.10.exe [2010/10/16 12:32:40 | 000,001,035 | ---- | M] () -- C:\Users\Johannes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Protect.lnk [2010/10/16 12:28:14 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010/10/16 12:26:34 | 000,002,337 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Startcenter.lnk [2010/10/16 12:25:55 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010/10/16 12:25:55 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010/10/16 12:25:54 | 000,028,124 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010/10/16 12:25:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010/10/16 12:25:29 | 3215,839,232 | -HS- | M] () -- C:\hiberfil.sys [2010/10/16 12:24:22 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2010/10/16 12:17:59 | 000,028,124 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010/10/15 22:00:54 | 000,281,557 | ---- | M] () -- C:\Users\Johannes\Desktop\Wortschatz.xlsx [2010/10/08 23:55:36 | 266,550,957 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010/10/01 21:41:33 | 000,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml [2010/09/19 23:35:27 | 000,050,688 | ---- | M] () -- C:\Users\Johannes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ========== Files Created - No Company Name ========== [2010/10/16 14:02:24 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010/10/16 13:21:33 | 000,001,728 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010/10/16 12:32:40 | 000,001,035 | ---- | C] () -- C:\Users\Johannes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Protect.lnk [2010/10/15 22:00:51 | 000,281,557 | ---- | C] () -- C:\Users\Johannes\Desktop\Wortschatz.xlsx [2009/10/29 20:56:42 | 000,000,096 | ---- | C] () -- C:\Users\Johannes\AppData\Local\fusioncache.dat [2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll [2009/08/03 11:30:16 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009/07/13 23:41:45 | 000,087,552 | ---- | C] () -- C:\Windows\System32\cpwmon2k.dll [2009/05/12 15:37:55 | 000,050,688 | ---- | C] () -- C:\Users\Johannes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009/05/11 13:45:53 | 000,007,592 | ---- | C] () -- C:\Users\Johannes\AppData\Local\d3d9caps.dat [2009/05/09 12:48:37 | 000,028,124 | ---- | C] () -- C:\ProgramData\nvModes.001 [2009/05/09 10:32:59 | 000,028,124 | ---- | C] () -- C:\ProgramData\nvModes.dat [2008/10/27 23:45:53 | 000,006,054 | ---- | C] () -- C:\ProgramData\ArcadeDeluxe2.log [2008/10/27 23:44:52 | 000,118,784 | ---- | C] () -- C:\Windows\System32\VMC3KAPI.dll [2008/10/27 23:26:46 | 000,626,688 | ---- | C] () -- C:\Windows\Image.dll [2008/10/27 23:26:46 | 000,000,036 | ---- | C] () -- C:\Windows\PidList.ini [2008/07/30 12:19:21 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll [2008/07/30 04:13:17 | 000,001,024 | RH-- | C] () -- C:\Windows\System32\NTIOFM4.dll [2008/07/30 04:13:17 | 000,001,024 | RH-- | C] () -- C:\Windows\System32\NTIBUN5.dll [2008/07/30 03:47:56 | 000,204,800 | ---- | C] () -- C:\Windows\System32\SysHook.dll [2008/07/30 03:42:04 | 000,487,424 | ---- | C] () -- C:\Windows\System32\INT15.dll [2008/07/30 03:25:14 | 000,001,694 | ---- | C] () -- C:\Windows\RtDefLvl.ini [2008/02/20 23:44:36 | 000,065,536 | ---- | C] () -- C:\Windows\System32\HPPLVS.dll [2008/02/07 10:05:18 | 000,163,840 | ---- | C] () -- C:\Windows\System32\hppatusg01.dll [2007/01/26 08:32:18 | 000,069,632 | ---- | C] () -- C:\Windows\System32\drivers\int15.sys [2006/11/02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006/11/02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2005/01/03 11:10:44 | 000,319,488 | ---- | C] () -- C:\Windows\System32\DLXAPI32.DLL [2001/12/26 16:12:30 | 000,065,536 | ---- | C] () -- C:\Windows\System32\multiplex_vcd.dll [2001/11/14 14:56:00 | 001,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll [2001/09/03 23:46:38 | 000,110,592 | ---- | C] () -- C:\Windows\System32\Hmpg12.dll [2001/07/30 16:33:56 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC.dll [2001/07/23 22:04:36 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll ========== LOP Check ========== [2008/07/30 04:10:28 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\Acer GameZone Console [2008/07/30 04:10:28 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\Acer GameZone Console [2008/07/30 04:10:28 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Acer GameZone Console [2010/10/16 12:28:19 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Dropbox [2009/11/01 00:39:02 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Eidologic [2010/06/09 19:27:08 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\elsterformular [2010/10/16 12:32:40 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\FRITZ! [2009/05/07 20:33:20 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Stata10 [2010/10/16 12:27:11 | 000,032,530 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2008/07/30 04:10:28 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Acer GameZone Console [2010/05/02 22:22:49 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Adobe [2010/08/19 10:46:45 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Apple Computer [2009/06/09 20:48:33 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\CyberLink [2010/10/16 12:28:19 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Dropbox [2009/11/01 00:39:02 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Eidologic [2010/06/09 19:27:08 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\elsterformular [2010/10/16 12:32:40 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\FRITZ! [2009/05/07 20:28:03 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Google [2009/05/07 20:07:19 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Identities [2009/05/07 20:07:51 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Macromedia [2006/11/02 14:37:34 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Media Center Programs [2010/04/11 18:42:08 | 000,000,000 | --SD | M] -- C:\Users\Johannes\AppData\Roaming\Microsoft [2010/10/16 13:22:04 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Mozilla [2010/10/16 14:12:34 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Skype [2010/10/16 12:16:39 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\skypePM [2009/05/07 20:33:20 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\Stata10 [2010/07/10 11:16:13 | 000,000,000 | ---D | M] -- C:\Users\Johannes\AppData\Roaming\U3 < %APPDATA%\*.exe /s > [2010/02/26 07:10:20 | 021,979,992 | ---- | M] () -- C:\Users\Johannes\AppData\Roaming\Dropbox\bin\Dropbox.exe [2010/08/25 20:05:06 | 000,089,831 | ---- | M] () -- C:\Users\Johannes\AppData\Roaming\Dropbox\bin\Uninstall.exe [2007/10/23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Users\Johannes\AppData\Roaming\U3\temp\cleanup.exe [2008/05/02 10:41:48 | 003,493,888 | -H-- | M] (SanDisk Corporation) -- C:\Users\Johannes\AppData\Roaming\U3\temp\Launchpad Removal.exe < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS > [2008/01/21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys [2008/01/21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys [2008/01/21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys [2008/01/21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys [2008/01/21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys [2006/11/02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys < MD5 for: ATAPI.SYS > [2009/04/11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys [2009/04/11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys [2008/01/21 04:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\drivers\atapi.sys [2008/01/21 04:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys [2008/01/21 04:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys [2006/11/02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys < MD5 for: CNGAUDIT.DLL > [2006/11/02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll [2006/11/02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll < MD5 for: EVENTLOG.DLL > [2007/01/12 23:30:08 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Programme\Cyberlink\PowerDirector\EventLog.dll < MD5 for: EXPLORER.EXE > [2008/10/29 08:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe [2008/10/29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe [2008/10/30 05:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe [2009/04/11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe [2009/04/11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe [2008/10/28 04:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe [2008/01/21 04:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe < MD5 for: IASTOR.SYS > [2008/07/20 11:44:44 | 000,324,120 | ---- | M] (Intel Corporation) MD5=707C1692214B1C290271067197F075F6 -- C:\ACER\Preload\Autorun\DRV\Intel Robson RBSMDL2G\Winall\Driver\IaStor.sys [2008/07/20 11:44:44 | 000,324,120 | ---- | M] (Intel Corporation) MD5=707C1692214B1C290271067197F075F6 -- C:\Programme\Intel\Intel Matrix Storage Manager\driver\IaStor.sys [2008/07/20 18:44:44 | 000,324,120 | ---- | M] (Intel Corporation) MD5=707C1692214B1C290271067197F075F6 -- C:\Windows\System32\drivers\iaStor.sys [2008/07/20 11:44:44 | 000,324,120 | ---- | M] (Intel Corporation) MD5=707C1692214B1C290271067197F075F6 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_7b6e77f6\iaStor.sys [2008/04/20 18:29:38 | 000,317,464 | ---- | M] (Intel Corporation) MD5=9F1220113A3A7F4F08042C699324D073 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_18bd4575\iaStor.sys [2008/07/20 11:44:54 | 000,402,456 | ---- | M] (Intel Corporation) MD5=FC28E90F2204D8FD147FA9BFA8A51C01 -- C:\ACER\Preload\Autorun\DRV\Intel Robson RBSMDL2G\Winall\Driver64\IaStor.sys [2008/07/20 11:44:54 | 000,402,456 | ---- | M] (Intel Corporation) MD5=FC28E90F2204D8FD147FA9BFA8A51C01 -- C:\Programme\Intel\Intel Matrix Storage Manager\driver64\IaStor.sys < MD5 for: IASTORV.SYS > [2008/01/21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys [2008/01/21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys [2008/01/21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys [2006/11/02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009/04/11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll [2009/04/11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll [2008/01/21 04:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll < MD5 for: NVSTOR.SYS > [2006/11/02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys [2008/01/21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys [2008/01/21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys [2008/01/21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys < MD5 for: SCECLI.DLL > [2008/01/21 04:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll [2009/04/11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll [2009/04/11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll < MD5 for: USER32.DLL > [2008/01/21 04:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll [2009/04/11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll [2009/04/11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll < MD5 for: USERINIT.EXE > [2008/01/21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe [2008/01/21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe < MD5 for: WINLOGON.EXE > [2009/04/11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe [2009/04/11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2008/01/21 04:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe < MD5 for: WS2IFSL.SYS > [2008/01/21 04:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys [2008/01/21 04:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > [2008/01/21 05:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV [2008/01/21 05:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV [2008/01/21 05:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV [2006/11/02 12:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV [2006/11/02 12:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > [2008/01/21 04:24:47 | 000,403,968 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\FirewallAPI.dll [2009/04/11 08:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll [2009/04/11 08:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll < End of report > Code:
ATTFilter OTL Extras logfile created on: 10/16/2010 2:10:28 PM - Run 1 OTL by OldTimer - Version 3.2.15.2 Folder = C:\Users\Johannes\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18943) Locale: 00000409 | Country: Vereinigte Staaten von Amerika | Language: ENU | Date Format: M/d/yyyy 3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 49.00% Memory free 6.00 Gb Paging File | 5.00 Gb Available in Paging File | 73.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 144.04 Gb Total Space | 79.70 Gb Free Space | 55.33% Space Free | Partition Type: NTFS Drive D: | 140.50 Gb Total Space | 44.39 Gb Free Space | 31.59% Space Free | Partition Type: NTFS Drive E: | 6.67 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Drive G: | 7.47 Gb Total Space | 0.14 Gb Free Space | 1.84% Space Free | Partition Type: FAT32 Computer Name: LIEGSALZ | User Name: Johannes | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) [HKEY_USERS\S-1-5-21-4069621161-912532974-1855927034-1000\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-4069621161-912532974-1855927034-1000] "EnableNotifications" = 0 "EnableNotificationsRef" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 ========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0E947F4A-88A0-4083-B4B2-DCD64EC7B03D}" = rport=139 | protocol=6 | dir=out | app=system | "{100F3840-5B83-490D-A7EF-C3781F86DFE8}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{23754781-6A0F-45CB-AA57-72D164ED65E4}" = rport=137 | protocol=17 | dir=out | app=system | "{82093AF4-8A7D-4D36-B89E-C72C04722B3E}" = lport=138 | protocol=17 | dir=in | app=system | "{951B2BEF-6DDB-4483-9136-F505E67F35C0}" = lport=137 | protocol=17 | dir=in | app=system | "{9B2BE31F-21E3-4E14-9D5F-CEEFBF826629}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{9F48705E-99EB-440D-8366-9CFDF7DD4D45}" = rport=138 | protocol=17 | dir=out | app=system | "{BFB048BD-3E30-440B-B85B-E901586C3077}" = lport=445 | protocol=6 | dir=in | app=system | "{F3AB156C-621E-4435-9F63-E435077A616C}" = lport=139 | protocol=6 | dir=in | app=system | "{FA956595-D851-4219-9C4F-B2EABC8F3B39}" = rport=445 | protocol=6 | dir=out | app=system | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{00956BE9-0AA5-45D8-BC3A-907B2CE94566}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0099897C-2885-4671-89FD-B2FD95012F88}" = protocol=17 | dir=in | app=c:\users\johannes\appdata\roaming\dropbox\bin\dropbox.exe | "{00B94FEE-D78C-4641-BF4B-18A2EB2B479A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0142C4C0-E89C-4C69-B62C-F1DA82F02DAB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{01A78E9F-B1EA-41AB-A292-D8684C9C8A7A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{021CA627-BE8D-4AE7-9CDB-E0789ED8A6CA}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{02274A6B-80DA-4AAA-8125-CC0657C40FF6}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{02C978DF-2631-4A90-AE78-669D7F3D5AA4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{03195E77-55B3-4FBC-94F4-51B4D727DFC5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{039A9C26-3F9D-41D6-84F2-58F712E3C121}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{04C6958F-B546-4F8A-B73A-C5FCAB063537}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{06D00463-3682-4399-BC65-7979E6D8E6C6}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0833824D-9750-48C3-A5BC-3C3EAC8641A1}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{089B8109-2978-4DF1-BA6D-5A7065417C4D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{09315F9D-5FC8-4879-851B-4E5A763FEC5B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{09E4D144-9408-4435-92F8-715B919D661B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0A902F12-A59A-4226-9C3F-E28B27F01A8D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0AF12BBE-CB74-4F07-A0C0-41001C091905}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0B33490A-D239-4B59-BD19-A17436EB7FC7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0BD28678-DD0F-45E8-9764-4A856EC753E4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0BE7BF9E-018E-496F-A295-17BAC673630E}" = protocol=17 | dir=in | app=c:\windows\system32\spoolsv.exe | "{0CCC7B00-BBC8-433B-85A1-F68EAA6F748C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0CD4B801-CC22-41BB-BDF2-813730C4E80E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0D5FEF81-BC1B-46FB-80E0-34A4059F71B5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0EC6B9CA-1931-4FC1-925B-FFCB84035772}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0EF0AE3F-CF5D-4625-A64A-DD8F8D775124}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0F5D8A88-83E1-4DA9-812C-A195BDF3560F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0F7B50C9-5221-4E5B-A68C-0F11B6A73EF9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{0F8C498E-027F-42D8-AD21-0F3034835179}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{117DA5AF-A4A1-43E9-8C12-20CD04CED15F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{11C9AA44-F11A-4B2E-9D50-A1E431A0542C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{120E67AB-840A-4809-8F21-7EC1EE30BD0F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1212A629-5CA7-4A5C-AB97-C54E6C28E2D8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{123902C3-3DFA-4F07-82EF-790194DEA37F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{12824B6B-92DB-415C-A0A8-C3716C1AE599}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{12EF3EA0-5014-4B84-ABF8-1D2AEE66D8C4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{12FBB15D-739F-4AB7-9740-60FEF3B1E782}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{13D15A9E-F514-4EF9-BA7C-51A351E94A2F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{14538770-927C-4FBD-88AB-4236E8B73CF3}" = protocol=6 | dir=in | app=c:\program files\sonos\sonos.exe | "{14873C1C-8B59-46C0-BC2E-5D03EDDF60A3}" = dir=in | app=c:\program files\acer arcade deluxe\acer arcade deluxe\acer arcade deluxe.exe | "{14AC87AD-C54F-4708-A471-18940D342DA3}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{14E9C117-2098-49F2-BFB8-314F2FBE3747}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{16867654-02D9-49EC-A1EB-C6DEB78B4D6C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{16C674DE-D156-499E-B50D-1EEF3FFB82D7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{176D5BE5-3143-4CEC-A576-A3E8D5DB52B4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{18D019F4-FB2C-4D95-AAB3-4E0B1828212E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{195C3C6B-2540-478A-848F-C2E9965FD965}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{19806395-A7B5-400C-9A54-F8AFE74E91DA}" = dir=in | app=c:\program files\acer arcade deluxe\playmovie\playmovie.exe | "{1B8D821E-7795-4199-AC7A-9EC12D8888A0}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1BF0BA1A-CA9C-4D79-9A09-BD67088189B9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1CC289F5-A147-425D-9438-E8BE6889911B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1DDDE9BE-F928-4B13-B31B-E33C018B6C2B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1ECB7470-9F42-4F8A-A9FC-A6D4AC1DB1A2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1EDC5FBA-EA02-456E-ACC1-11E3B227591C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1EEEE847-2A7A-44D2-A7F6-84F3A323DD19}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1F3AE81B-2434-44CD-B9EA-B967EA366321}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1F8012B1-8881-4D76-9386-8DCC2C400876}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1FF8AEE3-8028-4BE2-B40A-2E7F0105124F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2041EFBA-3375-47DC-989E-387672C61CBF}" = protocol=6 | dir=in | app=c:\windows\system32\spoolsv.exe | "{22845442-399E-4E96-8987-701C09775CCF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{23091494-6864-4EE6-A33C-476FE8686C49}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{238D75D9-06DC-4DFD-A415-55800A8894FC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{241B0188-521C-42F9-BE45-53B59F85D1E2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2474E903-4B39-4278-893D-BE66E58311B1}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{24B64FD4-6A4A-49D1-A952-425DEF3DCCA7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2581E171-97AB-49A4-9A62-F56843A80E8B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{260E6776-F628-42DA-B9F8-0CCC81D5F269}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{26E77F96-2F51-4C56-BB00-0EC60626EDDC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{27491E29-0A45-41C0-B325-F7C61AAA5FFE}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2765FD1C-FAC0-44F0-988C-AE0A5580734A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{28355984-748A-470A-BB4F-C3E7229095F1}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2841E1B1-B3E7-4E9E-B03E-39AAEE332845}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2AD026A8-4232-44E7-972E-5C22C40EC551}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2AED3AB6-690B-4C85-A371-B2828EB398BB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2B1872F1-EDC1-4DB4-8A5C-8B5B1441A90A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2B3E9C70-CD1B-4D9E-A26D-50E047DAB82B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2B932962-D0C1-4175-BBF3-35BE9FB52CF7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2BB09CF6-9005-4785-AE4A-790DEE1E5A6E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2BBC3EB7-EE27-4F0E-8566-4A5F16A65A66}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\schedulersvc.exe | "{2C10872C-73D4-4A82-908C-C5BF67FEA7CA}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2CDA604F-E160-441D-A259-D860DA8BF2BA}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2D6EB2C6-5682-4068-B53D-9FADF6C4C5C4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2DF98EEC-9424-42E4-B222-50BAD22A3827}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{2DFE031F-B86B-4970-BC75-7A00C95C5CAC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2E384D7F-C387-4361-AA0A-A4B5740FDA11}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2EDE151E-9436-4F8C-8FE3-B4E755F0D41E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{2FFC2C64-6222-45D5-8773-DAAB09096242}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3003121D-3E51-460E-BB16-816C9DD2603F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3263116E-47A7-4CF0-AA01-F7CEFC66AFA8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3277F3D5-6D35-4045-B3E5-F09CE6F29832}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{32BA2FBC-59A7-46F1-B8DA-C944F1E5A7AE}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{32F33A07-C223-453D-9F35-7CC99E1EE929}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{335F8810-C87B-4397-AE5C-F98F4AF58601}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{351DAD91-8739-4014-9819-8A4AD6D76221}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3534FB83-84DB-4DE8-9945-59894F4449DE}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{35384DF6-4A69-4783-A344-F4DECBFBEC0A}" = protocol=17 | dir=in | app=c:\program files\sonos\sonos.exe | "{38BBFF3B-1112-4379-8597-5BE663D39168}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{39170697-7FA8-42E0-9478-F7056506EE7B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{39C5B63D-9E7E-4F1E-954F-D6A9B1AE94A7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3ACA310B-A0F0-4321-B23B-D922D5E672BF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3AE79C0A-1F3F-4A43-92D7-EC77800B250C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3B97B49A-7DF8-446F-A397-34B086C16B21}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3BB20730-CD55-4EC6-A6C5-3FAC492254DE}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3CBEAE3C-33E0-4100-BBA6-F99A54CB498A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3D68A0C7-6CDE-4A66-A1D7-128F40B5C702}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3E1DA78D-AAB7-44AD-A127-81A1AEF35EC9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3E42D94B-C24F-44BF-802F-750B6150EC5E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{3E7B66C0-97E9-47B2-9593-BFED7463D7A2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{405A3A48-6587-482A-9E75-02D3B1E79785}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{413AAE5A-CB9B-4B0C-9263-9777E6D2080B}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{417B13D0-1852-41BD-82BC-9066ACF2BD0D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4185E83E-3E6C-40FC-A42C-C08B43ED07A1}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{41A0AC90-A617-44C8-AC41-41528BDC32AC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4236854A-DB40-438C-8745-BED82E1C9FCF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4355D0A4-EF0B-476D-8528-7BCD3D8EB25A}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{4500FD3B-90E3-4F6B-8ED6-4469CFE3BE2B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{45641157-C0AD-4793-9710-447881CE1E70}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{45F3C2A3-2818-43B8-AFC0-F318FECEC943}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{47ADC146-A443-4126-BF25-84D943275FF9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{47EB541D-6161-4536-9CA9-E89E85FF0AE7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{47F8348D-F544-4C66-AE46-3E7E2AB98ADF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{481D442C-F37F-460A-9F0C-206A5D4955ED}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{482760BF-897A-44A0-A829-709D39DA9DBB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{498A27F4-5688-4EB1-9754-1D31C0FA4ADE}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{49EC9784-5706-421D-9E27-59E0F146706D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4A1DA44B-323A-475D-9790-A104E9BF18A5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4B0413C6-FBC4-4EC0-8E82-B613790CC078}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4B48B25B-2501-4621-939E-DFCC95AF0176}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4B6BD803-BEB3-46D8-A395-2C8672C518F8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4C096D42-5134-49C8-8E59-465F51C07236}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4C4DA137-5517-4F25-B581-10BF60782D43}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | "{4CCE9736-AF52-43FC-A949-8F8613A9408D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4D2FBC7F-69F8-40CA-A1B5-8C78BF5A992F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4E03CBD7-0CDA-4C8D-94EC-40D7D7D111AB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4E3A4306-C905-4EB0-AE8E-D5D63AC74F17}" = protocol=17 | dir=in | app=c:\program files\fritz!dsl\fboxupd.exe | "{4E520F43-F711-4F73-A59E-A65BB7BA9D2D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4E5D92A2-36C2-47D0-9000-5B23BC69FD19}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4EC75B4D-B7A5-4023-AB25-6D0570EA1CB8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{51155A9B-8297-47B0-997E-0959364A1388}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{51C2B59B-8D93-4552-8A4B-684CCE73F10B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{521B8DC3-1125-45AF-9034-969AD8A822D9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{52897FE2-9528-4B1C-9DB4-A5B31F7FDBCB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{529ACC6D-CEEA-49EC-A0F3-38C6CEC52B60}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{549920B0-DB01-49E9-9934-3271A763F75E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{54D5238F-D180-4702-8D76-3F5C5B875724}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{5502442E-3BDD-4498-BAAD-EF734379219C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{557C37F8-7566-4758-AB68-B5EC9165D8B0}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{55BC8675-DBEE-49CC-B733-F130C7614890}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{566649BC-7F38-4B0E-8678-2F54E9958DFE}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{56B44DBA-1A0F-4979-8ECE-9019FFA2E341}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{572BF3BC-3240-4038-BAC9-63A12019382E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{5730DC48-77F1-4199-9E57-1E8C8A5BFE1D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{573743C1-188F-46CA-B3B3-7504A9A8E2B6}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{57759614-5291-4068-9185-F1C38767E041}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{57DA9F9C-62C2-4B64-A1B2-223C0E401453}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{58005BD7-1435-4B5B-83C7-CE30F5D15B9A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{580EC7B2-679E-4BD8-BF9C-8FEE27434B3C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{587CB553-A767-41C7-B481-36E0C2CAB2EB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{5A6CDFE9-D553-48F6-BFCC-385D1D7F8F33}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{5B43A3FC-A139-4869-A009-3CC4E88273B8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{5CDCD959-A952-4BAA-8D3F-0733A1CA9AEC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{5D14F57C-515A-4BD4-8591-D25075645487}" = protocol=6 | dir=in | app=c:\program files\fritz!dsl\webwaigd.exe | "{5DD161ED-D0F0-4FC1-8E92-E95D45115645}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{5DDA1596-5F1A-4FAC-A3AD-E85CD3E101A2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{601414A7-FAD5-44DF-993C-D96D8887A96A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{6166F5F7-342D-41A6-9034-FA31C405C4F6}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{616F102E-3BD2-464E-82BA-7B2663D447AB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{630B2E31-9D61-4C04-BAF3-3999DECE446C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{63182D00-9179-48E1-A2F9-80B813462766}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{63AEAFBB-FAFF-4853-BDBE-5D5CB1ACCE8D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{6623C51E-E401-4132-8D33-21682A2A2A96}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{6682A241-6AFA-4E6A-A094-23177C75D411}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{66A9EB5F-EF4A-4D4E-B15F-F5831C4524AC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{677CFE80-3104-4EBF-BDEE-09C9269BB0E8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{67F63488-7ECE-4562-B2FC-93B5915706B9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{68D6DB6A-3CE8-45C5-99F9-E6954B225470}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{69477792-9838-46D6-B2E0-52D1F4A72F3B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{69E0DBFA-A7F0-463F-8E52-953C82B2E300}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{6A4E3113-1B6B-470A-A854-140496EEE517}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{6AF38723-C40C-44FD-8311-91A147B1E422}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{6B0902B4-EDF7-4431-A3EE-C5371C61AE07}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{6B27F55E-C435-4E03-B275-D970E1052A72}" = protocol=6 | dir=in | app=c:\program files\fritz!dsl\igdctrl.exe | "{6D01FA02-9F6E-4A20-85A5-0C30B7490780}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{6EA8791F-352C-48FB-AB45-AD706144D595}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{6EB71356-19CF-48B7-A1AB-9E8BB938C175}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{70DE87E4-8E3F-48FB-9566-12E5C70C750F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{71072B48-8251-4F4C-8830-D1577D168926}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{710B6B17-86CD-4B83-ADA5-5A587F546938}" = dir=in | app=c:\program files\acer arcade deluxe\playmovie\pmvservice.exe | "{71160F5D-38E5-4DE6-9B04-8FBC8AC4BEAC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{71B4CF44-B4C0-4A3C-986F-8BDE20A28567}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{72733298-110B-41F0-9E46-F72627BA4D55}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{72D328A8-1FC6-493C-A5A0-6D11863DB38E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{74249831-98AF-4310-8FAF-34CC2EBB1CE3}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{74954A46-82D8-4406-A87D-AB802843BCFC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7499DD14-C84B-4817-8BA5-4DC4E59BB93F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{752E1F2E-EF83-4017-8732-A4FFB091CE9D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{756C3400-01DF-4842-BB0E-BAEE29EAAFCB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{758B8339-361D-441E-BE15-291E3F91B072}" = protocol=6 | dir=in | app=c:\windows\system32\spoolsv.exe | "{76000322-A4B7-43A3-9E5A-6A115B4F6E9A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7664AAFA-D097-42E6-8F63-9BE50CD8A1AC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7681F4E3-C374-499F-9C92-59D55D7318A4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{76AC1C17-0FC2-4DF3-8CCF-DA93685CB5B7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{788A4363-6D20-4BC0-A606-170420875E26}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{79837F8F-CAAF-4ECD-BD89-E063A31C2837}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7993B8C0-FDD2-4814-ABBE-8EE3B4D2DDB8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7B05C56F-418C-4CBE-920C-A0DBB651EA93}" = protocol=17 | dir=in | app=c:\windows\system32\spoolsv.exe | "{7B805385-5C73-43DC-BE3A-72D744765629}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7B9FBC05-A880-467B-8413-E06B68F3470A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7BD65B90-A3F1-4D8C-9E90-4999B8EBA804}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe | "{7C372FFB-C0EC-450F-8583-B29DEE8AE356}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7CD57EC8-916D-41A1-A2C5-B5D4C9F52F27}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7EF1E812-7F50-4432-B7B2-E631D565D9CA}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7F794A77-FE95-4E62-8480-284AB6387C2F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8032B017-8C02-44E2-801F-8A8FAFD1B621}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{80EA5587-8923-4486-958B-2D9528C01BF3}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{80F2F3E3-0677-4635-9502-BD1CFB1F01D7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{80FB5189-8353-4538-8C32-34C0D2B1DC3B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{815AF9BC-DC0A-4C66-97CA-E6B1DE6222C2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8168D247-D8AA-4821-A75E-209EB3CACF81}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{82831AD2-4CC6-4D48-9C81-B87139DF3E26}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{8350BC07-4498-46E6-B7BB-46C0F7DAF8F0}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{83D65D57-6575-49AD-8D90-0AD5A4A3B421}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{85B99C08-3BC1-43DC-96F7-207BC89E8173}" = protocol=17 | dir=in | app=c:\program files\fritz!dsl\igdctrl.exe | "{869733EA-67B4-410F-81FB-64F2243E7569}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{876EFDEE-709D-4699-B158-443FE622087B}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | "{87B84038-FAAD-47E3-A146-492F98609577}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8886CEF1-F797-4FCD-9CAC-2781BAA247F8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{893AB7C4-7E07-4BD0-806D-9F18B215CF75}" = protocol=17 | dir=in | app=c:\program files\fritz!dsl\webwaigd.exe | "{897EABCA-2D10-46BD-810E-6850BCCB0398}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8B677C9C-7053-48AA-BEDD-39775BE36440}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8C181C18-6632-450B-A528-97E2EB8FD823}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8C483D7C-A78E-4280-8568-8C815D99BD23}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8C76565A-8B57-4B05-BACF-8D25B6F52E4A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8D0FC374-D096-4F62-B619-226931691287}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8DE20B14-C53D-425E-A11C-1CB3F738E10E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{90319220-F302-4D66-9E98-8ABA8C8B8D2C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{90F85D7F-7088-4013-8CAB-D4872092911B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{90FA3513-BC37-490E-8139-489BEC66EA48}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{91E3BD93-B0A3-4B83-894A-B50B7C662164}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{92998744-4C2E-43CD-BCE6-83457EA33C02}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{935CAD44-19A2-495D-97C4-074A8453FDD6}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{93FE8C10-0154-4D44-9D94-9E66D5A08530}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{940DAB68-BF58-47A4-A7E6-5816EF78CEDD}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9518B806-DC59-45A9-AB3E-749A5E2066D2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{953D7395-1C15-43F5-856D-EB321B04C5E4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9662C563-9C91-44C5-99F9-4E4D9CD30E9B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{96D28C38-5222-480B-9B88-F2B55CDDEDC0}" = protocol=6 | dir=in | app=c:\users\johannes\appdata\roaming\dropbox\bin\dropbox.exe | "{96D9938D-4996-4975-9614-2931282F2CD3}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{970E2153-184F-482B-9B86-B46EAE130CBB}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\schedulersvc.exe | "{98CCA0CD-93B6-4FD9-9478-E1DB7938F3ED}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{98DDD205-2849-43CC-9669-F89172848F30}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9C80CA82-9D92-4E52-9138-C3F373B10681}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9D9CEC62-696D-4B8A-BC1F-2F317633F607}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9DBD68C1-29A0-45B6-A3DB-534E7C42EB8E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9DCDBF7C-9ABC-4FE2-84D6-64B88C0A2A9E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9E24F5F5-6B74-48AB-8E68-EF0D718FF0D5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9E2D791E-9915-4C58-AEBC-08F81265FEBC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9F795BBD-36BA-4002-9CC3-B765630606DA}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{A0113961-14D2-4990-AEED-774FA2F57D27}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{A01E2F10-3ADF-4094-9C35-9EFE76287E52}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{A2DEBD58-CC7E-4925-9ADF-C9E804F33AFA}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{A3D5EE3E-7915-4E7E-BBF2-3CB83FF8FFF5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{A62E0D80-ECDA-4BF3-9CAA-AB2DA84C7EBD}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{A6440A80-5839-44D7-A274-A8BB2F8B19AC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{A6502534-C604-4550-B945-6FA89A10572D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{AA99C0D8-5208-4083-8E1B-CDE134F81C21}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\hp1006mc.exe | "{AAFC7ACE-8A29-4324-9ADF-71208DA18CD9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{ADC89E6B-0254-4880-B33E-36C9A19E6B2C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{AF93B471-036C-4D37-ABC8-ADC98805C84D}" = dir=in | app=c:\program files\acer\acer vcm\vc.exe | "{B0AC5D68-FF1D-4FB4-8C91-142DE8960B18}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B0BDF727-DCF3-4FC5-9799-FAB46D6C03FC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B157DF00-BC4D-40E0-BAC8-E964D2AA1381}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B331154D-F137-41C4-95FE-D040DE133411}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | "{B36220C5-38DC-4814-96A2-C22F3CCA8134}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B3D45A7D-8AD2-4E2C-8D15-B27610520A8F}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe | "{B48F2DB3-F101-497D-941F-F3997D98EDB5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B4962334-8DE9-4FD1-A46B-C6C34331DDA5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B6C093BC-1E03-4E7D-999E-609A6B9B03BB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B7018956-0178-4A2F-9267-C28DCFC4D0CD}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B7F8FDD0-EC59-44E9-8DB1-56A6D66ECCE0}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B87F52E5-8B48-4EB6-9BA7-BE91C739EEFC}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{B90CD7E6-A2C1-4DD6-A433-DCC83AC552AF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B95A29CF-C9FA-4421-BF74-00AC3BC9FF9B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B9CE16EA-99E4-4BB3-B2F7-184D13C6D935}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{B9E4CDB5-504C-4DF0-A4D5-64004C7210BF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{BA878669-4669-40FB-8764-97BD9665E6C0}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{BADA5A60-B1A7-44EC-9DF9-2C33A23E5BAF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{BB1AC080-D61F-45FB-A203-EF488AFBABF9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{BB42E5E5-EE1B-44AE-B4A6-13A6FB8E3BC5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{BC452016-9E16-4132-9AA3-34BD59B12D6D}" = dir=in | app=c:\program files\acer arcade deluxe\homemedia\homemedia.exe | "{BC9D9398-8739-4B45-8976-860E6277C40A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{BCAE1AF3-397F-4078-952A-F579256E75E1}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{BE8EC1C2-7DEC-4F17-BE76-E1B85078739E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{BEEEEE1F-50B1-48DF-B05F-7ACE0E6D17B3}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe | "{BF22287D-EB6A-4FA7-8BAA-583C596A9F8A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{BF702EFC-B559-45F7-8600-0C9D839FAFED}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C0362D18-7296-4A3B-8421-3FFD11323561}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C0E9A36F-5F3B-44F6-80D8-B5D2C7E17153}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C17C4EA4-4A9A-43C2-B6C6-E27B045E43B2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C1BCFBA0-31DC-4E8B-996B-8013E39704CF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C40C8D8D-7BB2-408A-ADE3-CEEA6BCCD1B4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C4BB62C1-7EB8-426D-B73B-D75131B98E9A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C5A44ADF-6592-49D6-96A4-AE18BEE87E0B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C5C19C8E-B863-455B-99E7-03719D324D63}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C661594C-6577-4784-B471-1EB18C287F04}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C688884A-862C-4EB6-B84F-6D761FE97B7F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C7318A9E-8B9F-4B3F-B980-4ED6C69EAB8A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C7B2F9D7-DDC4-46F7-B0A6-0E38DC51C502}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C83CCC83-6E37-44C9-9055-D2FEBFE747D9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C9BF3E48-3057-4C6C-A180-8A1156ED6A6F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CA0BA514-BAB0-4633-970B-F3025C3AC5D3}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CA0CFE7A-E094-4CA1-8A4C-C11581776697}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CAFCFBC1-1B64-4117-B522-C6B3095CE569}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CB11D3B4-E420-42A3-A762-07DCCCAB0888}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CBCF8E9A-2E89-43AD-8AEB-0C0C8A62E7E4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CC5B8FDD-675D-4FAE-9871-EB5A27C46DC3}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CCD9228C-3712-46E2-8132-0373BD7775C1}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CDB1FF85-241F-43F0-867A-D01E9714C416}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CF1E8C29-0997-459A-9AE5-03162C6EFD3A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CF359ECF-0B40-48F8-8A4B-6CFB4D89584E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CFE6EBF3-6204-48AF-8AD2-98E7A66D853B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{CFF72C9E-4EB3-4FD4-A77F-94C746F62EC4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D084363A-64E0-400C-9E51-D7133D5C89B5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D0F50243-C88E-420C-89DB-436D0E397E7D}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{D174DBD2-A0A0-43A5-A75B-E4272DD47F4E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{D21512CF-1D55-46B1-AA81-3CB11AC69C43}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D2919B45-C0DD-46E0-9F47-93809BEA3C16}" = protocol=6 | dir=in | app=c:\program files\fritz!dsl\fboxupd.exe | "{D2B68234-DFC8-44A8-9FEA-86C07112C498}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D3C352F4-F5D9-45B9-A510-FB92EA29A69A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D4CCB30C-9728-4700-9790-0334477CD4BF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D4FE3C6D-D763-406D-AF53-95FD54F21C6B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D5DF75D1-EEA6-459E-8591-6356410D57BB}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D5E1EE37-B319-48BB-A793-39B45264C0F4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D6BC0049-27C7-4762-B974-0788031D37FC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D6E7DF08-A03B-4E85-8C9D-C0CE9E450AAC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D804CD33-4989-4A32-825C-71F752F7B720}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | "{D8A14323-5A9D-4F15-9E66-5B7B34FEF40F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D92A6963-C9AF-4913-8466-69318525E6DC}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D991739E-4DDD-420C-8AF0-A280C39BD908}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D9A614B4-8416-4E83-B788-140D5D8C1C69}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{D9E86520-0DEC-4293-9B25-CAC688967BCA}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DA5EC040-A9A7-494F-AD8A-8802A1085803}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DAD0131F-0698-4917-8D2F-B8A4D3CA3890}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DB1CF8E3-278F-4C58-BE03-8A5CAB55A0E9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DB339D84-F5F7-47EB-8D9D-19B0DBD64006}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\hp1006mc.exe | "{DBDC3941-509C-420C-86C3-081FB1A70B35}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DC08BB7C-0907-4720-A16A-C6945709CE5E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DC365E67-16A3-42B2-9CBB-DFEDB1C212C8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DC3D37E7-9D95-45E6-B4C4-8B3071FBAF73}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DCE0C462-B3FB-49B9-919B-BE36C9A8CFD9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DD2D6DA9-C57E-49CC-9B52-37CB6E5F2333}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DDD7992D-630D-4D59-A56A-CFFE3B5A67EF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DDEB9D2D-DE97-4F7B-8C8C-606C5FC7385C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DEAEE373-BBF0-4F2E-AB54-6561C76294EF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DECB5B5A-864E-4396-8627-09884A5A09F3}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DECDC1D3-F3C7-4963-8035-AE7F2CF2F4DD}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DFEC3AA5-D81D-4D76-A64C-31441CC60B31}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E00FC11D-632B-46F6-BA55-6C5285BB3F20}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E1796BA1-BC4C-4A41-8FAB-5E1CB1453B99}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E1BEBEBA-0CC2-40B6-B2B5-A55F9171DC86}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E207B34B-4D14-4E87-95AF-B5C721137C57}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E2CBFCE1-30C7-4560-BAD4-60C17482F3F2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E2FD04AF-28E4-4D8A-B714-1210C8036C23}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E325A4B8-E474-4EAC-BA0D-7660A4139EB6}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E4C5EA14-8CE9-4EDF-B2EC-21646CF0DB8C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E663AF8F-02A3-4FF1-BEE6-ADFE58A01E54}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E7381880-0E5B-486A-87E0-84E4064D9C1B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E8ACD9DD-5DCB-46F5-BD9A-24A28428962B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E8CCA47B-2AF0-4E17-8BF2-3FD17260AD60}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E92AFA55-CB5B-4AF4-85D3-7087A5A46398}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E94BF204-ACC1-4FED-819F-851855EB726C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{E9B7F232-6487-4F68-8DE0-32B49FB4349C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{EA9D1165-2529-4EE4-8D80-1904AF6731C2}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{ECF1617E-506E-4C85-8EC6-9EE84EE25B8F}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{ED72F608-95B5-432B-BBEF-6088C92FFE29}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{EDCA9E7F-4B22-4F5A-93A6-525DEC11C2FD}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{EDEDC86A-6E8D-412E-9815-35DB603E67BD}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{EFC4C349-740A-4F18-8579-3AFA4F90BD9C}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | "{F0A05BDB-2921-4133-B81A-E01CA919EEB5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F105A71B-8A07-49CA-9D28-976AAAC2D9D0}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F15E6081-6A00-40D1-B26E-970F6999F9BE}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F22F0F87-A07E-47D9-A790-09A676B686D7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F2E7E768-5F71-43FC-90BA-B7E638943D84}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F30B339F-7948-4F33-B6A6-615D87F90757}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F379E883-67C7-49F2-8958-99E77B830FD4}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe | "{F4D2FA0A-E675-45F8-9AAA-65B52E5DD75D}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe | "{F51D35EC-0430-48BA-97FD-8C5405E7230B}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F5680D70-617D-4596-B9F0-A4E80F76B684}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F6C3CFBB-D972-4C04-8EA5-A00CA2104230}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F6DCAA93-0641-49BB-80AE-351E5CCAFFCD}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F799AF35-11EE-4ACE-856C-6412C25906CD}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{F7D2FBFD-A24F-470E-BE96-F2C9230CE9E8}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{FA5D62B1-995B-4EEC-A24F-8EAB6A02CEF7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{FA9C3ACF-DBF3-47B7-9FA8-D379825912DF}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{FB4D3722-1136-4401-9F59-40253F30E122}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{FB76A3B5-DF53-4650-8DCB-F7E41AE499A4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{FC0F0C2C-2A76-4793-B857-50FB166CDCE4}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{FCB8644B-8C9C-4C5B-A859-0CB4892B64D1}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{FF69F595-C73D-430B-8EC7-94D1773FD0E7}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{FF9F0CFE-8E05-45F6-B729-0B7553F6A8E9}" = dir=in | app=c:\program files\skype\phone\skype.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{03D1988F-469F-4843-8E6E-E5FE9D17889D}" = WIDCOMM Bluetooth Software 6.0.1.6400 "{047F790A-7A2A-4B6A-AD02-38092BA63DAC}" = Acer VCM "{04830D0F-F980-4EC0-89F1-594F2FD2A1B5}" = ElsterFormular 2008/2009 "{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu "{10F498FF-5392-4DF3-8F73-FE172A9F3800}" = Winbond CIR Device Drivers "{11316260-6666-467B-AC34-183FCB5D4335}" = Acer Mobility Center Plug-In "{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now Standard "{13D85C14-2B85-419F-AC41-C7F21E68B25D}" = Acer eSettings Management "{1401311D-3960-4CEB-AC0B-4214F069E5B9}" = Sonos Desktop Controller "{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2 "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8 "{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Acer Arcade Deluxe "{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java(TM) 6 Update 15 "{2CE5A2E7-3437-4CE7-BCF4-85ED6EEFF9E4}" = iTunes "{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works "{57265292-228A-41FA-9AEC-4620CBCC2739}" = Acer eAudio Management "{58E5844B-7CE2-413D-83D1-99294BF6C74F}" = Acer ePower Management "{5B63A470-9334-44D1-AF61-6CE2DB565AE9}" = Orion "{6395D480-9F3B-4930-8204-B91C8882F967}" = Stata 10 "{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{74A929E2-FBD8-4736-A84E-2ABBB2ABADF2}" = AVM FRITZ!DSL "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{7902E313-FF0F-4493-ACB1-A8147B78DCD0}" = HPSSupply "{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110111700}" = Zuma Deluxe "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11029123}" = Bricks of Egypt "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110322783}" = Big Kahuna Reef "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110411970}" = Chuzzle "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111118433}" = Mystery Case Files - Huntsville "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}" = Cake Mania "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}" = Mahjong Escape Ancient China "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111324990}" = Kick N Rush "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111543617}" = Backspin Billiards "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111692950}" = Mahjongg Artifacts "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111771833}" = Jewel Quest Solitaire "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111796363}" = Mystery Solitaire - Secret Island "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111872660}" = Diner Dash Flo on the Go "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112531267}" = Chicken Invaders 3 "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112615863}" = Agatha Christie Death on the Nile "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113009953}" = Turbo Pizza "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113080210}" = Azada "{8F1B6239-FEA0-450A-A950-B05276CE177C}" = Acer Empowering Technology "{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007 "{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007 "{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007 "{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007 "{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007 "{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A5633652-3795-4829-BB0B-644F0279E279}" = Acer eDataSecurity Management "{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}" = Acer Crystal Eye Webcam 2.0.8 "{A82D052A-0806-42DF-80CD-1730A1AC0ED3}" = MrvlUsgTracking "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.4 "{AC76BA86-7AD7-5670-0000-800000000003}" = Korean Fonts Support For Adobe Reader 8 "{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0 "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}" = Apple Mobile Device Support "{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}" = WinZip 14.5 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow! "{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support "{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader "{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime "{ECCD28B2-8798-4D16-8126-625D728294A1}" = SPBA 5.8 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour "Acer Acer Bio Protection 6.0.00.17" = Acer Bio Protection AAU 6.0.00.17 "Acer GameZone Console_is1" = Acer GameZone Console 2.0.1.1 "Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "AVMFBox" = AVM FRITZ!Box Dokumentation "AVMFBoxPrinter" = AVM FRITZ!Box Druckeranschluss "B991B020-2968-11D8-AF23-444553540000_is1" = FreeMind "CNXT_MODEM_HDA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP "CutePDF Writer Installation" = CutePDF Writer 2.7 "ElsterFormular 11.4.1.4323" = ElsterFormular "ElsterFormular 11.5.0.4546" = ElsterFormular "FLV Player" = FLV Player 2.0 (build 25) "Google Chrome" = Google Chrome "Google Desktop" = Google Desktop "GridVista" = Acer GridVista "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "HP LaserJet P1000 series" = HP LaserJet P1000 series "InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now 5 "InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2 "InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8 "InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Acer Arcade Deluxe "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector "LManager" = Launch Manager "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "Mozilla Firefox (3.6.10)" = Mozilla Firefox (3.6.10) "NVIDIA Drivers" = NVIDIA Drivers "OpenVPN" = OpenVPN 2.0.9-gui-1.0.3 "PATmonitor PRO Trial" = PATmonitor PRO Trial "RealVNC_is1" = VNC Free Edition 4.1.3 "Softonic_Deutsch Toolbar" = Softonic_Deutsch Toolbar "SynTPDeinstKey" = Synaptics Pointing Device Driver "TightVNC_is1" = TightVNC 1.3.10 ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-4069621161-912532974-1855927034-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Dropbox" = Dropbox ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 9/29/2010 1:32:56 PM | Computer Name = Liegsalz | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 69563342 Error - 9/29/2010 1:33:06 PM | Computer Name = Liegsalz | Source = Google Update | ID = 20 Description = Error - 9/29/2010 3:44:56 PM | Computer Name = Liegsalz | Source = Bonjour Service | ID = 100 Description = 392: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 9/29/2010 3:59:26 PM | Computer Name = Liegsalz | Source = Application Hang | ID = 1002 Description = Programm iexplore.exe, Version 8.0.6001.18943 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: 834 Anfangszeit: 01cb600ecdbd6060 Zeitpunkt der Beendigung: 0 Error - 9/29/2010 4:15:19 PM | Computer Name = Liegsalz | Source = SPP | ID = 16387 Description = Error - 9/29/2010 4:15:19 PM | Computer Name = Liegsalz | Source = System Restore | ID = 8193 Description = Error - 9/29/2010 4:15:32 PM | Computer Name = Liegsalz | Source = SPP | ID = 16387 Description = Error - 9/29/2010 4:15:32 PM | Computer Name = Liegsalz | Source = System Restore | ID = 8193 Description = Error - 9/29/2010 4:16:05 PM | Computer Name = Liegsalz | Source = SPP | ID = 16387 Description = Error - 9/29/2010 4:16:05 PM | Computer Name = Liegsalz | Source = System Restore | ID = 8193 Description = [ Media Center Events ] Error - 5/12/2009 9:36:36 AM | Computer Name = Liegsalz | Source = Media Center Guide | ID = 0 Description = Ereignisinformationen: ERROR: SqmApiWrapper.SqmFlushSession failed; Win32 GetLastError returned 0D Prozess: DefaultDomain Objektname: Media Center Guide Error - 5/15/2009 10:55:01 AM | Computer Name = Liegsalz | Source = Media Center Guide | ID = 0 Description = Ereignisinformationen: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError returned 10000105 Prozess: DefaultDomain Objektname: Media Center Guide [ OSession Events ] Error - 5/12/2009 10:20:35 PM | Computer Name = Liegsalz | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6214.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 535 seconds with 120 seconds of active time. This session ended with a crash. Error - 5/13/2009 2:09:40 AM | Computer Name = Liegsalz | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6211.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 4407 seconds with 2220 seconds of active time. This session ended with a crash. Error - 9/6/2009 6:51:44 PM | Computer Name = Liegsalz | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash. Error - 7/18/2010 1:07:43 PM | Computer Name = Liegsalz | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6535.5002, Microsoft Office Version: 12.0.6425.1000. This session lasted 25 seconds with 0 seconds of active time. This session ended with a crash. Error - 8/23/2010 3:36:45 AM | Computer Name = Liegsalz | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6535.5002, Microsoft Office Version: 12.0.6425.1000. This session lasted 166 seconds with 60 seconds of active time. This session ended with a crash. [ System Events ] Error - 10/16/2010 6:23:36 AM | Computer Name = Liegsalz | Source = Service Control Manager | ID = 7032 Description = Error - 10/16/2010 6:27:46 AM | Computer Name = Liegsalz | Source = Service Control Manager | ID = 7031 Description = Error - 10/16/2010 6:28:12 AM | Computer Name = Liegsalz | Source = Service Control Manager | ID = 7032 Description = Error - 10/16/2010 6:29:12 AM | Computer Name = Liegsalz | Source = Service Control Manager | ID = 7032 Description = Error - 10/16/2010 6:29:12 AM | Computer Name = Liegsalz | Source = Service Control Manager | ID = 7032 Description = Error - 10/16/2010 6:29:12 AM | Computer Name = Liegsalz | Source = Service Control Manager | ID = 7032 Description = Error - 10/16/2010 6:32:19 AM | Computer Name = Liegsalz | Source = Service Control Manager | ID = 7032 Description = Error - 10/16/2010 6:56:23 AM | Computer Name = Liegsalz | Source = Service Control Manager | ID = 7011 Description = Error - 10/16/2010 7:48:15 AM | Computer Name = Liegsalz | Source = Service Control Manager | ID = 7011 Description = Error - 10/16/2010 8:27:23 AM | Computer Name = Liegsalz | Source = DCOM | ID = 10010 Description = < End of report > |
18.10.2010, 09:39 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Weiterleitung auf falsche Internetseiten (aks.com, kdirectory,...)__________________
__________________ |
Themen zu Weiterleitung auf falsche Internetseiten (aks.com, kdirectory,...) |
4d36e972-e325-11ce-bfc1-08002be10318, acroiehelper.dll, amerika, antivir, ask.com, audiodg.exe, avgntflt.sys, avira, bho, bonjour, c:\windows\system32\rundll32.exe, components, conduit, corp./icp, diner dash, dropbox, dsl, error, excel.exe, failed, firefox, firefox.exe, flash player, format, google, google chrome, home, home premium, iastor.sys, iexplore.exe, igdctrl.exe, installation, intranet, launch, location, logfile, media center, microsoft office word, mozilla, nvlddmkm.sys, nvstor.sys, office 2007, oldtimer, otl logfile, otl.exe, plug-in, popup, problem, programdata, realtek, registry, rundll, saver, scan, sched.exe, searchplugins, security update, service pack 1, skype.exe, softonic, softonic deutsch toolbar, software, start menu, system restore, usb 2.0, vista, wrapper |