|
Alles rund um Windows: Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar!Windows 7 Hilfe zu allen Windows-Betriebssystemen: Windows XP, Windows Vista, Windows 7, Windows 8(.1) und Windows 10 / Windows 11- als auch zu sämtlicher Windows-Software. Alles zu Windows 10 ist auch gerne willkommen. Bitte benenne etwaige Fehler oder Bluescreens unter Windows mit dem Wortlaut der Fehlermeldung und Fehlercode. Erste Schritte für Hilfe unter Windows. |
07.01.2011, 23:10 | #31 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] Dann probier den DVD-Rohling aus. Wenn er funktioniert - sehr gut, ist man nicht auf dem Mediumtyp angewiesen. Wenn nicht, besorg dir einen CD-Rohling
__________________ Logfiles bitte immer in CODE-Tags posten |
08.01.2011, 04:53 | #32 |
| Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] So, ALSO
__________________Das brennen auf die DVD-RW hat geklappt (noch eine Frage zu der DVD später) Dann habe ich den Pc neu gestartet, (durch drücken einer beliebigen Taste) habe ich dann von der DVD / CD gebootet, dann stand dort Computerreparatur (etwas in der art) dann auf Weiter, dann stand dort C:/ (oder so ähnlich aber das wäre dann ja die normale Festplatte dachte ich mir) also hab ich das abgewählt und bin so auf weiter. Dann erschienen mehrere auswahl möglichkeiten, ich habe das unterste genommen, wo ich in die konsole kam. Der erste Befehl brauchte etwas länger, der zweite ging sofort. Habe die Konsole geschlossen, die DVD raus genommen und den Pc neugestartet. Ich hoffe ich habe alles richtig gemacht. Und nun die frage zur DVD: Kann man die wieder benutzen, falls etwas anderes mit Vista-32bit passiert? Wenn ja wofür und wann? (wäre ja eigentlich schade die 4,7GB DVD wegzuwerfen... |
08.01.2011, 18:00 | #33 |
| Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] oO
__________________Soeben hat sich Windows Media Player wieder geöffnet -.- . Eigentlich habe ich dabei nichts großartiges gemacht. Das ganze fing kurz nach Weihnachten an, wir waren in Schweden. schön Urlaub gemacht, neue Tastatur (Racer Lycoser - mit 8 Touch Tasten, darunter auch eine für WMP.) Also habe ich den Treiber für die Tastatur installiert, und ein bisschen rumgeguckt. Vorher habe ich so gut wie nie den WMP benutzt, dann aber mit der neuen Tastatur benutzt, lief alles super. Aber irgentwann reagierte die Taste nicht mehr, war mir eigentlich egal weil sie ein Tag drauf wieder ging. Und danach ging es los mit dem WMP, viel heftiger als jetzt, geschlossen - geöffnet. Jetzt kann ich es wenigstens schließen. ... |
08.01.2011, 21:56 | #34 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst]Zitat:
mach bitte ein neues Log mit mbrcheck
__________________ Logfiles bitte immer in CODE-Tags posten |
08.01.2011, 22:18 | #35 |
| Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] Oh, wollte eigentlich schreiben "zu verlegen", egal danke. MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows Vista Home Premium Edition Windows Information: Service Pack 2 (build 6002), 32-bit Base Board Manufacturer: MICRO-STAR INTERNATIONAL CO., LTD BIOS Manufacturer: Phoenix Technologies, LTD System Manufacturer: MEDIONPC System Product Name: MS-7502 Logical Drives Mask: 0x000000fc Kernel Drivers (total 148): 0x82C48000 \SystemRoot\system32\ntkrnlpa.exe 0x82C15000 \SystemRoot\system32\hal.dll 0x80409000 \SystemRoot\system32\kdcom.dll 0x80410000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x80480000 \SystemRoot\system32\PSHED.dll 0x80491000 \SystemRoot\system32\BOOTVID.dll 0x80499000 \SystemRoot\system32\CLFS.SYS 0x804DA000 \SystemRoot\system32\CI.dll 0x8060D000 \SystemRoot\system32\drivers\Wdf01000.sys 0x80689000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x80696000 \SystemRoot\system32\drivers\acpi.sys 0x806DC000 \SystemRoot\system32\drivers\WMILIB.SYS 0x806E5000 \SystemRoot\system32\drivers\msisadrv.sys 0x806ED000 \SystemRoot\system32\drivers\pci.sys 0x80714000 \SystemRoot\System32\drivers\partmgr.sys 0x80723000 \SystemRoot\system32\drivers\volmgr.sys 0x80732000 \SystemRoot\System32\drivers\volmgrx.sys 0x8077C000 \SystemRoot\System32\drivers\mountmgr.sys 0x8320B000 \SystemRoot\system32\DRIVERS\iaStor.sys 0x832DB000 \SystemRoot\system32\drivers\fltmgr.sys 0x8330D000 \SystemRoot\system32\drivers\fileinfo.sys 0x8331D000 \SystemRoot\System32\Drivers\ksecdd.sys 0x83C05000 \SystemRoot\system32\drivers\ndis.sys 0x83D10000 \SystemRoot\system32\drivers\msrpc.sys 0x83D3B000 \SystemRoot\system32\drivers\NETIO.SYS 0x83E02000 \SystemRoot\System32\drivers\tcpip.sys 0x83EEC000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x8B208000 \SystemRoot\System32\Drivers\Ntfs.sys 0x8B318000 \SystemRoot\system32\drivers\volsnap.sys 0x8B351000 \SystemRoot\System32\Drivers\spldr.sys 0x8B359000 \SystemRoot\System32\Drivers\mup.sys 0x8B368000 \SystemRoot\System32\drivers\ecache.sys 0x8B38F000 \SystemRoot\system32\drivers\disk.sys 0x8B3A0000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x8B3C1000 \SystemRoot\system32\drivers\crcdisk.sys 0x8B3D7000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x8B3E2000 \SystemRoot\system32\DRIVERS\tunmp.sys 0x8B3EB000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x8E80A000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys 0x8F288000 \SystemRoot\system32\DRIVERS\nvBridge.kmd 0x8F28A000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x8F32B000 \SystemRoot\System32\drivers\watchdog.sys 0x8F337000 \SystemRoot\system32\DRIVERS\e1e6032.sys 0x8F36F000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0x8F37A000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x8F3B8000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x8F40C000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x8F499000 \SystemRoot\system32\DRIVERS\ohci1394.sys 0x8F4A9000 \SystemRoot\system32\DRIVERS\1394BUS.SYS 0x8F4B7000 \SystemRoot\system32\DRIVERS\serial.sys 0x8F4D1000 \SystemRoot\system32\DRIVERS\serenum.sys 0x8F4DB000 \SystemRoot\system32\drivers\Afc.sys 0x8F4E3000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x8F4FB000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0x8F501000 \SystemRoot\system32\DRIVERS\msiscsi.sys 0x8F530000 \SystemRoot\system32\DRIVERS\storport.sys 0x8F571000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x8F57C000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x8F593000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x8F59E000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x8F5C1000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x8F5D0000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x8F5E4000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x8F3C7000 \SystemRoot\system32\DRIVERS\termdd.sys 0x8F400000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x8F3D7000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x8F5F9000 \SystemRoot\system32\DRIVERS\swenum.sys 0x83D76000 \SystemRoot\system32\DRIVERS\ks.sys 0x8F3E2000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x8F3EC000 \SystemRoot\system32\DRIVERS\umbus.sys 0x83DA0000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x83FD7000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x8F808000 \SystemRoot\system32\drivers\RTKVHDA.sys 0x8FA10000 \SystemRoot\system32\drivers\portcls.sys 0x8FA3D000 \SystemRoot\system32\drivers\drmk.sys 0x8FA62000 \SystemRoot\system32\DRIVERS\MpFilter.sys 0x8FA85000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0x8FA8E000 \SystemRoot\System32\Drivers\Null.SYS 0x8FA95000 \SystemRoot\System32\Drivers\Beep.SYS 0x8FAA5000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x8FAAC000 \SystemRoot\System32\drivers\vga.sys 0x8FAB8000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x8FAD9000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x8FAE1000 \SystemRoot\system32\drivers\rdpencdd.sys 0x8FAE9000 \SystemRoot\System32\Drivers\Msfs.SYS 0x8FAF4000 \SystemRoot\System32\Drivers\Npfs.SYS 0x8FB02000 \SystemRoot\System32\DRIVERS\rasacd.sys 0x8FB0B000 \SystemRoot\system32\DRIVERS\tdx.sys 0x8FB21000 \SystemRoot\system32\DRIVERS\smb.sys 0x8FB35000 \SystemRoot\system32\drivers\afd.sys 0x8FB7D000 \SystemRoot\System32\DRIVERS\netbt.sys 0x8FBAF000 \SystemRoot\system32\DRIVERS\pacer.sys 0x8FBC5000 \SystemRoot\system32\DRIVERS\netbios.sys 0x8FBD3000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x8FBE6000 \SystemRoot\system32\DRIVERS\ssmdrv.sys 0x8338E000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x8FBEC000 \SystemRoot\system32\drivers\nsiproxy.sys 0x83FE8000 \SystemRoot\System32\Drivers\dfsc.sys 0x83DD5000 \SystemRoot\system32\DRIVERS\avipbb.sys 0x8FBF6000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys 0x833CA000 \SystemRoot\System32\Drivers\fastfat.SYS 0x8078C000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x8FBF8000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x8FA9C000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x83F07000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x83F17000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x8F800000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x83F2E000 \SystemRoot\System32\Drivers\VMUVC.sys 0x90E02000 \SystemRoot\system32\drivers\vvftUVC.sys 0x90E77000 \SystemRoot\system32\drivers\usbaudio.sys 0x90E89000 \SystemRoot\system32\DRIVERS\SE4501D.sys 0x90EDF000 \SystemRoot\System32\Drivers\Lycosa.sys 0x90EE3000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x90EEC000 \SystemRoot\System32\Drivers\crashdmp.sys 0x90EF9000 \SystemRoot\System32\Drivers\dump_iaStor.sys 0x99430000 \SystemRoot\System32\win32k.sys 0x90FC9000 \SystemRoot\System32\drivers\Dxapi.sys 0x90FD3000 \SystemRoot\system32\DRIVERS\monitor.sys 0x99650000 \SystemRoot\System32\TSDDD.dll 0x99670000 \SystemRoot\System32\cdd.dll 0x90FE2000 \SystemRoot\system32\drivers\luafv.sys 0x83F6C000 \SystemRoot\system32\DRIVERS\avgntflt.sys 0x9F207000 \SystemRoot\system32\drivers\spsys.sys 0x9F2B7000 \SystemRoot\system32\DRIVERS\mdc8021x.sys 0x9F2BB000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x9F2CB000 \SystemRoot\system32\DRIVERS\nwifi.sys 0x9F2F5000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0x9F2FF000 \SystemRoot\system32\DRIVERS\rspndr.sys 0x9F312000 \SystemRoot\system32\drivers\HTTP.sys 0x9F37F000 \SystemRoot\System32\DRIVERS\srvnet.sys 0x9F39C000 \SystemRoot\system32\DRIVERS\bowser.sys 0x9F3B5000 \SystemRoot\System32\drivers\mpsdrv.sys 0x9F3CA000 \SystemRoot\system32\drivers\mrxdav.sys 0x83F80000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x807A1000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0x83F9F000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x805BA000 \SystemRoot\System32\DRIVERS\srv2.sys 0xA0A0F000 \SystemRoot\System32\DRIVERS\srv.sys 0xA0A5D000 \SystemRoot\system32\DRIVERS\atksgt.sys 0xA0AA0000 \SystemRoot\system32\DRIVERS\lirsgt.sys 0xA0AA5000 \SystemRoot\system32\drivers\peauth.sys 0xA0B83000 \SystemRoot\System32\Drivers\secdrv.SYS 0xA0B8D000 \SystemRoot\System32\drivers\tcpipreg.sys 0xA0B99000 \SystemRoot\system32\DRIVERS\MpNWMon.sys 0xA0BA2000 \SystemRoot\system32\DRIVERS\WUDFRd.sys 0xA0BB7000 \SystemRoot\system32\DRIVERS\WUDFPf.sys 0xA0BC9000 \SystemRoot\system32\DRIVERS\cdfs.sys 0x773B0000 \Windows\System32\ntdll.dll Processes (total 79): 0 System Idle Process 4 System 456 C:\Windows\System32\smss.exe 532 csrss.exe 584 C:\Windows\System32\wininit.exe 596 csrss.exe 628 C:\Windows\System32\services.exe 640 C:\Windows\System32\lsass.exe 648 C:\Windows\System32\lsm.exe 736 C:\Windows\System32\winlogon.exe 836 C:\Windows\System32\svchost.exe 904 C:\Windows\System32\nvvsvc.exe 932 C:\Windows\System32\svchost.exe 988 C:\Program Files\Microsoft Security Essentials\MsMpEng.exe 1112 C:\Windows\System32\svchost.exe 1168 C:\Windows\System32\svchost.exe 1188 C:\Windows\System32\svchost.exe 1336 C:\Windows\System32\audiodg.exe 1360 C:\Windows\System32\svchost.exe 1380 C:\Windows\System32\SLsvc.exe 1432 C:\Windows\System32\svchost.exe 1516 C:\Windows\System32\nvvsvc.exe 1632 C:\Windows\System32\svchost.exe 1816 C:\Windows\System32\spoolsv.exe 1840 C:\Program Files\Avira\AntiVir Desktop\sched.exe 1852 C:\Windows\System32\svchost.exe 2032 C:\Program Files\Avira\AntiVir Desktop\avguard.exe 272 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 336 C:\Program Files\Bonjour\mDNSResponder.exe 12 C:\Program Files\Tobit ClipInc\Server\ClipInc-Server.exe 824 C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe 1896 C:\Program Files\ICQ6Toolbar\ICQ Service.exe 820 C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe 540 C:\Windows\System32\IoctlSvc.exe 680 C:\Windows\System32\PnkBstrA.exe 1532 C:\Windows\System32\svchost.exe 2064 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2144 C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe 2200 C:\Windows\System32\svchost.exe 2220 C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe 2300 C:\Windows\System32\svchost.exe 2456 C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE 2572 C:\Windows\System32\SearchIndexer.exe 2676 WUDFHost.exe 3168 C:\Windows\System32\dwm.exe 3192 C:\Windows\explorer.exe 3212 C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE 3252 C:\Windows\System32\taskeng.exe 3332 C:\Windows\System32\taskeng.exe 3768 C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe 3776 C:\Windows\RtHDVCpl.exe 3800 C:\Program Files\Siemens\Gigaset USB Adapter 54\PRISMSVR.exe 3808 C:\Program Files\Vimicro\VMUVC\VMonitor.exe 3824 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 3968 C:\Program Files\Ask & Record Toolbar\FLVSrvc.exe 3976 C:\Program Files\Microsoft Security Essentials\msseces.exe 4000 C:\Program Files\Tech\Tilt Mouse Software\5.0\ACQTMAPP.exe 4024 C:\Program Files\Common Files\Java\Java Update\jusched.exe 2128 C:\Program Files\iTunes\iTunesHelper.exe 2540 C:\Program Files\Razer\Lycosa\razerhid.exe 2508 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 1276 C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe 1396 C:\Program Files\Razer\Lycosa\razertra.exe 1308 C:\Users\Niklas\Program Files\DNA\btdna.exe 3916 C:\Program Files\Siemens\Gigaset USB Adapter 54\GigasetUSBMonitor.exe 864 C:\Windows\System32\wbem\unsecapp.exe 2760 WmiPrvSE.exe 4172 C:\Users\Niklas\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe 4248 C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe 4344 C:\Program Files\iPod\bin\iPodService.exe 4620 C:\Windows\System32\svchost.exe 5812 C:\Program Files\Windows Media Player\wmpnetwk.exe 4380 taskeng.exe 5992 C:\Windows\System32\SearchProtocolHost.exe 5416 C:\Windows\System32\SearchFilterHost.exe 4676 dllhost.exe 5548 dllhost.exe 6032 C:\Users\Niklas\Desktop\MBRCheck.exe 1492 C:\Windows\System32\conime.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00100000 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x00000090`09f07e00 (FAT32) PhysicalDrive0 Model Number: WDCWD6400AACS-00G8B0, Rev: 05.04C05 Size Device Name MBR Status -------------------------------------------- 596 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 Done! |
08.01.2011, 22:25 | #36 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst]Zitat:
Denk dran beide Tools zu updaten vor dem Scan!!
__________________ --> Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! |
09.01.2011, 16:54 | #37 |
| Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] MBAM: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Datenbank Version: 5487 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18999 09.01.2011 11:44:46 mbam-log-2011-01-09 (11-44-46).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|H:\|) Durchsuchte Objekte: 377582 Laufzeit: 1 Stunde(n), 52 Minute(n), 23 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) Super... : SUPERAntiSpyware Scan Log hxxp://www.superantispyware.com Generated 01/09/2011 at 04:49 PM Application Version : 4.47.1000 Core Rules Database Version : 6163 Trace Rules Database Version: 3975 Scan type : Complete Scan Total Scan Time : 02:29:49 Memory items scanned : 689 Memory threats detected : 0 Registry items scanned : 9706 Registry threats detected : 1 File items scanned : 212888 File threats detected : 110 Adware.Tracking Cookie C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@apmebf[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\system@fastclick[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@bs.serving-sys[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@webmasterplan[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@serving-sys[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\system@microsoftwindows.112.2o7[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@doubleclick[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@sevenoneintermedia.112.2o7[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@questionmarket[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@advertising[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\system@ad.yieldmanager[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@ad.zanox[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@invitemedia[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@adfarm1.adition[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\system@atdmt[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@adbrite[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@weborama[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\system@interclick[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@zanox[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@atwola[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@tradedoubler[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@content.yieldmanager[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@content.yieldmanager[3].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@mediaplex[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@at.atwola[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@ar.atwola[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@adtech[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@ad.yieldmanager[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@www.zanox-affiliate[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@zanox-affiliate[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@atdmt[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@tracking.quisma[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@eyewonder[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@fastclick[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@ads.adcloud[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@tacoda[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@imrworldwide[2].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@ad2.adfarm1.adition[1].txt C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Cookies\niklas@adserver.traffictrack[1].txt (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] bc.(zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] cdn-www.(zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] cdn1.(zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] cdn5.(zensiert^^)net [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)de [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)de [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)de [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)tv [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)de [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)tv [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)net [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)net [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)de [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)org [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] (zensiert^^)com [ C:\Users\Niklas\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\UHDHD79L ] Rogue.Pallidium HKU\S-1-5-21-3704707052-2540689425-1032157838-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS#WARNONPOSTREDIRECT Trojan.Agent/Gen-FakeAV C:\PROGRAM FILES\WINRAR\DEFAULT.SFX / Ich habe von allen Seiten die Links gelöscht, nicht das jemand auf die Heldenhafte Idee kommt, dort drauf zu klicken. Geändert von Osswald (09.01.2011 um 17:12 Uhr) |
09.01.2011, 17:16 | #38 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] Nur Cookies, ein Überrest und ein Fehlalarm. Harmlos. Rechner wieder paletti oder noch Probleme offen?
__________________ Logfiles bitte immer in CODE-Tags posten |
09.01.2011, 17:16 | #39 |
| Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] Nach dem booten hatte sich WMP wieder unaufgefordert gemeldet. |
09.01.2011, 17:24 | #40 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] Poste mal frische OTL-Logs.
__________________ Logfiles bitte immer in CODE-Tags posten |
09.01.2011, 17:24 | #41 |
| Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] OTL Logfile: Code:
ATTFilter OTL logfile created on: 09.01.2011 17:25:57 - Run 2 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Niklas\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18999) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 62,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 80,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 576,15 Gb Total Space | 416,47 Gb Free Space | 72,28% Space Free | Partition Type: NTFS Drive D: | 20,00 Gb Total Space | 12,37 Gb Free Space | 61,83% Space Free | Partition Type: FAT32 Computer Name: NIKLAS | User Name: Niklas | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Niklas\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Users\Niklas\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) PRC - C:\Programme\Common Files\Steam\SteamService.exe (Valve Corporation) PRC - C:\Programme\Steam\steam.exe (Valve Corporation) PRC - C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH) PRC - C:\Users\Niklas\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Programme\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\Programme\Microsoft Security Essentials\msseces.exe (Microsoft Corporation) PRC - C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) PRC - C:\Programme\ICQ6Toolbar\ICQ Service.exe () PRC - c:\Programme\Microsoft Security Essentials\MsMpEng.exe (Microsoft Corporation) PRC - C:\Users\Niklas\Program Files\DNA\btdna.exe (BitTorrent, Inc.) PRC - C:\Programme\Tech\Tilt Mouse Software\5.0\ACQTMAPP.exe () PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe () PRC - C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) PRC - \\?\C:\Windows\System32\wbem\WMIADAP.EXE () PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) PRC - C:\Programme\Ask & Record Toolbar\FLVSrvc.exe (Applian Technologies, Inc.) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) PRC - C:\Programme\Vimicro\VMUVC\VMonitor.exe (Vimicro Corporation) PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) PRC - C:\Programme\Razer\Lycosa\razertra.exe () PRC - C:\Programme\Razer\Lycosa\razerhid.exe (Razer USA Ltd.) PRC - C:\Programme\Siemens\Gigaset USB Adapter 54\GigasetUSBMonitor.exe () PRC - C:\Programme\Siemens\Gigaset USB Adapter 54\PRISMSVR.exe (Conexant Systems, Inc.) ========== Modules (SafeList) ========== MOD - C:\Users\Niklas\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (TeamViewer5) -- C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH) SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) SRV - (GoogleDesktopManager-051210-111108) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google) SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe () SRV - (MsMpSvc) -- c:\Program Files\Microsoft Security Essentials\MsMpEng.exe (Microsoft Corporation) SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation) SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (ClipInc001) -- C:\Program Files\Tobit ClipInc\Server\ClipInc-Server.exe () SRV - (SeaPort) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) SRV - (IAANTMON) Intel(R) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (VcommMgr) -- C:\Windows\System32\Drivers\VcommMgr.sys File not found DRV - (VComm) -- C:\Windows\System32\DRIVERS\VComm.sys File not found DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found DRV - (IvtBtBUs) -- C:\Windows\System32\Drivers\IvtBtBus.sys File not found DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found DRV - (EagleNT) -- C:\Windows\System32\drivers\EagleNT.sys File not found DRV - (catchme) -- C:\Users\Niklas\AppData\Local\Temp\catchme.sys File not found DRV - (BtHidBus) -- C:\Windows\System32\Drivers\BtHidBus.sys File not found DRV - (BT) -- C:\Windows\System32\DRIVERS\btnetdrv.sys File not found DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (SCREAMINGBDRIVER) -- C:\Windows\System32\drivers\ScreamingBAudio.sys (Screaming Bee LLC) DRV - (SASKUTIL) -- C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV - (MpNWMon) -- C:\Windows\System32\drivers\MpNWMon.sys (Microsoft Corporation) DRV - (SASDIFSV) -- C:\Programme\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH) DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys () DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys () DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH) DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH) DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation) DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH) DRV - (btnetBUs) -- C:\Windows\System32\drivers\btnetBus.sys () DRV - (MDC8021X) AEGIS Protocol (IEEE 802.1x) -- C:\Windows\System32\drivers\mdc8021x.sys (Meetinghouse Data Communications) DRV - (vvftUVC) -- C:\Windows\System32\drivers\vvftUVC.sys (Vimicro Corporation) DRV - (VMUVC) -- C:\Windows\System32\drivers\VMUVC.sys (Vimicro Corporation) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.) DRV - (iaStor) -- C:\Windows\system32\DRIVERS\iaStor.sys (Intel Corporation) DRV - (e1express) Intel(R) -- C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation) DRV - (MegaSR) -- C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.) DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.) DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Corporation) DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.) DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems) DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company) DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.) DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic) DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation) DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation) DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.) DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation) DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd) DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.) DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic) DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic) DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.) DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex) DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.) DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation) DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation) DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.) DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.) DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.) DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.) DRV - (LycoFltr) -- C:\Windows\System32\drivers\Lycosa.sys (Razer USA Ltd.) DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation) DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.) DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation) DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH) DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.) DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.) DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.) DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic) DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic) DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation) DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic) DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.) DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.) DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.) DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.) DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.) DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.) DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies) DRV - (Afc) -- C:\Windows\System32\drivers\afc.sys (Arcsoft, Inc.) DRV - (SE4501D) -- C:\Windows\System32\drivers\SE4501D.sys (Siemens AG) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKLM\..\URLSearchHook: {9d81af43-de53-48d0-a199-42c2a226b24c} - C:\Programme\Softonic_Deutsch_FF\tbSoft.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D0 3A 18 E5 08 AF CA 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKCU\..\URLSearchHook: {9d81af43-de53-48d0-a199-42c2a226b24c} - C:\Programme\Softonic_Deutsch_FF\tbSoft.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.selectedEngine: "ICQ Search" FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/" FF - prefs.js..extensions.enabledItems: {d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}:1.0.0.1 FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.6 FF - prefs.js..extensions.enabledItems: {9d81af43-de53-48d0-a199-42c2a226b24c}:2.5.6.0 FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.8 FF - prefs.js..extensions.enabledItems: {EEE6C361-6118-11DC-9C72-001320C79847}:1.0.0.9 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:2.7.0.14 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..keyword.URL: "hxxp://search.sweetim.com/search.asp?src=2&q=" FF - prefs.js..network.proxy.type: 4 FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=" FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.12.08 18:27:31 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.12.08 18:27:30 | 000,000,000 | ---D | M] [2008.11.19 15:57:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Niklas\AppData\Roaming\mozilla\Extensions [2011.01.02 17:18:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions [2009.08.08 12:19:30 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.02.25 18:50:38 | 000,000,000 | ---D | M] (Stylish) -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} [2010.06.18 13:24:43 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2010.07.24 02:52:24 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2010.01.31 21:34:26 | 000,000,000 | ---D | M] (Softonic Deutsch FF Toolbar) -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions\{9d81af43-de53-48d0-a199-42c2a226b24c} [2010.06.07 20:08:58 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010.01.10 12:48:43 | 000,000,000 | ---D | M] (Easy Youtube Video Downloader) -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b} [2009.06.14 09:25:50 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2009.12.14 13:36:08 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Users\Niklas\AppData\Roaming\mozilla\Firefox\Profiles\t7sux7cw.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} [2010.06.06 09:39:34 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-1.xml [2010.02.24 20:50:43 | 000,000,961 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-10.xml [2010.03.29 12:51:50 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-11.xml [2010.04.06 15:09:04 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-12.xml [2010.06.18 22:15:58 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-13.xml [2009.03.29 14:45:45 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-2.xml [2009.04.23 12:34:00 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-3.xml [2009.04.29 14:30:54 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-4.xml [2009.06.13 09:02:50 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-5.xml [2009.07.24 19:33:54 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-6.xml [2009.08.05 10:41:25 | 000,000,950 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-7.xml [2010.01.05 12:21:48 | 000,000,961 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-8.xml [2010.02.24 20:49:55 | 000,000,961 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin-9.xml [2010.05.12 17:40:06 | 000,001,042 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\icqplugin.xml [2009.12.14 13:35:53 | 000,003,915 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\t7sux7cw.default\searchplugins\sweetim.xml [2011.01.09 09:48:25 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2009.01.19 13:31:32 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Programme\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2010.11.23 13:50:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011.01.09 09:48:25 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2010.11.23 13:50:31 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011.01.09 17:21:53 | 000,000,000 | ---D | M] (No name found) -- C:\USERS\NIKLAS\PROGRAM FILES\DNA [2010.11.12 18:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll [2010.03.23 14:55:00 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.03.23 14:55:00 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010.03.23 14:55:00 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.03.23 14:55:00 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.03.23 14:55:01 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2011.01.06 21:32:39 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) O2 - BHO: (Windows Live ID-Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Softonic Deutsch FF Toolbar) - {9d81af43-de53-48d0-a199-42c2a226b24c} - C:\Programme\Softonic_Deutsch_FF\tbSoft.dll (Conduit Ltd.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.) O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) O3 - HKLM\..\Toolbar: (Softonic Deutsch FF Toolbar) - {9d81af43-de53-48d0-a199-42c2a226b24c} - C:\Programme\Softonic_Deutsch_FF\tbSoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (Softonic Deutsch FF Toolbar) - {9D81AF43-DE53-48D0-A199-42C2A226B24C} - C:\Programme\Softonic_Deutsch_FF\tbSoft.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [ACQTMOUSE] C:\Program Files\Tech\Tilt Mouse Software\5.0\ACQTMAPP.exe () O4 - HKLM..\Run: [AppleSyncNotifier] C:\Programme\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.) O4 - HKLM..\Run: [Ask and Record FLV Service] C:\Program Files\Ask & Record Toolbar\FLVSrvc.exe (Applian Technologies, Inc.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google) O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [Lycosa] C:\Program Files\Razer\Lycosa\razerhid.exe (Razer USA Ltd.) O4 - HKLM..\Run: [MSSE] c:\Program Files\Microsoft Security Essentials\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG) O4 - HKLM..\Run: [PRISMSVR.EXE] C:\Program Files\Siemens\Gigaset USB Adapter 54\PRISMSVR.EXE (Conexant Systems, Inc.) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [toolbar_eula_launcher] C:\Programme\GoogleEULA\EULALauncher.exe ( ) O4 - HKLM..\Run: [VMonitorVMUVC] C:\Program Files\Vimicro\VMUVC\VMonitor.exe (Vimicro Corporation) O4 - HKCU..\Run: [BitTorrent DNA] C:\Users\Niklas\Program Files\DNA\btdna.exe (BitTorrent, Inc.) O4 - HKCU..\Run: [ClipIncSrvTray] C:\Program Files\Tobit ClipInc\Player\ClipIncTray.exe (Tobit.Software) O4 - HKCU..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation) O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - Startup: C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk = C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableClock = 0 O8 - Extra context menu item: Free YouTube Download - C:\Users\Niklas\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm () O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Niklas\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm () O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll (Google Inc.) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - File not found O9 - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - File not found O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet) O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool) O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll) - C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Niklas\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\Niklas\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.01.09 14:08:17 | 000,000,000 | ---D | C] -- C:\Users\Niklas\AppData\Roaming\SUPERAntiSpyware.com [2011.01.09 14:08:17 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com [2011.01.09 14:08:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware [2011.01.09 14:08:06 | 000,000,000 | ---D | C] -- C:\Programme\SUPERAntiSpyware [2011.01.09 09:48:23 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2011.01.09 09:48:23 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2011.01.09 09:48:23 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2011.01.08 04:25:42 | 000,000,000 | ---D | C] -- C:\Users\Niklas\AppData\Roaming\ImgBurn [2011.01.06 23:26:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn [2011.01.06 21:36:58 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2011.01.06 21:36:56 | 000,000,000 | ---D | C] -- C:\Windows\temp [2011.01.06 21:14:39 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2011.01.06 21:14:39 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2011.01.06 21:14:39 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2011.01.06 21:14:34 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2011.01.06 21:14:15 | 000,000,000 | ---D | C] -- C:\Qoobox [2011.01.06 21:14:00 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe [2011.01.03 15:39:48 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Niklas\Desktop\OTL.exe [2011.01.03 15:17:39 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011.01.03 15:17:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011.01.03 15:17:34 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011.01.03 15:17:33 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2011.01.02 18:09:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Registry Cleaner Free [2011.01.02 18:09:38 | 000,000,000 | ---D | C] -- C:\Programme\Wise Registry Cleaner [2011.01.02 17:15:48 | 000,000,000 | ---D | C] -- C:\fcb3ea4ea8dd9f44a55ed16fbb [2010.12.27 00:46:05 | 000,000,000 | ---D | C] -- C:\Users\Niklas\Documents\GTA San Andreas User Files [2010.12.26 04:46:06 | 000,000,000 | ---D | C] -- C:\Programme\Rockstar Games [2010.12.26 04:46:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games [2010.12.26 04:16:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Razer [2010.12.26 04:14:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer [2010.12.26 04:14:57 | 000,065,536 | ---- | C] (Razer Inc.) -- C:\Windows\System32\Lycosa.cpl [2010.12.26 04:14:56 | 000,016,128 | ---- | C] (Razer USA Ltd.) -- C:\Windows\System32\drivers\Lycosa.sys [2010.12.26 04:14:56 | 000,000,000 | ---D | C] -- C:\Programme\Razer [2010.12.26 04:14:36 | 000,000,000 | ---D | C] -- C:\Users\Niklas\AppData\Roaming\InstallShield [2010.12.23 10:04:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2010.12.23 10:03:02 | 000,000,000 | ---D | C] -- C:\Programme\iPod [2010.12.16 11:45:12 | 002,038,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2010.12.16 11:45:10 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll [2010.12.16 11:45:08 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll [2010.12.16 11:45:05 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll [2010.12.16 11:44:59 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe [2010.12.16 11:44:45 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2010.12.16 11:44:30 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2010.12.16 11:44:28 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2010.12.16 11:44:27 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2010.12.16 11:44:26 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2010.12.16 11:44:24 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2010.12.16 11:44:17 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2010.12.16 11:44:16 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2010.12.16 11:44:14 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2010.12.16 11:44:14 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2010.12.16 11:44:13 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2010.12.16 11:44:12 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2010.12.16 11:44:12 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2010.12.16 11:44:12 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2010.12.16 11:44:12 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2010.12.16 11:44:12 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2010.12.16 11:44:11 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2010.12.16 11:44:07 | 000,292,352 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2010.12.16 11:44:06 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2010.12.16 11:44:05 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll [2010.12.16 11:43:54 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll ========== Files - Modified Within 30 Days ========== [2011.01.09 17:30:02 | 000,000,607 | ---- | M] () -- C:\Users\Niklas\Desktop\World of Warcraft.lnk [2011.01.09 17:28:11 | 000,674,344 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.01.09 17:28:11 | 000,634,202 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.01.09 17:28:11 | 000,146,028 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.01.09 17:28:11 | 000,119,766 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.01.09 17:26:53 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{A58B91F8-99FB-4CC3-899E-68375FA52BEC}.job [2011.01.09 17:21:50 | 000,037,013 | ---- | M] () -- C:\ProgramData\nvModes.dat [2011.01.09 17:21:50 | 000,037,013 | ---- | M] () -- C:\ProgramData\nvModes.001 [2011.01.09 17:21:40 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.01.09 17:21:24 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.01.09 17:21:24 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.01.09 17:21:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.01.09 17:21:16 | 3217,240,064 | -HS- | M] () -- C:\hiberfil.sys [2011.01.09 16:54:01 | 000,001,122 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3704707052-2540689425-1032157838-1002UA.job [2011.01.09 16:40:04 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.01.09 14:08:12 | 000,001,804 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2011.01.06 23:26:01 | 000,001,979 | ---- | M] () -- C:\Users\Public\Desktop\ImgBurn.lnk [2011.01.06 23:06:36 | 000,080,384 | ---- | M] () -- C:\Users\Niklas\Desktop\MBRCheck.exe [2011.01.06 22:34:07 | 000,296,448 | ---- | M] () -- C:\Users\Niklas\Desktop\nzmkvcw3.exe [2011.01.06 21:32:39 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2011.01.06 21:11:39 | 004,149,394 | R--- | M] () -- C:\Users\Niklas\Desktop\ComboFix.exe [2011.01.03 15:39:59 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Niklas\Desktop\OTL.exe [2011.01.03 15:17:40 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.01.02 21:43:15 | 000,325,608 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011.01.02 18:09:43 | 000,001,840 | ---- | M] () -- C:\Users\Public\Desktop\Clear with 1 click.lnk [2011.01.02 18:09:43 | 000,000,954 | ---- | M] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk [2010.12.30 22:12:32 | 000,049,664 | ---- | M] () -- C:\Users\Niklas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.12.26 04:46:06 | 000,001,809 | ---- | M] () -- C:\Users\Public\Desktop\GTA San Andreas.lnk [2010.12.23 10:04:34 | 000,001,668 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.12.23 09:53:41 | 000,000,629 | ---- | M] () -- C:\Windows\System32\mapisvc.inf [2010.12.21 22:52:08 | 000,000,205 | ---- | M] () -- C:\Users\Niklas\Desktop\Beruf.rtf [2010.12.20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2010.12.20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010.12.16 23:43:10 | 000,003,817 | ---- | M] () -- C:\Users\Niklas\Desktop\Vr-China.rtf [2010.12.16 22:28:33 | 000,000,000 | ---- | M] () -- C:\Users\Niklas\AppData\Roaming\wklnhst.dat [2010.12.16 19:59:44 | 000,000,294 | ---- | M] () -- C:\Users\Niklas\Desktop\wowreamlmlist4.0.3.rtf [2010.12.15 07:25:12 | 000,002,051 | ---- | M] () -- C:\Users\Niklas\Desktop\Google Chrome.lnk ========== Files Created - No Company Name ========== [2011.01.09 14:08:12 | 000,001,804 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2011.01.06 23:26:01 | 000,001,979 | ---- | C] () -- C:\Users\Public\Desktop\ImgBurn.lnk [2011.01.06 23:06:35 | 000,080,384 | ---- | C] () -- C:\Users\Niklas\Desktop\MBRCheck.exe [2011.01.06 22:34:05 | 000,296,448 | ---- | C] () -- C:\Users\Niklas\Desktop\nzmkvcw3.exe [2011.01.06 21:14:39 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe [2011.01.06 21:14:39 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2011.01.06 21:14:39 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe [2011.01.06 21:14:39 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2011.01.06 21:14:39 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2011.01.06 21:11:14 | 004,149,394 | R--- | C] () -- C:\Users\Niklas\Desktop\ComboFix.exe [2011.01.03 15:17:40 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.01.02 18:09:43 | 000,001,840 | ---- | C] () -- C:\Users\Public\Desktop\Clear with 1 click.lnk [2011.01.02 18:09:43 | 000,000,954 | ---- | C] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk [2010.12.28 14:22:13 | 000,000,607 | ---- | C] () -- C:\Users\Niklas\Desktop\World of Warcraft.lnk [2010.12.26 04:46:06 | 000,001,809 | ---- | C] () -- C:\Users\Public\Desktop\GTA San Andreas.lnk [2010.12.23 10:04:34 | 000,001,668 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.12.21 22:52:08 | 000,000,205 | ---- | C] () -- C:\Users\Niklas\Desktop\Beruf.rtf [2010.12.16 22:48:35 | 000,003,817 | ---- | C] () -- C:\Users\Niklas\Desktop\Vr-China.rtf [2010.12.16 22:28:33 | 000,000,000 | ---- | C] () -- C:\Users\Niklas\AppData\Roaming\wklnhst.dat [2010.12.16 19:59:44 | 000,000,294 | ---- | C] () -- C:\Users\Niklas\Desktop\wowreamlmlist4.0.3.rtf [2010.11.22 15:27:23 | 000,000,121 | ---- | C] () -- C:\Users\Niklas\AppData\Roaming\default.pls [2010.07.22 23:11:32 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.dat [2010.07.22 23:11:32 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.001 [2009.10.24 15:34:36 | 000,000,144 | -H-- | C] () -- C:\Windows\System32\CTLSW.INI [2009.10.24 15:34:36 | 000,000,119 | ---- | C] () -- C:\Windows\System32\swctl.dll [2009.08.18 23:48:12 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009.07.14 12:43:46 | 000,000,089 | ---- | C] () -- C:\Users\Niklas\AppData\Local\wkqey.bat [2009.07.01 13:15:40 | 000,271,360 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2009.07.01 13:15:06 | 000,018,048 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2009.06.14 09:20:55 | 007,349,744 | ---- | C] () -- C:\Programme\FLV PlayerATBSetup.exe [2009.04.29 12:42:14 | 000,000,680 | ---- | C] () -- C:\Users\Niklas\AppData\Local\d3d9caps.dat [2009.03.13 18:21:47 | 000,000,094 | ---- | C] () -- C:\Users\Niklas\AppData\Local\fusioncache.dat [2009.03.13 18:18:38 | 000,022,328 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2009.03.13 18:18:37 | 000,022,328 | ---- | C] () -- C:\Users\Niklas\AppData\Roaming\PnkBstrK.sys [2009.02.13 09:51:06 | 000,000,174 | ---- | C] () -- C:\Windows\holdemg.ini [2009.01.08 13:22:09 | 000,554,496 | ---- | C] () -- C:\Windows\System32\dvmsg.dll [2008.12.26 20:55:21 | 000,069,632 | R--- | C] () -- C:\Windows\System32\xmltok.dll [2008.12.26 20:55:21 | 000,036,864 | R--- | C] () -- C:\Windows\System32\xmlparse.dll [2008.12.15 14:17:56 | 000,000,000 | ---- | C] () -- C:\Windows\galaxy.ini [2008.12.13 18:28:12 | 000,000,119 | ---- | C] () -- C:\Windows\disney.ini [2008.12.07 12:44:54 | 000,030,088 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys [2008.11.20 05:57:48 | 000,049,664 | ---- | C] () -- C:\Users\Niklas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008.11.19 16:20:29 | 000,000,552 | ---- | C] () -- C:\Users\Niklas\AppData\Local\d3d8caps.dat [2008.08.08 14:49:44 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini < End of report > OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 09.01.2011 17:25:57 - Run 2 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Niklas\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18999) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 62,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 80,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 576,15 Gb Total Space | 416,47 Gb Free Space | 72,28% Space Free | Partition Type: NTFS Drive D: | 20,00 Gb Total Space | 12,37 Gb Free Space | 61,83% Space Free | Partition Type: FAT32 Computer Name: NIKLAS | User Name: Niklas | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- C:\Users\Niklas\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Browse with &IrfanView] -- "C:\Program Files\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~4\Office12\ONENOTE.EXE "%L" (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{1902AF56-FDE8-42A2-AF55-668CFA68E392}" = lport=2869 | protocol=6 | dir=in | app=system | "{55B8A150-E2F1-4128-BEC2-F7250F8691F5}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{650A22A3-50F2-4CBB-9CBA-30EFE92C6535}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | "{6E8E4FEC-F08B-4938-B919-7082335C2B2A}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 | "{A8E6BAA3-88C9-4B77-BBF8-3BD14E9B58D7}" = lport=7000 | protocol=6 | dir=in | name=blizzard downloader: 7000 | "{B69518B2-B901-4016-A57F-7D163CA76980}" = lport=2869 | protocol=6 | dir=in | app=system | "{D3D624AA-D789-4443-9CD6-72CF3A47A2C4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{006D75D8-62AB-4D47-908C-54EE193F79E0}" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\wow-3.2.0-dede-downloader.exe | "{02A29263-CC8D-4C86-AB3A-EF7A301CEF89}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer_service.exe | "{047BE389-206C-4957-AF71-CF407136F7D4}" = protocol=6 | dir=in | app=c:\program files\atari\neverwinter nights 2\nwn2server.exe | "{063CB075-69EF-4074-ADC4-6F312CE64E36}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | "{101FBAB7-BE4F-4870-8A8C-D6AA8C4AB406}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{137B1AAD-6D6A-45C2-8F41-F6BAAA09EE60}" = protocol=17 | dir=in | app=c:\program files\ubisoft\far cry 2\bin\farcry2.exe | "{159A38E1-C247-4477-A3C6-BEB218ABD97C}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | "{1A303F31-98A8-406C-A0AA-89F96E264BE5}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{21986F32-605D-413B-B86F-09B7C356FCEF}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.1.3.9947-to-3.2.0.10192-dede-downloader.exe | "{2FEBC07A-1531-42E0-AA07-C7301BFD50F3}" = protocol=6 | dir=out | app=c:\program files\windows media player\wmplayer.exe | "{370ABAA2-B9CE-41DD-BD3B-191C25175A9B}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.0.8.9506-to-3.0.9.9551-dede-downloader.exe | "{37C99D49-430D-401E-BF54-14418907FD77}" = protocol=17 | dir=in | app=c:\program files\atari\neverwinter nights 2\nwupdate.exe | "{3B916733-268E-4A25-9E6E-9D0D64DE1173}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | "{3D22AAED-53B1-4076-B674-FC4CDAF40FA7}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.2.10482-to-3.2.2.10505-dede-downloader.exe | "{3F99F2D1-09F3-4536-B774-238CA1726490}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{413054E2-A51E-4BC5-A81A-78D966A0B468}" = protocol=6 | dir=in | app=c:\program files\ubisoft\far cry 2\bin\fc2launcher.exe | "{44DA55D9-B665-4EEE-9ECD-86B427C135CA}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{45A1A464-1A10-45AA-B6F7-B80B2A8AC587}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.2.10482-to-3.2.2.10505-dede-downloader.exe | "{50540D7D-1FBB-4D01-A467-9E715CCBA32C}" = protocol=6 | dir=in | app=c:\program files\atari\neverwinter nights 2\nwupdate.exe | "{53440A0D-D6B7-4CDB-9DF4-A9CEDB90EA28}" = protocol=17 | dir=in | app=c:\program files\ea games\battlefield 2\bf2.exe | "{57352F3B-DA81-4793-B009-6D75332A127E}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.1.3.9947-to-3.2.0.10192-dede-downloader.exe | "{5B1C536F-BFC6-4AC3-B478-8ADA41C2B2F4}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty black ops\blackopsmp.exe | "{5C321270-9D2C-40B4-A09D-38189DEA38E4}" = protocol=6 | dir=in | app=c:\program files\atari\neverwinter nights 2\nwn2main_amdxp.exe | "{5EB9B68D-2548-4121-91C1-9CE36E8048E4}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | "{682BB3DB-722A-4127-BF24-4FF9200A7ED2}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | "{68FDCE46-00A5-431A-B65D-0E10C51C4082}" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\wow-3.2.0-dede-downloader.exe | "{6BF37AEF-3A65-488B-87B3-5484CFAB53C4}" = protocol=6 | dir=in | app=c:\program files\ubisoft\far cry 2\bin\farcry2.exe | "{6C909073-9BA6-48C9-A190-69CA7F55F889}" = protocol=17 | dir=in | app=c:\program files\tobit clipinc\player\clipinc-player.exe | "{6E3EBA59-D755-4485-850F-3D831FBEEA4C}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{72110A29-0FEA-4CFB-A986-CF4A12279838}" = protocol=17 | dir=in | app=c:\program files\atari\neverwinter nights 2\nwn2main.exe | "{7308639F-336D-4033-86EF-26B088AC6B74}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{76C50C5F-2C13-49DE-B80E-AAEFB9783A91}" = protocol=17 | dir=in | app=c:\program files\ubisoft\far cry 2\bin\fc2launcher.exe | "{77AD39C7-0851-4C6B-9B73-D7E5B6E31ECA}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0.10314-to-3.2.2.10482-dede-downloader.exe | "{77D8F104-8659-478E-A12A-82AD9CD78374}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | "{782F1C6F-12F6-4DDE-B2F4-D24A06DC7967}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer_service.exe | "{7BBFD48A-699D-4748-81C8-A9230492D874}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.0.8.9506-to-3.0.9.9551-dede-downloader.exe | "{7BCCFDD5-B418-45CD-A9A5-CBC729100543}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | "{7BD1AB52-FB5D-47FD-ABB2-E5689CA156F1}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty black ops\blackopsmp.exe | "{7D46E159-2861-4095-98B6-871A8F9827FE}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | "{84024FED-9B65-42C7-9F71-2193274FBE35}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | "{8799BB65-4A59-484B-93AB-DB831BF5F4B7}" = protocol=17 | dir=in | app=c:\program files\tobit clipinc\server\clipinc-server.exe | "{8CA59B9D-CB24-431F-BAF7-60E13B01A6F3}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty black ops\blackops.exe | "{922ABF1F-19C3-40AA-BDC4-89E5B013CBB5}" = protocol=17 | dir=in | app=c:\program files\windows media player\wmplayer.exe | "{922F4879-79DD-41CC-81E6-1760B03C8B5B}" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\launcher.patch.exe | "{98CAFABB-3544-415D-AAE6-DF1A12C3AD32}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty black ops\blackops.exe | "{99DB78AB-FD12-4153-92DB-30D71F92B328}" = protocol=6 | dir=in | app=c:\program files\tobit clipinc\player\clipinc-player.exe | "{9D873E8A-668A-484C-B638-83E9F897BE39}" = protocol=6 | dir=in | app=c:\program files\ea games\battlefield 2\bf2.exe | "{9E0253C3-07AF-4F7D-819A-102E0F88ED44}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | "{9F4B5752-A672-468C-B323-EAC2F7656324}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe | "{A07A9793-A873-498D-AF06-34EAC0F56249}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0.10192-to-3.2.0.10314-dede-downloader.exe | "{A1663863-9F89-4D62-B138-7D26357551CD}" = protocol=17 | dir=in | app=c:\program files\salfeld\kisi\kisiset.exe | "{A4682FED-36C6-4466-A48B-494F841A9C77}" = protocol=6 | dir=in | app=c:\program files\salfeld\kisi\kisiset.exe | "{A9FD361F-0133-4134-9AF9-807FB565DA97}" = protocol=17 | dir=out | app=c:\program files\windows media player\wmplayer.exe | "{AB94D42F-F754-495D-AAEE-21C7574A2893}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe | "{B13CF11D-0E2C-4B8F-A600-D39FA47A3B46}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{B15E67E4-18D6-4DB1-844C-1115FBD4EC54}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | "{BB5B95CF-6851-4845-9D8E-8662F4D918E1}" = protocol=6 | dir=in | app=c:\program files\atari\neverwinter nights 2\nwn2main.exe | "{BDBC7F3B-18DE-4599-80E9-4283F52D8FC3}" = protocol=6 | dir=out | app=system | "{C087D784-D635-47D3-94D6-52DE0CD721F3}" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\launcher.patch.exe | "{C157E5E4-6C8E-46E2-B08D-D2F72BC103CF}" = protocol=6 | dir=in | app=c:\program files\tobit clipinc\server\clipinc-server.exe | "{C5AEE85F-3C8A-4176-9FAE-2C5C37343C50}" = protocol=17 | dir=in | app=c:\program files\atari\neverwinter nights 2\nwn2server.exe | "{C8923C25-1B73-4115-99D6-F633A841C4CF}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe | "{CE9261DA-37CC-4EA7-8087-9A571674BCB3}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe | "{D371706E-A1D2-4141-BAA8-78DE8B939744}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | "{D4DB4617-82B5-460C-9C32-EC0ACC08C36F}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0.10192-to-3.2.0.10314-dede-downloader.exe | "{D7CE7218-1C01-4D31-AEE9-D18FEF81BE8B}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe | "{DC4F722E-C76D-4B53-BE9C-9BB9CC778E62}" = protocol=6 | dir=in | app=c:\program files\ubisoft\far cry 2\bin\fc2editor.exe | "{EAE6130F-0975-4D45-B28E-CFE87917CCE4}" = dir=in | app=c:\program files\itunes\itunes.exe | "{EC516C45-FE5E-4FF2-8615-AC780BAD8A78}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0.10314-to-3.2.2.10482-dede-downloader.exe | "{F2869AD7-168D-4B82-8ED7-FE15C4CB81A1}" = protocol=17 | dir=in | app=c:\program files\atari\neverwinter nights 2\nwn2main_amdxp.exe | "{F4DF1F86-DC7C-4B2A-9789-4FB3F1F97831}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{F6CC2CB8-8208-4D4B-9432-FF2A035DB258}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe | "{FA4F8296-B3D8-400F-9EE2-857C140B9886}" = protocol=17 | dir=in | app=c:\program files\ubisoft\far cry 2\bin\fc2editor.exe | "TCP Query User{01A2935D-3653-4DB0-B103-DED8B2F58F48}C:\program files\red storm entertainment\ravenshield\system\ravenshield.exe" = protocol=6 | dir=in | app=c:\program files\red storm entertainment\ravenshield\system\ravenshield.exe | "TCP Query User{01EC64D0-E802-462D-AC21-38F83F547A30}C:\users\public\world of warcraft - kopie\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft - kopie\launcher.exe | "TCP Query User{066988C8-7829-4E52-8FB5-A831B8D2B7AE}C:\program files\java\jre1.6.0_07\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\javaw.exe | "TCP Query User{0B62135C-0642-43B3-8576-69A1A100B434}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 0d26ce58\launcher.exe" = protocol=6 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 0d26ce58\launcher.exe | "TCP Query User{0B7E8DBF-5743-4A88-85A6-1E049C86CCE1}C:\users\public\world of warcraft\wow-3.3.0.11159-to-3.3.2.11403-dede-downloader.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\wow-3.3.0.11159-to-3.3.2.11403-dede-downloader.exe | "TCP Query User{0F7B6696-0AA6-4B57-890D-213CFDF48887}C:\users\public\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\launcher.exe | "TCP Query User{13CA9748-F4CE-4776-A938-844712C5544A}C:\alien arena 2008\crx.exe" = protocol=6 | dir=in | app=c:\alien arena 2008\crx.exe | "TCP Query User{169C7DEE-F838-4CEF-BE38-658A2C761DD6}C:\program files\anno 1701\anno1701.exe" = protocol=6 | dir=in | app=c:\program files\anno 1701\anno1701.exe | "TCP Query User{180B0386-EEF9-43AF-AD61-3C980252AF95}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 17772420\launcher.exe" = protocol=6 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 17772420\launcher.exe | "TCP Query User{1C014C2B-9165-4001-ABA1-99BE9922A697}C:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\mangos\mangosd.exe" = protocol=6 | dir=in | app=c:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\mangos\mangosd.exe | "TCP Query User{1C3FAA8D-4217-4B15-885D-8D2C9AA55BCC}C:\users\public\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\backgrounddownloader.exe | "TCP Query User{1CF25357-7DD5-45F1-ADA1-C1DB44217CD3}C:\program files\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe" = protocol=6 | dir=in | app=c:\program files\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe | "TCP Query User{22A35D9D-3706-48FD-B8B5-D06001D69125}C:\windows\system32\nvsvc32.exe" = protocol=6 | dir=in | app=c:\windows\system32\nvsvc32.exe | "TCP Query User{3AF20C52-5EBE-46FA-A6AB-999C92D59AD3}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | "TCP Query User{4C97C0CE-45D4-4858-9F17-930631068047}C:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\server\apache\bin\apache.exe" = protocol=6 | dir=in | app=c:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\server\apache\bin\apache.exe | "TCP Query User{4E36C319-E6BE-40D2-89AC-8D76DC301827}C:\users\public\world of warcraft\wow-2.1.1.1897-engb-tools-downloader.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\wow-2.1.1.1897-engb-tools-downloader.exe | "TCP Query User{4E9D1C99-4995-4EDC-81D0-C610CDDC350E}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 154246a8\launcher.exe" = protocol=6 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 154246a8\launcher.exe | "TCP Query User{63E078DC-3932-445E-8A20-3C613473DDB0}C:\users\public\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-dede-downloader.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-dede-downloader.exe | "TCP Query User{6D5C9B57-CAB6-4ED3-B700-AF3E936F3F2F}C:\program files\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files\xfire\xfire.exe | "TCP Query User{838C7B99-A8CA-445B-B8AC-0B0D32BE98F8}C:\users\niklas\downloads\wow-language-pack-engb-downloader.exe" = protocol=6 | dir=in | app=c:\users\niklas\downloads\wow-language-pack-engb-downloader.exe | "TCP Query User{864667EC-5294-4513-A9BD-755C750921DB}C:\program files\icq7.2\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe | "TCP Query User{892B3092-A2B3-4183-A57D-6E4008B28F53}C:\users\public\world of warcraft\temp\wow-4.0.0.1807-to-4.0.0.2103-enus-tools-downloader.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\temp\wow-4.0.0.1807-to-4.0.0.2103-enus-tools-downloader.exe | "TCP Query User{896C6627-6BA7-481D-9027-C8354F7D4A53}C:\program files\world of warcraft\world of warcraft\world of warcraft\repair.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\world of warcraft\world of warcraft\repair.exe | "TCP Query User{90A0CF27-2945-4DC4-8AA0-6DC63CA715A8}C:\users\public\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\launcher.exe | "TCP Query User{989A43F7-FA47-47A6-AF25-B4919D06A5FE}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | "TCP Query User{9D48489C-0FA2-4579-A10A-F1CF8AA8AF47}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 1dc41630\launcher.exe" = protocol=6 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 1dc41630\launcher.exe | "TCP Query User{A21D4FCF-92C1-40F7-8513-D8019BB719D6}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 18b3bb00\launcher.exe" = protocol=6 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 18b3bb00\launcher.exe | "TCP Query User{A370B04B-E85F-495B-B801-482ED5E4DD37}C:\program files\ea games\battlefield 2\bf2.exe" = protocol=6 | dir=in | app=c:\program files\ea games\battlefield 2\bf2.exe | "TCP Query User{AC10CC67-DE23-4386-A6BE-1C577EA30038}C:\users\niklas\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\niklas\program files\dna\btdna.exe | "TCP Query User{AD49FA3A-B03D-414C-9072-0266477FC33E}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | "TCP Query User{B1C29976-DDC9-4B50-AF9A-EB25A93B9258}C:\users\public\world of warcraft\blizzard downloader.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\blizzard downloader.exe | "TCP Query User{B7D14C92-AF9B-431B-B119-D34569D75B06}C:\users\niklas\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\niklas\program files\dna\btdna.exe | "TCP Query User{B830F853-E4CB-4D7D-8D36-259E2793CC73}C:\program files\icq6\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6\icq.exe | "TCP Query User{C122DE6C-B9B2-45A7-99D0-A009D8423870}C:\users\public\world of warcraft\repair.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\repair.exe | "TCP Query User{C99C1E99-5CEC-499F-A0E4-28E843588E8D}C:\users\public\games\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | "TCP Query User{CAB1D18C-045D-4014-B9D4-DEB4EC1115B5}C:\users\public\world of warcraft\wow-3.3.5.12340-x86-win-dede-bkgnd-downloader.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\wow-3.3.5.12340-x86-win-dede-bkgnd-downloader.exe | "TCP Query User{CC9AC4DB-02EE-4210-95DE-A7E97F22873D}C:\program files\easy emu\novo's easy wow handler\udrive\usr\local\mysql\bin\mysqld-opt.exe" = protocol=6 | dir=in | app=c:\program files\easy emu\novo's easy wow handler\udrive\usr\local\mysql\bin\mysqld-opt.exe | "TCP Query User{CE9F6A68-A7E2-4AF2-AE4D-70B2B73BD4DE}C:\program files\ubisoft\crytek\far cry\bin32\farcry.exe" = protocol=6 | dir=in | app=c:\program files\ubisoft\crytek\far cry\bin32\farcry.exe | "TCP Query User{D0B2F4E8-48DF-4B71-9F84-8874D6C99B27}C:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\server\mysql\bin\mysqld.exe" = protocol=6 | dir=in | app=c:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\server\mysql\bin\mysqld.exe | "TCP Query User{D20F6BF9-343F-49F3-B204-61531D502D55}C:\users\niklas\downloads\teamviewer507portable\teamviewer.exe" = protocol=6 | dir=in | app=c:\users\niklas\downloads\teamviewer507portable\teamviewer.exe | "TCP Query User{D809E115-B4D3-4264-9E9C-236191E989DA}C:\users\public\world of warcraft\temp\wow-4.0.0.2104-enus-tools-downloader.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\temp\wow-4.0.0.2104-enus-tools-downloader.exe | "TCP Query User{D831EB7A-092D-49C1-B4EA-A5E91829313B}C:\users\public\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\backgrounddownloader.exe | "TCP Query User{E15D56BA-7070-42F7-B3F6-01C098D0F1FA}C:\users\niklas\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\niklas\world of warcraft\launcher.exe | "TCP Query User{F6B905EA-A65C-4037-87DC-AC8E5AC5B7CB}C:\games\ngd studios\regnum online\liveserver\roclientgame.exe" = protocol=6 | dir=in | app=c:\games\ngd studios\regnum online\liveserver\roclientgame.exe | "TCP Query User{F7338923-6FA1-45E4-B7CB-F08D451D38C4}C:\program files\easy emu\novo's easy wow handler\udrive\usr\local\apache2\bin\apache_16.exe" = protocol=6 | dir=in | app=c:\program files\easy emu\novo's easy wow handler\udrive\usr\local\apache2\bin\apache_16.exe | "UDP Query User{00A6A0E2-2629-4274-B561-3D594EAE1009}C:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\server\apache\bin\apache.exe" = protocol=17 | dir=in | app=c:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\server\apache\bin\apache.exe | "UDP Query User{0C3185E4-6EE9-459C-A750-29E0CFB93BFD}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | "UDP Query User{15A8E73C-AADB-4372-8817-EBAE2E3919B6}C:\users\public\games\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | "UDP Query User{193F9B70-595A-4E30-9B8C-BA10BBE92517}C:\users\public\world of warcraft\wow-3.3.0.11159-to-3.3.2.11403-dede-downloader.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\wow-3.3.0.11159-to-3.3.2.11403-dede-downloader.exe | "UDP Query User{194E0BE4-0304-4925-8046-46EA0D01AC9D}C:\users\public\world of warcraft\temp\wow-4.0.0.2104-enus-tools-downloader.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\temp\wow-4.0.0.2104-enus-tools-downloader.exe | "UDP Query User{2757AABA-FEB7-47CD-B9D6-AAC62C0D4D6B}C:\users\public\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\backgrounddownloader.exe | "UDP Query User{2A3EA6B7-201E-481D-A61B-C04A6E2A1F11}C:\users\public\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\launcher.exe | "UDP Query User{3000E3E1-79A1-4013-BF5C-0A9801EAE536}C:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\mangos\mangosd.exe" = protocol=17 | dir=in | app=c:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\mangos\mangosd.exe | "UDP Query User{36D2EEF2-734F-49D1-8825-6859DFF42837}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 0d26ce58\launcher.exe" = protocol=17 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 0d26ce58\launcher.exe | "UDP Query User{3FD10533-D588-4078-93DF-6A9D2C1EC09F}C:\program files\easy emu\novo's easy wow handler\udrive\usr\local\mysql\bin\mysqld-opt.exe" = protocol=17 | dir=in | app=c:\program files\easy emu\novo's easy wow handler\udrive\usr\local\mysql\bin\mysqld-opt.exe | "UDP Query User{3FDF853A-837C-4B46-9135-8962FC899D2D}C:\users\public\world of warcraft\repair.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\repair.exe | "UDP Query User{46A0705B-6D32-4659-8A31-F757B398C880}C:\users\niklas\downloads\teamviewer507portable\teamviewer.exe" = protocol=17 | dir=in | app=c:\users\niklas\downloads\teamviewer507portable\teamviewer.exe | "UDP Query User{492BE1C4-4A66-4BD6-BCE7-1251E97B937D}C:\users\public\world of warcraft\blizzard downloader.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\blizzard downloader.exe | "UDP Query User{49E09078-931A-4B0D-8A02-778D65514967}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 1dc41630\launcher.exe" = protocol=17 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 1dc41630\launcher.exe | "UDP Query User{4B49CAFF-5FA1-473D-B4D1-957E87D89E53}C:\program files\red storm entertainment\ravenshield\system\ravenshield.exe" = protocol=17 | dir=in | app=c:\program files\red storm entertainment\ravenshield\system\ravenshield.exe | "UDP Query User{4B84F7FB-483F-461F-A6E0-2E82F1EDD1C6}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 18b3bb00\launcher.exe" = protocol=17 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 18b3bb00\launcher.exe | "UDP Query User{518ADDFF-3FD2-458E-9038-86A2767CE50C}C:\users\public\world of warcraft\wow-3.3.5.12340-x86-win-dede-bkgnd-downloader.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\wow-3.3.5.12340-x86-win-dede-bkgnd-downloader.exe | "UDP Query User{53C6E602-30FF-4865-9FFB-C0884D03C684}C:\windows\system32\nvsvc32.exe" = protocol=17 | dir=in | app=c:\windows\system32\nvsvc32.exe | "UDP Query User{57C5B85D-633D-4EEC-86B2-932E67AC94A0}C:\alien arena 2008\crx.exe" = protocol=17 | dir=in | app=c:\alien arena 2008\crx.exe | "UDP Query User{5CCEAAC1-5BA3-48B3-9BBF-9F3F60EAB808}C:\users\public\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-dede-downloader.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-dede-downloader.exe | "UDP Query User{5E39C44E-069D-4143-BC51-E9436D556D99}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 17772420\launcher.exe" = protocol=17 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 17772420\launcher.exe | "UDP Query User{6986D1BA-4208-46AE-843D-98180035B555}C:\program files\java\jre1.6.0_07\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\javaw.exe | "UDP Query User{6EAF3F1A-C489-481B-8760-25108D93FC3F}C:\users\niklas\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\niklas\program files\dna\btdna.exe | "UDP Query User{75059D15-0F67-44B4-8AB4-CC7F11036299}C:\program files\icq6\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6\icq.exe | "UDP Query User{83BC4044-A405-4B4C-9275-E6D0284627C7}C:\users\public\world of warcraft\temp\wow-4.0.0.1807-to-4.0.0.2103-enus-tools-downloader.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\temp\wow-4.0.0.1807-to-4.0.0.2103-enus-tools-downloader.exe | "UDP Query User{88A7C3E9-0D6B-451D-9929-71C29CE74642}C:\users\public\world of warcraft - kopie\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft - kopie\launcher.exe | "UDP Query User{89EBF57F-CBB3-46D4-B68D-CFE9AE319C12}C:\program files\anno 1701\anno1701.exe" = protocol=17 | dir=in | app=c:\program files\anno 1701\anno1701.exe | "UDP Query User{8A24E369-DB27-45B8-A34C-544E98D8E095}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | "UDP Query User{95C4FAED-943C-40A8-B745-D55A846AD5A2}C:\users\public\world of warcraft\wow-2.1.1.1897-engb-tools-downloader.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\wow-2.1.1.1897-engb-tools-downloader.exe | "UDP Query User{99669A9A-7158-4803-817C-96954A70E10B}C:\program files\world of warcraft\world of warcraft\world of warcraft\repair.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\world of warcraft\world of warcraft\repair.exe | "UDP Query User{A64826A3-5D77-49E2-9D9C-86910FA541A3}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | "UDP Query User{A73D3218-9076-4DD8-9A5C-DF5073267D8A}C:\program files\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files\xfire\xfire.exe | "UDP Query User{AE8A060B-8084-4742-95B7-423C4F19E9A5}C:\program files\ubisoft\crytek\far cry\bin32\farcry.exe" = protocol=17 | dir=in | app=c:\program files\ubisoft\crytek\far cry\bin32\farcry.exe | "UDP Query User{BCCBF812-10BC-4752-B774-7620C787C15C}C:\program files\easy emu\novo's easy wow handler\udrive\usr\local\apache2\bin\apache_16.exe" = protocol=17 | dir=in | app=c:\program files\easy emu\novo's easy wow handler\udrive\usr\local\apache2\bin\apache_16.exe | "UDP Query User{BF488BCD-7973-4E9F-A1D8-5FDDED42C672}C:\users\niklas\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\niklas\program files\dna\btdna.exe | "UDP Query User{C8AC4FE1-BF20-4D0C-9A6D-44E31B9D8C51}C:\program files\ea games\battlefield 2\bf2.exe" = protocol=17 | dir=in | app=c:\program files\ea games\battlefield 2\bf2.exe | "UDP Query User{CAC349CD-A4FE-4B7E-B43C-DA6B0CD165A8}C:\users\public\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\backgrounddownloader.exe | "UDP Query User{CC4CD267-4D10-4E25-AECA-1A99DDF5A0CA}C:\games\ngd studios\regnum online\liveserver\roclientgame.exe" = protocol=17 | dir=in | app=c:\games\ngd studios\regnum online\liveserver\roclientgame.exe | "UDP Query User{D9E75BBA-1607-4169-AEA2-196408352525}C:\users\niklas\downloads\wow-language-pack-engb-downloader.exe" = protocol=17 | dir=in | app=c:\users\niklas\downloads\wow-language-pack-engb-downloader.exe | "UDP Query User{DAB3F19C-29A1-44BA-8963-A71408BFC5E5}C:\users\niklas\appdata\local\temp\blizzard launcher temporary - 154246a8\launcher.exe" = protocol=17 | dir=in | app=c:\users\niklas\appdata\local\temp\blizzard launcher temporary - 154246a8\launcher.exe | "UDP Query User{DC43E23C-F62F-40C4-94A8-ABEEA766BC93}C:\users\public\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\launcher.exe | "UDP Query User{EA6CF917-203B-453E-A305-6F1F4D7DCDD1}C:\users\niklas\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\niklas\world of warcraft\launcher.exe | "UDP Query User{EFA5E425-B525-49F6-999C-E507279F8488}C:\program files\icq7.2\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe | "UDP Query User{F0223281-24B1-433A-A597-A84BB0E26357}C:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\server\mysql\bin\mysqld.exe" = protocol=17 | dir=in | app=c:\users\niklas\downloads\bogdan's repack 3.3.0\bogdan's repack 3.3.0\server\mysql\bin\mysqld.exe | "UDP Query User{FF16DE2E-A5A9-45E7-AC4A-020474BDD6FA}C:\program files\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe" = protocol=17 | dir=in | app=c:\program files\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{01CEF48F-41F2-4A43-82F2-25D23D68C1D4}" = Cuttermaran 1.69a "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2(TM) "{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu "{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}" = Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 "{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID-Anmelde-Assistent "{086BADF8-9B1F-4E89-B207-2EDA520972D6}" = Grand Theft Auto San Andreas "{11AFE21E-B193-430D-B57A-DFF7815BB962}" = Ulead PhotoImpact 12 "{159098AF-4EB8-4C10-B0C6-24CDA32B45F9}" = Microsoft SQL Server Compact 3.5 DEU "{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool "{2223FC2F-B862-4F83-BC9E-DDF2DADF2859}" = Intel(R) Network Connections 13.0.42.0 "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 23 "{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie "{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support "{31CF6C0E-51F0-41D2-B088-A6A143C4303C}" = SweetIM Toolbar for Internet Explorer 3.6 "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7 "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker "{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A712D29-DBE3-4381-A331-AF4AE5BEB244}" = ArcSoft Software Suite "{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack "{4FA8B85C-62BF-4A54-A53F-1DDBF4643F9C}" = Gigaset USB Adapter 54 "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime "{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call "{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}" = Safari "{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar "{71A51A91-E7D3-11DB-A386-005056C00008}" = MD 85872 WEBCAM "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2 "{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{7E641E46-81DB-4D1D-906A-48342523051C}" = FlatOut2 "{7FF183FB-456E-44D7-8865-4F2332CC70E9}_is1" = 777-Record-and-Cut 1.0 "{84ED5482-CFB0-4DD9-BF18-489FFDACD18A}" = Microsoft Antimalware Service DE-DE Language Pack "{867F5501-F8EF-4542-9D68-310A238A15FF}" = SLOW-PCfighter "{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes "{89661B04-C646-4412-B6D3-5E19F02F1F37}" = EAX4 Unified Redist "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86) "{8A809006-C25A-4A3A-9DAB-94659BCDB107}" = NVIDIA PhysX "{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007 "{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007 "{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007 "{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007 "{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System "{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007 "{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German) "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{ABBA0799-F982-414C-9A8B-17EB03D39677}" = trakAxPC "{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.1 - Deutsch "{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9 "{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86) "{C07B8BC4-AFD9-3AA4-BDF5-330A07591FDE}" = Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework "{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail "{C9FFC925-E27E-436E-A2DF-652324D51031}" = Nero 8 Essentials "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer "{E0FA1DC5-FEBF-4E7B-8FA3-DB94233E952D}" = Razer Lycosa "{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update "{E32260E7-0B10-43C7-9B77-AB9F4184676D}" = Microsoft SQL Server Compact 3.5 Design Tools DEU "{E62A1F01-07B7-4541-A835-EE5B0BF064C2}" = Microsoft Antimalware "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support "{EF98A02A-1748-4762-9B7D-5ED1600520D5}" = Microsoft Security Essentials "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2 "{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5 "{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials "{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour "Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "Allzeit Atomzeit 2.00" = Allzeit Atomzeit 2.00 "Applian FLV Player2.0.24" = Applian FLV Player "Ask & Record Toolbar4.00" = Ask & Record Toolbar 4.00 "Ask Toolbar_is1" = Ask Toolbar "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "BlablaMaker" = Blabla Maker "CamStudio" = CamStudio "Euro Truck Simulator" = Euro Truck Simulator 1.3 "FormatFactory" = FormatFactory 2.10 "Fraps" = Fraps "Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4 "Free Video Converter_is1" = Free Video Converter V 2.9 "Free YouTube Download_is1" = Free YouTube Download 2.9 "Free YouTube to iPod Converter_is1" = Free YouTube to iPod Converter version 3.2 "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.7 "Game Cam" = Game Cam 2.54.0.47 "Google Desktop" = Google Desktop "HijackThis" = HijackThis 2.0.2 "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "ICQToolbar" = ICQ Toolbar "Icy Tower v1.3.1_is1" = Icy Tower v1.3.1 "ImgBurn" = ImgBurn "InstallShield_{4FA8B85C-62BF-4A54-A53F-1DDBF4643F9C}" = Gigaset USB Adapter 54 "IrfanView" = IrfanView (remove only) "klvideoconvert_is1" = K-Lite Video Conversion Pack 1.8.5 "LetsTrade" = LetsTrade Komponenten "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "Microsoft Security Essentials" = Microsoft Security Essentials "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "NVIDIA Display Control Panel" = NVIDIA Display Control Panel "NVIDIA Drivers" = NVIDIA Drivers "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "OpenAL" = OpenAL "Prism" = Prism Video Converter "PROSetDX" = Intel(R) Network Connections 13.0.42.0 "PunkBusterSvc" = PunkBuster Services "Riva FLV Player_is1" = Riva FLV Player "secretmaryo" = Secret Maryo Chronicles "SLOW-PCfighter" = SLOW-PCfighter "Softonic_Deutsch_FF Toolbar" = Softonic_Deutsch_FF Toolbar "SolveigMM AVI Trimmer" = SolveigMM AVI Trimmer "Steam App 42700" = Call of Duty: Black Ops "Steam App 42710" = Call of Duty: Black Ops - Multiplayer "Switch" = Switch Sound File Converter "SystemRequirementsLab" = System Requirements Lab "Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2 "TeamSpeak 3 Client" = TeamSpeak 3 Client "TeamViewer 5" = TeamViewer 5 "Texas Hold'em Poker (Test)_is1" = Texas Hold'em Poker (Test) "Tilt Mouse Software_is1" = Tilt Mouse Software 5.0 "Tobit ClipInc Server" = Tobit.Software clipinc.fx "Uninstall_is1" = Uninstall 1.0.0.1 "WavePad" = WavePad Sound Editor "WinGimp-2.0_is1" = GIMP 2.6.10 "WinLiveSuite_Wave3" = Windows Live Essentials "WinRAR archiver" = WinRAR "Wise Registry Cleaner_is1" = Wise Registry Cleaner 5.8.9 "wkqey" = Favorit "World of Warcraft" = World of Warcraft ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "BitTorrent DNA" = DNA "Google Chrome" = Google Chrome ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 08.01.2011 17:20:38 | Computer Name = Niklas | Source = Bonjour Service | ID = 100 Description = 392: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 08.01.2011 17:20:38 | Computer Name = Niklas | Source = Bonjour Service | ID = 100 Description = 388: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 08.01.2011 17:24:35 | Computer Name = Niklas | Source = Bonjour Service | ID = 100 Description = 388: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 08.01.2011 17:24:35 | Computer Name = Niklas | Source = Bonjour Service | ID = 100 Description = 392: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 08.01.2011 17:24:35 | Computer Name = Niklas | Source = Bonjour Service | ID = 100 Description = 384: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 09.01.2011 04:47:54 | Computer Name = Niklas | Source = MsiInstaller | ID = 11704 Description = Error - 09.01.2011 12:21:55 | Computer Name = Niklas | Source = WinMgmt | ID = 10 Description = Error - 09.01.2011 12:25:18 | Computer Name = Niklas | Source = Bonjour Service | ID = 100 Description = 388: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 09.01.2011 12:25:18 | Computer Name = Niklas | Source = Bonjour Service | ID = 100 Description = 392: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 09.01.2011 12:25:18 | Computer Name = Niklas | Source = Bonjour Service | ID = 100 Description = 396: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) [ System Events ] Error - 06.01.2011 17:38:53 | Computer Name = Niklas | Source = Service Control Manager | ID = 7026 Description = Error - 06.01.2011 17:47:12 | Computer Name = Niklas | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 06.01.2011 17:47:41 | Computer Name = Niklas | Source = Service Control Manager | ID = 7026 Description = Error - 06.01.2011 17:59:00 | Computer Name = Niklas | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 06.01.2011 17:59:25 | Computer Name = Niklas | Source = Service Control Manager | ID = 7026 Description = Error - 07.01.2011 23:34:44 | Computer Name = Niklas | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 07.01.2011 23:35:28 | Computer Name = Niklas | Source = Service Control Manager | ID = 7026 Description = Error - 08.01.2011 10:14:43 | Computer Name = Niklas | Source = Service Control Manager | ID = 7011 Description = Error - 09.01.2011 12:21:22 | Computer Name = Niklas | Source = Microsoft-Windows-TaskScheduler | ID = 412 Description = Error - 09.01.2011 12:21:55 | Computer Name = Niklas | Source = Service Control Manager | ID = 7026 Description = < End of report > Geändert von Osswald (09.01.2011 um 17:32 Uhr) |
09.01.2011, 17:38 | #42 |
| Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] Soeben wollte WMP wieder aufmerksamkeit... weswegen ich meinen Pc neustarten durfte. Offene Programme warten nur Google Chrome, OTL, World of warc... (ja^^)Beim einloggen ist mir aufgefallen das ich das Passwort falsch eingebe... aha... schien mir nicht so, aber die -L- Taste zeigte keine Reaktion. Also hab ich Tasten und Makro Belegung von Lycosa, also meiner tastatur, aufgerufen und alles zurückgesetzt. Und dann hat sich WMP im Vordergrund gedrengt. (als ich es geschlossen hatte (nach den 4. versuch dann über Taskmanger), ja ich weiß jetzt nich wie das heißt, aber wenn ich zum beispiel in den Browser reinklicke und z.b. was eingeben will, muss ich wieder reinklicken, und so ist es überall dann. Also Neustart. Und das Vorletzte mal also WMP anfing rum zu spinnen,hing auf meinem nummernblock erst die 8 fest, also als würde man gedrückt halten, und dann ging sie nicht mehr. Sehr seltsam, vielleicht Hilft das dir ja weiter... Geändert von Osswald (09.01.2011 um 17:55 Uhr) |
09.01.2011, 17:55 | #43 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] Ich seh dort keine Hinweise auf einen sich selbst öffnenden WMP. Ich würde an deiner Stelle alle unnötigen Programme mal über die Systemsteuerung entfernen, v.a. alle Toolbars, das sind einfach nur unnötige und nervige Programme, die sich in den Browser einklinken! Benutzt du den WMP überhaupt oder nur sowas wie VLC? Wenn ja, könnte man auch mal den WMP deinstallieren, wenn der Eintrag in der Systemsteuerung angezeigt wird.
__________________ Logfiles bitte immer in CODE-Tags posten |
09.01.2011, 17:57 | #44 |
| Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] WMP ist mir eigentlich egal, Youtube ist meine mediaplayer |
11.01.2011, 13:35 | #45 |
| Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! [gelöst] Also ich hatte vor es zu deinstallieren, aber ich finde es nicht. |
Themen zu Windows Media Player öffnet sich ab und an und ist nichtmehr schließbar! |
antivir, antivir guard, antivirus, askbar, avast!, avira, bho, bonjour, browser, converter, desktop, ebay, google, hijack, hijackthis, media player, microsoft, microsoft security, microsoft security essentials, mp3, plug-in, problem, security, senden, server, softonic, softonic deutsch ff toolbar, software, sweetim, system, teamspeak, trojaner, virus, vista, wickel, windows, windows vista |