Virus? alle 2 sekunden eine meldung meines windows defenders

alex1411 · 21.01.2011, 14:44

hi ich weis nicht was mit meinem pc los ist
mein windows defender kommt immer mit einer nachricht von einem
backdoor programm das auf mein internet zugreifen kann
hier die beschreibung :

Kategorie:
Hintertür

Beschreibung:
Dieses Programm stellt im Hintergrund eine Verbindung mit dem Internet her.

Empfehlung:
Überprüfen Sie die Benachrichtigungen, um festzustellen, warum die Software ermittelt wurde. Wenn Ihnen die Funktionsweise der Software nicht gefällt oder Sie den Softwareherausgeber nicht kennen und ihm nicht vertrauen, sollten Sie erwägen, die Software zu blockieren oder zu entfernen.

Ressourcen:
process:
pid:1624

process:
pid:7116

process:
pid:6428

process:
pid:6420

Zusammenfassung:
Es ist eine Änderung an Anwendungsausführung aufgetreten.

Dieser Agent überprüft die Software unmittelbar vor ihrer Ausführung. Es wird eine Warnung angezeigt, wenn ein hohes Risiko besteht, dass die Software Ihren Computer schädigt.

Prüfpunkt:
Ausgeführte Prozesse

das kommt jedes mal und ich entferne es immer wieder
aber es kommt die ganze zeit

mit hijack hab ich auch schon gescannt:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:21:18, on 21.01.2011
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18542)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Users\Alex\AppData\Local\Temp\Jqp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
C:\ACER\Preload\Autorun\DRV\Fiji Keyboard\ABoard.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Razer\Lachesis\razerhid.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\ACER\Preload\Autorun\DRV\Fiji Keyboard\AOSD.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Windows\system32\aspimgr.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\system32\HidService.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\system32\IoctlSvc.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\Tunngle\TnglCtrl.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Razer\Lachesis\OSD.exe
C:\Users\Alex\AppData\Local\Apps\2.0\2ZW712MB.BC1\8J0VV2ZX.02C\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\CurseClient.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\Jsegyb.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\System32\AutoChks.exe
C:\Program Files\Razer\Lachesis\razertra.exe
C:\Program Files\Razer\Lachesis\razerofa.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\conime.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\PROGRA~1\Java\jre6\bin\jp2launcher.exe
C:\Program Files\Java\jre6\bin\java.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Alex\AppData\Local\Temp\Jqu.exe
C:\Users\Alex\Desktop\HiJackThis204.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\windows\systenn.exe
C:\Users\Alex\AppData\Local\Temp\IyK8IUJu.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=1&o=vp32&d=0709&m=imedia_d3860_ge
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=1&o=vp32&d=0709&m=imedia_d3860_ge
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=1&o=vp32&d=0709&m=imedia_d3860_ge
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - mscoree.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
O2 - BHO: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [FijiKeyboard] c:\Acer\Preload\Autorun\DRV\FIJI Keyboard\ABoard.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Lachesis] C:\Program Files\Razer\Lachesis\razerhid.exe
O4 - HKLM\..\Run: [HKLM] C:\Windows\system32\windows\svchost.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [wuaucldt] c:\windows\system32\wuaucldt.exe
O4 - HKLM\..\Run: [Regedit32] C:\Windows\system32\regedit.exe
O4 - HKLM\..\Run: [Auto Check Utility] "C:\Windows\system32\AutoChks.exe"
O4 - HKLM\..\Run: [Isiholequ] rundll32.exe "C:\Users\Alex\AppData\Local\amosesuz.dll",Startup
O4 - HKLM\..\Run: [systenn.exe] C:\windows\systenn.exe
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [HKCU] C:\Windows\system32\windows\svchost.exe
O4 - HKCU\..\Run: [{17168A2F-B00A-3CF7-5AEF-5CF58ED63738}] C:\Users\Alex\AppData\Roaming\Upba\vipi.exe
O4 - HKCU\..\Run: [moon16681x.exe] C:\moon16681x.exe\moon16681x.exe
O4 - HKCU\..\Run: [wuaucldt] c:\users\alex\wuaucldt.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Metropolis] rundll32.exe C:\Windows\system32\sshnas21.dll,GetHandle
O4 - HKCU\..\Run: [JP595IR86O] C:\Users\Alex\AppData\Local\Temp\Jqp.exe
O4 - HKCU\..\Run: [NtWqIVLZEWZU] C:\Users\Alex\AppData\Local\Temp\Jqu.exe
O4 - HKCU\..\Run: [Lhuxocinexilahe] rundll32.exe "C:\Users\Alex\AppData\Local\Smsexias.dll",Startup
O4 - HKCU\..\Run: [systenn.exe] C:\windows\systenn.exe
O4 - HKCU\..\Run: [TJHTHX1O7X] C:\Windows\Jsegyb.exe
O4 - HKCU\..\Run: [0x017] 0x017
O4 - HKLM\..\Policies\Explorer\Run: [Policies] C:\Windows\system32\windows\svchost.exe
O4 - HKLM\..\Policies\Explorer\Run: [Auto File System Conversion Utility] "C:\Program Files\Common Files\autoconvs.exe"
O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\Windows\system32\windows\svchost.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [jdsfjsdijf.exe] C:\jdsfjsdijf.exe\jdsfjsdijf.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [jdsfjsdijf.exe] C:\jdsfjsdijf.exe\jdsfjsdijf.exe (User 'Default user')
O4 - Startup: CurseClientStartup.ccip
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} (Perparer Class) - hxxp://www.fiaa.eu/OPLauncher.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - C:\Windows\SYSTEM32\HidService.exe
O23 - Service: Google Update Service (gupdate1ca3202366518c6) (gupdate1ca3202366518c6) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe

--
End of file - 16681 bytes

ich weis einfach nicht was ich machen soll..
bitte um schnelle hilfe

mfg alex

markusg · 21.01.2011, 14:47

schon mal was von windows updates gehört :-)
du hast nur das sp1, aktuell ist sp2. dazu später.

Systemscan mit OTL
download otl:
http://filepony.de/download-otl/

Doppelklick auf die OTL.exe
(user von Windows 7 und Vista: Rechtsklick als Administrator ausführen)
1. Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
2. Hake an "scan all users"
3. Unter "Extra Registry wähle:
"Use Safelist" "LOP Check" "Purity Check"
4. Kopiere in die Textbox:
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
5. Klicke "Scan"
6. 2 reporte werden erstellt:
OTL.Txt
Extras.Txt
beide posten

alex1411 · 21.01.2011, 14:48

ich hab das update probiert zu machen aber es geht nicht das is das nächste problem -.-

markusg · 21.01.2011, 14:49

naja das macht man ja auch nicht hinterher :-)
aber erst mal egal, weiter mit otl.

alex1411 · 21.01.2011, 14:53

wenn ich otl mache kommt keine txt datei ich kann nur restarten zum löschen der dateien

markusg · 21.01.2011, 14:54

du sollst auf scan klicken, nicht auf bereinigen, bitte genau lesen und dann erst machen.

alex1411 · 21.01.2011, 14:55

oh mein gott ich bin so dumm
sry..

alex1411 · 21.01.2011, 14:57

wielang dauert das jetzt noch ca. ?

markusg · 21.01.2011, 15:01

der scan vllt ne halbe stunde, du wirst schon zeit investieren müssen

alex1411 · 21.01.2011, 15:47

extras :OTL EXTRAS Logfile:

Code:

ATTFilter

OTL Extras logfile created on: 21.01.2011 14:55:09 - Run 1
OTL by OldTimer - Version 3.2.20.3     Folder = C:\Users\Alex\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 55,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 284,09 Gb Total Space | 121,64 Gb Free Space | 42,82% Space Free | Partition Type: NTFS
Drive D: | 7,22 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: ALEX-PC | User Name: Alex | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"systenn.exe" = C:\windows\systenn.exe -- (Microsoft)
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04E04B34-E39A-4B51-B414-9EDC1E84546F}" = lport=8380 | protocol=17 | dir=in | name=league of legends launcher | 
"{0CDBD07C-55DB-4228-9632-2E9269FE64AF}" = lport=8378 | protocol=6 | dir=in | name=league of legends launcher | 
"{0E03B119-DBDD-460C-863A-8002C4A0746F}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{10C0FC32-5968-4850-A3ED-D366924C983D}" = rport=445 | protocol=6 | dir=out | app=system | 
"{118FA02D-A72D-4B9F-BC3E-08735CC5BB05}" = lport=6928 | protocol=17 | dir=in | name=league of legends launcher | 
"{18F78702-F30B-499C-BB44-BF85CD60736C}" = lport=6978 | protocol=17 | dir=in | name=league of legends launcher | 
"{28790315-399E-41E8-A1AA-3C761EE95623}" = lport=8394 | protocol=17 | dir=in | name=league of legends launcher | 
"{29FC09A6-F180-49F3-BEA8-333CC9D99F09}" = lport=8378 | protocol=17 | dir=in | name=league of legends launcher | 
"{2AB1130B-8DB9-42D9-9668-7C2C0196966C}" = lport=8381 | protocol=17 | dir=in | name=league of legends launcher | 
"{2AB878A2-CC3E-441D-B8E6-5927EF7DEA14}" = lport=6979 | protocol=6 | dir=in | name=league of legends launcher | 
"{526C0C4D-FE6E-469E-9389-3DEF6CD0454B}" = lport=445 | protocol=6 | dir=in | app=system | 
"{54F6FDDA-1465-465E-8009-27655CE91166}" = rport=137 | protocol=17 | dir=out | app=system | 
"{62AC8BAC-13B2-4DC3-9A87-BEFD934C1BAD}" = lport=8394 | protocol=6 | dir=in | name=league of legends launcher | 
"{68906710-FC79-4A6E-B4F9-6C003CB2D426}" = lport=8377 | protocol=6 | dir=in | name=league of legends launcher | 
"{6FB80630-B581-496C-A176-E24CD21AF408}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 | 
"{7C75152A-2BA4-41AE-9014-2A9AF6DD0650}" = lport=8379 | protocol=17 | dir=in | name=league of legends launcher | 
"{823C91A2-D1DF-48E8-9F78-EB299D0691FB}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{836AD8F7-C72B-4A8A-AF6B-4D41A63A034A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{86AEBF82-657F-4F47-A458-928EEE1D1413}" = lport=6978 | protocol=6 | dir=in | name=league of legends launcher | 
"{89E7FF99-FCF0-4AF2-9009-C226CF13BE8C}" = lport=8381 | protocol=6 | dir=in | name=league of legends launcher | 
"{8E9D0DD2-6D21-4FCA-A7A7-C982CBCC8820}" = lport=8379 | protocol=6 | dir=in | name=league of legends launcher | 
"{96F6DD07-B25B-4DB8-BBA1-71D7194104EB}" = lport=6112 | protocol=6 | dir=in | name=battlenet | 
"{998D7C90-1EDE-4BB6-B3F4-77BD4C45F6A0}" = lport=6964 | protocol=6 | dir=in | name=league of legends launcher | 
"{9D8BC8A5-760B-46E8-A4B4-63E68FCA57A8}" = lport=6975 | protocol=6 | dir=in | name=league of legends launcher | 
"{B91108DE-30AC-417C-B946-AA1F7D7B8DF0}" = lport=8377 | protocol=17 | dir=in | name=league of legends launcher | 
"{BAF0D4A0-9887-4591-8929-86BF70A0FC61}" = lport=6979 | protocol=17 | dir=in | name=league of legends launcher | 
"{C39CF289-4505-4890-85FF-6321913E640D}" = lport=6964 | protocol=17 | dir=in | name=league of legends launcher | 
"{C5E66DB1-8ED3-4EF0-9C8E-D67C102EB52B}" = lport=137 | protocol=17 | dir=in | app=system | 
"{CCA94553-5A0F-4D51-A71C-E749AF01C94B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{D3CB1E3F-9D77-4DD0-A0AC-B74582771F0D}" = rport=139 | protocol=6 | dir=out | app=system | 
"{DBF7A446-1B6E-4C23-BE01-3AD518ABEB45}" = lport=138 | protocol=17 | dir=in | app=system | 
"{DEEE13CD-3B21-4CAB-B463-833DAC9EF963}" = lport=6928 | protocol=6 | dir=in | name=league of legends launcher | 
"{E7EB03D9-2B50-4DA2-B70D-36A36419FA8A}" = lport=8380 | protocol=6 | dir=in | name=league of legends launcher | 
"{F1158E64-17A1-40BF-8F00-3B59D4B9A052}" = rport=138 | protocol=17 | dir=out | app=system | 
"{F4604105-C24E-4695-B0A7-C3948D922B7F}" = lport=6975 | protocol=17 | dir=in | name=league of legends launcher | 
"{F7BB3109-17A2-4951-90CA-0D1605D243D5}" = lport=139 | protocol=6 | dir=in | app=system | 
"{FD3E20E1-21E0-41FF-916E-99498829BCF8}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{014D2935-B004-45A9-B627-50A8D0213BFC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{02D52228-D888-4A65-9343-B597E836D9B3}" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\curseclient.exe | 
"{03FFA77D-B9B6-46A5-9926-A1B34887711E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{04479145-4CC9-40D1-8A74-EE563895053D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{04863C6F-EEBB-40AF-BB59-1208ADF76116}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{04B53F62-01BA-436D-92B8-8B2709903AB7}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe | 
"{0547C83C-5226-442B-8986-251B55E5A292}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{07BFF430-B208-4D36-BB36-5F88287A3BFD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{088469DB-13AD-4EC5-91A6-82A1DE1EF22B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{088A66C9-EBFF-4686-AFA8-10C6F5939AD6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{09147010-4A77-4FB6-BBD8-D52069B649DE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{09C17E0D-9233-4CC3-ABF6-E00B2615D15E}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe | 
"{0AF0F7ED-0341-4C93-814C-CBB6374385FD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0AF8C994-A358-44FA-B8F5-212ACCFB96F7}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{0BA5D64B-A6B9-4A5F-A8D2-E8613A59303B}" = protocol=6 | dir=in | app=c:\program files\gamespy arcade\aphex.exe | 
"{0C79C6B3-A471-4EAC-8061-78B36949ACA9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0CD46D83-20CC-487D-B960-E4CEE2D218CE}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{0D581424-A9BB-4067-96D7-EBAC4D9F4225}" = protocol=17 | dir=in | app=c:\program files\dna\btdna.exe | 
"{0DB25762-6DE3-4BC1-898C-1952957D1AF8}" = protocol=6 | dir=in | app=c:\program files\dna\btdna.exe | 
"{0E7A4A2F-8A59-40F5-90AD-F872BE59CE8F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0ECEC873-FBA9-4054-BDD7-996591E58021}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0FC2F04B-0E4C-43E8-AA4D-FE7476844B3A}" = protocol=17 | dir=in | app=c:\program files\league of legendseu\game\league of legends.exe | 
"{1065E534-9F8F-4592-BDC2-B23C805E0C4F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{109FF717-DE59-4F10-88BC-0F97E8E551F3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{12710A97-5126-4B2A-A3F9-AF46CF1980A4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{135F4B82-078D-4922-A83D-C5C4E0D87154}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1391E5F7-DC35-49BB-8F80-2BFC308166E9}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{142D5236-9E58-4C21-9935-6BA6D81C622A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{143ED496-9336-4380-9CE1-BCD264ED9387}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1470248E-C391-4709-82F2-2FCABEEC7379}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{14E1C7A6-E730-4BFC-9484-3E8DE7BC7A42}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{15164A1D-7750-4648-B11F-F049C0555470}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 12\programs\studio.exe | 
"{15A7267D-6780-4431-94E0-86F80FBFDEBE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{15AF1C37-ED2D-433D-9AAD-5AA0DC3CB17B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{16048165-B636-4305-A8BB-AAD1E4B244DD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{164D914D-EDFE-4F8F-B614-AC0CD3576488}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{16A05C46-182B-4307-94DA-89C3AD771E5E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{16AE6344-FFDC-4F3A-9552-93222628485E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{16D47429-05F2-45CF-9C39-DE819CB5C5DA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{174BF0EC-F91A-4671-B527-F0599089EEB2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{17674194-021C-4C14-8239-2D7315FDDADD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{18EEEA02-EE1C-4C59-B948-D896CDBAAFFB}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{18F7BA25-69E8-40E9-AF7A-40AB45C3BE70}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{19BC9AC0-1F6A-4B6B-8622-86B9ED60F819}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{19BEDBE3-0123-407C-A560-012141EB9615}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1B05CD7A-4C2E-48A6-9AB0-3284AA5E4F3D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1B20DDDD-BC98-4969-9AE3-DAE026D3B8A1}" = protocol=6 | dir=in | app=c:\program files\starcraft ii\starcraft ii.exe | 
"{1B511740-4727-4FB6-8F7D-2605049E46E1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1BB82426-EE36-4DF8-AA1F-AFA7691CFF2D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1BBB4905-1D10-44DB-B5BC-0F6FD5178214}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1CA8D86A-9BB9-4142-AB3A-EC26D9BA8920}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1CF724E2-2C28-4F2F-BA8F-2863F63F75C0}" = protocol=17 | dir=in | app=c:\program files\league of legends\air\lolclient.exe | 
"{1CFEB06C-763C-467A-A1E7-908B08C3F355}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1DACB63E-1377-4DD6-9E5B-25F8F80F2C20}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1DCA88CB-A85A-41E4-BC49-77C84BA60F69}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{20CBD8CE-786E-474A-91F1-59F1D3203457}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{21229313-0E36-4322-A476-08A9BFA76420}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{21716B94-4BCA-44DC-935D-C3A5820D11C3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{21A5D2E9-0744-4E80-8D7D-8DC2FCE4816B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{2286017A-1CCD-4A8B-AC0E-C3C616DD82FB}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{232D2408-BC7E-4835-B1A0-8BEA8D423F41}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{2355CC26-CED1-4837-837E-B9EFF1F19439}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{25464FFE-92F8-49E9-8CFA-D47DBE22C5A6}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe | 
"{26FD0BC6-4E76-44EB-8292-AB789882DAC6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{273F292B-F9E3-4CF8-84D1-BFA3B72995A7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{278D3A34-63A6-422B-950F-D5A9F4088398}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{27D8863B-A70E-4199-8987-5A3A10E6AAA5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{28AC374C-F1B8-4727-B4AB-BF831044CE25}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{29D1F45C-93A8-4FF9-A6E2-0F76956C6D17}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{2CABAE65-9B13-4665-9A6D-24E9D35986B0}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe | 
"{2D5D3AC8-2323-4C67-9BCA-420F94ADB6D2}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{2EF50973-DEAE-4EB6-9560-283FCA530CDD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{30D453F7-43A0-43D1-ACDA-350293E435FA}" = protocol=6 | dir=in | app=c:\riot games\league of legends\game\league of legends.exe | 
"{31135143-9A0B-4179-8497-5235FA10BD9E}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 12\programs\rm.exe | 
"{3398C6FB-84B9-48FF-8A41-C25149626A0C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{33C446C9-DDE7-45E6-9F74-90FBC4316D22}" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe | 
"{350BCF8B-5B79-4B7E-A847-5AE963A09F40}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version4\teamviewer.exe | 
"{364B70AD-63DB-4D27-ABA4-2853D446FDB7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{38B529BE-906D-463A-A311-BA51784A690F}" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\curseclient.exe | 
"{3912B88B-1A15-4B5D-B94A-38682B37DA5A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{395AD531-96E2-4E53-BB51-6E4EEE862542}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 12\programs\umi.exe | 
"{39B91CCE-BA77-45F0-B694-9828C8180B83}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3A3F4D66-4693-4F50-B4AF-76C229B99401}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3A597561-E1F4-42ED-9171-5E3EDD51CB83}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3A9C3BC0-D726-4E2A-97A0-3E263DED6197}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 12\programs\studio.exe | 
"{3C10D18F-E1E8-41F0-BFBB-6ABE28358020}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3C638C05-6EC5-4C8C-94A0-DE9142A6F677}" = protocol=6 | dir=in | app=c:\program files\league of legendseu\game\league of legends.exe | 
"{3EC421AE-4D71-44F5-8E71-09EE0F7B9823}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3FA97703-96D5-40F1-A8D5-D8FAED7429F5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{40CF0B84-DE37-4B0D-8103-53D6D75C01D2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{40DA8E85-8A80-4989-9142-F2C6C1A71FDA}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{40E9AE4C-1410-44C8-AA4A-4641BEA36AA4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4121E952-EDDA-4423-AD3F-EFB19240AA96}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{417022E7-A5A2-4726-AED4-021988BACDB2}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{42459E81-3B83-4D4B-AC28-D07AE6106EFF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{433EEAC1-B56B-4BE8-BAA4-DDD8D108EF70}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{43BD9C36-3822-49AD-8CE1-E9A347B83490}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4455660E-5CE6-448D-AC98-8768E9E677DE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{44D0051D-BDB0-41A2-8FCC-B5FC3BAA1849}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{44DD6B6F-F352-4445-B09B-B5A9626B7829}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"{44DF9EF6-E174-47DF-BDD4-F3BFE8B8C215}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe | 
"{44E4BA2E-0361-4957-8E6D-DA19EF27BE23}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{44E6F837-DC8F-4034-91E8-C85A64563A5E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4532AD2C-93A0-4883-AC80-F258D4CC3FCD}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{45A53092-DB02-44C8-9CB9-4C2ACC3A40AD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{483047AE-7512-45A9-805B-8ADC978D7FF1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{483EB36A-E388-4FF5-9E12-B4730843CE6B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{48955B64-5D9C-460E-B83F-F2BCAF091078}" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\curseclient.exe | 
"{49156998-CE8E-402B-AF38-1854C94DE089}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{493F5247-B381-414B-BAE7-DCC7F69BFF8E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4C6C2A01-5C1C-44F2-85A0-FF2C13FB0AF1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4CD1FF0C-9F84-4295-A8E2-0382F6C7533C}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{4DFDD033-B6CF-41D4-886C-94217040A35C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4E08FFF6-D673-4E80-B01A-792866474ADE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4EF1D76B-968B-46D7-85FA-2C6BDAE57E91}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4F1E98B6-CB5D-4D63-BAE4-85CC8E04466F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{4FB4FCC5-8743-4D27-88B3-3B6ECB41F172}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{4FD8C054-B044-48DB-B23E-BFF477765F71}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{513ACF48-CAE6-47E5-8BC1-87D1EE83FFC4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5166C532-C1E5-4916-9C4D-144AF24772D4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{516D030C-89F2-4CDD-9597-5E1DBE9CE619}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{519B32BA-A7CE-4F7A-A784-15DE18A0DBB9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{52009228-2916-424C-8547-852607225A82}" = protocol=6 | dir=in | app=c:\program files\efusion\blackshot\system\blackshot.exe | 
"{525F4665-A24E-41D0-BB67-8A7E8C0015E8}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{548C201B-1136-49F5-9758-6A189E8DF962}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{551230EA-25A4-499F-88E2-CC4553D1EAAA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{55F70A6B-887A-41D8-9830-4B6F198B45FF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{56094FCE-4A6A-42C1-8267-AF39E97B5E82}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{56FAC4A7-190A-4E65-94E2-C7D70337015D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{57CA4953-A6AB-41A7-AEF3-7B0EDEAF8F2C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{598069B4-2DE9-4DF3-A0D1-2DB1CC25FEC6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{59E06E78-5C1D-413F-80FC-5E969377220F}" = protocol=6 | dir=in | app=c:\program files\starcraft ii\versions\base16939\sc2.exe | 
"{5A18CD19-9C8D-4C9E-8253-2664E0776F0B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5AF768D4-089C-4600-A6CD-1B4E278264FC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5B3FA137-C47B-4D7C-B478-22A10BE49D6A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5C09D2F8-EEB1-4E40-9771-9D650EED33DA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5DC6C07E-EF8E-42FD-8533-B5A022A2C087}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5E9AE78B-9E37-4FF4-9C8E-CC1D174CA43D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5EA42685-8F1F-441F-8CF8-6C39B60310C2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5F14C159-C016-4667-AC1B-A470224A5376}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5F65816E-64ED-40A5-8856-E4011A133A21}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5F7B51CD-7132-4D1B-9509-84F755F1C6C5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5F916DEE-AF83-4A45-83E5-2F3EFEC47CB1}" = protocol=17 | dir=in | app=c:\program files\azureus\azureus.exe | 
"{5FD28EE6-9578-42B4-B9C3-03C058AA4892}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5FD6D727-D986-4B45-BC9E-C215334473BF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{60A11322-92C3-48F7-96BA-628F332CBA83}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{60DC3C4A-FAA5-4600-BA05-C93F937280E5}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe | 
"{60E4FB97-76FC-4EB7-A038-C5F4E224242C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{622E7692-D164-46AB-AB09-49DF3297CB3F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{642BD5FE-B562-4714-9D91-D9A2525CBD78}" = protocol=6 | dir=in | app=c:\program files\league of legends\air\lolclient.exe | 
"{653A9E9B-8AE9-488F-8D69-19A8A2589E06}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | 
"{65506F79-0F15-4DAE-BD4A-727B1148BB3E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{656768F2-6E02-40FF-B141-D83C58AF865D}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version4\teamviewer.exe | 
"{65AE3687-96FD-4056-A081-12A8EB0D064D}" = protocol=6 | dir=in | app=c:\riot games\league of legends\air\lolclient.exe | 
"{65DCF57C-DB76-4058-9363-8976AD7C2BA8}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{66601C60-C501-44DF-A01D-68F68445A518}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{66AAEE61-B1B7-4B74-A7CE-EF52D4B11490}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\blizzard downloader.exe | 
"{66C1436C-86DA-4CA3-8E31-AB77C5A9BEB2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{67006667-823C-4F7F-90A8-623260AF37E7}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{6737EC21-161F-44FC-AB03-26B500F35E56}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{688D1BE6-CB96-4B4A-AF7C-8F88A7EFFF20}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6A0934A9-9199-4FD6-BEC1-58F0AF5F06FA}" = protocol=6 | dir=in | app=c:\program files\league of legendseu\air\lolclient.exe | 
"{6AEEBCB7-F391-4570-91E5-831CDA1387CE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6B075997-8270-4951-A946-FA16B42009DE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6B1FFBDF-C647-4D72-A515-94FE058ED9D6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6B8ABA4C-30F2-4AF2-AB52-7C6FF4887EA9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6BAFE30F-0805-4F7B-A9D4-E14D30ECC5FC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6D489858-97D6-4913-82E0-623AA17FE7AC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6D717FE1-E556-4D09-A0FF-D251CF84D248}" = protocol=17 | dir=in | app=c:\program files\tunngle\tnglctrl.exe | 
"{6ED0FCA1-BA32-4D63-945D-AED5AAD3DC50}" = protocol=17 | dir=in | app=c:\program files\tunngle\tunngle.exe | 
"{7186411A-D6F8-4254-8644-1F34579CE232}" = protocol=6 | dir=in | app=c:\program files\league of legends\game\league of legends.exe | 
"{718C382E-D2A9-4CA1-868F-69A38D336837}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{71F357DF-C210-4B9F-A351-24B80836C904}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{73496350-C66C-4564-ABC6-4901B4EDC87B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{737DDF62-8C6B-4F6B-A341-D9018C4D4D81}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{738B9757-8A63-495B-83E5-D7113E52943C}" = protocol=17 | dir=in | app=c:\riot games\league of legends\game\league of legends.exe | 
"{73AF9E24-53E6-464C-981F-3B23E5277E96}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{7439F468-5C89-4813-9030-AF114C79F14B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{75C02891-4148-4244-BB44-06F75705B183}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{768B52B8-6EFA-438B-9404-3B6309070CE0}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"{7738AE87-0BAA-4884-856B-9D0043591072}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{77447A94-EC0F-4171-9C2D-8648C6A058BE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{782D219D-4482-4053-B6BA-D053E7FE7F16}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{7D293378-7E2C-40CB-9620-F528308EB3D9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{7F1D8F67-1D13-470E-AD5D-4B320E4ECD1A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{80BA4B5E-6176-4290-BEF6-A5A4DF67B131}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{80CEC83C-A770-4E49-840A-137C33310E84}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{80F6DCF7-5990-4932-A11C-EBD40D99129D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8166FAED-86EA-462F-BBFC-9D216E8E035B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{829E7ADA-2B22-4623-BAE7-674B96DA34CE}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"{82AB9D7F-4ABC-4E16-BDF2-BA2967FE5607}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8391BCB2-C779-455F-9D52-043DF61FBEB2}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{863605B3-58CE-4A48-8A06-95B4770F2157}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{86D5B0DC-C264-40C7-8EE0-4853C87833C2}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{87453BC7-1817-47D5-9C1E-8B76E024760B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{88BF1634-03E3-4327-8779-C84C66D35D32}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 12\programs\rm.exe | 
"{8B96CD25-20DD-4084-B580-E01925F6F312}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8BB64CD6-A87C-4A18-B763-AD6AF7F489A3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8BED5837-B2D8-4573-8EF5-12D9F2445A26}" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa online 2\ff2client.exe | 
"{8D36BD22-A102-4FCA-9B8D-E4D6AE9A31B4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8EA749F4-783A-47C5-B391-557471CB63C5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8F51B900-FE37-4FFA-8774-CD2E486CCC51}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8F5AF6C7-3401-486A-BFD4-D8A3CB06BAAF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{90BDDEEF-AD60-4834-AA0A-6BCFA152EF33}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{912628EE-CB82-4D91-AA29-FEF186DE8189}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{919958B8-1F28-4B74-ABB4-1C59BE545940}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{91AE1A45-0FBF-4110-AA47-1C2053354DCA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{93BD42EF-2C77-429A-AFE3-6AF32D28E664}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{93DF77D6-B00B-423B-A584-4A213BBF9DAD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{93FE1C43-4F2D-4DB0-92FC-C787DE1E27B5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{94D4F54C-2B0B-4C71-8DAF-01F47EE2D85A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{96704B5E-7D79-46B4-854E-BFE1676176D2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{97D83F36-1D94-43D9-B65D-07DF4350BE50}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{9A13C7F2-6C07-4D16-BC4A-FABEE207B199}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9AC08296-FBED-4CA9-B8A9-C55266B893A5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9AEB7737-935B-4170-8C5A-C78E1E1A49B5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9B7B9222-1347-41D1-A07C-8B3B7AD03268}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9BBD8CF0-733F-408D-9298-1C78072CCB8E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9BFCD25E-4DE9-44D5-BF87-A1993301AFDE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9D41B87C-A68E-4786-AAF7-69657409A489}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A061FF0A-D315-4211-AB28-D4326AD2B556}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A0B79DD1-04FC-4215-881B-89C8575A969E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A2E865BA-7575-44CE-B1F2-F6086A9E9245}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A35F127F-1E1C-420F-ABF2-039F05EB301E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A43A3980-E96F-4735-B9EE-319866130B90}" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe | 
"{A617878F-D5E0-4560-A09F-EB959F69FE6F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A77488C4-6683-421E-9264-D6735511B11C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A8BA60C6-66E0-433A-8648-7EACBFF90328}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A9E8C4D4-6A7E-4D51-AA74-C6D9FC3F5014}" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_1829574f2226d088\curseclient.exe | 
"{ABBB676B-E3AF-4BD5-9663-16B9558E1677}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ABBD40C8-4816-46CE-82E1-24C258728C62}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{AC8C4A10-2687-41E7-B125-0E7EFB0876B0}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{ACD05087-0DBA-466D-A212-E904D1F3CA12}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ACF383E4-8BBC-411F-9D9A-60A12D6EE981}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{ADB6C319-1569-437D-80CC-E293D7AD950A}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{ADC9062B-3727-4A32-81E8-F8D919DEFBAD}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | 
"{ADCCEFD6-2BBC-4DC4-968B-168B87A5FB7C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{AF138613-5DF7-44DE-96FA-45BD74385E23}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{AF8D89D3-2108-42CA-8FE9-855EA387CFE4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{AFDB6FDA-0CAA-4293-8B00-E2AAE534507F}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{B20A37C9-97CB-4918-A17A-9D9D2E9E8E91}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B2437E09-7F5C-4746-AE2A-6403DD32DDE1}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe | 
"{B2CA5154-9609-4CF1-AB9B-75BA6E443C9D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B32155BE-94FF-406A-81C8-CCD445A09F06}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B3336067-3F82-451A-91C0-AB806960439D}" = protocol=17 | dir=in | app=c:\program files\league of legendseu\air\lolclient.exe | 
"{B51DD4E6-18E0-4B01-AC3E-8AC4C8E91DA5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B5B30F64-9DE7-4F5A-BC5D-023A821D4CA6}" = protocol=17 | dir=in | app=c:\program files\gamespy arcade\aphex.exe | 
"{B604075B-EE8C-4606-A50D-7A57AB144B4E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B71D58D5-B4AA-41A8-AFA5-FCB5E5FA20B7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B798CDB9-FF3B-40B1-817C-0B057C5507C7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B8A8A48D-8E85-4A42-9CE3-F5321712D048}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B950522A-1CFD-40DE-BF08-78E5EDC9DBBF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B9908549-5F64-4533-B05F-0D1D70779F6F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B9A26349-9C39-446B-BADF-149A1A9AB7AF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B9B64F5C-1FA5-4463-9725-093640270686}" = protocol=17 | dir=in | app=c:\riot games\league of legends\air\lolclient.exe | 
"{B9F7CE58-20E6-4A16-8D41-91E38BC882E9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{BA7D0DD5-567C-4938-B891-F1BDA2456EE0}" = protocol=17 | dir=in | app=c:\program files\efusion\blackshot\system\blackshot.exe | 
"{BAAB28E5-EC44-4E8F-8835-078895DA93A3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{BEA6A99F-515E-4A10-AB39-B0D1B0CBAC07}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C4B83636-67C1-46CF-BEB6-5D0009F0BD42}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{C50595E0-21AD-4C78-A5CC-03810BF8416B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C565CEE7-F2BF-4A48-B351-4FE15D5B6B60}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C5BA2BCC-9B98-4563-9916-0ADCC4D434A2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C611EA3D-8F98-4118-AE44-A05DD898B484}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C62B4652-F315-4857-ABC1-0265732A7F3E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C63230F9-C84F-4C75-A23F-4DCA08E97D99}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C8309CFC-219A-4940-86FD-59D12F7015F3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C91F2632-2FB2-41FB-B3BD-0578884B7F82}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CA1531DF-7C36-40E1-B207-6DF684456AC2}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\blizzard downloader.exe | 
"{CA6BA8F8-FA9B-4E7B-9FAE-F5A13AF91414}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CC89FA21-EE8B-4C2F-A508-856E0454E125}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CC9A186F-967C-4993-9B04-5B214A7D1E2E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CEAE04C0-E172-43DA-B46D-E4F822F45875}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D0FEDBE2-DBFB-4C72-8F1E-5AC3F7FB098B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D11082FA-6280-48DC-8634-7BDDF6814586}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D15A79D5-5C5D-4CB8-B1BB-691A1FFF942F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D16D9C5D-6F00-4A46-9A95-397E5D0A87D4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D2711C89-3D33-455B-A53D-8658CAA73615}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D2AB794F-B6CA-4964-ABFD-587A3BB0A76A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D40CE88A-1583-4C01-A992-143146431F29}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D4203147-9FBD-425B-A102-37F38B5AB109}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D5037278-F862-4FF9-A211-D7CA4B2170D1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D5588566-7065-42F2-987E-451B20FA5D6E}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{D586A5A1-DBE1-4E55-8D5F-5DB390236749}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D62ECE4B-51DE-4A75-A79C-BA99EBF57E72}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D66ABE51-E552-4F36-979F-98CE3CCE22F0}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D6A518EB-ABB2-4E1C-AF7B-24064CF83448}" = protocol=6 | dir=in | app=c:\program files\tunngle\tnglctrl.exe | 
"{D6E15D1E-58E6-49C3-AC46-52CD1B3D6A9C}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{D82458AA-91AA-44E3-959B-30949391BEEA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D8261774-8E87-45EE-BB46-C63842DAD6B6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D9250CDB-16F4-4DFB-B169-66280CD53169}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D94ACBE5-8F5C-4FE2-80BA-8F83E2212EEB}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{DAB6D90E-C260-4AFE-BCB5-711CEB104797}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{DBA6BFC6-5835-4216-B837-8EC2DA79BBE4}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"{DC3999A2-161D-4955-847A-3F2BE184DF87}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe | 
"{DCD7BB7F-7379-4E5F-BA3A-5869849BF556}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{DFFE7CB6-91A9-4972-8CC7-10B9ED2A1076}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{DFFF14E8-D3D0-4907-9546-BDF99848170F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E041315F-2822-4986-9A1A-1B77FAE48187}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E0505CC3-A4D7-4D7D-A31C-56EB4D439A70}" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_1829574f2226d088\curseclient.exe | 
"{E1F5DF52-BD96-4237-B87D-B5FA2D02BF03}" = protocol=6 | dir=in | app=c:\program files\tunngle\tunngle.exe | 
"{E1F7BBBE-21F0-4435-B054-9557368C9A03}" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa online 2\ff2client.exe | 
"{E43039F7-9D3A-4198-B2A7-B58CADA54497}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{E5480B59-9E5F-4C93-8616-BDB7611D2819}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E5C9DF5C-F1BF-420E-AC54-7A5018F423CF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E701DB44-F305-435E-89A5-055AFD1A4608}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E7EC83C6-673D-4999-9B8C-AA76EE28C70C}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | 
"{E8AEE433-A9ED-4529-83C7-2DADDD9DF987}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EA67DFF9-03A8-4E42-B0FE-BDEFA284CABA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EC360666-3311-4816-A0AA-5674F129E8CB}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EC50AB6C-C414-44D7-B7FF-802F9F0936C6}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{EC5F345C-D990-4FFF-BF72-B35ABFAF1A12}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EC635937-C29A-44FC-9240-737B9B43F609}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EC8787D2-734C-4C15-8FFE-109C156EA16E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ECC8DAD2-AE20-4EBE-8CB6-4FBCFDBF6BB5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ED15EA85-A17C-4B61-832B-355C282D3742}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ED5ED060-73D3-439F-B943-5DFE99130C99}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EDB9A8FA-4B8A-4BB2-9E10-C0D4B37E5944}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EE5B4E98-7A93-43BA-8FA7-E114FE8575C3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EECD508E-EBE2-44E1-BE67-FBBB160730F6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EFFABA26-F188-4701-A311-F242ABD30D14}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EFFC954E-A565-48F3-AA0C-359049E0A891}" = protocol=17 | dir=in | app=c:\program files\starcraft ii\versions\base16939\sc2.exe | 
"{F09D6CD7-B9BA-401E-A9B2-02606C0FEE97}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F0D5AA8C-AA3C-4D72-AB6A-862B97DB5D2B}" = protocol=6 | dir=in | app=c:\program files\azureus\azureus.exe | 
"{F10C15A0-2CCA-4066-9A69-48641705B1C7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F317C0B4-465E-4FF2-BEB6-200FE17D6A76}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F36C808C-7BA6-4BCA-B16A-9C719BF2AC36}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F49180C7-DF26-48FA-ACD8-6540584274D9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F4BFBF7E-7B6E-4F9C-8E80-BA7BB652777F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F5CB95F5-CC50-4B47-BA6D-088EB49BE81E}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{F855CCB3-F18C-46DD-AB9E-824B3A4690E3}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{F8818C3D-86B1-4B5A-88E9-06E5505BE8EA}" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\curseclient.exe | 
"{F8D9B710-6240-451C-A6B7-C08912B5AEA2}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe | 
"{F96D9C8E-320E-4DA8-96C8-381192FAEE2F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F9D5B98A-C5F3-439D-8B29-88EE751E73C2}" = protocol=17 | dir=in | app=c:\program files\starcraft ii\starcraft ii.exe | 
"{FD03F112-1DD2-4BFC-B342-6F639E92AC35}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 12\programs\umi.exe | 
"{FD7C20AC-64FB-4371-8DED-423C271FD96D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FDB2D85F-0582-4633-943F-964363D3D395}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FDDD89C4-AA34-4793-8353-549D04C0F693}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FE1F2862-866B-470A-810D-7414B2BF094E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FFBD2327-5EB2-4DAB-8A1A-B28C97563E67}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FFD144A5-A012-4E34-9409-D3B6B7AD07C7}" = protocol=17 | dir=in | app=c:\program files\league of legends\game\league of legends.exe | 
"TCP Query User{02C4A627-F4BD-4752-BBDB-1C4115827CFF}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe | 
"TCP Query User{04B68121-ACE2-4AB0-8313-405390E9134F}C:\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\program files\dna\btdna.exe | 
"TCP Query User{25136F05-BBD9-4AE4-B0AE-8AC09E69F32C}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"TCP Query User{255DCBE7-87F0-4C6C-B3D1-C21C874AB30A}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"TCP Query User{2628AB79-6D83-4EBC-9AE2-D73E64CBA235}C:\users\public\games\world of warcraft\repair.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\repair.exe | 
"TCP Query User{30C5D884-702A-49A2-A12A-CA613FA8A8A3}C:\program files\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=6 | dir=in | app=c:\program files\firefly studios\stronghold crusader\stronghold crusader.exe | 
"TCP Query User{36CC4A8F-CC97-4729-9B08-AAAC7DC64DAA}C:\program files\microsoft games\age of empires\empiresx.exe" = protocol=6 | dir=in | app=c:\program files\microsoft games\age of empires\empiresx.exe | 
"TCP Query User{3C89D891-467C-4610-B3CC-711576270D74}C:\program files\microsoft games\age of empires ii\empires2.exe" = protocol=6 | dir=in | app=c:\program files\microsoft games\age of empires ii\empires2.exe | 
"TCP Query User{472AE01C-2922-401C-B051-C56D00ED7BDA}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\eumz81up\wow-dede-installer-downloader[1].exe" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\eumz81up\wow-dede-installer-downloader[1].exe | 
"TCP Query User{4A01DD73-E3BA-4A95-84FD-B389A8FA7C3C}C:\program files\thq\titan quest immortal throne\tqit.exe" = protocol=6 | dir=in | app=c:\program files\thq\titan quest immortal throne\tqit.exe | 
"TCP Query User{51F1E09D-4D88-46B0-B8F5-4A80457720C2}C:\program files\mta san andreas\server\mta server.exe" = protocol=6 | dir=in | app=c:\program files\mta san andreas\server\mta server.exe | 
"TCP Query User{58E20C1B-2EBD-4E81-A9C8-9132BA0F2528}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe | 
"TCP Query User{5A2D8065-EDBD-40A9-BAB8-D1134B638921}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"TCP Query User{5B93F425-2514-49DE-8C86-F36333622BC1}C:\users\alex\desktop\wow-dede-installer-downloader.exe" = protocol=6 | dir=in | app=c:\users\alex\desktop\wow-dede-installer-downloader.exe | 
"TCP Query User{5E1C7BDB-3CAD-49FE-9E6E-93E08960EF01}C:\program files\vuze\azureus.exe" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe | 
"TCP Query User{60386DCE-DBBF-44D6-8FBB-701BE6D12B8D}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | 
"TCP Query User{6326E158-045B-488D-B523-A8685D875701}C:\users\public\games\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | 
"TCP Query User{65B25804-0155-4F47-B273-F3D610683A09}C:\users\public\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\launcher.exe | 
"TCP Query User{662E1EFA-2E33-4892-A470-5087DC04EC00}C:\program files\eslwire\wire.exe" = protocol=6 | dir=in | app=c:\program files\eslwire\wire.exe | 
"TCP Query User{6926237A-C991-4F88-8AC4-A23F1E4951E0}C:\users\public\world of warcraft\repair.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\repair.exe | 
"TCP Query User{7533D322-97AA-451A-AA9D-076C8BF431A9}C:\program files\qtracker\qtracker.exe" = protocol=6 | dir=in | app=c:\program files\qtracker\qtracker.exe | 
"TCP Query User{75F18C2F-2D68-4F70-9C94-54F9977BDC06}C:\program files\warcraft iii\war3.exe" = protocol=6 | dir=in | app=c:\program files\warcraft iii\war3.exe | 
"TCP Query User{784233C1-7D39-4671-B9DD-5EDD2F235873}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"TCP Query User{8140FD99-D3F0-43AE-B041-5A5377213886}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\7vw01km9\wow-burningcrusade-dede-installer-downloader[1].exe" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\7vw01km9\wow-burningcrusade-dede-installer-downloader[1].exe | 
"TCP Query User{8211C97C-3582-4A9F-A204-B7D1C981A315}C:\program files\gamersfirst\parabellum beta\binaries\parabellumthegame.exe" = protocol=6 | dir=in | app=c:\program files\gamersfirst\parabellum beta\binaries\parabellumthegame.exe | 
"TCP Query User{8CA58364-7AD0-4BD0-911F-136CA2207406}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{9517DE0C-3979-40A4-97DC-50B191206719}C:\users\alex\appdata\local\temp\fenpcn.exe" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\temp\fenpcn.exe | 
"TCP Query User{9C0FADD8-E476-4914-84A8-84380D8FA8AB}C:\program files\garena\garena.exe" = protocol=6 | dir=in | app=c:\program files\garena\garena.exe | 
"TCP Query User{AA1AF7F9-B1C1-4CDA-9E2F-6171B9A09606}C:\windows\system32\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"TCP Query User{CE74116C-84E6-45D0-9CF2-57EF25D961C2}C:\users\public\games\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | 
"TCP Query User{D592155F-4138-476B-90D5-D2AA427496CE}C:\program files\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=6 | dir=in | app=c:\program files\firefly studios\stronghold crusader\stronghold crusader.exe | 
"TCP Query User{D6795B23-3E0F-4088-A394-9F55FFE5F307}C:\users\alex\desktop\wow-burningcrusade-dede-installer-downloader.exe" = protocol=6 | dir=in | app=c:\users\alex\desktop\wow-burningcrusade-dede-installer-downloader.exe | 
"TCP Query User{D691F98C-D1DC-4911-8E96-B01B5F70ECFC}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | 
"TCP Query User{D692671C-05EB-4698-8DD3-FD6FB12F5541}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | 
"TCP Query User{DF1B1591-7E65-4077-9D30-2FEFEF159E68}C:\windows\system32\autochks.exe" = protocol=6 | dir=in | app=c:\windows\system32\autochks.exe | 
"TCP Query User{E0D11920-42CB-4263-B9B4-468BB5C41662}C:\users\alex\desktop\teamspeak-spam\teamspeak-spam\spamer.exe" = protocol=6 | dir=in | app=c:\users\alex\desktop\teamspeak-spam\teamspeak-spam\spamer.exe | 
"TCP Query User{E877B966-84A6-4194-BD1E-E6C30F0756D2}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe | 
"TCP Query User{F6EF70AE-E09B-4A5D-BDC6-CCB6F93F0F40}C:\program files\qtracker\qtracker.exe" = protocol=6 | dir=in | app=c:\program files\qtracker\qtracker.exe | 
"TCP Query User{F6F7AACA-D379-418A-A1F5-4D96D0FB9ABF}C:\program files\ea sports\fifa online\nfe.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa online\nfe.exe | 
"UDP Query User{00FC9481-4555-4BCA-8434-786D1983033B}C:\program files\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=17 | dir=in | app=c:\program files\firefly studios\stronghold crusader\stronghold crusader.exe | 
"UDP Query User{05C95CDE-8F32-4E68-AAD6-F316F462029C}C:\program files\qtracker\qtracker.exe" = protocol=17 | dir=in | app=c:\program files\qtracker\qtracker.exe | 
"UDP Query User{0802DB47-A656-41B3-BCD2-91EB359ADCC5}C:\program files\warcraft iii\war3.exe" = protocol=17 | dir=in | app=c:\program files\warcraft iii\war3.exe | 
"UDP Query User{181C30F3-834F-4ABA-8558-F91C084666FE}C:\program files\microsoft games\age of empires\empiresx.exe" = protocol=17 | dir=in | app=c:\program files\microsoft games\age of empires\empiresx.exe | 
"UDP Query User{195EFA6C-8590-4FD0-B8A8-8CC86804ADED}C:\windows\system32\autochks.exe" = protocol=17 | dir=in | app=c:\windows\system32\autochks.exe | 
"UDP Query User{204DD93E-B96A-40F1-A24C-4307BD874524}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"UDP Query User{2742FAC4-3D8F-41E2-B82C-FD5E4127BF5A}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{2DC9C1DB-1CB2-41FA-9EC4-8A21CCE59FE5}C:\program files\eslwire\wire.exe" = protocol=17 | dir=in | app=c:\program files\eslwire\wire.exe | 
"UDP Query User{2F400E4E-1EB0-4816-9AEF-9B9D7F744DB4}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe | 
"UDP Query User{32B2F13F-8BBD-4E62-B4A4-9259C6660708}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe | 
"UDP Query User{39B1B2F3-81FA-4B66-8467-DE375E9924F9}C:\program files\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=17 | dir=in | app=c:\program files\firefly studios\stronghold crusader\stronghold crusader.exe | 
"UDP Query User{46F7C473-EA6A-4B49-838D-F717040565D8}C:\program files\gamersfirst\parabellum beta\binaries\parabellumthegame.exe" = protocol=17 | dir=in | app=c:\program files\gamersfirst\parabellum beta\binaries\parabellumthegame.exe | 
"UDP Query User{4FE89DC7-6928-48C4-ACDD-7A7E7E7DB610}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"UDP Query User{510211D3-2788-4E48-A8C3-29F2AA7E2A63}C:\users\public\games\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | 
"UDP Query User{53921EE3-2C15-41BC-9031-CF9D281EDB8C}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\eumz81up\wow-dede-installer-downloader[1].exe" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\eumz81up\wow-dede-installer-downloader[1].exe | 
"UDP Query User{639816DC-68D8-4B97-A2E6-8ABAA0947EB9}C:\program files\qtracker\qtracker.exe" = protocol=17 | dir=in | app=c:\program files\qtracker\qtracker.exe | 
"UDP Query User{6A9F5E83-14C8-4AF7-BD79-CFEA2BEF803C}C:\users\public\games\world of warcraft\repair.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\repair.exe | 
"UDP Query User{752B9C7E-72D3-44D2-AC43-4CF312C64084}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | 
"UDP Query User{77C249B4-2CEE-46B2-BEDD-25849BE9AE67}C:\windows\system32\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"UDP Query User{783094AA-91BD-481B-8638-DB663F57B787}C:\users\alex\desktop\teamspeak-spam\teamspeak-spam\spamer.exe" = protocol=17 | dir=in | app=c:\users\alex\desktop\teamspeak-spam\teamspeak-spam\spamer.exe | 
"UDP Query User{7EDDABBC-29DC-4132-8226-14AF49D13F39}C:\program files\thq\titan quest immortal throne\tqit.exe" = protocol=17 | dir=in | app=c:\program files\thq\titan quest immortal throne\tqit.exe | 
"UDP Query User{83409CA4-ED4E-443C-8F13-81A938BDE9B7}C:\users\public\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\launcher.exe | 
"UDP Query User{8363CC21-7FC3-4CE3-BF0B-C33CCA2DD14F}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"UDP Query User{8A0AC47A-592F-4ACF-9A84-D4F334BBD4B1}C:\program files\garena\garena.exe" = protocol=17 | dir=in | app=c:\program files\garena\garena.exe | 
"UDP Query User{944E0100-49AA-4A72-B0F9-19D727AD7704}C:\program files\microsoft games\age of empires ii\empires2.exe" = protocol=17 | dir=in | app=c:\program files\microsoft games\age of empires ii\empires2.exe | 
"UDP Query User{9E443F39-A2AB-4E12-9935-196526E4B8AF}C:\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\program files\dna\btdna.exe | 
"UDP Query User{B3A06C91-244B-47E8-AE93-D26F7A79B31C}C:\users\public\games\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | 
"UDP Query User{B4D8C9C7-6031-440B-BC64-63DFCD4CF8FB}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\7vw01km9\wow-burningcrusade-dede-installer-downloader[1].exe" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\7vw01km9\wow-burningcrusade-dede-installer-downloader[1].exe | 
"UDP Query User{C2369AA4-B414-46B9-B6DC-A730B38D4AD5}C:\users\alex\desktop\wow-dede-installer-downloader.exe" = protocol=17 | dir=in | app=c:\users\alex\desktop\wow-dede-installer-downloader.exe | 
"UDP Query User{C26DDF11-F59B-495B-A81D-36CE84A973D6}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | 
"UDP Query User{D3729A68-52E7-44D3-ABB6-2860F32D767C}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | 
"UDP Query User{D646BCAF-B85A-4608-A710-8466E5FFE555}C:\program files\ea sports\fifa online\nfe.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa online\nfe.exe | 
"UDP Query User{E21747A9-9060-4D7B-8DDE-A891F9237A23}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"UDP Query User{E3D85B85-3C9B-40A5-82EA-1D8B0AB9B806}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe | 
"UDP Query User{E8273207-E76B-4BB5-AD90-2EF62269FA2B}C:\program files\mta san andreas\server\mta server.exe" = protocol=17 | dir=in | app=c:\program files\mta san andreas\server\mta server.exe | 
"UDP Query User{F018E423-9777-49AA-BD55-A5B06DB7E329}C:\users\alex\desktop\wow-burningcrusade-dede-installer-downloader.exe" = protocol=17 | dir=in | app=c:\users\alex\desktop\wow-burningcrusade-dede-installer-downloader.exe | 
"UDP Query User{F5CD1911-BD27-4EF5-9866-F3C230531156}C:\users\public\world of warcraft\repair.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\repair.exe | 
"UDP Query User{F82FE0F2-F5F6-40F5-86B2-E00A53EFD29B}C:\users\alex\appdata\local\temp\fenpcn.exe" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\temp\fenpcn.exe | 
"UDP Query User{FD30A812-E724-483D-98A8-B77A10C5AFEB}C:\program files\vuze\azureus.exe" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1C4551A6-4743-4093-91E4-1477CD655043}" = NVIDIA PhysX
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 16
"{28518520-F25C-48C3-A224-861F331602F4}" = Setup My PC
"{28999392-5871-4A39-863A-D2A6EA3260AF}" = League of Legends
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3559CDE0-11FC-4D7B-A65C-D646035B1031}" = Nero 8 Essentials
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}" = Titan Quest
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}" = Junk Mail filter update
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5A166C0B-9557-4364-A057-F946D674E6AC}" = Windows Live Mail
"{5BD55BA3-CE71-442B-87BD-86C83DA68E1D}_is1" = FIFA Online 2
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}" = NCsoft Launcher
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{62F7DA7E-CCCB-439C-A760-00C3926E761F}" = Microsoft Works
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B96DADA-1A27-4A04-8CB2-CC45168D05FA}" = Windows Live Fotogalerie
"{6FE3B0CE-37C1-4825-908A-5A84C9B4EC2F}" = EA SPORTS(TM) FIFA Online
"{709817E4-5439-4206-8738-796B34B623BD}" = MetaBoli
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World
"{7B63B2922B174135AFC0E1377DD81EC2}" = 
"{7C5B4583-7CBF-4289-B195-03B553959DEA}" = VoiceOver Kit
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Packard Bell Recovery Management
"{81821BF8-DA20-4F8C-AA87-F70A274828D4}" = Windows Live Writer
"{835686C5-8650-49EB-8CA0-4528B4035495}" = Windows Live Call
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{8C1E2925-14F8-45AA-B999-1E2A74BF5607}" = Windows Live Sync
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A1C962E2-2426-49C6-A38B-9A07E40D607C}" = Microsoft Games for Windows - LIVE
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A90000000001}" = Adobe Reader 9 - Deutsch
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B5C5C17E-FEF6-4062-8151-A427AE8AF9D7}" = Titan Quest Immortal Throne
"{C1080852-065E-4991-9260-F3756E3CC182}" = CursorFX
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{CA786CFF-1D31-4804-B436-F3405B14357F}" = Packard Bell Updator
"{CB4532F7-A1BD-46D2-9938-3E7D4656FB18}" = Razer Lachesis
"{CE12677C-F7D2-45A8-BBF9-0FC0B972EDC3}" = League of Legends
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D359B12F-9B1A-46FD-B70C-F507B5B11590}" = HDRegDE
"{D9D1A2FD-56B2-4F21-B959-745FE43CAB8C}" = Vegas Pro 9.0
"{DF5F687F-8018-4542-9F98-7084E9022917}" = Windows Live Essentials
"{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4EA67C9-6748-4C1E-9AFF-04149AC75D95}" = Packard Bell ImageWriter
"{F54AC413-D2C6-4A24-B324-370C223C6250}" = Adobe Photoshop Elements 6.0
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"12345_is1" = WeGame Client Beta 2.1.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop Elements 6" = Adobe Photoshop Elements 6.0
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Age of Empires Expansion 1.0" = Microsoft Age of Empires Expansion
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner (remove only)
"conduitEngine" = Conduit Engine
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX-Setup
"EA Installer.1475696318" = EA Installer
"Fraps" = Fraps (remove only)
"FUSSBALL MANAGER 11" = FUSSBALL MANAGER 11
"Garena" = Garena 2010
"Google Chrome" = Google Chrome
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HyperCam 2" = HyperCam 2
"ICQToolbar" = ICQ Toolbar
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"JA Launcher" = JA Launcher
"Magic ISO Maker v5.5 (build 0274)" = Magic ISO Maker v5.5 (build 0274)
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.4)" = Mozilla Firefox (3.5.4)
"NVIDIA Drivers" = NVIDIA Drivers
"Office2007" = Microsoft Office Home and Student
"OpenAL" = OpenAL
"PFConfig" = PFConfig 1.0.296
"PunkBusterSvc" = PunkBuster Services
"StarCraft II" = StarCraft II
"Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 4" = TeamViewer 4
"TuneUpMedia" = TuneUp Companion 1.9.0
"Tunngle beta_is1" = Tunngle beta
"Uninstall_is1" = Uninstall 1.0.0.1
"Vuze_Remote Toolbar" = Vuze_Remote Toolbar
"Warcraft III" = Warcraft III
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1 beta5
"WinRAR archiver" = WinRAR
"Works9se" = Microsoft Works 9.0 SE
"World of Warcraft" = World of Warcraft
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"090215de958f1060" = Curse Client
"BitTorrent DNA" = DNA
"CursorFX" = CursorFX
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"UnityWebPlayer" = Unity Web Player
 
========== Last 10 Event Log Errors ==========
 
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
 
< End of report >

--- --- ---

alex1411 · 21.01.2011, 15:47

OTL:OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 21.01.2011 14:55:08 - Run 1
OTL by OldTimer - Version 3.2.20.3     Folder = C:\Users\Alex\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 55,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 284,09 Gb Total Space | 121,64 Gb Free Space | 42,82% Space Free | Partition Type: NTFS
Drive D: | 7,22 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: ALEX-PC | User Name: Alex | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Alex\AppData\Local\Temp\N1Frqzj0P.exe (Microsoft)
PRC - C:\Users\Alex\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\systenn.exe (Microsoft)
PRC - C:\Windows\System32\aspimgr.exe (Microsoft Corporation)
PRC - C:\Windows\System32\AutoChks.exe (Microsoft)
PRC - C:\Users\Alex\AppData\Local\Temp\Jqp.exe (Adobe Flash Player)
PRC - C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Users\Alex\AppData\Local\Apps\2.0\2ZW712MB.BC1\8J0VV2ZX.02C\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\CurseClient.exe (Curse)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Tunngle\TnglCtrl.exe (Tunngle.net GmbH)
PRC - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\Java\jre6\bin\java.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Java\jre6\bin\jp2launcher.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\ACER\Preload\Autorun\DRV\Fiji Keyboard\AOSD.exe (Packard Bell BV)
PRC - C:\ACER\Preload\Autorun\DRV\Fiji Keyboard\ABoard.exe (Packard Bell BV)
PRC - C:\Program Files\PACKARD BELL\Packard Bell Recovery Management\Service\ETService.exe ()
PRC - C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV)
PRC - C:\Windows\System32\HidService.exe (Packard Bell Services)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Razer\Lachesis\razertra.exe ()
PRC - C:\Program Files\Razer\Lachesis\razerhid.exe ()
PRC - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
PRC - C:\Program Files\Razer\Lachesis\OSD.exe (razercfg MFC Application)
PRC - C:\Program Files\Razer\Lachesis\razerofa.exe (Razer Inc.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Alex\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dciman32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\ddraw.dll (Microsoft Corporation)
MOD - C:\Users\Alex\AppData\Local\amosesuz.dll ()
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (aspimgr) -- C:\Windows\System32\aspimgr.exe (Microsoft Corporation)
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (TunngleService) -- C:\Program Files\Tunngle\TnglCtrl.exe (Tunngle.net GmbH)
SRV - (npggsvc) -- C:\Windows\System32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (McComponentHostService) -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (TeamViewer4) -- C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (ICQ Service) -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe ()
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (ETService) -- C:\Program Files\PACKARD BELL\Packard Bell Recovery Management\Service\ETService.exe ()
SRV - (GenericHidService) -- C:\Windows\System32\HidService.exe (Packard Bell Services)
SRV - (ezSharedSvc) -- C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AdobeActiveFileMonitor6.0) -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
 
 
========== Driver Services (SafeList) ==========
 
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (tap0901t) TAP-Win32 Adapter V9 (Tunngle) -- C:\Windows\System32\drivers\tap0901t.sys (Tunngle.net)
DRV - (ESLvnic1) -- C:\Windows\System32\drivers\ESLvnic.sys (Turtle Entertainment GmbH)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (NPF) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (int15) -- C:\Windows\System32\drivers\int15.sys (Acer, Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (MegaSR) -- C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Corporation)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor32) -- C:\Windows\system32\DRIVERS\nvstor32.sys (NVIDIA Corporation)
DRV - (LachesisFltr) -- C:\Windows\System32\drivers\Lachesis.sys (Razer (Asia-Pacific) Pte Ltd)
DRV - (scramby_out) -- C:\Windows\System32\drivers\scramby_out.sys (RapidSolution Software AG)
DRV - (scramby) -- C:\Windows\System32\drivers\scramby.sys (RapidSolution Software AG)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation)
DRV - (MarvinBus) -- C:\Windows\System32\drivers\MarvinBus.sys (Pinnacle Systems GmbH)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = iGoogle Redirect
IE - HKLM\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - Reg Error: Key error. File not found
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Eng7 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "hxxp://search.conduit.com/?ctid=CT2405280&SearchSource=13"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.87
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}:2.5.8.6
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 3
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: sparweltgutscheinewl@sparwelt.de:1.0
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{9F144CF1-CE34-46CD-A1B2-71473665580B}: C:\Users\Alex\AppData\Local\{9F144CF1-CE34-46CD-A1B2-71473665580B} [2011.01.19 16:12:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.12.20 14:36:26 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.12.20 14:36:26 | 000,000,000 | ---D | M]
 
[2009.09.10 11:35:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Extensions
[2010.12.29 19:11:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions
[2009.09.11 20:39:16 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.05.24 12:32:17 | 000,000,000 | ---D | M] (Softonic-Eng7 Toolbar) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
[2010.12.29 22:27:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
[2010.08.13 15:25:44 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\firefox@tvunetworks.com
[2010.03.22 15:37:50 | 000,000,000 | ---D | M] (WINLOAD-Gutschein-Alarm) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\sparweltgutscheinewl@sparwelt.de
[2010.03.16 10:33:24 | 000,000,929 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\29epomms.default\searchplugins\conduit.xml
[2008.03.31 08:52:00 | 000,000,168 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\29epomms.default\searchplugins\icqplugin.gif
[2008.03.31 08:52:00 | 000,000,618 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\29epomms.default\searchplugins\icqplugin.src
[2010.08.17 22:36:21 | 000,000,955 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\29epomms.default\searchplugins\icqplugin.xml
[2010.08.18 00:30:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2009.10.11 15:12:18 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
File not found (No name found) -- C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\29EPOMMS.DEFAULT\EXTENSIONS\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}
[2010.08.18 11:22:41 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.08.18 11:22:41 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.08.18 11:22:41 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.08.18 11:22:41 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.08.18 11:22:41 | 000,000,801 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O2 - BHO: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found.
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found.
O3 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Auto Check Utility] C:\Windows\System32\AutoChks.exe (Microsoft)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [eRecoveryService]  File not found
O4 - HKLM..\Run: [FijiKeyboard] c:\ACER\Preload\Autorun\DRV\Fiji Keyboard\ABoard.exe (Packard Bell BV)
O4 - HKLM..\Run: [HKLM]  File not found
O4 - HKLM..\Run: [Isiholequ] C:\Users\Alex\AppData\Local\amosesuz.dll ()
O4 - HKLM..\Run: [Lachesis] C:\Program Files\Razer\Lachesis\razerhid.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [Regedit32]  File not found
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SmpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV)
O4 - HKLM..\Run: [systenn.exe] C:\Windows\systenn.exe (Microsoft)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [wuaucldt]  File not found
O4 - HKU\.DEFAULT..\Run: [jdsfjsdijf.exe]  File not found
O4 - HKU\.DEFAULT..\Run: [moonxxxxxx.exe]  File not found
O4 - HKU\.DEFAULT..\Run: [sjdfnhsjfk.exe]  File not found
O4 - HKU\.DEFAULT..\Run: [wuaucldt]  File not found
O4 - HKU\S-1-5-18..\Run: [jdsfjsdijf.exe]  File not found
O4 - HKU\S-1-5-18..\Run: [moonxxxxxx.exe]  File not found
O4 - HKU\S-1-5-18..\Run: [sjdfnhsjfk.exe]  File not found
O4 - HKU\S-1-5-18..\Run: [wuaucldt]  File not found
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [{17168A2F-B00A-3CF7-5AEF-5CF58ED63738}]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [0x017]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [BitTorrent DNA] C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [EA Core]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [HKCU]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [JP595IR86O] C:\Users\Alex\AppData\Local\Temp\Jqp.exe (Adobe Flash Player)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Lhuxocinexilahe] C:\Users\Alex\AppData\Local\Smsexias.dll (Progressive Networks)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Metropolis] C:\Windows\System32\sshnas21.dll (Avira GmbH)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [moonxxxxxx.exe]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [PlayNC Launcher]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [SmpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [systenn.exe] C:\Windows\systenn.exe (Microsoft)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [wuaucldt]  File not found
O4 - Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\system32\windows\svchost.exe
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Auto File System Conversion Utility = "C:\Program Files\Common Files\autoconvs.exe" (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\system32\windows\svchost.exe
O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} hxxp://www.fiaa.eu/OPLauncher.cab (Perparer Class)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Alex\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Alex\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O29 - HKLM SecurityProviders - (mdsgwggc.dll) -  File not found
O29 - HKLM SecurityProviders - (mgayqgsm.dll) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010.09.27 21:11:56 | 000,000,000 | ---D | M] - D:\AutoRun -- [ CDFS ]
O32 - AutoRun File - [2010.09.27 21:11:56 | 003,812,720 | R--- | M] (Electronic Arts Inc.) - D:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2010.09.27 21:11:56 | 000,000,049 | R--- | M] () - D:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{c7b0341e-7894-11de-b905-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c7b0341e-7894-11de-b905-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Autorun.exe -- [2010.09.27 21:11:56 | 003,812,720 | R--- | M] (Electronic Arts Inc.)
O33 - MountPoints2\{d3fc3ce0-2325-11e0-9117-0021979d731d}\Shell\AutoRun\command - "" = E:\cold\hott\systenn.exe
O33 - MountPoints2\{d3fc3ce0-2325-11e0-9117-0021979d731d}\Shell\Explore\Command - "" = E:\cold\hott\systenn.exe
O33 - MountPoints2\{d3fc3ce0-2325-11e0-9117-0021979d731d}\Shell\open\command - "" = E:\cold\hott\systenn.exe
O34 - HKLM BootExecute: (autocheck autochk /r \??\I:) -  File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
NetSvcs: ezSharedSvc - C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS)
 
 
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS -  File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS -  File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {08TTDTA0-S222-82JE-B06D-247P0HI1A736} - C:\Windows\system32\windows\svchost.exe Restart
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - 
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
 
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: VIDC.IV41 - C:\Windows\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.01.21 14:50:52 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe
[2011.01.21 14:17:19 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\Alex\Desktop\HiJackThis204.exe
[2011.01.20 07:16:06 | 000,031,744 | ---- | C] (Microsoft) -- C:\Windows\systenn.exe
[2011.01.19 16:12:56 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{9F144CF1-CE34-46CD-A1B2-71473665580B}
[2011.01.19 16:11:36 | 000,089,088 | -H-- | C] (Microsoft) -- C:\Program Files\Common Files\autoconvs.exe
[2011.01.19 16:11:36 | 000,089,088 | -H-- | C] (Microsoft) -- C:\Windows\System32\AutoChks.exe
[2011.01.19 16:11:27 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aspimgr.exe
[2011.01.19 16:10:28 | 000,188,928 | ---- | C] (Adobe Flash Player) -- C:\Windows\Jsegya.exe
[2011.01.19 16:10:18 | 000,328,192 | ---- | C] (Avira GmbH) -- C:\Windows\System32\sshnas21.dll
[2011.01.17 15:27:14 | 000,000,000 | ---D | C] -- C:\Program Files\PhotoScape
[2011.01.17 15:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters
[2011.01.17 15:10:32 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Ericsson
[2011.01.17 15:10:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony Ericsson
[2011.01.17 15:10:31 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson
[2011.01.16 15:16:41 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2011.01.12 17:30:08 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2011.01.12 17:30:07 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2011.01.07 19:48:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual DJ
[2011.01.07 19:48:49 | 000,000,000 | ---D | C] -- C:\Users\Alex\Documents\VirtualDJ
[2011.01.02 16:52:15 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Garena
[2011.01.02 16:52:10 | 000,000,000 | ---D | C] -- C:\Program Files\Garena
[2011.01.01 22:49:43 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\PokerStars.NET
[2011.01.01 22:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\PokerStars.NET
[2010.12.29 23:08:32 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\ConduitEngine
[2010.12.29 22:32:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2010.12.29 19:10:54 | 000,000,000 | ---D | C] -- C:\Program Files\ConduitEngine
[2010.12.29 19:10:52 | 000,000,000 | ---D | C] -- C:\Program Files\Vuze_Remote
[2010.12.27 18:19:02 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2010.12.27 18:04:10 | 000,000,000 | ---D | C] -- C:\Users\Alex\Documents\StarCraft II
[2010.12.27 18:04:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2010.12.27 18:04:10 | 000,000,000 | ---D | C] -- C:\Program Files\StarCraft II
[2010.09.25 17:36:33 | 814,143,398 | ---- | C] (GOA                                                         ) -- C:\Program Files\loleusetup.exe
[2008.01.21 03:24:21 | 000,090,112 | ---- | C] (Progressive Networks) -- C:\Users\Alex\AppData\Local\Smsexias.dll
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2011.01.21 14:50:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe
[2011.01.21 14:36:01 | 000,000,282 | -H-- | M] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2011.01.21 14:25:00 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.01.21 14:20:44 | 000,031,744 | ---- | M] (Microsoft) -- C:\Windows\systenn.exe
[2011.01.21 14:17:14 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\Alex\Desktop\HiJackThis204.exe
[2011.01.21 14:13:21 | 000,618,204 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.01.21 14:13:21 | 000,586,980 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.01.21 14:13:21 | 000,122,636 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.01.21 14:13:21 | 000,101,052 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.01.21 14:09:04 | 000,000,049 | ---- | M] () -- C:\Windows\kh7ptSJh
[2011.01.21 14:09:04 | 000,000,048 | ---- | M] () -- C:\Windows\OyLaFpY
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\X2VUkW
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\slVqcQews
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\otJuGY
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\3Pa3wiYfqd
[2011.01.21 14:09:04 | 000,000,046 | ---- | M] () -- C:\Windows\KG5olI
[2011.01.21 14:09:04 | 000,000,046 | ---- | M] () -- C:\Windows\IWwDT
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\KSj8pJ
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\Jj7rN
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\fXxE7bT
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\8VDa7CXl
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\VXIEcq
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\vQpJrTcBQF
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\sNYXsj
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\JJvvDR
[2011.01.21 14:09:04 | 000,000,043 | ---- | M] () -- C:\Windows\YpDSJy
[2011.01.21 14:09:04 | 000,000,043 | ---- | M] () -- C:\Windows\2Uk4Omx
[2011.01.21 14:09:04 | 000,000,042 | ---- | M] () -- C:\Windows\pfS2Um
[2011.01.21 14:09:04 | 000,000,042 | ---- | M] () -- C:\Windows\nvCd6if3w
[2011.01.21 14:09:04 | 000,000,042 | ---- | M] () -- C:\Windows\3jKGcwC
[2011.01.21 14:09:04 | 000,000,041 | ---- | M] () -- C:\Windows\Wrx6EWy5NX
[2011.01.21 14:09:04 | 000,000,041 | ---- | M] () -- C:\Windows\NEjhJ
[2011.01.21 14:09:04 | 000,000,041 | ---- | M] () -- C:\Windows\LeHXF
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\v6OmO
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\Jtd8F
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\egE75Sxs
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\AdSXd
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\U3fOBPUBc
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\t8NAq
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\OqM5GLT
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\5G58LL14A
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\VoTElV
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\O5AtO
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\lolVp8E2Sq
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\LmkGgkiF
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\i7JEeABY
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\gJhLQHw8
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\7gLkamXCV
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\22BMW7
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\Tx7Wm3eg
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\NWGnE5
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\NJUaq4
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\IxigT
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\E1cotQ5ms
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\j5MHLUC
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\InU5UjE
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\GCRklH23
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\fITo5SKO
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\4tqPC3lA
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\xwgRvKN2dT
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\VAGuFigpQh
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\RehIFV
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\noxvIPvM8
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\jwdbJS7
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\6JJRwDUT
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\y78eJvW
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\QVVVN
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\myAcFSqAAJ
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\E78qDIH
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\5nyf1fEa
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\YmH1HIPww
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\OQ3G8wK
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\lBYMDKb
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\awW5Ltxpf
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\1DG6BCm
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\thNrSB2V
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\QD8HB
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\Lixec7
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\IKTrTG
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\EjLkeU
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\cG5Hstso
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\63Cp1Oet
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\5Wa87L
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\qDgOR
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\nhj8qXLov
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\GnFLPKDtyK
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\C62hiui
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\XYOHDo
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\uH2whCXiG
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\lRvp8qsw
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\kBAie
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\JfKDsowR
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\birbkGtK
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\ax8uM4r7LP
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\APpT6oqFk
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\Usf1ElUGS
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\u4XNSwghot
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\kipV83i
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\Fd5jCgjD
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\e6JaP
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\dUAU1UB
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\ruqvTxBnU
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\GJgrd
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\FgoHg
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\bVIeGoH
[2011.01.21 14:09:04 | 000,000,026 | ---- | M] () -- C:\Windows\hUcwRlUJ
[2011.01.21 14:07:29 | 000,076,352 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011.01.21 14:07:28 | 000,076,352 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011.01.21 14:07:20 | 000,000,120 | ---- | M] () -- C:\Users\Alex\AppData\Local\Tzitofeji.dat
[2011.01.21 14:07:19 | 000,000,000 | ---- | M] () -- C:\Users\Alex\AppData\Local\Mkuzoya.bin
[2011.01.21 14:07:06 | 000,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml
[2011.01.21 14:06:57 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.01.21 14:06:53 | 000,003,216 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.01.21 14:06:53 | 000,003,216 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.01.21 14:06:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.01.20 22:21:42 | 000,000,000 | ---- | M] () -- C:\Windows\System32\Access.dat
[2011.01.20 21:54:40 | 000,042,496 | ---- | M] () -- C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.20 20:00:20 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2011.01.19 16:11:27 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aspimgr.exe
[2011.01.19 16:11:09 | 000,089,088 | -H-- | M] (Microsoft) -- C:\Program Files\Common Files\autoconvs.exe
[2011.01.19 16:11:09 | 000,089,088 | -H-- | M] (Microsoft) -- C:\Windows\System32\AutoChks.exe
[2011.01.19 16:10:19 | 000,188,928 | ---- | M] (Adobe Flash Player) -- C:\Windows\Jsegya.exe
[2011.01.19 16:10:18 | 000,328,192 | ---- | M] (Avira GmbH) -- C:\Windows\System32\sshnas21.dll
[2011.01.18 19:18:49 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2011.01.08 11:53:40 | 000,399,864 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.01.02 21:28:48 | 000,000,000 | ---- | M] () -- C:\ProgramData\u93m49d75bggngr4hwj6rkynxz80tmy3.ini
[2011.01.02 21:28:47 | 000,000,032 | ---- | M] () -- C:\ProgramData\io.ini
[2010.12.28 15:57:35 | 000,409,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2010.12.27 20:45:47 | 000,000,880 | ---- | M] () -- C:\Users\Alex\Desktop\Manager 11.lnk
[2010.12.27 18:18:27 | 000,000,858 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[2010.12.27 13:18:31 | 000,138,968 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010.12.27 13:18:22 | 000,214,592 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2011.01.19 16:12:58 | 000,000,120 | ---- | C] () -- C:\Users\Alex\AppData\Local\Tzitofeji.dat
[2011.01.19 16:12:58 | 000,000,000 | ---- | C] () -- C:\Users\Alex\AppData\Local\Mkuzoya.bin
[2011.01.19 16:10:28 | 000,000,282 | -H-- | C] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2011.01.18 19:18:49 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2011.01.02 21:28:48 | 000,000,000 | ---- | C] () -- C:\ProgramData\u93m49d75bggngr4hwj6rkynxz80tmy3.ini
[2011.01.02 21:28:47 | 000,000,049 | ---- | C] () -- C:\Windows\kh7ptSJh
[2011.01.02 21:28:47 | 000,000,048 | ---- | C] () -- C:\Windows\OyLaFpY
[2011.01.02 21:28:47 | 000,000,047 | ---- | C] () -- C:\Windows\X2VUkW
[2011.01.02 21:28:47 | 000,000,047 | ---- | C] () -- C:\Windows\slVqcQews
[2011.01.02 21:28:47 | 000,000,047 | ---- | C] () -- C:\Windows\otJuGY
[2011.01.02 21:28:47 | 000,000,047 | ---- | C] () -- C:\Windows\3Pa3wiYfqd
[2011.01.02 21:28:47 | 000,000,046 | ---- | C] () -- C:\Windows\KG5olI
[2011.01.02 21:28:47 | 000,000,046 | ---- | C] () -- C:\Windows\IWwDT
[2011.01.02 21:28:47 | 000,000,045 | ---- | C] () -- C:\Windows\KSj8pJ
[2011.01.02 21:28:47 | 000,000,045 | ---- | C] () -- C:\Windows\Jj7rN
[2011.01.02 21:28:47 | 000,000,045 | ---- | C] () -- C:\Windows\fXxE7bT
[2011.01.02 21:28:47 | 000,000,045 | ---- | C] () -- C:\Windows\8VDa7CXl
[2011.01.02 21:28:47 | 000,000,044 | ---- | C] () -- C:\Windows\VXIEcq
[2011.01.02 21:28:47 | 000,000,044 | ---- | C] () -- C:\Windows\vQpJrTcBQF
[2011.01.02 21:28:47 | 000,000,044 | ---- | C] () -- C:\Windows\sNYXsj
[2011.01.02 21:28:47 | 000,000,044 | ---- | C] () -- C:\Windows\JJvvDR
[2011.01.02 21:28:47 | 000,000,043 | ---- | C] () -- C:\Windows\YpDSJy
[2011.01.02 21:28:47 | 000,000,043 | ---- | C] () -- C:\Windows\2Uk4Omx
[2011.01.02 21:28:47 | 000,000,042 | ---- | C] () -- C:\Windows\pfS2Um
[2011.01.02 21:28:47 | 000,000,042 | ---- | C] () -- C:\Windows\nvCd6if3w
[2011.01.02 21:28:47 | 000,000,042 | ---- | C] () -- C:\Windows\3jKGcwC
[2011.01.02 21:28:47 | 000,000,041 | ---- | C] () -- C:\Windows\Wrx6EWy5NX
[2011.01.02 21:28:47 | 000,000,041 | ---- | C] () -- C:\Windows\NEjhJ
[2011.01.02 21:28:47 | 000,000,041 | ---- | C] () -- C:\Windows\LeHXF
[2011.01.02 21:28:47 | 000,000,040 | ---- | C] () -- C:\Windows\v6OmO
[2011.01.02 21:28:47 | 000,000,040 | ---- | C] () -- C:\Windows\Jtd8F
[2011.01.02 21:28:47 | 000,000,040 | ---- | C] () -- C:\Windows\egE75Sxs
[2011.01.02 21:28:47 | 000,000,040 | ---- | C] () -- C:\Windows\AdSXd
[2011.01.02 21:28:47 | 000,000,039 | ---- | C] () -- C:\Windows\U3fOBPUBc
[2011.01.02 21:28:47 | 000,000,039 | ---- | C] () -- C:\Windows\t8NAq
[2011.01.02 21:28:47 | 000,000,039 | ---- | C] () -- C:\Windows\OqM5GLT
[2011.01.02 21:28:47 | 000,000,039 | ---- | C] () -- C:\Windows\5G58LL14A
[2011.01.02 21:28:47 | 000,000,038 | ---- | C] () -- C:\Windows\VoTElV
[2011.01.02 21:28:47 | 000,000,038 | ---- | C] () -- C:\Windows\O5AtO
[2011.01.02 21:28:47 | 000,000,038 | ---- | C] () -- C:\Windows\lolVp8E2Sq
[2011.01.02 21:28:47 | 000,000,038 | ---- | C] () -- C:\Windows\LmkGgkiF
[2011.01.02 21:28:47 | 000,000,037 | ---- | C] () -- C:\Windows\i7JEeABY
[2011.01.02 21:28:47 | 000,000,037 | ---- | C] () -- C:\Windows\gJhLQHw8
[2011.01.02 21:28:47 | 000,000,037 | ---- | C] () -- C:\Windows\7gLkamXCV
[2011.01.02 21:28:47 | 000,000,037 | ---- | C] () -- C:\Windows\22BMW7
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\Tx7Wm3eg
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\NWGnE5
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\NJUaq4
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\IxigT
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\E1cotQ5ms
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\j5MHLUC
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\InU5UjE
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\GCRklH23
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\fITo5SKO
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\4tqPC3lA
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\xwgRvKN2dT
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\VAGuFigpQh
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\RehIFV
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\noxvIPvM8
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\jwdbJS7
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\6JJRwDUT
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\y78eJvW
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\QVVVN
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\myAcFSqAAJ
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\E78qDIH
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\5nyf1fEa
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\YmH1HIPww
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\OQ3G8wK
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\lBYMDKb
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\ProgramData\io.ini
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\awW5Ltxpf
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\1DG6BCm
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\thNrSB2V
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\QD8HB
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\Lixec7
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\IKTrTG
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\EjLkeU
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\cG5Hstso
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\63Cp1Oet
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\5Wa87L
[2011.01.02 21:28:47 | 000,000,030 | ---- | C] () -- C:\Windows\qDgOR
[2011.01.02 21:28:47 | 000,000,030 | ---- | C] () -- C:\Windows\nhj8qXLov
[2011.01.02 21:28:47 | 000,000,030 | ---- | C] () -- C:\Windows\GnFLPKDtyK
[2011.01.02 21:28:47 | 000,000,030 | ---- | C] () -- C:\Windows\C62hiui
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\XYOHDo
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\uH2whCXiG
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\lRvp8qsw
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\kBAie
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\JfKDsowR
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\birbkGtK
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\ax8uM4r7LP
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\APpT6oqFk
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\Usf1ElUGS
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\u4XNSwghot
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\kipV83i
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\Fd5jCgjD
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\e6JaP
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\dUAU1UB
[2011.01.02 21:28:47 | 000,000,027 | ---- | C] () -- C:\Windows\ruqvTxBnU
[2011.01.02 21:28:47 | 000,000,027 | ---- | C] () -- C:\Windows\GJgrd
[2011.01.02 21:28:47 | 000,000,027 | ---- | C] () -- C:\Windows\FgoHg
[2011.01.02 21:28:47 | 000,000,027 | ---- | C] () -- C:\Windows\bVIeGoH
[2011.01.02 21:28:47 | 000,000,026 | ---- | C] () -- C:\Windows\hUcwRlUJ
[2010.12.27 20:45:47 | 000,000,880 | ---- | C] () -- C:\Users\Alex\Desktop\Manager 11.lnk
[2010.12.27 18:04:10 | 000,000,858 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[2010.12.10 21:56:06 | 000,001,012 | ---- | C] () -- C:\Windows\FOE2.ini
[2010.10.07 14:13:20 | 000,000,552 | ---- | C] () -- C:\Users\Alex\AppData\Local\d3d8caps.dat
[2010.03.15 13:44:28 | 000,000,680 | ---- | C] () -- C:\Users\Alex\AppData\Local\d3d9caps.dat
[2009.12.13 19:37:28 | 000,040,960 | ---- | C] () -- C:\Windows\System32\psfind.dll
[2009.11.30 21:33:42 | 000,000,510 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2009.11.09 16:24:16 | 000,000,206 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\wklnhst.dat
[2009.11.06 10:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2009.11.02 15:39:38 | 000,004,812 | ---- | C] () -- C:\Program Files\_process_device_.txt
[2009.11.02 15:02:07 | 000,001,088 | ---- | C] () -- C:\Program Files\blockword_eur.txt
[2009.11.02 15:02:07 | 000,000,127 | ---- | C] () -- C:\Program Files\background.txt
[2009.10.31 10:29:03 | 000,138,968 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2009.10.31 10:29:02 | 000,139,152 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\PnkBstrK.sys
[2009.10.31 10:28:48 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2009.10.07 05:21:19 | 000,002,097 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2009.09.05 20:12:37 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009.09.05 19:55:26 | 000,042,496 | ---- | C] () -- C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.09.05 14:35:42 | 000,076,352 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009.09.05 14:29:12 | 000,076,352 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.07.24 22:09:20 | 000,487,424 | ---- | C] () -- C:\Windows\System32\INT15.dll
[2009.01.11 07:05:37 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2009.01.11 06:56:57 | 000,000,566 | ---- | C] () -- C:\Windows\System32\hidservice.ini
[2009.01.11 06:53:33 | 000,001,694 | ---- | C] () -- C:\Windows\RtDefLvl.ini
[2008.12.23 16:33:18 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2008.10.07 08:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2008.10.07 08:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2008.01.21 03:24:21 | 000,233,472 | ---- | C] () -- C:\Users\Alex\AppData\Local\amosesuz.dll
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2005.04.08 03:16:43 | 000,085,493 | -H-- | C] () -- C:\Users\Alex\AppData\Roaming\Alexlog.dat
[2004.08.18 17:00:00 | 000,000,012 | ---- | C] () -- C:\Windows\ws386.ini
[1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2010.04.10 19:21:53 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Adobe
[2010.07.07 12:36:43 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Apple Computer
[2010.12.29 21:21:39 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Azureus
[2010.03.14 17:29:23 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Bioshock
[2010.09.01 12:14:51 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\DivX
[2011.01.21 14:57:22 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\DNA
[2009.09.05 14:45:57 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Google
[2010.04.07 13:26:15 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Hamachi
[2011.01.01 21:37:06 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\ICQ
[2009.09.05 14:35:29 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Identities
[2010.06.15 17:54:32 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\InstallShield
[2010.05.24 18:26:54 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\LolClient
[2009.09.05 14:47:07 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Macromedia
[2006.11.02 13:37:34 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Media Center Programs
[2011.01.03 18:23:57 | 000,000,000 | --SD | M] -- C:\Users\Alex\AppData\Roaming\Microsoft
[2010.09.14 21:13:28 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Mozilla
[2010.08.08 13:59:54 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Need for Speed World
[2009.10.31 06:56:03 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Nero
[2011.01.17 13:56:22 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Ocvo
[2010.03.23 13:51:52 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\OpenOffice.org
[2009.09.08 15:09:32 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Publish Providers
[2009.09.19 18:16:05 | 000,000,000 | RH-D | M] -- C:\Users\Alex\AppData\Roaming\SecuROM
[2011.01.21 14:57:02 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Skype
[2011.01.21 14:08:38 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\skypePM
[2010.09.05 18:25:45 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Sony
[2010.09.04 21:00:56 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\teamspeak2
[2009.09.09 16:35:00 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\TeamViewer
[2010.05.16 19:15:52 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\temp
[2009.11.09 16:24:18 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Template
[2011.01.20 17:48:46 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\TS3Client
[2010.10.16 14:03:05 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\TuneUpMedia
[2010.10.23 18:37:32 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Tunngle
[2011.01.17 15:29:22 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Upba
[2010.09.01 14:11:14 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\WeGame
[2009.09.06 18:25:27 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\WinRAR
 
< %APPDATA%\*.exe /s >
[2010.12.29 19:13:56 | 009,040,824 | ---- | M] (Vuze Inc.) -- C:\Users\Alex\AppData\Roaming\Azureus\tmp\AZU8805746203308043530.tmp\Vuze_4.5.1.0b_win32.exe
[2010.03.20 12:26:43 | 000,038,208 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
 
< %SYSTEMDRIVE%\*.exe >
[2010.06.02 05:22:02 | 000,537,432 | ---- | M] () -- C:\DXSETUP.exe
[2007.11.07 07:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
 
 
< MD5 for: AGP440.SYS  >
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006.11.02 10:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\drivers\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 10:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2008.10.29 07:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008.10.30 04:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008.10.28 03:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2008.01.21 03:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006.11.02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\System32\netlogon.dll
[2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2006.11.02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
 
< MD5 for: NVSTOR32.SYS  >
[2007.10.31 04:23:20 | 000,115,744 | ---- | M] (NVIDIA Corporation) MD5=4876E7C3184BDF50EDE043FEF616B867 -- C:\ACER\Preload\Autorun\DRV\nVidia Chipset MCP73\IDE\WinVista\sata_ide\nvstor32.sys
[2007.10.31 04:23:20 | 000,115,744 | ---- | M] (NVIDIA Corporation) MD5=4876E7C3184BDF50EDE043FEF616B867 -- C:\Windows\System32\drivers\nvstor32.sys
[2007.10.31 04:23:20 | 000,115,744 | ---- | M] (NVIDIA Corporation) MD5=4876E7C3184BDF50EDE043FEF616B867 -- C:\Windows\System32\DriverStore\FileRepository\nvstor32.inf_a4ed2674\nvstor32.sys
[2007.10.31 04:23:22 | 000,115,744 | ---- | M] (NVIDIA Corporation) MD5=9D2BD672C0461185D6EA1AE8BD3AE3F4 -- C:\ACER\Preload\Autorun\DRV\nVidia Chipset MCP73\IDE\WinVista\sataraid\nvstor32.sys
 
< MD5 for: SCECLI.DLL  >
[2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\System32\scecli.dll
[2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
 
< MD5 for: USER32.DLL  >
[2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
[2008.01.21 03:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll
[2008.01.21 03:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\System32\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
[2008.01.21 04:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2008.01.21 04:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2008.01.21 04:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006.11.02 11:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006.11.02 11:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
[2008.01.21 03:24:42 | 000,242,744 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll
[2008.01.21 03:24:38 | 000,225,792 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll
[1 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 64 bytes -> C:\Users\Alex\Jyant_(of_Metro_City)_-_Back_At_It.mp3:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Alex\Documents\clip0011.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Alex\Documents\clip0010.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Alex\Documents\clip0002.avi:TOC.WMV
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:05EE1EEF

< End of report >

--- --- ---

alex1411 · 21.01.2011, 15:47

OTL:OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 21.01.2011 14:55:08 - Run 1
OTL by OldTimer - Version 3.2.20.3     Folder = C:\Users\Alex\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 55,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 284,09 Gb Total Space | 121,64 Gb Free Space | 42,82% Space Free | Partition Type: NTFS
Drive D: | 7,22 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: ALEX-PC | User Name: Alex | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Alex\AppData\Local\Temp\N1Frqzj0P.exe (Microsoft)
PRC - C:\Users\Alex\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\systenn.exe (Microsoft)
PRC - C:\Windows\System32\aspimgr.exe (Microsoft Corporation)
PRC - C:\Windows\System32\AutoChks.exe (Microsoft)
PRC - C:\Users\Alex\AppData\Local\Temp\Jqp.exe (Adobe Flash Player)
PRC - C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Users\Alex\AppData\Local\Apps\2.0\2ZW712MB.BC1\8J0VV2ZX.02C\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\CurseClient.exe (Curse)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Tunngle\TnglCtrl.exe (Tunngle.net GmbH)
PRC - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\Java\jre6\bin\java.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Java\jre6\bin\jp2launcher.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\ACER\Preload\Autorun\DRV\Fiji Keyboard\AOSD.exe (Packard Bell BV)
PRC - C:\ACER\Preload\Autorun\DRV\Fiji Keyboard\ABoard.exe (Packard Bell BV)
PRC - C:\Program Files\PACKARD BELL\Packard Bell Recovery Management\Service\ETService.exe ()
PRC - C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV)
PRC - C:\Windows\System32\HidService.exe (Packard Bell Services)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Razer\Lachesis\razertra.exe ()
PRC - C:\Program Files\Razer\Lachesis\razerhid.exe ()
PRC - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
PRC - C:\Program Files\Razer\Lachesis\OSD.exe (razercfg MFC Application)
PRC - C:\Program Files\Razer\Lachesis\razerofa.exe (Razer Inc.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Alex\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dciman32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\ddraw.dll (Microsoft Corporation)
MOD - C:\Users\Alex\AppData\Local\amosesuz.dll ()
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (aspimgr) -- C:\Windows\System32\aspimgr.exe (Microsoft Corporation)
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (TunngleService) -- C:\Program Files\Tunngle\TnglCtrl.exe (Tunngle.net GmbH)
SRV - (npggsvc) -- C:\Windows\System32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (McComponentHostService) -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (TeamViewer4) -- C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (ICQ Service) -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe ()
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (ETService) -- C:\Program Files\PACKARD BELL\Packard Bell Recovery Management\Service\ETService.exe ()
SRV - (GenericHidService) -- C:\Windows\System32\HidService.exe (Packard Bell Services)
SRV - (ezSharedSvc) -- C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AdobeActiveFileMonitor6.0) -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
 
 
========== Driver Services (SafeList) ==========
 
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (tap0901t) TAP-Win32 Adapter V9 (Tunngle) -- C:\Windows\System32\drivers\tap0901t.sys (Tunngle.net)
DRV - (ESLvnic1) -- C:\Windows\System32\drivers\ESLvnic.sys (Turtle Entertainment GmbH)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (NPF) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (int15) -- C:\Windows\System32\drivers\int15.sys (Acer, Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (MegaSR) -- C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Corporation)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor32) -- C:\Windows\system32\DRIVERS\nvstor32.sys (NVIDIA Corporation)
DRV - (LachesisFltr) -- C:\Windows\System32\drivers\Lachesis.sys (Razer (Asia-Pacific) Pte Ltd)
DRV - (scramby_out) -- C:\Windows\System32\drivers\scramby_out.sys (RapidSolution Software AG)
DRV - (scramby) -- C:\Windows\System32\drivers\scramby.sys (RapidSolution Software AG)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation)
DRV - (MarvinBus) -- C:\Windows\System32\drivers\MarvinBus.sys (Pinnacle Systems GmbH)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = iGoogle Redirect
IE - HKLM\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - Reg Error: Key error. File not found
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Eng7 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "hxxp://search.conduit.com/?ctid=CT2405280&SearchSource=13"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.87
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}:2.5.8.6
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 3
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: sparweltgutscheinewl@sparwelt.de:1.0
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{9F144CF1-CE34-46CD-A1B2-71473665580B}: C:\Users\Alex\AppData\Local\{9F144CF1-CE34-46CD-A1B2-71473665580B} [2011.01.19 16:12:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.12.20 14:36:26 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.12.20 14:36:26 | 000,000,000 | ---D | M]
 
[2009.09.10 11:35:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Extensions
[2010.12.29 19:11:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions
[2009.09.11 20:39:16 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.05.24 12:32:17 | 000,000,000 | ---D | M] (Softonic-Eng7 Toolbar) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
[2010.12.29 22:27:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
[2010.08.13 15:25:44 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\firefox@tvunetworks.com
[2010.03.22 15:37:50 | 000,000,000 | ---D | M] (WINLOAD-Gutschein-Alarm) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\29epomms.default\extensions\sparweltgutscheinewl@sparwelt.de
[2010.03.16 10:33:24 | 000,000,929 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\29epomms.default\searchplugins\conduit.xml
[2008.03.31 08:52:00 | 000,000,168 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\29epomms.default\searchplugins\icqplugin.gif
[2008.03.31 08:52:00 | 000,000,618 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\29epomms.default\searchplugins\icqplugin.src
[2010.08.17 22:36:21 | 000,000,955 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\29epomms.default\searchplugins\icqplugin.xml
[2010.08.18 00:30:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2009.10.11 15:12:18 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
File not found (No name found) -- C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\29EPOMMS.DEFAULT\EXTENSIONS\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}
[2010.08.18 11:22:41 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.08.18 11:22:41 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.08.18 11:22:41 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.08.18 11:22:41 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.08.18 11:22:41 | 000,000,801 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O2 - BHO: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found.
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found.
O3 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Auto Check Utility] C:\Windows\System32\AutoChks.exe (Microsoft)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [eRecoveryService]  File not found
O4 - HKLM..\Run: [FijiKeyboard] c:\ACER\Preload\Autorun\DRV\Fiji Keyboard\ABoard.exe (Packard Bell BV)
O4 - HKLM..\Run: [HKLM]  File not found
O4 - HKLM..\Run: [Isiholequ] C:\Users\Alex\AppData\Local\amosesuz.dll ()
O4 - HKLM..\Run: [Lachesis] C:\Program Files\Razer\Lachesis\razerhid.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [Regedit32]  File not found
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SmpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV)
O4 - HKLM..\Run: [systenn.exe] C:\Windows\systenn.exe (Microsoft)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [wuaucldt]  File not found
O4 - HKU\.DEFAULT..\Run: [jdsfjsdijf.exe]  File not found
O4 - HKU\.DEFAULT..\Run: [moonxxxxxx.exe]  File not found
O4 - HKU\.DEFAULT..\Run: [sjdfnhsjfk.exe]  File not found
O4 - HKU\.DEFAULT..\Run: [wuaucldt]  File not found
O4 - HKU\S-1-5-18..\Run: [jdsfjsdijf.exe]  File not found
O4 - HKU\S-1-5-18..\Run: [moonxxxxxx.exe]  File not found
O4 - HKU\S-1-5-18..\Run: [sjdfnhsjfk.exe]  File not found
O4 - HKU\S-1-5-18..\Run: [wuaucldt]  File not found
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [{17168A2F-B00A-3CF7-5AEF-5CF58ED63738}]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [0x017]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [BitTorrent DNA] C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [EA Core]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [HKCU]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [JP595IR86O] C:\Users\Alex\AppData\Local\Temp\Jqp.exe (Adobe Flash Player)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Lhuxocinexilahe] C:\Users\Alex\AppData\Local\Smsexias.dll (Progressive Networks)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Metropolis] C:\Windows\System32\sshnas21.dll (Avira GmbH)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [moonxxxxxx.exe]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [PlayNC Launcher]  File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [SmpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [systenn.exe] C:\Windows\systenn.exe (Microsoft)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [wuaucldt]  File not found
O4 - Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\system32\windows\svchost.exe
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Auto File System Conversion Utility = "C:\Program Files\Common Files\autoconvs.exe" (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\system32\windows\svchost.exe
O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} hxxp://www.fiaa.eu/OPLauncher.cab (Perparer Class)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Alex\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Alex\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O29 - HKLM SecurityProviders - (mdsgwggc.dll) -  File not found
O29 - HKLM SecurityProviders - (mgayqgsm.dll) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010.09.27 21:11:56 | 000,000,000 | ---D | M] - D:\AutoRun -- [ CDFS ]
O32 - AutoRun File - [2010.09.27 21:11:56 | 003,812,720 | R--- | M] (Electronic Arts Inc.) - D:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2010.09.27 21:11:56 | 000,000,049 | R--- | M] () - D:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{c7b0341e-7894-11de-b905-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c7b0341e-7894-11de-b905-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Autorun.exe -- [2010.09.27 21:11:56 | 003,812,720 | R--- | M] (Electronic Arts Inc.)
O33 - MountPoints2\{d3fc3ce0-2325-11e0-9117-0021979d731d}\Shell\AutoRun\command - "" = E:\cold\hott\systenn.exe
O33 - MountPoints2\{d3fc3ce0-2325-11e0-9117-0021979d731d}\Shell\Explore\Command - "" = E:\cold\hott\systenn.exe
O33 - MountPoints2\{d3fc3ce0-2325-11e0-9117-0021979d731d}\Shell\open\command - "" = E:\cold\hott\systenn.exe
O34 - HKLM BootExecute: (autocheck autochk /r \??\I:) -  File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
NetSvcs: ezSharedSvc - C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS)
 
 
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS -  File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS -  File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {08TTDTA0-S222-82JE-B06D-247P0HI1A736} - C:\Windows\system32\windows\svchost.exe Restart
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - 
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
 
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: VIDC.IV41 - C:\Windows\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.01.21 14:50:52 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe
[2011.01.21 14:17:19 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\Alex\Desktop\HiJackThis204.exe
[2011.01.20 07:16:06 | 000,031,744 | ---- | C] (Microsoft) -- C:\Windows\systenn.exe
[2011.01.19 16:12:56 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{9F144CF1-CE34-46CD-A1B2-71473665580B}
[2011.01.19 16:11:36 | 000,089,088 | -H-- | C] (Microsoft) -- C:\Program Files\Common Files\autoconvs.exe
[2011.01.19 16:11:36 | 000,089,088 | -H-- | C] (Microsoft) -- C:\Windows\System32\AutoChks.exe
[2011.01.19 16:11:27 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aspimgr.exe
[2011.01.19 16:10:28 | 000,188,928 | ---- | C] (Adobe Flash Player) -- C:\Windows\Jsegya.exe
[2011.01.19 16:10:18 | 000,328,192 | ---- | C] (Avira GmbH) -- C:\Windows\System32\sshnas21.dll
[2011.01.17 15:27:14 | 000,000,000 | ---D | C] -- C:\Program Files\PhotoScape
[2011.01.17 15:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Fighters
[2011.01.17 15:10:32 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Ericsson
[2011.01.17 15:10:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony Ericsson
[2011.01.17 15:10:31 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson
[2011.01.16 15:16:41 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2011.01.12 17:30:08 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2011.01.12 17:30:07 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2011.01.07 19:48:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual DJ
[2011.01.07 19:48:49 | 000,000,000 | ---D | C] -- C:\Users\Alex\Documents\VirtualDJ
[2011.01.02 16:52:15 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Garena
[2011.01.02 16:52:10 | 000,000,000 | ---D | C] -- C:\Program Files\Garena
[2011.01.01 22:49:43 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\PokerStars.NET
[2011.01.01 22:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\PokerStars.NET
[2010.12.29 23:08:32 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\ConduitEngine
[2010.12.29 22:32:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2010.12.29 19:10:54 | 000,000,000 | ---D | C] -- C:\Program Files\ConduitEngine
[2010.12.29 19:10:52 | 000,000,000 | ---D | C] -- C:\Program Files\Vuze_Remote
[2010.12.27 18:19:02 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2010.12.27 18:04:10 | 000,000,000 | ---D | C] -- C:\Users\Alex\Documents\StarCraft II
[2010.12.27 18:04:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2010.12.27 18:04:10 | 000,000,000 | ---D | C] -- C:\Program Files\StarCraft II
[2010.09.25 17:36:33 | 814,143,398 | ---- | C] (GOA                                                         ) -- C:\Program Files\loleusetup.exe
[2008.01.21 03:24:21 | 000,090,112 | ---- | C] (Progressive Networks) -- C:\Users\Alex\AppData\Local\Smsexias.dll
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2011.01.21 14:50:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe
[2011.01.21 14:36:01 | 000,000,282 | -H-- | M] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2011.01.21 14:25:00 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.01.21 14:20:44 | 000,031,744 | ---- | M] (Microsoft) -- C:\Windows\systenn.exe
[2011.01.21 14:17:14 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\Alex\Desktop\HiJackThis204.exe
[2011.01.21 14:13:21 | 000,618,204 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.01.21 14:13:21 | 000,586,980 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.01.21 14:13:21 | 000,122,636 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.01.21 14:13:21 | 000,101,052 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.01.21 14:09:04 | 000,000,049 | ---- | M] () -- C:\Windows\kh7ptSJh
[2011.01.21 14:09:04 | 000,000,048 | ---- | M] () -- C:\Windows\OyLaFpY
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\X2VUkW
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\slVqcQews
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\otJuGY
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\3Pa3wiYfqd
[2011.01.21 14:09:04 | 000,000,046 | ---- | M] () -- C:\Windows\KG5olI
[2011.01.21 14:09:04 | 000,000,046 | ---- | M] () -- C:\Windows\IWwDT
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\KSj8pJ
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\Jj7rN
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\fXxE7bT
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\8VDa7CXl
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\VXIEcq
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\vQpJrTcBQF
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\sNYXsj
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\JJvvDR
[2011.01.21 14:09:04 | 000,000,043 | ---- | M] () -- C:\Windows\YpDSJy
[2011.01.21 14:09:04 | 000,000,043 | ---- | M] () -- C:\Windows\2Uk4Omx
[2011.01.21 14:09:04 | 000,000,042 | ---- | M] () -- C:\Windows\pfS2Um
[2011.01.21 14:09:04 | 000,000,042 | ---- | M] () -- C:\Windows\nvCd6if3w
[2011.01.21 14:09:04 | 000,000,042 | ---- | M] () -- C:\Windows\3jKGcwC
[2011.01.21 14:09:04 | 000,000,041 | ---- | M] () -- C:\Windows\Wrx6EWy5NX
[2011.01.21 14:09:04 | 000,000,041 | ---- | M] () -- C:\Windows\NEjhJ
[2011.01.21 14:09:04 | 000,000,041 | ---- | M] () -- C:\Windows\LeHXF
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\v6OmO
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\Jtd8F
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\egE75Sxs
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\AdSXd
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\U3fOBPUBc
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\t8NAq
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\OqM5GLT
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\5G58LL14A
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\VoTElV
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\O5AtO
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\lolVp8E2Sq
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\LmkGgkiF
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\i7JEeABY
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\gJhLQHw8
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\7gLkamXCV
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\22BMW7
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\Tx7Wm3eg
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\NWGnE5
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\NJUaq4
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\IxigT
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\E1cotQ5ms
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\j5MHLUC
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\InU5UjE
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\GCRklH23
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\fITo5SKO
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\4tqPC3lA
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\xwgRvKN2dT
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\VAGuFigpQh
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\RehIFV
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\noxvIPvM8
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\jwdbJS7
[2011.01.21 14:09:04 | 000,000,034 | ---- | M] () -- C:\Windows\6JJRwDUT
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\y78eJvW
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\QVVVN
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\myAcFSqAAJ
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\E78qDIH
[2011.01.21 14:09:04 | 000,000,033 | ---- | M] () -- C:\Windows\5nyf1fEa
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\YmH1HIPww
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\OQ3G8wK
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\lBYMDKb
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\awW5Ltxpf
[2011.01.21 14:09:04 | 000,000,032 | ---- | M] () -- C:\Windows\1DG6BCm
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\thNrSB2V
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\QD8HB
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\Lixec7
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\IKTrTG
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\EjLkeU
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\cG5Hstso
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\63Cp1Oet
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\5Wa87L
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\qDgOR
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\nhj8qXLov
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\GnFLPKDtyK
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\C62hiui
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\XYOHDo
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\uH2whCXiG
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\lRvp8qsw
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\kBAie
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\JfKDsowR
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\birbkGtK
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\ax8uM4r7LP
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\APpT6oqFk
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\Usf1ElUGS
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\u4XNSwghot
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\kipV83i
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\Fd5jCgjD
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\e6JaP
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\dUAU1UB
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\ruqvTxBnU
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\GJgrd
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\FgoHg
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\bVIeGoH
[2011.01.21 14:09:04 | 000,000,026 | ---- | M] () -- C:\Windows\hUcwRlUJ
[2011.01.21 14:07:29 | 000,076,352 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011.01.21 14:07:28 | 000,076,352 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011.01.21 14:07:20 | 000,000,120 | ---- | M] () -- C:\Users\Alex\AppData\Local\Tzitofeji.dat
[2011.01.21 14:07:19 | 000,000,000 | ---- | M] () -- C:\Users\Alex\AppData\Local\Mkuzoya.bin
[2011.01.21 14:07:06 | 000,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml
[2011.01.21 14:06:57 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.01.21 14:06:53 | 000,003,216 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.01.21 14:06:53 | 000,003,216 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.01.21 14:06:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.01.20 22:21:42 | 000,000,000 | ---- | M] () -- C:\Windows\System32\Access.dat
[2011.01.20 21:54:40 | 000,042,496 | ---- | M] () -- C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.20 20:00:20 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2011.01.19 16:11:27 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aspimgr.exe
[2011.01.19 16:11:09 | 000,089,088 | -H-- | M] (Microsoft) -- C:\Program Files\Common Files\autoconvs.exe
[2011.01.19 16:11:09 | 000,089,088 | -H-- | M] (Microsoft) -- C:\Windows\System32\AutoChks.exe
[2011.01.19 16:10:19 | 000,188,928 | ---- | M] (Adobe Flash Player) -- C:\Windows\Jsegya.exe
[2011.01.19 16:10:18 | 000,328,192 | ---- | M] (Avira GmbH) -- C:\Windows\System32\sshnas21.dll
[2011.01.18 19:18:49 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2011.01.08 11:53:40 | 000,399,864 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.01.02 21:28:48 | 000,000,000 | ---- | M] () -- C:\ProgramData\u93m49d75bggngr4hwj6rkynxz80tmy3.ini
[2011.01.02 21:28:47 | 000,000,032 | ---- | M] () -- C:\ProgramData\io.ini
[2010.12.28 15:57:35 | 000,409,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2010.12.27 20:45:47 | 000,000,880 | ---- | M] () -- C:\Users\Alex\Desktop\Manager 11.lnk
[2010.12.27 18:18:27 | 000,000,858 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[2010.12.27 13:18:31 | 000,138,968 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010.12.27 13:18:22 | 000,214,592 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2011.01.19 16:12:58 | 000,000,120 | ---- | C] () -- C:\Users\Alex\AppData\Local\Tzitofeji.dat
[2011.01.19 16:12:58 | 000,000,000 | ---- | C] () -- C:\Users\Alex\AppData\Local\Mkuzoya.bin
[2011.01.19 16:10:28 | 000,000,282 | -H-- | C] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2011.01.18 19:18:49 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2011.01.02 21:28:48 | 000,000,000 | ---- | C] () -- C:\ProgramData\u93m49d75bggngr4hwj6rkynxz80tmy3.ini
[2011.01.02 21:28:47 | 000,000,049 | ---- | C] () -- C:\Windows\kh7ptSJh
[2011.01.02 21:28:47 | 000,000,048 | ---- | C] () -- C:\Windows\OyLaFpY
[2011.01.02 21:28:47 | 000,000,047 | ---- | C] () -- C:\Windows\X2VUkW
[2011.01.02 21:28:47 | 000,000,047 | ---- | C] () -- C:\Windows\slVqcQews
[2011.01.02 21:28:47 | 000,000,047 | ---- | C] () -- C:\Windows\otJuGY
[2011.01.02 21:28:47 | 000,000,047 | ---- | C] () -- C:\Windows\3Pa3wiYfqd
[2011.01.02 21:28:47 | 000,000,046 | ---- | C] () -- C:\Windows\KG5olI
[2011.01.02 21:28:47 | 000,000,046 | ---- | C] () -- C:\Windows\IWwDT
[2011.01.02 21:28:47 | 000,000,045 | ---- | C] () -- C:\Windows\KSj8pJ
[2011.01.02 21:28:47 | 000,000,045 | ---- | C] () -- C:\Windows\Jj7rN
[2011.01.02 21:28:47 | 000,000,045 | ---- | C] () -- C:\Windows\fXxE7bT
[2011.01.02 21:28:47 | 000,000,045 | ---- | C] () -- C:\Windows\8VDa7CXl
[2011.01.02 21:28:47 | 000,000,044 | ---- | C] () -- C:\Windows\VXIEcq
[2011.01.02 21:28:47 | 000,000,044 | ---- | C] () -- C:\Windows\vQpJrTcBQF
[2011.01.02 21:28:47 | 000,000,044 | ---- | C] () -- C:\Windows\sNYXsj
[2011.01.02 21:28:47 | 000,000,044 | ---- | C] () -- C:\Windows\JJvvDR
[2011.01.02 21:28:47 | 000,000,043 | ---- | C] () -- C:\Windows\YpDSJy
[2011.01.02 21:28:47 | 000,000,043 | ---- | C] () -- C:\Windows\2Uk4Omx
[2011.01.02 21:28:47 | 000,000,042 | ---- | C] () -- C:\Windows\pfS2Um
[2011.01.02 21:28:47 | 000,000,042 | ---- | C] () -- C:\Windows\nvCd6if3w
[2011.01.02 21:28:47 | 000,000,042 | ---- | C] () -- C:\Windows\3jKGcwC
[2011.01.02 21:28:47 | 000,000,041 | ---- | C] () -- C:\Windows\Wrx6EWy5NX
[2011.01.02 21:28:47 | 000,000,041 | ---- | C] () -- C:\Windows\NEjhJ
[2011.01.02 21:28:47 | 000,000,041 | ---- | C] () -- C:\Windows\LeHXF
[2011.01.02 21:28:47 | 000,000,040 | ---- | C] () -- C:\Windows\v6OmO
[2011.01.02 21:28:47 | 000,000,040 | ---- | C] () -- C:\Windows\Jtd8F
[2011.01.02 21:28:47 | 000,000,040 | ---- | C] () -- C:\Windows\egE75Sxs
[2011.01.02 21:28:47 | 000,000,040 | ---- | C] () -- C:\Windows\AdSXd
[2011.01.02 21:28:47 | 000,000,039 | ---- | C] () -- C:\Windows\U3fOBPUBc
[2011.01.02 21:28:47 | 000,000,039 | ---- | C] () -- C:\Windows\t8NAq
[2011.01.02 21:28:47 | 000,000,039 | ---- | C] () -- C:\Windows\OqM5GLT
[2011.01.02 21:28:47 | 000,000,039 | ---- | C] () -- C:\Windows\5G58LL14A
[2011.01.02 21:28:47 | 000,000,038 | ---- | C] () -- C:\Windows\VoTElV
[2011.01.02 21:28:47 | 000,000,038 | ---- | C] () -- C:\Windows\O5AtO
[2011.01.02 21:28:47 | 000,000,038 | ---- | C] () -- C:\Windows\lolVp8E2Sq
[2011.01.02 21:28:47 | 000,000,038 | ---- | C] () -- C:\Windows\LmkGgkiF
[2011.01.02 21:28:47 | 000,000,037 | ---- | C] () -- C:\Windows\i7JEeABY
[2011.01.02 21:28:47 | 000,000,037 | ---- | C] () -- C:\Windows\gJhLQHw8
[2011.01.02 21:28:47 | 000,000,037 | ---- | C] () -- C:\Windows\7gLkamXCV
[2011.01.02 21:28:47 | 000,000,037 | ---- | C] () -- C:\Windows\22BMW7
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\Tx7Wm3eg
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\NWGnE5
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\NJUaq4
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\IxigT
[2011.01.02 21:28:47 | 000,000,036 | ---- | C] () -- C:\Windows\E1cotQ5ms
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\j5MHLUC
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\InU5UjE
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\GCRklH23
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\fITo5SKO
[2011.01.02 21:28:47 | 000,000,035 | ---- | C] () -- C:\Windows\4tqPC3lA
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\xwgRvKN2dT
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\VAGuFigpQh
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\RehIFV
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\noxvIPvM8
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\jwdbJS7
[2011.01.02 21:28:47 | 000,000,034 | ---- | C] () -- C:\Windows\6JJRwDUT
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\y78eJvW
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\QVVVN
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\myAcFSqAAJ
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\E78qDIH
[2011.01.02 21:28:47 | 000,000,033 | ---- | C] () -- C:\Windows\5nyf1fEa
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\YmH1HIPww
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\OQ3G8wK
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\lBYMDKb
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\ProgramData\io.ini
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\awW5Ltxpf
[2011.01.02 21:28:47 | 000,000,032 | ---- | C] () -- C:\Windows\1DG6BCm
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\thNrSB2V
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\QD8HB
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\Lixec7
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\IKTrTG
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\EjLkeU
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\cG5Hstso
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\63Cp1Oet
[2011.01.02 21:28:47 | 000,000,031 | ---- | C] () -- C:\Windows\5Wa87L
[2011.01.02 21:28:47 | 000,000,030 | ---- | C] () -- C:\Windows\qDgOR
[2011.01.02 21:28:47 | 000,000,030 | ---- | C] () -- C:\Windows\nhj8qXLov
[2011.01.02 21:28:47 | 000,000,030 | ---- | C] () -- C:\Windows\GnFLPKDtyK
[2011.01.02 21:28:47 | 000,000,030 | ---- | C] () -- C:\Windows\C62hiui
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\XYOHDo
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\uH2whCXiG
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\lRvp8qsw
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\kBAie
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\JfKDsowR
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\birbkGtK
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\ax8uM4r7LP
[2011.01.02 21:28:47 | 000,000,029 | ---- | C] () -- C:\Windows\APpT6oqFk
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\Usf1ElUGS
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\u4XNSwghot
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\kipV83i
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\Fd5jCgjD
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\e6JaP
[2011.01.02 21:28:47 | 000,000,028 | ---- | C] () -- C:\Windows\dUAU1UB
[2011.01.02 21:28:47 | 000,000,027 | ---- | C] () -- C:\Windows\ruqvTxBnU
[2011.01.02 21:28:47 | 000,000,027 | ---- | C] () -- C:\Windows\GJgrd
[2011.01.02 21:28:47 | 000,000,027 | ---- | C] () -- C:\Windows\FgoHg
[2011.01.02 21:28:47 | 000,000,027 | ---- | C] () -- C:\Windows\bVIeGoH
[2011.01.02 21:28:47 | 000,000,026 | ---- | C] () -- C:\Windows\hUcwRlUJ
[2010.12.27 20:45:47 | 000,000,880 | ---- | C] () -- C:\Users\Alex\Desktop\Manager 11.lnk
[2010.12.27 18:04:10 | 000,000,858 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[2010.12.10 21:56:06 | 000,001,012 | ---- | C] () -- C:\Windows\FOE2.ini
[2010.10.07 14:13:20 | 000,000,552 | ---- | C] () -- C:\Users\Alex\AppData\Local\d3d8caps.dat
[2010.03.15 13:44:28 | 000,000,680 | ---- | C] () -- C:\Users\Alex\AppData\Local\d3d9caps.dat
[2009.12.13 19:37:28 | 000,040,960 | ---- | C] () -- C:\Windows\System32\psfind.dll
[2009.11.30 21:33:42 | 000,000,510 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2009.11.09 16:24:16 | 000,000,206 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\wklnhst.dat
[2009.11.06 10:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2009.11.02 15:39:38 | 000,004,812 | ---- | C] () -- C:\Program Files\_process_device_.txt
[2009.11.02 15:02:07 | 000,001,088 | ---- | C] () -- C:\Program Files\blockword_eur.txt
[2009.11.02 15:02:07 | 000,000,127 | ---- | C] () -- C:\Program Files\background.txt
[2009.10.31 10:29:03 | 000,138,968 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2009.10.31 10:29:02 | 000,139,152 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\PnkBstrK.sys
[2009.10.31 10:28:48 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2009.10.07 05:21:19 | 000,002,097 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2009.09.05 20:12:37 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009.09.05 19:55:26 | 000,042,496 | ---- | C] () -- C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.09.05 14:35:42 | 000,076,352 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009.09.05 14:29:12 | 000,076,352 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.07.24 22:09:20 | 000,487,424 | ---- | C] () -- C:\Windows\System32\INT15.dll
[2009.01.11 07:05:37 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2009.01.11 06:56:57 | 000,000,566 | ---- | C] () -- C:\Windows\System32\hidservice.ini
[2009.01.11 06:53:33 | 000,001,694 | ---- | C] () -- C:\Windows\RtDefLvl.ini
[2008.12.23 16:33:18 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2008.10.07 08:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2008.10.07 08:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2008.01.21 03:24:21 | 000,233,472 | ---- | C] () -- C:\Users\Alex\AppData\Local\amosesuz.dll
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2005.04.08 03:16:43 | 000,085,493 | -H-- | C] () -- C:\Users\Alex\AppData\Roaming\Alexlog.dat
[2004.08.18 17:00:00 | 000,000,012 | ---- | C] () -- C:\Windows\ws386.ini
[1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2010.04.10 19:21:53 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Adobe
[2010.07.07 12:36:43 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Apple Computer
[2010.12.29 21:21:39 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Azureus
[2010.03.14 17:29:23 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Bioshock
[2010.09.01 12:14:51 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\DivX
[2011.01.21 14:57:22 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\DNA
[2009.09.05 14:45:57 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Google
[2010.04.07 13:26:15 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Hamachi
[2011.01.01 21:37:06 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\ICQ
[2009.09.05 14:35:29 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Identities
[2010.06.15 17:54:32 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\InstallShield
[2010.05.24 18:26:54 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\LolClient
[2009.09.05 14:47:07 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Macromedia
[2006.11.02 13:37:34 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Media Center Programs
[2011.01.03 18:23:57 | 000,000,000 | --SD | M] -- C:\Users\Alex\AppData\Roaming\Microsoft
[2010.09.14 21:13:28 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Mozilla
[2010.08.08 13:59:54 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Need for Speed World
[2009.10.31 06:56:03 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Nero
[2011.01.17 13:56:22 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Ocvo
[2010.03.23 13:51:52 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\OpenOffice.org
[2009.09.08 15:09:32 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Publish Providers
[2009.09.19 18:16:05 | 000,000,000 | RH-D | M] -- C:\Users\Alex\AppData\Roaming\SecuROM
[2011.01.21 14:57:02 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Skype
[2011.01.21 14:08:38 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\skypePM
[2010.09.05 18:25:45 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Sony
[2010.09.04 21:00:56 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\teamspeak2
[2009.09.09 16:35:00 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\TeamViewer
[2010.05.16 19:15:52 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\temp
[2009.11.09 16:24:18 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Template
[2011.01.20 17:48:46 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\TS3Client
[2010.10.16 14:03:05 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\TuneUpMedia
[2010.10.23 18:37:32 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Tunngle
[2011.01.17 15:29:22 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\Upba
[2010.09.01 14:11:14 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\WeGame
[2009.09.06 18:25:27 | 000,000,000 | ---D | M] -- C:\Users\Alex\AppData\Roaming\WinRAR
 
< %APPDATA%\*.exe /s >
[2010.12.29 19:13:56 | 009,040,824 | ---- | M] (Vuze Inc.) -- C:\Users\Alex\AppData\Roaming\Azureus\tmp\AZU8805746203308043530.tmp\Vuze_4.5.1.0b_win32.exe
[2010.03.20 12:26:43 | 000,038,208 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
 
< %SYSTEMDRIVE%\*.exe >
[2010.06.02 05:22:02 | 000,537,432 | ---- | M] () -- C:\DXSETUP.exe
[2007.11.07 07:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
 
 
< MD5 for: AGP440.SYS  >
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006.11.02 10:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\drivers\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 10:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2008.10.29 07:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008.10.30 04:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008.10.28 03:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2008.01.21 03:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006.11.02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\System32\netlogon.dll
[2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2006.11.02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
 
< MD5 for: NVSTOR32.SYS  >
[2007.10.31 04:23:20 | 000,115,744 | ---- | M] (NVIDIA Corporation) MD5=4876E7C3184BDF50EDE043FEF616B867 -- C:\ACER\Preload\Autorun\DRV\nVidia Chipset MCP73\IDE\WinVista\sata_ide\nvstor32.sys
[2007.10.31 04:23:20 | 000,115,744 | ---- | M] (NVIDIA Corporation) MD5=4876E7C3184BDF50EDE043FEF616B867 -- C:\Windows\System32\drivers\nvstor32.sys
[2007.10.31 04:23:20 | 000,115,744 | ---- | M] (NVIDIA Corporation) MD5=4876E7C3184BDF50EDE043FEF616B867 -- C:\Windows\System32\DriverStore\FileRepository\nvstor32.inf_a4ed2674\nvstor32.sys
[2007.10.31 04:23:22 | 000,115,744 | ---- | M] (NVIDIA Corporation) MD5=9D2BD672C0461185D6EA1AE8BD3AE3F4 -- C:\ACER\Preload\Autorun\DRV\nVidia Chipset MCP73\IDE\WinVista\sataraid\nvstor32.sys
 
< MD5 for: SCECLI.DLL  >
[2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\System32\scecli.dll
[2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
 
< MD5 for: USER32.DLL  >
[2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
[2008.01.21 03:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll
[2008.01.21 03:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\System32\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
[2008.01.21 04:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2008.01.21 04:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2008.01.21 04:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006.11.02 11:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006.11.02 11:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
[2008.01.21 03:24:42 | 000,242,744 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll
[2008.01.21 03:24:38 | 000,225,792 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll
[1 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 64 bytes -> C:\Users\Alex\Jyant_(of_Metro_City)_-_Back_At_It.mp3:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Alex\Documents\clip0011.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Alex\Documents\clip0010.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Alex\Documents\clip0002.avi:TOC.WMV
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:05EE1EEF

< End of report >

--- --- ---

alex1411 · 21.01.2011, 15:49

OTL EXTRAS Logfile:

Code:

ATTFilter

OTL Extras logfile created on: 21.01.2011 14:55:09 - Run 1
OTL by OldTimer - Version 3.2.20.3     Folder = C:\Users\Alex\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 55,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 284,09 Gb Total Space | 121,64 Gb Free Space | 42,82% Space Free | Partition Type: NTFS
Drive D: | 7,22 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: ALEX-PC | User Name: Alex | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"systenn.exe" = C:\windows\systenn.exe -- (Microsoft)
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04E04B34-E39A-4B51-B414-9EDC1E84546F}" = lport=8380 | protocol=17 | dir=in | name=league of legends launcher | 
"{0CDBD07C-55DB-4228-9632-2E9269FE64AF}" = lport=8378 | protocol=6 | dir=in | name=league of legends launcher | 
"{0E03B119-DBDD-460C-863A-8002C4A0746F}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{10C0FC32-5968-4850-A3ED-D366924C983D}" = rport=445 | protocol=6 | dir=out | app=system | 
"{118FA02D-A72D-4B9F-BC3E-08735CC5BB05}" = lport=6928 | protocol=17 | dir=in | name=league of legends launcher | 
"{18F78702-F30B-499C-BB44-BF85CD60736C}" = lport=6978 | protocol=17 | dir=in | name=league of legends launcher | 
"{28790315-399E-41E8-A1AA-3C761EE95623}" = lport=8394 | protocol=17 | dir=in | name=league of legends launcher | 
"{29FC09A6-F180-49F3-BEA8-333CC9D99F09}" = lport=8378 | protocol=17 | dir=in | name=league of legends launcher | 
"{2AB1130B-8DB9-42D9-9668-7C2C0196966C}" = lport=8381 | protocol=17 | dir=in | name=league of legends launcher | 
"{2AB878A2-CC3E-441D-B8E6-5927EF7DEA14}" = lport=6979 | protocol=6 | dir=in | name=league of legends launcher | 
"{526C0C4D-FE6E-469E-9389-3DEF6CD0454B}" = lport=445 | protocol=6 | dir=in | app=system | 
"{54F6FDDA-1465-465E-8009-27655CE91166}" = rport=137 | protocol=17 | dir=out | app=system | 
"{62AC8BAC-13B2-4DC3-9A87-BEFD934C1BAD}" = lport=8394 | protocol=6 | dir=in | name=league of legends launcher | 
"{68906710-FC79-4A6E-B4F9-6C003CB2D426}" = lport=8377 | protocol=6 | dir=in | name=league of legends launcher | 
"{6FB80630-B581-496C-A176-E24CD21AF408}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 | 
"{7C75152A-2BA4-41AE-9014-2A9AF6DD0650}" = lport=8379 | protocol=17 | dir=in | name=league of legends launcher | 
"{823C91A2-D1DF-48E8-9F78-EB299D0691FB}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{836AD8F7-C72B-4A8A-AF6B-4D41A63A034A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{86AEBF82-657F-4F47-A458-928EEE1D1413}" = lport=6978 | protocol=6 | dir=in | name=league of legends launcher | 
"{89E7FF99-FCF0-4AF2-9009-C226CF13BE8C}" = lport=8381 | protocol=6 | dir=in | name=league of legends launcher | 
"{8E9D0DD2-6D21-4FCA-A7A7-C982CBCC8820}" = lport=8379 | protocol=6 | dir=in | name=league of legends launcher | 
"{96F6DD07-B25B-4DB8-BBA1-71D7194104EB}" = lport=6112 | protocol=6 | dir=in | name=battlenet | 
"{998D7C90-1EDE-4BB6-B3F4-77BD4C45F6A0}" = lport=6964 | protocol=6 | dir=in | name=league of legends launcher | 
"{9D8BC8A5-760B-46E8-A4B4-63E68FCA57A8}" = lport=6975 | protocol=6 | dir=in | name=league of legends launcher | 
"{B91108DE-30AC-417C-B946-AA1F7D7B8DF0}" = lport=8377 | protocol=17 | dir=in | name=league of legends launcher | 
"{BAF0D4A0-9887-4591-8929-86BF70A0FC61}" = lport=6979 | protocol=17 | dir=in | name=league of legends launcher | 
"{C39CF289-4505-4890-85FF-6321913E640D}" = lport=6964 | protocol=17 | dir=in | name=league of legends launcher | 
"{C5E66DB1-8ED3-4EF0-9C8E-D67C102EB52B}" = lport=137 | protocol=17 | dir=in | app=system | 
"{CCA94553-5A0F-4D51-A71C-E749AF01C94B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{D3CB1E3F-9D77-4DD0-A0AC-B74582771F0D}" = rport=139 | protocol=6 | dir=out | app=system | 
"{DBF7A446-1B6E-4C23-BE01-3AD518ABEB45}" = lport=138 | protocol=17 | dir=in | app=system | 
"{DEEE13CD-3B21-4CAB-B463-833DAC9EF963}" = lport=6928 | protocol=6 | dir=in | name=league of legends launcher | 
"{E7EB03D9-2B50-4DA2-B70D-36A36419FA8A}" = lport=8380 | protocol=6 | dir=in | name=league of legends launcher | 
"{F1158E64-17A1-40BF-8F00-3B59D4B9A052}" = rport=138 | protocol=17 | dir=out | app=system | 
"{F4604105-C24E-4695-B0A7-C3948D922B7F}" = lport=6975 | protocol=17 | dir=in | name=league of legends launcher | 
"{F7BB3109-17A2-4951-90CA-0D1605D243D5}" = lport=139 | protocol=6 | dir=in | app=system | 
"{FD3E20E1-21E0-41FF-916E-99498829BCF8}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{014D2935-B004-45A9-B627-50A8D0213BFC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{02D52228-D888-4A65-9343-B597E836D9B3}" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\curseclient.exe | 
"{03FFA77D-B9B6-46A5-9926-A1B34887711E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{04479145-4CC9-40D1-8A74-EE563895053D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{04863C6F-EEBB-40AF-BB59-1208ADF76116}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{04B53F62-01BA-436D-92B8-8B2709903AB7}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe | 
"{0547C83C-5226-442B-8986-251B55E5A292}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{07BFF430-B208-4D36-BB36-5F88287A3BFD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{088469DB-13AD-4EC5-91A6-82A1DE1EF22B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{088A66C9-EBFF-4686-AFA8-10C6F5939AD6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{09147010-4A77-4FB6-BBD8-D52069B649DE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{09C17E0D-9233-4CC3-ABF6-E00B2615D15E}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe | 
"{0AF0F7ED-0341-4C93-814C-CBB6374385FD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0AF8C994-A358-44FA-B8F5-212ACCFB96F7}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{0BA5D64B-A6B9-4A5F-A8D2-E8613A59303B}" = protocol=6 | dir=in | app=c:\program files\gamespy arcade\aphex.exe | 
"{0C79C6B3-A471-4EAC-8061-78B36949ACA9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0CD46D83-20CC-487D-B960-E4CEE2D218CE}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{0D581424-A9BB-4067-96D7-EBAC4D9F4225}" = protocol=17 | dir=in | app=c:\program files\dna\btdna.exe | 
"{0DB25762-6DE3-4BC1-898C-1952957D1AF8}" = protocol=6 | dir=in | app=c:\program files\dna\btdna.exe | 
"{0E7A4A2F-8A59-40F5-90AD-F872BE59CE8F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0ECEC873-FBA9-4054-BDD7-996591E58021}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0FC2F04B-0E4C-43E8-AA4D-FE7476844B3A}" = protocol=17 | dir=in | app=c:\program files\league of legendseu\game\league of legends.exe | 
"{1065E534-9F8F-4592-BDC2-B23C805E0C4F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{109FF717-DE59-4F10-88BC-0F97E8E551F3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{12710A97-5126-4B2A-A3F9-AF46CF1980A4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{135F4B82-078D-4922-A83D-C5C4E0D87154}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1391E5F7-DC35-49BB-8F80-2BFC308166E9}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{142D5236-9E58-4C21-9935-6BA6D81C622A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{143ED496-9336-4380-9CE1-BCD264ED9387}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1470248E-C391-4709-82F2-2FCABEEC7379}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{14E1C7A6-E730-4BFC-9484-3E8DE7BC7A42}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{15164A1D-7750-4648-B11F-F049C0555470}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 12\programs\studio.exe | 
"{15A7267D-6780-4431-94E0-86F80FBFDEBE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{15AF1C37-ED2D-433D-9AAD-5AA0DC3CB17B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{16048165-B636-4305-A8BB-AAD1E4B244DD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{164D914D-EDFE-4F8F-B614-AC0CD3576488}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{16A05C46-182B-4307-94DA-89C3AD771E5E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{16AE6344-FFDC-4F3A-9552-93222628485E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{16D47429-05F2-45CF-9C39-DE819CB5C5DA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{174BF0EC-F91A-4671-B527-F0599089EEB2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{17674194-021C-4C14-8239-2D7315FDDADD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{18EEEA02-EE1C-4C59-B948-D896CDBAAFFB}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{18F7BA25-69E8-40E9-AF7A-40AB45C3BE70}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{19BC9AC0-1F6A-4B6B-8622-86B9ED60F819}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{19BEDBE3-0123-407C-A560-012141EB9615}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1B05CD7A-4C2E-48A6-9AB0-3284AA5E4F3D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1B20DDDD-BC98-4969-9AE3-DAE026D3B8A1}" = protocol=6 | dir=in | app=c:\program files\starcraft ii\starcraft ii.exe | 
"{1B511740-4727-4FB6-8F7D-2605049E46E1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1BB82426-EE36-4DF8-AA1F-AFA7691CFF2D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1BBB4905-1D10-44DB-B5BC-0F6FD5178214}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1CA8D86A-9BB9-4142-AB3A-EC26D9BA8920}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1CF724E2-2C28-4F2F-BA8F-2863F63F75C0}" = protocol=17 | dir=in | app=c:\program files\league of legends\air\lolclient.exe | 
"{1CFEB06C-763C-467A-A1E7-908B08C3F355}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1DACB63E-1377-4DD6-9E5B-25F8F80F2C20}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1DCA88CB-A85A-41E4-BC49-77C84BA60F69}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{20CBD8CE-786E-474A-91F1-59F1D3203457}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{21229313-0E36-4322-A476-08A9BFA76420}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{21716B94-4BCA-44DC-935D-C3A5820D11C3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{21A5D2E9-0744-4E80-8D7D-8DC2FCE4816B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{2286017A-1CCD-4A8B-AC0E-C3C616DD82FB}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{232D2408-BC7E-4835-B1A0-8BEA8D423F41}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{2355CC26-CED1-4837-837E-B9EFF1F19439}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{25464FFE-92F8-49E9-8CFA-D47DBE22C5A6}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe | 
"{26FD0BC6-4E76-44EB-8292-AB789882DAC6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{273F292B-F9E3-4CF8-84D1-BFA3B72995A7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{278D3A34-63A6-422B-950F-D5A9F4088398}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{27D8863B-A70E-4199-8987-5A3A10E6AAA5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{28AC374C-F1B8-4727-B4AB-BF831044CE25}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{29D1F45C-93A8-4FF9-A6E2-0F76956C6D17}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{2CABAE65-9B13-4665-9A6D-24E9D35986B0}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe | 
"{2D5D3AC8-2323-4C67-9BCA-420F94ADB6D2}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{2EF50973-DEAE-4EB6-9560-283FCA530CDD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{30D453F7-43A0-43D1-ACDA-350293E435FA}" = protocol=6 | dir=in | app=c:\riot games\league of legends\game\league of legends.exe | 
"{31135143-9A0B-4179-8497-5235FA10BD9E}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 12\programs\rm.exe | 
"{3398C6FB-84B9-48FF-8A41-C25149626A0C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{33C446C9-DDE7-45E6-9F74-90FBC4316D22}" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe | 
"{350BCF8B-5B79-4B7E-A847-5AE963A09F40}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version4\teamviewer.exe | 
"{364B70AD-63DB-4D27-ABA4-2853D446FDB7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{38B529BE-906D-463A-A311-BA51784A690F}" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\curseclient.exe | 
"{3912B88B-1A15-4B5D-B94A-38682B37DA5A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{395AD531-96E2-4E53-BB51-6E4EEE862542}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 12\programs\umi.exe | 
"{39B91CCE-BA77-45F0-B694-9828C8180B83}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3A3F4D66-4693-4F50-B4AF-76C229B99401}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3A597561-E1F4-42ED-9171-5E3EDD51CB83}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3A9C3BC0-D726-4E2A-97A0-3E263DED6197}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 12\programs\studio.exe | 
"{3C10D18F-E1E8-41F0-BFBB-6ABE28358020}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3C638C05-6EC5-4C8C-94A0-DE9142A6F677}" = protocol=6 | dir=in | app=c:\program files\league of legendseu\game\league of legends.exe | 
"{3EC421AE-4D71-44F5-8E71-09EE0F7B9823}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3FA97703-96D5-40F1-A8D5-D8FAED7429F5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{40CF0B84-DE37-4B0D-8103-53D6D75C01D2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{40DA8E85-8A80-4989-9142-F2C6C1A71FDA}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{40E9AE4C-1410-44C8-AA4A-4641BEA36AA4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4121E952-EDDA-4423-AD3F-EFB19240AA96}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{417022E7-A5A2-4726-AED4-021988BACDB2}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{42459E81-3B83-4D4B-AC28-D07AE6106EFF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{433EEAC1-B56B-4BE8-BAA4-DDD8D108EF70}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{43BD9C36-3822-49AD-8CE1-E9A347B83490}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4455660E-5CE6-448D-AC98-8768E9E677DE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{44D0051D-BDB0-41A2-8FCC-B5FC3BAA1849}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{44DD6B6F-F352-4445-B09B-B5A9626B7829}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"{44DF9EF6-E174-47DF-BDD4-F3BFE8B8C215}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe | 
"{44E4BA2E-0361-4957-8E6D-DA19EF27BE23}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{44E6F837-DC8F-4034-91E8-C85A64563A5E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4532AD2C-93A0-4883-AC80-F258D4CC3FCD}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{45A53092-DB02-44C8-9CB9-4C2ACC3A40AD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{483047AE-7512-45A9-805B-8ADC978D7FF1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{483EB36A-E388-4FF5-9E12-B4730843CE6B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{48955B64-5D9C-460E-B83F-F2BCAF091078}" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\curseclient.exe | 
"{49156998-CE8E-402B-AF38-1854C94DE089}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{493F5247-B381-414B-BAE7-DCC7F69BFF8E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4C6C2A01-5C1C-44F2-85A0-FF2C13FB0AF1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4CD1FF0C-9F84-4295-A8E2-0382F6C7533C}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{4DFDD033-B6CF-41D4-886C-94217040A35C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4E08FFF6-D673-4E80-B01A-792866474ADE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4EF1D76B-968B-46D7-85FA-2C6BDAE57E91}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4F1E98B6-CB5D-4D63-BAE4-85CC8E04466F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{4FB4FCC5-8743-4D27-88B3-3B6ECB41F172}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{4FD8C054-B044-48DB-B23E-BFF477765F71}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{513ACF48-CAE6-47E5-8BC1-87D1EE83FFC4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5166C532-C1E5-4916-9C4D-144AF24772D4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{516D030C-89F2-4CDD-9597-5E1DBE9CE619}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{519B32BA-A7CE-4F7A-A784-15DE18A0DBB9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{52009228-2916-424C-8547-852607225A82}" = protocol=6 | dir=in | app=c:\program files\efusion\blackshot\system\blackshot.exe | 
"{525F4665-A24E-41D0-BB67-8A7E8C0015E8}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{548C201B-1136-49F5-9758-6A189E8DF962}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{551230EA-25A4-499F-88E2-CC4553D1EAAA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{55F70A6B-887A-41D8-9830-4B6F198B45FF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{56094FCE-4A6A-42C1-8267-AF39E97B5E82}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{56FAC4A7-190A-4E65-94E2-C7D70337015D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{57CA4953-A6AB-41A7-AEF3-7B0EDEAF8F2C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{598069B4-2DE9-4DF3-A0D1-2DB1CC25FEC6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{59E06E78-5C1D-413F-80FC-5E969377220F}" = protocol=6 | dir=in | app=c:\program files\starcraft ii\versions\base16939\sc2.exe | 
"{5A18CD19-9C8D-4C9E-8253-2664E0776F0B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5AF768D4-089C-4600-A6CD-1B4E278264FC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5B3FA137-C47B-4D7C-B478-22A10BE49D6A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5C09D2F8-EEB1-4E40-9771-9D650EED33DA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5DC6C07E-EF8E-42FD-8533-B5A022A2C087}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5E9AE78B-9E37-4FF4-9C8E-CC1D174CA43D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5EA42685-8F1F-441F-8CF8-6C39B60310C2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5F14C159-C016-4667-AC1B-A470224A5376}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5F65816E-64ED-40A5-8856-E4011A133A21}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5F7B51CD-7132-4D1B-9509-84F755F1C6C5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5F916DEE-AF83-4A45-83E5-2F3EFEC47CB1}" = protocol=17 | dir=in | app=c:\program files\azureus\azureus.exe | 
"{5FD28EE6-9578-42B4-B9C3-03C058AA4892}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5FD6D727-D986-4B45-BC9E-C215334473BF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{60A11322-92C3-48F7-96BA-628F332CBA83}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{60DC3C4A-FAA5-4600-BA05-C93F937280E5}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe | 
"{60E4FB97-76FC-4EB7-A038-C5F4E224242C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{622E7692-D164-46AB-AB09-49DF3297CB3F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{642BD5FE-B562-4714-9D91-D9A2525CBD78}" = protocol=6 | dir=in | app=c:\program files\league of legends\air\lolclient.exe | 
"{653A9E9B-8AE9-488F-8D69-19A8A2589E06}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | 
"{65506F79-0F15-4DAE-BD4A-727B1148BB3E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{656768F2-6E02-40FF-B141-D83C58AF865D}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version4\teamviewer.exe | 
"{65AE3687-96FD-4056-A081-12A8EB0D064D}" = protocol=6 | dir=in | app=c:\riot games\league of legends\air\lolclient.exe | 
"{65DCF57C-DB76-4058-9363-8976AD7C2BA8}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{66601C60-C501-44DF-A01D-68F68445A518}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{66AAEE61-B1B7-4B74-A7CE-EF52D4B11490}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\blizzard downloader.exe | 
"{66C1436C-86DA-4CA3-8E31-AB77C5A9BEB2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{67006667-823C-4F7F-90A8-623260AF37E7}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{6737EC21-161F-44FC-AB03-26B500F35E56}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe | 
"{688D1BE6-CB96-4B4A-AF7C-8F88A7EFFF20}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6A0934A9-9199-4FD6-BEC1-58F0AF5F06FA}" = protocol=6 | dir=in | app=c:\program files\league of legendseu\air\lolclient.exe | 
"{6AEEBCB7-F391-4570-91E5-831CDA1387CE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6B075997-8270-4951-A946-FA16B42009DE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6B1FFBDF-C647-4D72-A515-94FE058ED9D6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6B8ABA4C-30F2-4AF2-AB52-7C6FF4887EA9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6BAFE30F-0805-4F7B-A9D4-E14D30ECC5FC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6D489858-97D6-4913-82E0-623AA17FE7AC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6D717FE1-E556-4D09-A0FF-D251CF84D248}" = protocol=17 | dir=in | app=c:\program files\tunngle\tnglctrl.exe | 
"{6ED0FCA1-BA32-4D63-945D-AED5AAD3DC50}" = protocol=17 | dir=in | app=c:\program files\tunngle\tunngle.exe | 
"{7186411A-D6F8-4254-8644-1F34579CE232}" = protocol=6 | dir=in | app=c:\program files\league of legends\game\league of legends.exe | 
"{718C382E-D2A9-4CA1-868F-69A38D336837}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{71F357DF-C210-4B9F-A351-24B80836C904}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{73496350-C66C-4564-ABC6-4901B4EDC87B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{737DDF62-8C6B-4F6B-A341-D9018C4D4D81}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{738B9757-8A63-495B-83E5-D7113E52943C}" = protocol=17 | dir=in | app=c:\riot games\league of legends\game\league of legends.exe | 
"{73AF9E24-53E6-464C-981F-3B23E5277E96}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{7439F468-5C89-4813-9030-AF114C79F14B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{75C02891-4148-4244-BB44-06F75705B183}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{768B52B8-6EFA-438B-9404-3B6309070CE0}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"{7738AE87-0BAA-4884-856B-9D0043591072}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{77447A94-EC0F-4171-9C2D-8648C6A058BE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{782D219D-4482-4053-B6BA-D053E7FE7F16}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{7D293378-7E2C-40CB-9620-F528308EB3D9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{7F1D8F67-1D13-470E-AD5D-4B320E4ECD1A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{80BA4B5E-6176-4290-BEF6-A5A4DF67B131}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{80CEC83C-A770-4E49-840A-137C33310E84}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{80F6DCF7-5990-4932-A11C-EBD40D99129D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8166FAED-86EA-462F-BBFC-9D216E8E035B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{829E7ADA-2B22-4623-BAE7-674B96DA34CE}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"{82AB9D7F-4ABC-4E16-BDF2-BA2967FE5607}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8391BCB2-C779-455F-9D52-043DF61FBEB2}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{863605B3-58CE-4A48-8A06-95B4770F2157}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{86D5B0DC-C264-40C7-8EE0-4853C87833C2}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{87453BC7-1817-47D5-9C1E-8B76E024760B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{88BF1634-03E3-4327-8779-C84C66D35D32}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 12\programs\rm.exe | 
"{8B96CD25-20DD-4084-B580-E01925F6F312}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8BB64CD6-A87C-4A18-B763-AD6AF7F489A3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8BED5837-B2D8-4573-8EF5-12D9F2445A26}" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa online 2\ff2client.exe | 
"{8D36BD22-A102-4FCA-9B8D-E4D6AE9A31B4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8EA749F4-783A-47C5-B391-557471CB63C5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8F51B900-FE37-4FFA-8774-CD2E486CCC51}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8F5AF6C7-3401-486A-BFD4-D8A3CB06BAAF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{90BDDEEF-AD60-4834-AA0A-6BCFA152EF33}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{912628EE-CB82-4D91-AA29-FEF186DE8189}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{919958B8-1F28-4B74-ABB4-1C59BE545940}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{91AE1A45-0FBF-4110-AA47-1C2053354DCA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{93BD42EF-2C77-429A-AFE3-6AF32D28E664}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{93DF77D6-B00B-423B-A584-4A213BBF9DAD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{93FE1C43-4F2D-4DB0-92FC-C787DE1E27B5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{94D4F54C-2B0B-4C71-8DAF-01F47EE2D85A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{96704B5E-7D79-46B4-854E-BFE1676176D2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{97D83F36-1D94-43D9-B65D-07DF4350BE50}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{9A13C7F2-6C07-4D16-BC4A-FABEE207B199}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9AC08296-FBED-4CA9-B8A9-C55266B893A5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9AEB7737-935B-4170-8C5A-C78E1E1A49B5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9B7B9222-1347-41D1-A07C-8B3B7AD03268}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9BBD8CF0-733F-408D-9298-1C78072CCB8E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9BFCD25E-4DE9-44D5-BF87-A1993301AFDE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9D41B87C-A68E-4786-AAF7-69657409A489}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A061FF0A-D315-4211-AB28-D4326AD2B556}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A0B79DD1-04FC-4215-881B-89C8575A969E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A2E865BA-7575-44CE-B1F2-F6086A9E9245}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A35F127F-1E1C-420F-ABF2-039F05EB301E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A43A3980-E96F-4735-B9EE-319866130B90}" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe | 
"{A617878F-D5E0-4560-A09F-EB959F69FE6F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A77488C4-6683-421E-9264-D6735511B11C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A8BA60C6-66E0-433A-8648-7EACBFF90328}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A9E8C4D4-6A7E-4D51-AA74-C6D9FC3F5014}" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_1829574f2226d088\curseclient.exe | 
"{ABBB676B-E3AF-4BD5-9663-16B9558E1677}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ABBD40C8-4816-46CE-82E1-24C258728C62}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{AC8C4A10-2687-41E7-B125-0E7EFB0876B0}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{ACD05087-0DBA-466D-A212-E904D1F3CA12}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ACF383E4-8BBC-411F-9D9A-60A12D6EE981}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{ADB6C319-1569-437D-80CC-E293D7AD950A}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe | 
"{ADC9062B-3727-4A32-81E8-F8D919DEFBAD}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | 
"{ADCCEFD6-2BBC-4DC4-968B-168B87A5FB7C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{AF138613-5DF7-44DE-96FA-45BD74385E23}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{AF8D89D3-2108-42CA-8FE9-855EA387CFE4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{AFDB6FDA-0CAA-4293-8B00-E2AAE534507F}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{B20A37C9-97CB-4918-A17A-9D9D2E9E8E91}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B2437E09-7F5C-4746-AE2A-6403DD32DDE1}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe | 
"{B2CA5154-9609-4CF1-AB9B-75BA6E443C9D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B32155BE-94FF-406A-81C8-CCD445A09F06}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B3336067-3F82-451A-91C0-AB806960439D}" = protocol=17 | dir=in | app=c:\program files\league of legendseu\air\lolclient.exe | 
"{B51DD4E6-18E0-4B01-AC3E-8AC4C8E91DA5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B5B30F64-9DE7-4F5A-BC5D-023A821D4CA6}" = protocol=17 | dir=in | app=c:\program files\gamespy arcade\aphex.exe | 
"{B604075B-EE8C-4606-A50D-7A57AB144B4E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B71D58D5-B4AA-41A8-AFA5-FCB5E5FA20B7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B798CDB9-FF3B-40B1-817C-0B057C5507C7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B8A8A48D-8E85-4A42-9CE3-F5321712D048}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B950522A-1CFD-40DE-BF08-78E5EDC9DBBF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B9908549-5F64-4533-B05F-0D1D70779F6F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B9A26349-9C39-446B-BADF-149A1A9AB7AF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B9B64F5C-1FA5-4463-9725-093640270686}" = protocol=17 | dir=in | app=c:\riot games\league of legends\air\lolclient.exe | 
"{B9F7CE58-20E6-4A16-8D41-91E38BC882E9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{BA7D0DD5-567C-4938-B891-F1BDA2456EE0}" = protocol=17 | dir=in | app=c:\program files\efusion\blackshot\system\blackshot.exe | 
"{BAAB28E5-EC44-4E8F-8835-078895DA93A3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{BEA6A99F-515E-4A10-AB39-B0D1B0CBAC07}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C4B83636-67C1-46CF-BEB6-5D0009F0BD42}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | 
"{C50595E0-21AD-4C78-A5CC-03810BF8416B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C565CEE7-F2BF-4A48-B351-4FE15D5B6B60}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C5BA2BCC-9B98-4563-9916-0ADCC4D434A2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C611EA3D-8F98-4118-AE44-A05DD898B484}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C62B4652-F315-4857-ABC1-0265732A7F3E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C63230F9-C84F-4C75-A23F-4DCA08E97D99}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C8309CFC-219A-4940-86FD-59D12F7015F3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C91F2632-2FB2-41FB-B3BD-0578884B7F82}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CA1531DF-7C36-40E1-B207-6DF684456AC2}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\blizzard downloader.exe | 
"{CA6BA8F8-FA9B-4E7B-9FAE-F5A13AF91414}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CC89FA21-EE8B-4C2F-A508-856E0454E125}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CC9A186F-967C-4993-9B04-5B214A7D1E2E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CEAE04C0-E172-43DA-B46D-E4F822F45875}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D0FEDBE2-DBFB-4C72-8F1E-5AC3F7FB098B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D11082FA-6280-48DC-8634-7BDDF6814586}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D15A79D5-5C5D-4CB8-B1BB-691A1FFF942F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D16D9C5D-6F00-4A46-9A95-397E5D0A87D4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D2711C89-3D33-455B-A53D-8658CAA73615}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D2AB794F-B6CA-4964-ABFD-587A3BB0A76A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D40CE88A-1583-4C01-A992-143146431F29}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D4203147-9FBD-425B-A102-37F38B5AB109}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D5037278-F862-4FF9-A211-D7CA4B2170D1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D5588566-7065-42F2-987E-451B20FA5D6E}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{D586A5A1-DBE1-4E55-8D5F-5DB390236749}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D62ECE4B-51DE-4A75-A79C-BA99EBF57E72}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D66ABE51-E552-4F36-979F-98CE3CCE22F0}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D6A518EB-ABB2-4E1C-AF7B-24064CF83448}" = protocol=6 | dir=in | app=c:\program files\tunngle\tnglctrl.exe | 
"{D6E15D1E-58E6-49C3-AC46-52CD1B3D6A9C}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{D82458AA-91AA-44E3-959B-30949391BEEA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D8261774-8E87-45EE-BB46-C63842DAD6B6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D9250CDB-16F4-4DFB-B169-66280CD53169}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D94ACBE5-8F5C-4FE2-80BA-8F83E2212EEB}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{DAB6D90E-C260-4AFE-BCB5-711CEB104797}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{DBA6BFC6-5835-4216-B837-8EC2DA79BBE4}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe | 
"{DC3999A2-161D-4955-847A-3F2BE184DF87}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe | 
"{DCD7BB7F-7379-4E5F-BA3A-5869849BF556}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{DFFE7CB6-91A9-4972-8CC7-10B9ED2A1076}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{DFFF14E8-D3D0-4907-9546-BDF99848170F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E041315F-2822-4986-9A1A-1B77FAE48187}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E0505CC3-A4D7-4D7D-A31C-56EB4D439A70}" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_1829574f2226d088\curseclient.exe | 
"{E1F5DF52-BD96-4237-B87D-B5FA2D02BF03}" = protocol=6 | dir=in | app=c:\program files\tunngle\tunngle.exe | 
"{E1F7BBBE-21F0-4435-B054-9557368C9A03}" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa online 2\ff2client.exe | 
"{E43039F7-9D3A-4198-B2A7-B58CADA54497}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{E5480B59-9E5F-4C93-8616-BDB7611D2819}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E5C9DF5C-F1BF-420E-AC54-7A5018F423CF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E701DB44-F305-435E-89A5-055AFD1A4608}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{E7EC83C6-673D-4999-9B8C-AA76EE28C70C}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | 
"{E8AEE433-A9ED-4529-83C7-2DADDD9DF987}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EA67DFF9-03A8-4E42-B0FE-BDEFA284CABA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EC360666-3311-4816-A0AA-5674F129E8CB}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EC50AB6C-C414-44D7-B7FF-802F9F0936C6}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{EC5F345C-D990-4FFF-BF72-B35ABFAF1A12}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EC635937-C29A-44FC-9240-737B9B43F609}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EC8787D2-734C-4C15-8FFE-109C156EA16E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ECC8DAD2-AE20-4EBE-8CB6-4FBCFDBF6BB5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ED15EA85-A17C-4B61-832B-355C282D3742}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{ED5ED060-73D3-439F-B943-5DFE99130C99}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EDB9A8FA-4B8A-4BB2-9E10-C0D4B37E5944}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EE5B4E98-7A93-43BA-8FA7-E114FE8575C3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EECD508E-EBE2-44E1-BE67-FBBB160730F6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EFFABA26-F188-4701-A311-F242ABD30D14}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EFFC954E-A565-48F3-AA0C-359049E0A891}" = protocol=17 | dir=in | app=c:\program files\starcraft ii\versions\base16939\sc2.exe | 
"{F09D6CD7-B9BA-401E-A9B2-02606C0FEE97}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F0D5AA8C-AA3C-4D72-AB6A-862B97DB5D2B}" = protocol=6 | dir=in | app=c:\program files\azureus\azureus.exe | 
"{F10C15A0-2CCA-4066-9A69-48641705B1C7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F317C0B4-465E-4FF2-BEB6-200FE17D6A76}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F36C808C-7BA6-4BCA-B16A-9C719BF2AC36}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F49180C7-DF26-48FA-ACD8-6540584274D9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F4BFBF7E-7B6E-4F9C-8E80-BA7BB652777F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F5CB95F5-CC50-4B47-BA6D-088EB49BE81E}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{F855CCB3-F18C-46DD-AB9E-824B3A4690E3}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | 
"{F8818C3D-86B1-4B5A-88E9-06E5505BE8EA}" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\apps\2.0\2zw712mb.bc1\8j0vv2zx.02c\curs..tion_eee711038731a406_0004.0000_efb506202a7c3b08\curseclient.exe | 
"{F8D9B710-6240-451C-A6B7-C08912B5AEA2}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.patch.exe | 
"{F96D9C8E-320E-4DA8-96C8-381192FAEE2F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F9D5B98A-C5F3-439D-8B29-88EE751E73C2}" = protocol=17 | dir=in | app=c:\program files\starcraft ii\starcraft ii.exe | 
"{FD03F112-1DD2-4BFC-B342-6F639E92AC35}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 12\programs\umi.exe | 
"{FD7C20AC-64FB-4371-8DED-423C271FD96D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FDB2D85F-0582-4633-943F-964363D3D395}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FDDD89C4-AA34-4793-8353-549D04C0F693}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FE1F2862-866B-470A-810D-7414B2BF094E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FFBD2327-5EB2-4DAB-8A1A-B28C97563E67}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FFD144A5-A012-4E34-9409-D3B6B7AD07C7}" = protocol=17 | dir=in | app=c:\program files\league of legends\game\league of legends.exe | 
"TCP Query User{02C4A627-F4BD-4752-BBDB-1C4115827CFF}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe | 
"TCP Query User{04B68121-ACE2-4AB0-8313-405390E9134F}C:\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\program files\dna\btdna.exe | 
"TCP Query User{25136F05-BBD9-4AE4-B0AE-8AC09E69F32C}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"TCP Query User{255DCBE7-87F0-4C6C-B3D1-C21C874AB30A}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"TCP Query User{2628AB79-6D83-4EBC-9AE2-D73E64CBA235}C:\users\public\games\world of warcraft\repair.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\repair.exe | 
"TCP Query User{30C5D884-702A-49A2-A12A-CA613FA8A8A3}C:\program files\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=6 | dir=in | app=c:\program files\firefly studios\stronghold crusader\stronghold crusader.exe | 
"TCP Query User{36CC4A8F-CC97-4729-9B08-AAAC7DC64DAA}C:\program files\microsoft games\age of empires\empiresx.exe" = protocol=6 | dir=in | app=c:\program files\microsoft games\age of empires\empiresx.exe | 
"TCP Query User{3C89D891-467C-4610-B3CC-711576270D74}C:\program files\microsoft games\age of empires ii\empires2.exe" = protocol=6 | dir=in | app=c:\program files\microsoft games\age of empires ii\empires2.exe | 
"TCP Query User{472AE01C-2922-401C-B051-C56D00ED7BDA}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\eumz81up\wow-dede-installer-downloader[1].exe" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\eumz81up\wow-dede-installer-downloader[1].exe | 
"TCP Query User{4A01DD73-E3BA-4A95-84FD-B389A8FA7C3C}C:\program files\thq\titan quest immortal throne\tqit.exe" = protocol=6 | dir=in | app=c:\program files\thq\titan quest immortal throne\tqit.exe | 
"TCP Query User{51F1E09D-4D88-46B0-B8F5-4A80457720C2}C:\program files\mta san andreas\server\mta server.exe" = protocol=6 | dir=in | app=c:\program files\mta san andreas\server\mta server.exe | 
"TCP Query User{58E20C1B-2EBD-4E81-A9C8-9132BA0F2528}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe | 
"TCP Query User{5A2D8065-EDBD-40A9-BAB8-D1134B638921}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"TCP Query User{5B93F425-2514-49DE-8C86-F36333622BC1}C:\users\alex\desktop\wow-dede-installer-downloader.exe" = protocol=6 | dir=in | app=c:\users\alex\desktop\wow-dede-installer-downloader.exe | 
"TCP Query User{5E1C7BDB-3CAD-49FE-9E6E-93E08960EF01}C:\program files\vuze\azureus.exe" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe | 
"TCP Query User{60386DCE-DBBF-44D6-8FBB-701BE6D12B8D}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | 
"TCP Query User{6326E158-045B-488D-B523-A8685D875701}C:\users\public\games\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | 
"TCP Query User{65B25804-0155-4F47-B273-F3D610683A09}C:\users\public\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\launcher.exe | 
"TCP Query User{662E1EFA-2E33-4892-A470-5087DC04EC00}C:\program files\eslwire\wire.exe" = protocol=6 | dir=in | app=c:\program files\eslwire\wire.exe | 
"TCP Query User{6926237A-C991-4F88-8AC4-A23F1E4951E0}C:\users\public\world of warcraft\repair.exe" = protocol=6 | dir=in | app=c:\users\public\world of warcraft\repair.exe | 
"TCP Query User{7533D322-97AA-451A-AA9D-076C8BF431A9}C:\program files\qtracker\qtracker.exe" = protocol=6 | dir=in | app=c:\program files\qtracker\qtracker.exe | 
"TCP Query User{75F18C2F-2D68-4F70-9C94-54F9977BDC06}C:\program files\warcraft iii\war3.exe" = protocol=6 | dir=in | app=c:\program files\warcraft iii\war3.exe | 
"TCP Query User{784233C1-7D39-4671-B9DD-5EDD2F235873}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"TCP Query User{8140FD99-D3F0-43AE-B041-5A5377213886}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\7vw01km9\wow-burningcrusade-dede-installer-downloader[1].exe" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\7vw01km9\wow-burningcrusade-dede-installer-downloader[1].exe | 
"TCP Query User{8211C97C-3582-4A9F-A204-B7D1C981A315}C:\program files\gamersfirst\parabellum beta\binaries\parabellumthegame.exe" = protocol=6 | dir=in | app=c:\program files\gamersfirst\parabellum beta\binaries\parabellumthegame.exe | 
"TCP Query User{8CA58364-7AD0-4BD0-911F-136CA2207406}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{9517DE0C-3979-40A4-97DC-50B191206719}C:\users\alex\appdata\local\temp\fenpcn.exe" = protocol=6 | dir=in | app=c:\users\alex\appdata\local\temp\fenpcn.exe | 
"TCP Query User{9C0FADD8-E476-4914-84A8-84380D8FA8AB}C:\program files\garena\garena.exe" = protocol=6 | dir=in | app=c:\program files\garena\garena.exe | 
"TCP Query User{AA1AF7F9-B1C1-4CDA-9E2F-6171B9A09606}C:\windows\system32\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"TCP Query User{CE74116C-84E6-45D0-9CF2-57EF25D961C2}C:\users\public\games\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | 
"TCP Query User{D592155F-4138-476B-90D5-D2AA427496CE}C:\program files\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=6 | dir=in | app=c:\program files\firefly studios\stronghold crusader\stronghold crusader.exe | 
"TCP Query User{D6795B23-3E0F-4088-A394-9F55FFE5F307}C:\users\alex\desktop\wow-burningcrusade-dede-installer-downloader.exe" = protocol=6 | dir=in | app=c:\users\alex\desktop\wow-burningcrusade-dede-installer-downloader.exe | 
"TCP Query User{D691F98C-D1DC-4911-8E96-B01B5F70ECFC}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | 
"TCP Query User{D692671C-05EB-4698-8DD3-FD6FB12F5541}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | 
"TCP Query User{DF1B1591-7E65-4077-9D30-2FEFEF159E68}C:\windows\system32\autochks.exe" = protocol=6 | dir=in | app=c:\windows\system32\autochks.exe | 
"TCP Query User{E0D11920-42CB-4263-B9B4-468BB5C41662}C:\users\alex\desktop\teamspeak-spam\teamspeak-spam\spamer.exe" = protocol=6 | dir=in | app=c:\users\alex\desktop\teamspeak-spam\teamspeak-spam\spamer.exe | 
"TCP Query User{E877B966-84A6-4194-BD1E-E6C30F0756D2}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe | 
"TCP Query User{F6EF70AE-E09B-4A5D-BDC6-CCB6F93F0F40}C:\program files\qtracker\qtracker.exe" = protocol=6 | dir=in | app=c:\program files\qtracker\qtracker.exe | 
"TCP Query User{F6F7AACA-D379-418A-A1F5-4D96D0FB9ABF}C:\program files\ea sports\fifa online\nfe.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa online\nfe.exe | 
"UDP Query User{00FC9481-4555-4BCA-8434-786D1983033B}C:\program files\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=17 | dir=in | app=c:\program files\firefly studios\stronghold crusader\stronghold crusader.exe | 
"UDP Query User{05C95CDE-8F32-4E68-AAD6-F316F462029C}C:\program files\qtracker\qtracker.exe" = protocol=17 | dir=in | app=c:\program files\qtracker\qtracker.exe | 
"UDP Query User{0802DB47-A656-41B3-BCD2-91EB359ADCC5}C:\program files\warcraft iii\war3.exe" = protocol=17 | dir=in | app=c:\program files\warcraft iii\war3.exe | 
"UDP Query User{181C30F3-834F-4ABA-8558-F91C084666FE}C:\program files\microsoft games\age of empires\empiresx.exe" = protocol=17 | dir=in | app=c:\program files\microsoft games\age of empires\empiresx.exe | 
"UDP Query User{195EFA6C-8590-4FD0-B8A8-8CC86804ADED}C:\windows\system32\autochks.exe" = protocol=17 | dir=in | app=c:\windows\system32\autochks.exe | 
"UDP Query User{204DD93E-B96A-40F1-A24C-4307BD874524}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"UDP Query User{2742FAC4-3D8F-41E2-B82C-FD5E4127BF5A}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{2DC9C1DB-1CB2-41FA-9EC4-8A21CCE59FE5}C:\program files\eslwire\wire.exe" = protocol=17 | dir=in | app=c:\program files\eslwire\wire.exe | 
"UDP Query User{2F400E4E-1EB0-4816-9AEF-9B9D7F744DB4}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe | 
"UDP Query User{32B2F13F-8BBD-4E62-B4A4-9259C6660708}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe | 
"UDP Query User{39B1B2F3-81FA-4B66-8467-DE375E9924F9}C:\program files\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=17 | dir=in | app=c:\program files\firefly studios\stronghold crusader\stronghold crusader.exe | 
"UDP Query User{46F7C473-EA6A-4B49-838D-F717040565D8}C:\program files\gamersfirst\parabellum beta\binaries\parabellumthegame.exe" = protocol=17 | dir=in | app=c:\program files\gamersfirst\parabellum beta\binaries\parabellumthegame.exe | 
"UDP Query User{4FE89DC7-6928-48C4-ACDD-7A7E7E7DB610}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"UDP Query User{510211D3-2788-4E48-A8C3-29F2AA7E2A63}C:\users\public\games\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | 
"UDP Query User{53921EE3-2C15-41BC-9031-CF9D281EDB8C}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\eumz81up\wow-dede-installer-downloader[1].exe" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\eumz81up\wow-dede-installer-downloader[1].exe | 
"UDP Query User{639816DC-68D8-4B97-A2E6-8ABAA0947EB9}C:\program files\qtracker\qtracker.exe" = protocol=17 | dir=in | app=c:\program files\qtracker\qtracker.exe | 
"UDP Query User{6A9F5E83-14C8-4AF7-BD79-CFEA2BEF803C}C:\users\public\games\world of warcraft\repair.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\repair.exe | 
"UDP Query User{752B9C7E-72D3-44D2-AC43-4CF312C64084}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | 
"UDP Query User{77C249B4-2CEE-46B2-BEDD-25849BE9AE67}C:\windows\system32\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"UDP Query User{783094AA-91BD-481B-8638-DB663F57B787}C:\users\alex\desktop\teamspeak-spam\teamspeak-spam\spamer.exe" = protocol=17 | dir=in | app=c:\users\alex\desktop\teamspeak-spam\teamspeak-spam\spamer.exe | 
"UDP Query User{7EDDABBC-29DC-4132-8226-14AF49D13F39}C:\program files\thq\titan quest immortal throne\tqit.exe" = protocol=17 | dir=in | app=c:\program files\thq\titan quest immortal throne\tqit.exe | 
"UDP Query User{83409CA4-ED4E-443C-8F13-81A938BDE9B7}C:\users\public\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\launcher.exe | 
"UDP Query User{8363CC21-7FC3-4CE3-BF0B-C33CCA2DD14F}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"UDP Query User{8A0AC47A-592F-4ACF-9A84-D4F334BBD4B1}C:\program files\garena\garena.exe" = protocol=17 | dir=in | app=c:\program files\garena\garena.exe | 
"UDP Query User{944E0100-49AA-4A72-B0F9-19D727AD7704}C:\program files\microsoft games\age of empires ii\empires2.exe" = protocol=17 | dir=in | app=c:\program files\microsoft games\age of empires ii\empires2.exe | 
"UDP Query User{9E443F39-A2AB-4E12-9935-196526E4B8AF}C:\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\program files\dna\btdna.exe | 
"UDP Query User{B3A06C91-244B-47E8-AE93-D26F7A79B31C}C:\users\public\games\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe | 
"UDP Query User{B4D8C9C7-6031-440B-BC64-63DFCD4CF8FB}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\7vw01km9\wow-burningcrusade-dede-installer-downloader[1].exe" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\7vw01km9\wow-burningcrusade-dede-installer-downloader[1].exe | 
"UDP Query User{C2369AA4-B414-46B9-B6DC-A730B38D4AD5}C:\users\alex\desktop\wow-dede-installer-downloader.exe" = protocol=17 | dir=in | app=c:\users\alex\desktop\wow-dede-installer-downloader.exe | 
"UDP Query User{C26DDF11-F59B-495B-A81D-36CE84A973D6}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | 
"UDP Query User{D3729A68-52E7-44D3-ABB6-2860F32D767C}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | 
"UDP Query User{D646BCAF-B85A-4608-A710-8466E5FFE555}C:\program files\ea sports\fifa online\nfe.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa online\nfe.exe | 
"UDP Query User{E21747A9-9060-4D7B-8DDE-A891F9237A23}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"UDP Query User{E3D85B85-3C9B-40A5-82EA-1D8B0AB9B806}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe | 
"UDP Query User{E8273207-E76B-4BB5-AD90-2EF62269FA2B}C:\program files\mta san andreas\server\mta server.exe" = protocol=17 | dir=in | app=c:\program files\mta san andreas\server\mta server.exe | 
"UDP Query User{F018E423-9777-49AA-BD55-A5B06DB7E329}C:\users\alex\desktop\wow-burningcrusade-dede-installer-downloader.exe" = protocol=17 | dir=in | app=c:\users\alex\desktop\wow-burningcrusade-dede-installer-downloader.exe | 
"UDP Query User{F5CD1911-BD27-4EF5-9866-F3C230531156}C:\users\public\world of warcraft\repair.exe" = protocol=17 | dir=in | app=c:\users\public\world of warcraft\repair.exe | 
"UDP Query User{F82FE0F2-F5F6-40F5-86B2-E00A53EFD29B}C:\users\alex\appdata\local\temp\fenpcn.exe" = protocol=17 | dir=in | app=c:\users\alex\appdata\local\temp\fenpcn.exe | 
"UDP Query User{FD30A812-E724-483D-98A8-B77A10C5AFEB}C:\program files\vuze\azureus.exe" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1C4551A6-4743-4093-91E4-1477CD655043}" = NVIDIA PhysX
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 16
"{28518520-F25C-48C3-A224-861F331602F4}" = Setup My PC
"{28999392-5871-4A39-863A-D2A6EA3260AF}" = League of Legends
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3559CDE0-11FC-4D7B-A65C-D646035B1031}" = Nero 8 Essentials
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}" = Titan Quest
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}" = Junk Mail filter update
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5A166C0B-9557-4364-A057-F946D674E6AC}" = Windows Live Mail
"{5BD55BA3-CE71-442B-87BD-86C83DA68E1D}_is1" = FIFA Online 2
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}" = NCsoft Launcher
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{62F7DA7E-CCCB-439C-A760-00C3926E761F}" = Microsoft Works
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B96DADA-1A27-4A04-8CB2-CC45168D05FA}" = Windows Live Fotogalerie
"{6FE3B0CE-37C1-4825-908A-5A84C9B4EC2F}" = EA SPORTS(TM) FIFA Online
"{709817E4-5439-4206-8738-796B34B623BD}" = MetaBoli
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World
"{7B63B2922B174135AFC0E1377DD81EC2}" = 
"{7C5B4583-7CBF-4289-B195-03B553959DEA}" = VoiceOver Kit
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Packard Bell Recovery Management
"{81821BF8-DA20-4F8C-AA87-F70A274828D4}" = Windows Live Writer
"{835686C5-8650-49EB-8CA0-4528B4035495}" = Windows Live Call
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{8C1E2925-14F8-45AA-B999-1E2A74BF5607}" = Windows Live Sync
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A1C962E2-2426-49C6-A38B-9A07E40D607C}" = Microsoft Games for Windows - LIVE
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A90000000001}" = Adobe Reader 9 - Deutsch
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B5C5C17E-FEF6-4062-8151-A427AE8AF9D7}" = Titan Quest Immortal Throne
"{C1080852-065E-4991-9260-F3756E3CC182}" = CursorFX
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{CA786CFF-1D31-4804-B436-F3405B14357F}" = Packard Bell Updator
"{CB4532F7-A1BD-46D2-9938-3E7D4656FB18}" = Razer Lachesis
"{CE12677C-F7D2-45A8-BBF9-0FC0B972EDC3}" = League of Legends
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D359B12F-9B1A-46FD-B70C-F507B5B11590}" = HDRegDE
"{D9D1A2FD-56B2-4F21-B959-745FE43CAB8C}" = Vegas Pro 9.0
"{DF5F687F-8018-4542-9F98-7084E9022917}" = Windows Live Essentials
"{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4EA67C9-6748-4C1E-9AFF-04149AC75D95}" = Packard Bell ImageWriter
"{F54AC413-D2C6-4A24-B324-370C223C6250}" = Adobe Photoshop Elements 6.0
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"12345_is1" = WeGame Client Beta 2.1.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop Elements 6" = Adobe Photoshop Elements 6.0
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Age of Empires Expansion 1.0" = Microsoft Age of Empires Expansion
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner (remove only)
"conduitEngine" = Conduit Engine
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX-Setup
"EA Installer.1475696318" = EA Installer
"Fraps" = Fraps (remove only)
"FUSSBALL MANAGER 11" = FUSSBALL MANAGER 11
"Garena" = Garena 2010
"Google Chrome" = Google Chrome
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HyperCam 2" = HyperCam 2
"ICQToolbar" = ICQ Toolbar
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"JA Launcher" = JA Launcher
"Magic ISO Maker v5.5 (build 0274)" = Magic ISO Maker v5.5 (build 0274)
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.4)" = Mozilla Firefox (3.5.4)
"NVIDIA Drivers" = NVIDIA Drivers
"Office2007" = Microsoft Office Home and Student
"OpenAL" = OpenAL
"PFConfig" = PFConfig 1.0.296
"PunkBusterSvc" = PunkBuster Services
"StarCraft II" = StarCraft II
"Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 4" = TeamViewer 4
"TuneUpMedia" = TuneUp Companion 1.9.0
"Tunngle beta_is1" = Tunngle beta
"Uninstall_is1" = Uninstall 1.0.0.1
"Vuze_Remote Toolbar" = Vuze_Remote Toolbar
"Warcraft III" = Warcraft III
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1 beta5
"WinRAR archiver" = WinRAR
"Works9se" = Microsoft Works 9.0 SE
"World of Warcraft" = World of Warcraft
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"090215de958f1060" = Curse Client
"BitTorrent DNA" = DNA
"CursorFX" = CursorFX
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"UnityWebPlayer" = Unity Web Player
 
========== Last 10 Event Log Errors ==========
 
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
 
< End of report >

--- --- ---

alex1411 · 21.01.2011, 16:00

was soll ich jetzt machen?

markusg · 21.01.2011, 16:17

du bist hier nicht der einzige, deswegen warte und stresse nicht nach 5 minuten rum...
• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
PRC - C:\Windows\systenn.exe (Microsoft)
PRC - C:\Windows\System32\aspimgr.exe (Microsoft Corporation)
PRC - C:\Windows\System32\AutoChks.exe (Microsoft)
PRC - C:\Users\Alex\AppData\Local\Temp\Jqp.exe (Adobe Flash Player)
MOD - C:\Users\Alex\AppData\Local\amosesuz.dll ()
SRV - (aspimgr) -- C:\Windows\System32\aspimgr.exe (Microsoft Corporation)
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - Reg Error: Key error. File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found
O2 - BHO: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found
O3 - HKLM\..\Toolbar: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found.
O4 - HKLM..\Run: [Auto Check Utility] C:\Windows\System32\AutoChks.exe (Microsoft)
O4 - HKLM..\Run: [eRecoveryService] File not found
O4 - HKLM..\Run: [HKLM] File not found
O4 - HKLM..\Run: [Isiholequ] C:\Users\Alex\AppData\Local\amosesuz.dll ()
O4 - HKLM..\Run: [Regedit32] File not found
O4 - HKLM..\Run: [systenn.exe] C:\Windows\systenn.exe (Microsoft)
O4 - HKLM..\Run: [wuaucldt] File not found
O4 - HKU\.DEFAULT..\Run: [jdsfjsdijf.exe] File not found
O4 - HKU\.DEFAULT..\Run: [moonxxxxxx.exe] File not found
O4 - HKU\.DEFAULT..\Run: [sjdfnhsjfk.exe] File not found
O4 - HKU\.DEFAULT..\Run: [wuaucldt] File not found
O4 - HKU\S-1-5-18..\Run: [jdsfjsdijf.exe] File not found
O4 - HKU\S-1-5-18..\Run: [moonxxxxxx.exe] File not found
O4 - HKU\S-1-5-18..\Run: [sjdfnhsjfk.exe] File not found
O4 - HKU\S-1-5-18..\Run: [wuaucldt] File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [0x017] File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [EA Core] File not found
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [JP595IR86O] C:\Users\Alex\AppData\Local\Temp\Jqp.exe (Adobe Flash Player)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Lhuxocinexilahe] C:\Users\Alex\AppData\Local\Smsexias.dll (Progressive Networks)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [Metropolis] C:\Windows\System32\sshnas21.dll (Avira GmbH)
O4 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000..\Run: [systenn.exe] C:\Windows\systenn.exe (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\system32\windows\svchost.exe
O7 - HKU\S-1-5-21-2985315865-3592562629-2947964426-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\system32\windows\svchost.exe
O29 - HKLM SecurityProviders - (mdsgwggc.dll) - File not found
O29 - HKLM SecurityProviders - (mgayqgsm.dll) - File not found
[2011.01.19 16:10:28 | 000,188,928 | ---- | C] (Adobe Flash Player) -- C:\Windows\Jsegya.exe
[2011.01.19 16:10:18 | 000,328,192 | ---- | C] (Avira GmbH) -- C:\Windows\System32\sshnas21.dll
[2011.01.21 14:36:01 | 000,000,282 | -H-- | M] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2011.01.21 14:09:04 | 000,000,049 | ---- | M] () -- C:\Windows\kh7ptSJh
[2011.01.21 14:09:04 | 000,000,048 | ---- | M] () -- C:\Windows\OyLaFpY
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\X2VUkW
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\slVqcQews
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\otJuGY
[2011.01.21 14:09:04 | 000,000,047 | ---- | M] () -- C:\Windows\3Pa3wiYfqd
[2011.01.21 14:09:04 | 000,000,046 | ---- | M] () -- C:\Windows\KG5olI
[2011.01.21 14:09:04 | 000,000,046 | ---- | M] () -- C:\Windows\IWwDT
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\KSj8pJ
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\Jj7rN
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\fXxE7bT
[2011.01.21 14:09:04 | 000,000,045 | ---- | M] () -- C:\Windows\8VDa7CXl
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\VXIEcq
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\vQpJrT
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\sNYXsj
[2011.01.21 14:09:04 | 000,000,044 | ---- | M] () -- C:\Windows\JJvvDR
[2011.01.21 14:09:04 | 000,000,043 | ---- | M] () -- C:\Windows\YpDSJy
[2011.01.21 14:09:04 | 000,000,043 | ---- | M] () -- C:\Windows\2Uk4Omx
[2011.01.21 14:09:04 | 000,000,042 | ---- | M] () -- C:\Windows\pfS2Um
[2011.01.21 14:09:04 | 000,000,042 | ---- | M] () -- C:\Windows\nvCd6if3w
[2011.01.21 14:09:04 | 000,000,042 | ---- | M] () -- C:\Windows\3jKGcwC
[2011.01.21 14:09:04 | 000,000,041 | ---- | M] () -- C:\Windows\Wrx6EWy5NX
[2011.01.21 14:09:04 | 000,000,041 | ---- | M] () -- C:\Windows\NEjhJ
[2011.01.21 14:09:04 | 000,000,041 | ---- | M] () -- C:\Windows\LeHXF
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\v6OmO
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\Jtd8F
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\egE75Sxs
[2011.01.21 14:09:04 | 000,000,040 | ---- | M] () -- C:\Windows\AdSXd
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\U3fOBPUBc
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\t8NAq
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\OqM5GLT
[2011.01.21 14:09:04 | 000,000,039 | ---- | M] () -- C:\Windows\5G58L
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\VoTElV
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\O5AtO
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\lolVp8E2Sq
[2011.01.21 14:09:04 | 000,000,038 | ---- | M] () -- C:\Windows\LmkGgkiF
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\i7JEeABY
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\gJhLQHw8
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\7gLkamXCV
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\22BMW7
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\Tx7Wm3eg
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\NWGnE5
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\NJUaq4
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\IxigT
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\E1cotQ5ms
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\j5MHLUC
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\InU5UjE
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\GCRklH23
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\fITo5SKO
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\4tqPC3lA
[2011.01.21 14:09:04 | 000,000,037 | ---- | M] () -- C:\Windows\22BMW7
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\Tx7Wm3eg
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\NWGnE5
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\NJUaq4
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\IxigT
[2011.01.21 14:09:04 | 000,000,036 | ---- | M] () -- C:\Windows\E1cotQ5ms
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\j5MHLUC
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\InU5UjE
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\GCRklH23
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\fITo5SKO
[2011.01.21 14:09:04 | 000,000,035 | ---- | M] () -- C:\Windows\4tqPC3lA
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\QD8HB
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\Lixec7
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\IKTrTG
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\EjLkeU
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\cG5Hstso
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\63Cp1Oet
[2011.01.21 14:09:04 | 000,000,031 | ---- | M] () -- C:\Windows\5Wa87L
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\qDgOR
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\nhj8qXLov
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\GnFLPKDtyK
[2011.01.21 14:09:04 | 000,000,030 | ---- | M] () -- C:\Windows\C62hiui
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\XYOHDo
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\uH2whCXiG
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\lRvp8qsw
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\kBAie
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\JfKDsowR
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\birbkGtK
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\ax8uM4r7LP
[2011.01.21 14:09:04 | 000,000,029 | ---- | M] () -- C:\Windows\APpT6oqFk
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\Usf1ElUGS
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\u4XNSwghot
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\kipV83i
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\Fd5jCgjD
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\e6JaP
[2011.01.21 14:09:04 | 000,000,028 | ---- | M] () -- C:\Windows\dUAU1UB
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\ruqvTxBnU
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\GJgrd
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\FgoHg
[2011.01.21 14:09:04 | 000,000,027 | ---- | M] () -- C:\Windows\bVIeGoH
[2011.01.21 14:09:04 | 000,000,026 | ---- | M] () -- C:\Windows\hUcwRlUJ
[2011.01.21 14:07:20 | 000,000,120 | ---- | M] () -- C:\Users\Alex\AppData\Local\Tzitofeji.dat
[2011.01.21 14:07:19 | 000,000,000 | ---- | M] () -- C:\Users\Alex\AppData\Local\Mkuzoya.bin
:Files
C:\Windows\System32\sshnas21.dll
c:\Windows\systenn.exe
C:\Windows\System32\AutoChks.exe
C:\Users\Alex\AppData\Local\Temp\Jqp.exe
C:\Users\Alex\AppData\Local\amosesuz.dll
C:\Users\Alex\AppData\Local\Smsexias.dll
C:\Windows\system32\windows
:Commands
[purity]
[EMPTYFLASH]
[emptytemp]
[Reboot]

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.

öffne computer,, c: dann _OTL
dort rechtsklick auf moved files
wähle zu moved files.rar oder zip hinzufügen.
lade das archiv in unserem upload channel hoch.
http://www.trojaner-board.de/54791-a...ner-board.html

21.01.2011, 14:54	#6
markusg /// Malware-holic	Virus? alle 2 sekunden eine meldung meines windows defenders du sollst auf scan klicken, nicht auf bereinigen, bitte genau lesen und dann erst machen. __________________ --> Virus? alle 2 sekunden eine meldung meines windows defenders

Virus? alle 2 sekunden eine meldung meines windows defenders

Log-Analyse und Auswertung: Virus? alle 2 sekunden eine meldung meines windows defenders