| Dunkelgeist | 25.10.2012 22:52 |
Website kann nicht angezeigt werden - Desktop blockiert
Schönen guten Abend, wie im Titel bereits beschrieben wird mein Desktop durch diesen Virustyp blockiert. Ich hoffe ihr könnt mir helfen.
OLT Code:
OTL logfile created on: 25.10.2012 23:21:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\xOx\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,40 Gb Available Physical Memory | 70,08% Memory free
4,23 Gb Paging File | 3,80 Gb Available in Paging File | 89,83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298,09 Gb Total Space | 76,06 Gb Free Space | 25,52% Space Free | Partition Type: NTFS
Computer Name: XOX-PC | User Name: xOx | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012.10.25 23:16:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xOx\Downloads\OTL.exe
PRC - [2012.10.19 13:05:57 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2012.10.09 20:25:22 | 001,807,800 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
PRC - [2012.09.12 17:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) -- c:\Programme\Microsoft Security Client\MsMpEng.exe
PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008.01.19 09:33:39 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnscfg.exe
========== Modules (No Company Name) ==========
MOD - [2012.10.19 13:04:48 | 002,294,240 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2012.10.09 20:25:20 | 009,814,968 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_4_402_287.dll
MOD - [2010.03.15 12:28:22 | 000,141,824 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll
========== Services (SafeList) ==========
SRV - [2012.10.24 15:12:20 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.10.19 13:05:55 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.10.09 20:25:22 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.09.12 17:25:24 | 000,287,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Programme\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2012.09.12 17:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Programme\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012.09.10 23:47:54 | 004,537,664 | ---- | M] () [Auto | Stopped] -- c:\program files\common files\akamai/netsession_win_5891ae0.dll -- (Akamai)
SRV - [2012.08.13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Stopped] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.07.03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011.11.25 16:32:36 | 000,687,400 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Programme\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011.08.17 12:04:36 | 000,247,872 | ---- | M] () [Auto | Stopped] -- C:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2010.11.11 00:02:10 | 004,134,480 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2010.01.15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Programme\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009.08.18 12:29:22 | 001,529,728 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2008.01.19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008.01.19 09:33:39 | 000,896,512 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2006.02.20 21:23:08 | 000,495,616 | ---- | M] ( ) [On_Demand | Stopped] -- C:\Windows\System32\lxcycoms.exe -- (lxcy_device)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2012.10.25 22:59:01 | 000,029,904 | ---- | M] () [Kernel | System | Stopped] -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{ADB24C53-789B-449B-A7B1-794B91DA7D13}\MpKsl8762d0cf.sys -- (MpKsl8762d0cf)
DRV - [2012.08.30 22:03:50 | 000,099,272 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2011.04.04 20:35:23 | 000,279,712 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2011.04.04 20:35:23 | 000,025,888 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010.11.04 01:00:00 | 000,002,304 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\HtsysmNT.sys -- (Htsysm)
DRV - [2010.02.11 09:42:22 | 004,450,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2010.02.11 09:42:22 | 004,450,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2008.09.22 04:20:42 | 000,043,520 | ---- | M] (VIA Technologies, Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\fetnd6v.sys -- (FETND6V)
DRV - [2006.10.17 21:22:26 | 000,009,216 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\videX32.sys -- (videX32)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Programme\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKLM\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2801948
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 73 93 E1 7A 36 96 CC 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Programme\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2801948
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local>
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "NCH EN Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2801948&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledAddons: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.10
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.5
FF - prefs.js..extensions.enabledItems: {37483b40-c254-4a72-bda4-22ee90182c1e}:3.7.0.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.3.6
FF - prefs.js..extensions.enabledItems: ciuvo-extension@icq.de:1.3.667
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q="
FF - prefs.js..network.proxy.type: 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3: C:\Users\xOx\AppData\LocalLow\Sony Online Entertainment\npsoe.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\xOx\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\xOx\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\xOx\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.04.21 21:52:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.19 13:05:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.10.19 13:04:18 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.19 13:05:58 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.10.19 13:04:18 | 000,000,000 | ---D | M]
[2011.02.20 10:41:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xOx\AppData\Roaming\mozilla\Extensions
[2012.10.23 07:08:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xOx\AppData\Roaming\mozilla\Firefox\Profiles\z0mcr1m9.default\extensions
[2011.11.03 14:12:55 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\xOx\AppData\Roaming\mozilla\Firefox\Profiles\z0mcr1m9.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012.08.21 17:48:36 | 000,000,000 | ---D | M] (NCH EN Community Toolbar) -- C:\Users\xOx\AppData\Roaming\mozilla\Firefox\Profiles\z0mcr1m9.default\extensions\{37483b40-c254-4a72-bda4-22ee90182c1e}
[2012.07.25 22:28:12 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\xOx\AppData\Roaming\mozilla\Firefox\Profiles\z0mcr1m9.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.10.06 22:18:10 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\xOx\AppData\Roaming\mozilla\Firefox\Profiles\z0mcr1m9.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.08.22 17:50:31 | 000,101,863 | ---- | M] () (No name found) -- C:\Users\xOx\AppData\Roaming\mozilla\firefox\profiles\z0mcr1m9.default\extensions\ciuvo-extension@icq.de.xpi
[2011.09.27 14:01:34 | 000,000,915 | ---- | M] () -- C:\Users\xOx\AppData\Roaming\mozilla\firefox\profiles\z0mcr1m9.default\searchplugins\conduit.xml
[2012.10.19 21:39:32 | 000,001,056 | ---- | M] () -- C:\Users\xOx\AppData\Roaming\mozilla\firefox\profiles\z0mcr1m9.default\searchplugins\icqplugin.xml
[2012.10.19 13:04:13 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.10.19 13:04:13 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.10.19 13:05:57 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.04.05 18:19:36 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010.07.27 17:13:46 | 000,027,136 | ---- | M] (NHN USA Inc.) -- C:\Program Files\mozilla firefox\plugins\npijjiautoinstallpluginff.dll
[2012.06.08 12:48:15 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.08.30 11:44:06 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.06.08 12:48:15 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.08 12:48:15 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.06.08 12:48:15 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.08 12:48:15 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
========== Chrome ==========
CHR - homepage: hxxp://start.icq.com/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: hxxp://start.icq.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\xOx\AppData\Local\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\xOx\AppData\Local\Google\Chrome\Application\21.0.1180.83\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\xOx\AppData\Local\Google\Chrome\Application\21.0.1180.83\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: ijji Auto Install Plugin for Mozilla (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonEU\NGM\npNxGameeu.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\xOx\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Google Update (Enabled) = C:\Users\xOx\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Users\xOx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\xOx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\xOx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: Google Mail = C:\Users\xOx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (NCH EN Toolbar) - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Programme\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (ICQ Sparberater) - {EC136321-1AE5-4A7F-B01C-5380D666175B} - C:\Programme\icq\Internet Explorer\icq.dll (solute gmbh)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (NCH EN Toolbar) - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Programme\NCH_EN\prxtbNCH_.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe ()
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark 3400 Series\ezprint.exe (Lexmark International Inc.)
O4 - HKLM..\Run: [FaxCenterServer] C:\Program Files\Lexmark Fax Solutions\fm3032.exe ()
O4 - HKLM..\Run: [LXCYCATS] C:\Windows\System32\spool\DRIVERS\W32X86\3\LXCYtime.DLL ()
O4 - HKLM..\Run: [lxcymon.exe] C:\Program Files\Lexmark 3400 Series\lxcymon.exe ()
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\xOx\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKCU..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.)
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKCU..\Run: [waase.exe] C:\Users\xOx\AppData\Roaming\Qeyg\waase.exe ()
O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - HKCU..\Run: [zenbzdpqbhkntkc] C:\ProgramData\zenbzdpq.exe ()
O4 - Startup: C:\Users\xOx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZooskMessenger.lnk = File not found
O8 - Extra context menu item: Free YouTube Download - C:\Users\xOx\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\xOx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.31.0.cab (Battlefield Heroes Updater)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0B8E240E-022D-4E0D-BBAB-18EF101AFF0F}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img4.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img4.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.02.28 00:00:48 | 000,203,308 | ---- | M] () - C:\AUTO.pat -- [ NTFS ]
O32 - AutoRun File - [2011.02.28 00:00:48 | 000,088,236 | ---- | M] () - C:\AUTO.pst -- [ NTFS ]
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{3507e235-3aa0-11e0-8366-0019db2dee89}\Shell\AutoRun\command - "" = K:\Menu.exe
O33 - MountPoints2\{edf76af4-e2a7-11e1-a69a-0019db2dee89}\Shell - "" = AutoRun
O33 - MountPoints2\{edf76af4-e2a7-11e1-a69a-0019db2dee89}\Shell\AutoRun\command - "" = K:\Startme.exe
O33 - MountPoints2\{fb298099-d3e8-11e1-829e-0019db2dee89}\Shell - "" = AutoRun
O33 - MountPoints2\{fb298099-d3e8-11e1-829e-0019db2dee89}\Shell\AutoRun\command - "" = K:\USBAutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
ActiveX: {0213C6AF-5562-4D09-884C-2ADCFC8C2F35} - Microsoft .NET Framework 1.1 Security Update (KB2656353)
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {1897C549-AE52-4571-8996-44854F5612B2} - Microsoft .NET Framework 1.1 Security Update (KB2656370)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
MsConfig - StartUpFolder: C:^Users^xOx^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Xfire.lnk - - File not found
MsConfig - StartUpReg: Steam - hkey= - key= - C:\Program Files\Steam\Steam.exe (Valve Corporation)
MsConfig - State: "startup" - 2
CREATERESTOREPOINT
Unable to start System Restore Service. Error code 1084
========== Files/Folders - Created Within 30 Days ==========
[2012.10.25 22:56:00 | 000,000,000 | ---D | C] -- C:\ProgramData\qtdblctkbcfceof
[2012.10.19 13:04:11 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.10.25 23:10:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.10.25 23:09:15 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.10.25 23:09:15 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.10.25 22:58:31 | 123,290,842 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.10.25 22:55:59 | 000,076,348 | ---- | M] () -- C:\ProgramData\nbpcqdlpfpgprbj
[2012.10.25 22:55:47 | 000,132,096 | ---- | M] () -- C:\ProgramData\zenbzdpq.exe
[2012.10.25 22:55:47 | 000,132,096 | ---- | M] () -- C:\Users\xOx\0.12844067123061886.exe
[2012.10.25 22:40:00 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4070636601-1190850629-1727098569-1000UA.job
[2012.10.25 22:25:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.10.25 21:40:00 | 000,001,060 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4070636601-1190850629-1727098569-1000Core.job
[2012.10.24 07:14:35 | 000,681,680 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.10.24 07:14:35 | 000,640,710 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.10.24 07:14:35 | 000,148,950 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.10.24 07:14:35 | 000,122,594 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.10.19 14:01:45 | 000,001,095 | ---- | M] () -- C:\Users\xOx\Desktop\Free YouTube Download.lnk
[2012.10.14 03:12:51 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2012.10.14 03:12:51 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2012.10.13 13:30:29 | 000,000,848 | ---- | M] () -- C:\Users\xOx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZooskMessenger.lnk
[2012.10.10 20:46:14 | 000,002,032 | ---- | M] () -- C:\Users\xOx\Desktop\Google Chrome.lnk
[2012.10.02 03:03:48 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012.09.28 15:31:51 | 000,001,191 | ---- | M] () -- C:\Users\xOx\Desktop\Free YouTube to MP3 Converter.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.10.25 22:55:58 | 000,132,096 | ---- | C] () -- C:\ProgramData\zenbzdpq.exe
[2012.10.25 22:55:51 | 000,076,348 | ---- | C] () -- C:\ProgramData\nbpcqdlpfpgprbj
[2012.10.25 22:55:46 | 000,132,096 | ---- | C] () -- C:\Users\xOx\0.12844067123061886.exe
[2012.10.14 03:12:51 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2012.10.14 03:12:51 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2012.07.19 23:31:03 | 000,000,008 | ---- | C] () -- C:\Users\xOx\AppData\Roaming\DofusAppId0_1
[2012.07.19 12:50:31 | 000,000,169 | ---- | C] () -- C:\Users\xOx\AppData\Roaming\D2Info0
[2012.07.19 12:50:31 | 000,000,008 | ---- | C] () -- C:\Users\xOx\AppData\Roaming\DofusAppId0_2
[2012.04.02 21:41:34 | 000,303,104 | ---- | C] () -- C:\Windows\System32\lxcycoin.dll
[2012.04.02 21:39:13 | 000,040,960 | ---- | C] () -- C:\Windows\System32\LXPRMON.DLL
[2012.04.02 21:39:13 | 000,032,768 | ---- | C] () -- C:\Windows\System32\LXPMONUI.DLL
[2012.04.02 21:37:12 | 000,233,472 | ---- | C] () -- C:\Windows\System32\lxcyinst.dll
[2012.04.02 21:37:11 | 001,183,744 | ---- | C] ( ) -- C:\Windows\System32\lxcyserv.dll
[2012.04.02 21:37:11 | 000,995,328 | ---- | C] ( ) -- C:\Windows\System32\lxcyusb1.dll
[2012.04.02 21:37:10 | 000,163,840 | ---- | C] ( ) -- C:\Windows\System32\lxcyprox.dll
[2012.04.02 21:37:10 | 000,114,688 | ---- | C] ( ) -- C:\Windows\System32\lxcypplc.dll
[2012.04.02 21:37:09 | 000,536,576 | ---- | C] ( ) -- C:\Windows\System32\lxcylmpm.dll
[2012.04.02 21:37:08 | 000,696,320 | ---- | C] ( ) -- C:\Windows\System32\lxcyhbn3.dll
[2012.04.02 21:37:08 | 000,380,928 | ---- | C] ( ) -- C:\Windows\System32\lxcyih.exe
[2012.04.02 21:37:07 | 000,495,616 | ---- | C] ( ) -- C:\Windows\System32\lxcycoms.exe
[2012.04.02 21:37:06 | 000,610,304 | ---- | C] ( ) -- C:\Windows\System32\lxcycomc.dll
[2012.04.02 21:37:06 | 000,421,888 | ---- | C] ( ) -- C:\Windows\System32\lxcycomm.dll
[2012.04.02 21:37:05 | 000,385,024 | ---- | C] ( ) -- C:\Windows\System32\lxcycfg.exe
[2012.04.02 21:21:09 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2011.11.19 21:16:41 | 000,002,304 | ---- | C] () -- C:\Windows\System32\HtsysmNT.sys
[2011.10.31 11:50:38 | 000,000,552 | ---- | C] () -- C:\Users\xOx\AppData\Local\d3d8caps.dat
[2011.10.25 01:19:33 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.09.28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011.09.04 19:33:55 | 000,000,091 | ---- | C] () -- C:\Users\xOx\AppData\Local\fusioncache.dat
[2011.07.23 14:16:44 | 000,000,551 | ---- | C] () -- C:\Windows\eReg.dat
[2011.04.04 20:11:37 | 000,279,712 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2011.04.04 20:11:37 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2011.03.09 21:10:41 | 000,022,528 | ---- | C] () -- C:\Windows\System32\WBCustomizer.dll
[2011.03.07 10:31:31 | 000,008,268 | ---- | C] () -- C:\Users\xOx\AppData\Local\d3d9caps.dat
[2011.02.24 13:25:45 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2011.02.24 01:24:46 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2011.02.24 01:24:46 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2011.02.22 14:01:12 | 000,138,520 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011.02.22 14:01:12 | 000,138,056 | ---- | C] () -- C:\Users\xOx\AppData\Roaming\PnkBstrK.sys
[2011.02.22 14:00:53 | 000,234,536 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2011.02.22 14:00:52 | 000,682,280 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2011.02.22 14:00:52 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2011.02.17 20:59:05 | 000,063,488 | ---- | C] () -- C:\Users\xOx\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.02.16 19:56:23 | 000,681,680 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2011.02.16 19:56:23 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2011.02.16 19:56:23 | 000,148,950 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2011.02.16 19:56:23 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2011.02.16 12:49:39 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
========== ZeroAccess Check ==========
[2006.11.02 14:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2011.11.18 01:36:56 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\.minecraft
[2012.07.19 12:50:39 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\app
[2011.02.26 16:54:28 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Ascaron Entertainment
[2012.05.08 21:21:49 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\com.zoosk.Desktop.096E6A67431258A508A2446A847B240591D2C99B.1
[2012.07.19 15:43:19 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\CrystalApp
[2012.07.19 15:43:00 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\CrystalSpace
[2012.03.12 18:41:55 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\DisplayTune
[2012.07.19 12:50:31 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2012.07.19 23:31:03 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2012.07.19 23:42:56 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Dofus2
[2012.10.19 14:02:14 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\DVDVideoSoft
[2012.10.19 14:01:52 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.07.17 11:14:02 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Exvuqu
[2011.03.13 13:13:23 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\FOG Downloader
[2011.11.18 00:02:25 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Gatling Gears
[2011.02.16 16:46:01 | 000,000,000 | -H-D | M] -- C:\Users\xOx\AppData\Roaming\ijjigame
[2012.10.25 22:59:39 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Iryki
[2011.11.18 20:42:37 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Leadertech
[2011.11.15 17:28:11 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Lionhead Studios
[2012.07.28 17:20:25 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\LolClient
[2011.02.22 01:39:20 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Need for Speed World
[2012.01.22 20:38:22 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Obsidian Entertainment
[2012.07.19 15:44:52 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\PlaneShift
[2012.07.17 10:48:12 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Pyotta
[2012.09.11 15:29:01 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Qeyg
[2012.04.23 07:02:49 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Red Kawa
[2012.07.19 12:50:39 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2011.10.30 15:18:20 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\RIFT
[2011.08.04 20:30:26 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Stardock
[2012.07.09 02:27:44 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\TS3Client
[2011.09.04 19:34:18 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Turbine
[2011.07.30 17:26:31 | 000,000,000 | ---D | M] -- C:\Users\xOx\AppData\Roaming\Unity
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*. >
[2011.11.03 01:05:32 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2011.08.30 10:03:03 | 000,000,000 | ---D | M] -- C:\980ff08cf756eca936
[2012.05.14 03:03:57 | 000,000,000 | ---D | M] -- C:\a1aa2369d9ad4eda90f6
[2010.07.19 02:08:18 | 000,000,000 | ---D | M] -- C:\AMD
[2011.02.17 21:46:13 | 000,000,000 | ---D | M] -- C:\ATI
[2010.11.10 20:14:56 | 000,000,000 | ---D | M] -- C:\AV_LOGS
[2011.03.04 12:20:45 | 000,000,000 | -HSD | M] -- C:\Boot
[2006.11.02 15:02:03 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2010.07.15 17:58:30 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2012.08.23 16:33:23 | 000,000,000 | ---D | M] -- C:\Download
[2011.02.16 13:02:26 | 000,000,000 | R--D | M] -- C:\DRIVER
[2011.02.16 16:34:26 | 000,000,000 | ---D | M] -- C:\ijji
[2011.02.16 13:02:26 | 000,000,000 | R--D | M] -- C:\MANUAL
[2011.09.08 20:59:39 | 000,000,000 | ---D | M] -- C:\Netts
[2012.08.23 17:12:28 | 000,000,000 | ---D | M] -- C:\Nexon
[2010.07.24 09:05:16 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2012.10.19 21:36:58 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.10.25 22:56:00 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2010.07.15 17:58:30 | 000,000,000 | -HSD | M] -- C:\Programme
[2012.07.25 23:15:47 | 000,000,000 | ---D | M] -- C:\Riot Games
[2012.10.24 15:36:57 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.02.16 11:18:42 | 000,000,000 | R--D | M] -- C:\Users
[2012.10.25 22:58:31 | 000,000,000 | ---D | M] -- C:\Windows
[2011.02.16 11:32:11 | 000,000,000 | ---D | M] -- C:\Windows.old
< %PROGRAMFILES%\*.exe >
< %LOCALAPPDATA%\*.exe >
< %systemroot%\*. /mp /s >
< MD5 for: AGP440.SYS >
[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.19 09:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys
[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.19 09:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2011.02.17 15:18:15 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2011.02.17 15:18:15 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2011.02.17 15:18:15 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
< MD5 for: EXPLORER.EXE >
[2011.02.17 15:17:04 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2011.02.17 15:17:04 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2011.02.17 15:17:04 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2011.02.17 15:49:43 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=6D06CD98D954FE87FB2DB8108793B399 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe
[2011.02.17 15:49:42 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=BD06F0BF753BC704B653C3A50F89D362 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe
[2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe
[2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2011.02.17 15:17:04 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2006.11.02 11:45:07 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=FD8C53FB002217F6F888BCF6F5D7084D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb\explorer.exe
[2008.01.19 09:33:10 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
< MD5 for: IASTORV.SYS >
[2008.01.19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.19 09:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys
[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2006.11.02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll
[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.19 09:35:36 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys
[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.19 09:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
< MD5 for: SCECLI.DLL >
[2008.01.19 09:36:19 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2006.11.02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll
[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
< MD5 for: USER32.DLL >
[2011.02.17 14:20:00 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=63B4F59D7C89B1BF5277F1FFEFD491CD -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16438_none_cb39bc5b7047127e\user32.dll
[2009.04.11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\System32\user32.dll
[2009.04.11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
[2011.02.17 14:20:00 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=9D9F061EDA75425FC67F0365E3467C86 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.20537_none_cbc258dc896598f1\user32.dll
[2008.01.19 09:36:46 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll
[2006.11.02 11:46:13 | 000,633,856 | ---- | M] (Microsoft Corporation) MD5=E698A5437B89A285ACA3FF022356810A -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6000.16386_none_cb01aa4570716e5e\user32.dll
< MD5 for: USERINIT.EXE >
[2008.01.19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.19 09:33:33 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2006.11.02 11:45:50 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=22027835939F86C3E47AD8E3FBDE3D11 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6000.16386_none_d9f1f819d4c4e737\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe
[2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2006.11.02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe
[2008.01.19 09:33:37 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2006.11.02 10:58:26 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=84620AECDCFD2A7A14E6263927D8C0ED -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6000.16386_none_4d4fded8cae2956d\ws2ifsl.sys
[2008.01.19 07:56:49 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2008.01.19 07:56:49 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2006.11.02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006.11.02 12:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006.11.02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006.11.02 12:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006.11.02 12:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
< %systemroot%\system32\*.dll /lockedfiles >
< %USERPROFILE%\*.* >
[2012.10.25 22:55:47 | 000,132,096 | ---- | M] () -- C:\Users\xOx\0.12844067123061886.exe
[2012.10.25 23:26:32 | 002,883,584 | -HS- | M] () -- C:\Users\xOx\NTUSER.DAT
[2012.10.25 23:26:32 | 000,262,144 | -H-- | M] () -- C:\Users\xOx\ntuser.dat.LOG1
[2011.02.16 11:18:50 | 000,000,000 | -H-- | M] () -- C:\Users\xOx\ntuser.dat.LOG2
[2012.10.25 23:05:57 | 000,065,536 | -HS- | M] () -- C:\Users\xOx\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2012.10.25 23:05:57 | 000,524,288 | -HS- | M] () -- C:\Users\xOx\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2011.02.16 11:33:30 | 000,524,288 | -HS- | M] () -- C:\Users\xOx\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms
[2011.02.16 11:18:51 | 000,000,020 | -HS- | M] () -- C:\Users\xOx\ntuser.ini
< %USERPROFILE%\Local Settings\Temp\*.exe >
< %USERPROFILE%\Local Settings\Temp\*.dll >
< %USERPROFILE%\Application Data\*.exe >
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
< >
[2006.11.02 15:01:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2006.11.02 15:01:49 | 000,032,510 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.04.02 16:25:53 | 000,000,884 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012.07.11 20:24:30 | 000,001,060 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4070636601-1190850629-1727098569-1000Core.job
[2012.07.11 20:24:30 | 000,001,112 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4070636601-1190850629-1727098569-1000UA.job
========== Alternate Data Streams ==========
Extras Code:
OTL Extras logfile created on: 25.10.2012 23:21:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\xOx\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,40 Gb Available Physical Memory | 70,08% Memory free
4,23 Gb Paging File | 3,80 Gb Available in Paging File | 89,83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298,09 Gb Total Space | 76,06 Gb Free Space | 25,52% Space Free | Partition Type: NTFS
Computer Name: XOX-PC | User Name: xOx | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06F9F07B-8E96-4AD9-82C4-F12D13A1A953}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{07CD519A-AE86-4E35-AD9B-2EDE4E83AD8D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1826D438-7FA8-4B67-A0A7-57DE129F9004}" = rport=137 | protocol=17 | dir=out | app=system |
"{1FCD3D7B-386A-45CE-801D-B53133E0FDF3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{40C27723-E228-4DED-B65E-D4CC6132A0D1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{50E7E1FA-ACA9-42DE-A673-EFE7CA7C0697}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{64F29395-5804-46D8-84D8-4A9B5DF7C9C0}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface |
"{6E6C7A75-B1A7-4308-B077-6958154296B5}" = lport=10243 | protocol=6 | dir=in | app=system |
"{6EAE8B7C-69A7-420F-845B-B9AFAE1010D1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{73106513-0A1F-43E3-B1F6-B4E3E0218A90}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8D44B62C-7A9A-41ED-8937-D0EDBC6D1910}" = rport=445 | protocol=6 | dir=out | app=system |
"{8E773642-EC1D-49BA-BB3B-A69943E31045}" = lport=137 | protocol=17 | dir=in | app=system |
"{9FF468F6-0FB6-49D8-9985-33805360B9C4}" = rport=10243 | protocol=6 | dir=out | app=system |
"{A0FBB062-0D0A-4C90-A588-8F3C7474C185}" = lport=138 | protocol=17 | dir=in | app=system |
"{A47029D9-AB73-47BC-A67E-100DA230A8E7}" = lport=49166 | protocol=6 | dir=in | name=akamai netsession interface |
"{B196638B-1A38-4B51-9B73-5A69E83B5E16}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{B30C4F02-4741-4DB3-B9A2-CB76B57F12C4}" = lport=139 | protocol=6 | dir=in | app=system |
"{BD2224AE-E8FC-4AAB-8E11-61FD31A2FB7C}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{D7982FC7-E835-4B88-82D2-6EAEF4372BAD}" = rport=138 | protocol=17 | dir=out | app=system |
"{D7D721DE-57FB-4F04-9F00-871496F2FDFA}" = lport=2869 | protocol=6 | dir=in | app=system |
"{DC587533-2164-4A8A-AFC5-BED358D3CF8F}" = lport=445 | protocol=6 | dir=in | app=system |
"{E14DD6EB-C6F7-4A4D-BAC6-FD419148569B}" = rport=139 | protocol=6 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02FB7C32-4124-487A-835D-4CE1524B548A}" = protocol=17 | dir=in | app=c:\program files\reactor\ijjioptimizer.exe |
"{030FC369-D131-422C-8A38-C7ACFA0E3497}" = protocol=6 | dir=in | app=c:\ijji\english\genesisad\gameconsole.bin |
"{134A6BF9-86A1-45B5-99D6-6BD7E448E11A}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{16BD2531-E807-43F4-8CF7-00DB674C4137}" = protocol=6 | dir=out | app=system |
"{19C2B8D2-65EB-4C2A-8FBE-43EFF49C080C}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{1CEB275D-4407-46CB-BFDE-96D8309A92B3}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{1E0C0A03-4120-4A8D-A53C-DF6E1D25F09C}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{1FCF61FF-7582-46C7-AA6D-CFEAC233D69A}" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
"{233B0513-7969-4489-8832-3B77F02F31D4}" = protocol=17 | dir=in | app=c:\program files\origin games\darkspore\darksporebin\darkspore.exe |
"{252E2FB5-D2CA-4FBE-8397-A591804AAC71}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{27E63DFA-43F7-41F8-A5C1-9090650D64C1}" = protocol=17 | dir=in | app=c:\ijji\english\genesisad\gameconsole.bin |
"{29D4966E-23DF-47EF-9625-F9DA6FC7FBB4}" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe |
"{2A201E1B-427A-4D9E-9E3A-2D01842F39C6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{364F5A84-10F5-40F7-A6DB-C520A13EE532}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{3722ADB5-F1B5-4F8A-83EE-3AC226A5C432}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{396DB558-397D-4478-B1BC-31D247601506}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3C754F0B-E5EC-4F0A-BC3B-C0805BB16C16}" = protocol=17 | dir=in | app=c:\program files\stardock games\demigod\bin\demigod.exe |
"{45841249-C136-490E-A384-DE631FEB6EEE}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{481D8393-030A-49FD-853D-14BB3FA96844}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{484892B5-5803-41A8-8166-2F402336F22F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4AE77D24-8121-45AC-B3C5-F88EE1092987}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{522B57BC-1246-47C8-90C9-1C85AD4F76D2}" = protocol=6 | dir=in | app=c:\program files\reactor\ijjioptimizer.exe |
"{5CBF1B38-7A16-44C6-A8B5-6A3A70690716}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{62FF83A6-A05A-4D38-9921-B29DB51A4865}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{648A936B-EE6D-4F17-85AD-7D66223D302B}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{6536CA85-2394-4F97-84DA-74003619E0CE}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{68379CF7-B2D7-4E0F-9469-3572ECDA55EF}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{695F5B08-9506-4C9A-86C5-EE37B149E9F1}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{6AA4120D-943F-4337-A9F3-56D088D95218}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{7670E624-0D51-4FC4-A59D-252907427E5A}" = protocol=17 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe |
"{7869A4DE-8490-44FA-96F0-84479013202B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{7D111830-1311-40B2-B511-75D9168789F8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{87F2848F-359D-42DB-9A88-57AF0837874D}" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe |
"{8EB3B7F5-4B5F-4547-ABD8-118255031A00}" = protocol=6 | dir=in | app=c:\ijji\english\genesisad\anotherday.exe |
"{908A0BAF-3F2B-4ABB-8674-E35785031BD8}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{96D4DBAA-9B49-4C49-833B-522FB0745236}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"{A229DD32-89FB-4669-BCB3-80AEB7F145E4}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{A9369865-1AFA-4F50-AA92-6985706AC5FD}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{BC37770D-C864-4DD7-AD57-6678D16BAC79}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{BE16ABD5-BD16-4D0B-A5EC-3F894D67C841}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C752EE69-B358-4A64-ACBF-D931BC2CEA62}" = protocol=6 | dir=in | app=c:\program files\origin games\darkspore\darksporebin\darkspore.exe |
"{CF22CEF5-994D-413D-A11C-9219A5DF9AA7}" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"{CF85C87C-8797-41DA-A78A-8636546AD06C}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{DA6941FA-67BE-40E1-911F-FF4619CDAE96}" = protocol=6 | dir=in | app=c:\program files\stardock games\demigod\bin\demigod.exe |
"{E1416477-0F93-4393-A10F-522893895312}" = protocol=6 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe |
"{E2509BA4-F4AE-42FF-BAC5-E038364B5530}" = protocol=6 | dir=in | app=c:\program files\gameforge4d\elsword_de\data\x2.exe |
"{E5A3F94D-D3EB-4C6B-83EE-33731515FB9E}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{F0A437BD-F56A-4945-9925-9C6DA33BC58C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F6586AD4-73BD-45B9-89A2-6D41553EBA72}" = protocol=17 | dir=in | app=c:\ijji\english\genesisad\anotherday.exe |
"{F7A40B01-6EE8-4E3F-A0FE-BD57C1F02163}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{FAB1B276-2CBE-49E7-99F4-5FE56D83EB00}" = protocol=17 | dir=in | app=c:\program files\gameforge4d\elsword_de\data\x2.exe |
"TCP Query User{00357170-AED4-49E9-BB72-E49D6B3EA351}C:\users\xox\appdata\local\microsoft\windows\temporary internet files\content.ie5\5gml6e6z\yuleech-runes_of_magic_3_0_8_2349_slim_eu[1].exe" = protocol=6 | dir=in | app=c:\users\xox\appdata\local\microsoft\windows\temporary internet files\content.ie5\5gml6e6z\yuleech-runes_of_magic_3_0_8_2349_slim_eu[1].exe |
"TCP Query User{1056E300-2870-455E-A921-AF9FD9AD10D1}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"TCP Query User{1E8072D2-0012-4C9F-8A1D-3272F94D5773}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"TCP Query User{3859F9AB-39B6-463E-801D-F4E2B1EDC43E}C:\program files\runes of magic\client.exe" = protocol=6 | dir=in | app=c:\program files\runes of magic\client.exe |
"TCP Query User{3E050C19-7067-4AC9-AD49-AC2422FF321C}C:\users\xox\appdata\local\microsoft\windows\temporary internet files\content.ie5\3aixt5s8\star%20trek%20cryptic%20trial%20downloader%20st.11.20110118b.10[1].exe" = protocol=6 | dir=in | app=c:\users\xox\appdata\local\microsoft\windows\temporary internet files\content.ie5\3aixt5s8\star%20trek%20cryptic%20trial%20downloader%20st.11.20110118b.10[1].exe |
"TCP Query User{4B11AD7E-6960-401F-A21E-03507322B4DD}C:\users\xox\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\xox\appdata\local\akamai\netsession_win.exe |
"TCP Query User{4B99C6AC-A019-41E1-BB11-C8DD5CC189DA}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{5198BDE3-EC03-412D-8155-D7D9F8C81526}C:\program files\icq7.7\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq7.7\icq.exe |
"TCP Query User{57A54EEA-7F13-4534-AE66-621F6EB12ECA}C:\users\xox\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\xox\appdata\local\akamai\netsession_win.exe |
"TCP Query User{5F6B5541-65C4-4F56-B7EC-80E3B665DAA7}C:\program files\thq\relic entertainment\company of heroes online\game\reliccohoww.exe" = protocol=6 | dir=in | app=c:\program files\thq\relic entertainment\company of heroes online\game\reliccohoww.exe |
"TCP Query User{6B87C4CE-2830-494F-AC27-5DB73DE281FA}C:\nexon\combat arms eu\engine.exe" = protocol=6 | dir=in | app=c:\nexon\combat arms eu\engine.exe |
"TCP Query User{8F1307BF-E188-41D4-90A7-A0B7ED083014}C:\users\public\sony online entertainment\installed games\dc universe online live\unreal3\binaries\win32\dcgame.exe" = protocol=6 | dir=in | app=c:\users\public\sony online entertainment\installed games\dc universe online live\unreal3\binaries\win32\dcgame.exe |
"TCP Query User{B02D200D-18F2-4C22-96BC-CCD87D71D83E}C:\program files\origin games\gatling gears\game\gatlinggears\gatlinggears.exe" = protocol=6 | dir=in | app=c:\program files\origin games\gatling gears\game\gatlinggears\gatlinggears.exe |
"TCP Query User{B6A709A0-BF6E-445D-B640-C0289B58B091}C:\program files\codemasters\der herr der ringe online\lotroclient.exe" = protocol=6 | dir=in | app=c:\program files\codemasters\der herr der ringe online\lotroclient.exe |
"TCP Query User{C2E56BFD-C0BC-4007-8C7F-88AA89363934}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"TCP Query User{C9EF55F3-23C7-426E-9E16-DE6C20E680EA}C:\program files\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files\xfire\xfire.exe |
"TCP Query User{CCFC090F-37F4-46D8-89E1-B17C3AA02E59}C:\program files\reactor\reactor.exe" = protocol=6 | dir=in | app=c:\program files\reactor\reactor.exe |
"TCP Query User{E1556E4C-8BEE-4118-AE62-3FBCCFC1EA2C}C:\users\xox\appdata\local\temp\3dacd75117be455e9b4233b775e776fe\relicdownloader.exe" = protocol=6 | dir=in | app=c:\users\xox\appdata\local\temp\3dacd75117be455e9b4233b775e776fe\relicdownloader.exe |
"TCP Query User{F8C8989B-EDE0-41AE-9F61-2002CC5DC923}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"TCP Query User{F9A7201C-47D0-4584-B4D2-800EA6C0E965}C:\program files\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files\xfire\xfire.exe |
"TCP Query User{FC58E69C-D3CE-4A3F-9EC8-244A454ED848}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe |
"UDP Query User{0DC0F980-A5AE-4839-8426-3AF573051A23}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"UDP Query User{13B528B0-D0C9-477D-8774-865BE1C19C04}C:\users\xox\appdata\local\temp\3dacd75117be455e9b4233b775e776fe\relicdownloader.exe" = protocol=17 | dir=in | app=c:\users\xox\appdata\local\temp\3dacd75117be455e9b4233b775e776fe\relicdownloader.exe |
"UDP Query User{411FC66D-DFA7-4F0D-9170-165A0D0676D8}C:\users\public\sony online entertainment\installed games\dc universe online live\unreal3\binaries\win32\dcgame.exe" = protocol=17 | dir=in | app=c:\users\public\sony online entertainment\installed games\dc universe online live\unreal3\binaries\win32\dcgame.exe |
"UDP Query User{431C6ED0-7E33-4C53-A9DE-AD1C8D4607C0}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
"UDP Query User{52866A56-C6B8-4110-8C59-B710C41B1B66}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{624EA304-68D3-4CE9-8DB8-35DE4C142115}C:\program files\thq\relic entertainment\company of heroes online\game\reliccohoww.exe" = protocol=17 | dir=in | app=c:\program files\thq\relic entertainment\company of heroes online\game\reliccohoww.exe |
"UDP Query User{75CB6C16-B62C-4732-A26E-3DC2C573BF03}C:\program files\codemasters\der herr der ringe online\lotroclient.exe" = protocol=17 | dir=in | app=c:\program files\codemasters\der herr der ringe online\lotroclient.exe |
"UDP Query User{766CEB58-97AF-49D3-AA35-2ABA31025B2C}C:\program files\runes of magic\client.exe" = protocol=17 | dir=in | app=c:\program files\runes of magic\client.exe |
"UDP Query User{7E13A381-641A-4E4F-876B-98A74F6465E9}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"UDP Query User{8009BC4B-380F-4578-AED2-C3352B2732D1}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe |
"UDP Query User{8C38E78B-D72D-4BD7-9F2E-608483B76893}C:\program files\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files\xfire\xfire.exe |
"UDP Query User{980BED82-C5F2-451E-9930-57D14C9955A7}C:\program files\origin games\gatling gears\game\gatlinggears\gatlinggears.exe" = protocol=17 | dir=in | app=c:\program files\origin games\gatling gears\game\gatlinggears\gatlinggears.exe |
"UDP Query User{A8A0CA30-7897-4E2E-BC3D-8F775582DC60}C:\program files\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files\xfire\xfire.exe |
"UDP Query User{BBE17FC8-0873-4DE2-AA52-C3776C812726}C:\program files\reactor\reactor.exe" = protocol=17 | dir=in | app=c:\program files\reactor\reactor.exe |
"UDP Query User{BFE1204C-BF91-4A6E-B580-29A7EE3C7DB6}C:\users\xox\appdata\local\microsoft\windows\temporary internet files\content.ie5\5gml6e6z\yuleech-runes_of_magic_3_0_8_2349_slim_eu[1].exe" = protocol=17 | dir=in | app=c:\users\xox\appdata\local\microsoft\windows\temporary internet files\content.ie5\5gml6e6z\yuleech-runes_of_magic_3_0_8_2349_slim_eu[1].exe |
"UDP Query User{C54433AD-2904-438B-8D15-44F371A611C0}C:\program files\icq7.7\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq7.7\icq.exe |
"UDP Query User{C8DD9827-9AC1-4943-9671-80B690D57D1B}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{DC8F1CD9-D043-4A91-BBE9-415DD1D8B3A1}C:\users\xox\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\xox\appdata\local\akamai\netsession_win.exe |
"UDP Query User{E593C1EC-BF0F-4E51-9DEA-E3D6B9674B37}C:\users\xox\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\xox\appdata\local\akamai\netsession_win.exe |
"UDP Query User{E91F8B24-759A-4547-AC04-AFC59D854179}C:\nexon\combat arms eu\engine.exe" = protocol=17 | dir=in | app=c:\nexon\combat arms eu\engine.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01E9B2FF-DAF4-4529-9CC9-2101625517C7}" = nero.prerequisites.msi
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0D7B7EFD-C8D8-85CE-D7AC-15CB76F745B8}" = ATI Catalyst Control Center Ex
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{1280E900-35DA-4E08-A700-B79A5B2B8532}" = Microsoft Antimalware Service DE-DE Language Pack
"{14DC0059-00F1-4F62-BD1A-AB23CD51A95E}" = Adobe AIR
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22758D8F-E023-44ED-8647-3C6985ABF663}" = Nero Kwik Media
"{2432E589-6256-4513-B0BF-EFA8E325D5F0}" = Nero SharedVideoCodecs
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4D53090A-CE35-42BD-B377-831000028301}" = Fable III
"{4D53090A-CE35-42BD-B377-831000028302}" = Fable III
"{4D53090A-CE35-42BD-B377-831000028303}" = Fable III
"{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client DE-DE Language Pack
"{5A212B2D-140D-46F4-B625-2D1CA5A00594}" = Nero 11 Kwik Themes Basic
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{6FC4A9C1-2008-46F0-A1CF-6611F5F4DC49}" = EVO - Seperated drivers
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7F28246A-CEF7-46EF-8708-511A57FA5F2C}" = Evolution - The Genesis Project
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89661B04-C646-4412-B6D3-5E19F02F1F37}" = EAX4 Unified Redist
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8F50EC3D-C482-4445-9E4B-991A766047D5}_is1" = MAESTIA Version 201201
"{901DC58A-5C1B-4315-BA40-5AD3D3A463B9}" = REACTOR
"{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage
"{9193490D-5229-4FC4-9BB9-A6D63C09574A}" = High-Definition Video Playback
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{98EABC7F-B1A1-43A5-B505-5B4EC3908DCD}" = Microsoft Security Client
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B1AAE4BF-C98E-467E-94C7-4E1F51DD86E0}" = Darkspore™
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B9B1BA7F-7E07-49DD-A713-5B397A5BB66B}" = Nero Kwik Media Help (CHM)
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components 11
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{EC136321-1AE5-4A7F-B01C-5380D666175B}" = ICQ Sparberater
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FAF448F1-4460-440C-9280-07F66A63D6F5}" = Nero Kwik Media
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Akamai" = Akamai NetSession Interface
"Atlantica" = Atlantica
"conduitEngine" = Conduit Engine
"DivX Setup" = DivX-Setup
"Doxillion" = Doxillion Document Converter
"Free Audio Dub_is1" = Free Audio Dub version 2.0.11.627
"Free YouTube Download_is1" = Free YouTube Download version 3.1.39.1015
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.32.918
"ICQToolbar" = ICQ Toolbar
"iLivid" = iLivid
"InstallShield_{149464D9-B06F-4505-9968-FD1206F67AD3}" = Call of Duty(R) - World at War(TM) 1.3 Patch
"InstallShield_{20962D9D-D7B9-4AEE-B72B-5C9A45A1B402}" = Call of Duty(R) - World at War(TM) 1.6 Patch
"InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch
"InstallShield_{3521F7CF-9343-4C1F-AE5E-0D2A57A18D2B}" = Call of Duty(R) - World at War(TM) 1.5 Patch
"InstallShield_{97EE1BAC-C04F-4935-8110-B1BBAB99D09D}" = Call of Duty(R) - World at War(TM) 1.4.1 Patch
"InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty(R) - World at War(TM) 1.1 Patch
"InstallShield_{CC862A04-B2B0-4A79-ADD2-4B76D6CF4DCD}" = Call of Duty(R) - World at War(TM) 1.4 Patch
"InstallShield_{E237FA24-CFB3-431F-B356-DF8FB116DE4B}" = Call of Duty(R) - World at War(TM) 1.7 Patch
"Lexmark 3400 Series" = Lexmark 3400 Series
"Lexmark Fax Solutions" = Lexmark Fax-Lösungen
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 15.0 (x86 de)" = Mozilla Firefox 15.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NCH_EN Toolbar" = NCH EN Toolbar
"PunkBusterSvc" = PunkBuster Services
"Steam App 12900" = Audiosurf
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"VLC media player" = VLC media player 1.1.11
"VN_VUIns_Rhine_VIA" = VIA Rhine Family Fast Ethernet Adapter
"WavePad" = WavePad Sound Editor
"WinRAR archiver" = WinRAR
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Google Chrome" = Google Chrome
"Mozilla Firefox 16.0.1 (x86 de)" = Mozilla Firefox 16.0.1 (x86 de)
"SOE-DC Universe Online Live" = DC Universe Online Live
"UnityWebPlayer" = Unity Web Player
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 19.10.2012 09:15:50 | Computer Name = xOx-PC | Source = Application Error | ID = 1000
Error - 21.10.2012 22:10:58 | Computer Name = xOx-PC | Source = Application Error
| ID = 1000
Description = Fehlerhafte Anwendung firefox.exe, Version 16.0.1.4666, Zeitstempel 0x5076192e, fehlerhaftes Modul xul.dll, Version 16.0.1.4666, Zeitstempel 0x50761893, Ausnahmecode 0xc0000005, Fehleroffset 0x000be717,
Prozess-ID 0x1450, Anwendungsstartzeit 01cdafde2d5ce411.
Error - 22.10.2012 17:49:25 | Computer Name = xOx-PC | Source = EventSystem | ID
= 4621
Description =
Error - 23.10.2012 15:26:38 | Computer Name = xOx-PC | Source = Application Error
| ID = 1000
Description = Fehlerhafte Anwendung SubscriptionOffer.exe, Version 1.1.3.1015, Zeitstempel 0x507bf5f2, fehlerhaftes Modul mscorwks.dll, Version 2.0.50727.4223, Zeitstempel 0x4ef6c9ac, Ausnahmecode 0xc0000005, Fehleroffset 0x0010545e,
Prozess-ID 0x˜ý{˜ý{0, Anwendungsstartzeit ˜ý{˜ý{0.
Error - 23.10.2012 18:11:43 | Computer Name = xOx-PC | Source = EventSystem | ID
= 4621
Description =
Error - 25.10.2012 01:15:39 | Computer Name = xOx-PC | Source = EventSystem | ID
= 4621
Description =
Error - 25.10.2012 10:11:56 | Computer Name = xOx-PC | Source = EventSystem | ID
= 4621
Description =
Error - 25.10.2012 16:59:38 | Computer Name = xOx-PC | Source = Application Error
| ID = 1000
Description = Fehlerhafte Anwendung NEXON_EU_Downloader_Engine.exe, Version 2.5.10.0, Zeitstempel 0x4f966659, fehlerhaftes Modul NEXON_EU_Downloader_Engine.exe, Version 2.5.10.0, Zeitstempel 0x4f966659, Ausnahmecode 0xc0000005, Fehleroffset 0x0000c145,
Prozess-ID 0xd74, Anwendungsstartzeit 01cdb2f3a5092468.
Error - 25.10.2012 17:03:56 | Computer Name = xOx-PC | Source = Application Error
| ID = 1000
Description = Fehlerhafte Anwendung NEXON_EU_Downloader_Engine.exe, Version 2.5.10.0, Zeitstempel 0x4f966659, fehlerhaftes Modul NEXON_EU_Downloader_Engine.exe, Version 2.5.10.0, Zeitstempel 0x4f966659, Ausnahmecode 0xc0000005, Fehleroffset 0x0000c145,
Prozess-ID 0x5c8, Anwendungsstartzeit 01cdb2f43b084e98.
Error - 25.10.2012 17:05:07 | Computer Name = xOx-PC | Source = Application Error
| ID = 1000
Description = Fehlerhafte Anwendung NEXON_EU_Downloader_Engine.exe, Version 2.5.10.0, Zeitstempel 0x4f966659, fehlerhaftes Modul NEXON_EU_Downloader_Engine.exe, Version 2.5.10.0, Zeitstempel 0x4f966659, Ausnahmecode 0xc0000005, Fehleroffset 0x0000c145,
Prozess-ID 0x9ac, Anwendungsstartzeit 01cdb2f468edfea7.
Error - 25.10.2012 17:10:39 | Computer Name = xOx-PC | Source = EventSystem | ID
= 4609
Description =
Error encountered while reading event logs.
< End of report >
|
