Trojaner-Board - absturz bei malware scan

sorry dass ich mich so spät melde,hatte übers we kein internet.
danke erstmal für die Antwort!
hier die logs:

mbam log:

Code:

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org
 

Datenbank Version: 4174
 

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18904
 

07.06.2010 13:22:16

mbam-log-2010-06-07 (13-22-16).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Durchsuchte Objekte: 407778

Laufzeit: 3 Stunde(n), 14 Minute(n), 48 Sekunde(n)
 

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschlüssel: 0

Infizierte Registrierungswerte: 0

Infizierte Dateiobjekte der Registrierung: 0

Infizierte Verzeichnisse: 0

Infizierte Dateien: 0
 

Infizierte Speicherprozesse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung:

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien:

(Keine bösartigen Objekte gefunden)

hier die otl.txt:

Code:

OTL logfile created on: 08.06.2010 01:10:44 - Run 1

OTL by OldTimer - Version 3.2.5.3     Folder = C:\Users\****\Desktop

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18904)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 48,00% Memory free

6,00 Gb Paging File | 4,00 Gb Available in Paging File | 78,00% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 289,39 Gb Total Space | 125,25 Gb Free Space | 43,28% Space Free | Partition Type: NTFS

Drive D: | 8,70 Gb Total Space | 4,56 Gb Free Space | 52,36% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

 

Computer Name: ****-PC

Current User Name: ****

Logged in as Administrator.

 

Current Boot Mode: Normal

Scan Mode: Current user

Company Name Whitelist: On

Skip Microsoft Files: On

File Age = 90 Days

Output = Minimal

Quick Scan

 
 ========== Processes (SafeList) ==========

 

PRC - C:\Users\****\Desktop\OTL.exe (OldTimer Tools)

PRC - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)

PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)

PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)

PRC - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe ()

PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)

PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)

PRC - C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DigitalPersona, Inc.)

PRC - C:\Program Files\DigitalPersona\Bin\DpAgent.exe (DigitalPersona, Inc.)

PRC - C:\Windows\System32\atieclxx.exe (AMD)

PRC - C:\Windows\System32\atiesrxx.exe (AMD)

PRC - C:\Program Files\Fingerprint Sensor\AtService.exe (AuthenTec, Inc.)

PRC - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)

PRC - C:\Windows\System32\wisptis.exe (Microsoft Corporation)

PRC - C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (Microsoft Corporation)

PRC - C:\Windows\explorer.exe (Microsoft Corporation)

PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)

PRC - c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation)

PRC - c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation)

PRC - C:\Windows\System32\WTablet\Pen_TabletUser.exe (Wacom Technology, Corp.)

PRC - C:\Windows\System32\Pen_Tablet.exe (Wacom Technology, Corp.)

PRC - C:\Windows\SMINST\BLService.exe ()

PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)

PRC - C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe (Microsoft Corporation)

PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

PRC - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe ()

PRC - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe ()

PRC - C:\Windows\System32\WacomTouchService.exe ()

 

 
 ========== Modules (SafeList) ==========

 

MOD - C:\Users\****\Desktop\OTL.exe (OldTimer Tools)

MOD - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll (Microsoft Corporation)

MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)

MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation)

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV - (Lavasoft Ad-Aware Service) --  File not found

SRV - (afcdpsrv) -- C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)

SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)

SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)

SRV - (AcrSch2Svc) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe ()

SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)

SRV - (DpHost) -- C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DigitalPersona, Inc.)

SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)

SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD)

SRV - (ATService) -- C:\Program Files\Fingerprint Sensor\AtService.exe (AuthenTec, Inc.)

SRV - (uvnc_service) -- C:\Program Files\UltraVNC\WinVNC.exe (UltraVNC)

SRV - (DAUpdaterSvc) -- C:\Program Files\Games\Dragon Age\bin_ship\daupdatersvc.service.exe (BioWare)

SRV - (MSSQL$SQLEXPRESS) SQL Server (SQLEXPRESS) -- c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)

SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)

SRV - (SQLWriter) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation)

SRV - (SQLBrowser) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation)

SRV - (MSSQLServerADHelper) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe (Microsoft Corporation)

SRV - (Nero BackItUp Scheduler 4.0) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)

SRV - (TabletServicePen) -- C:\Windows\System32\Pen_Tablet.exe (Wacom Technology, Corp.)

SRV - (Recovery Service for Windows) -- C:\Windows\SMINST\BLService.exe ()

SRV - (ezSharedSvc) -- C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS)

SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)

SRV - (BlueSoleil Hid Service) -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe ()

SRV - (Start BT in service) -- C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe ()

SRV - (msvsmon90) -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe (Microsoft Corporation)

SRV - (WacomTouchService) -- C:\Windows\System32\WacomTouchService.exe ()

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - (afcdp) -- C:\Windows\System32\drivers\afcdp.sys (Acronis)

DRV - (tdrpman258) Acronis Try&Decide and Restore Points filter (build 258) -- C:\Windows\system32\DRIVERS\tdrpm258.sys (Acronis)

DRV - (timounter) -- C:\Windows\system32\DRIVERS\timntr.sys (Acronis)

DRV - (snapman) -- C:\Windows\system32\DRIVERS\snapman.sys (Acronis)

DRV - (SASKUTIL) -- C:\Program Files\Enhancement\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)

DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)

DRV - (SASDIFSV) -- C:\Program Files\Enhancement\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)

DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)

DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys ()

DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys ()

DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)

DRV - (ATSwpWDF) -- C:\Windows\System32\drivers\ATSwpWDF.sys (AuthenTec, Inc.)

DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)

DRV - (Lbd) -- C:\Windows\system32\DRIVERS\Lbd.sys (Lavasoft AB)

DRV - (tifsfilter) -- C:\Windows\System32\drivers\tifsfilt.sys (Acronis)

DRV - (RTSTOR) -- C:\Windows\System32\drivers\RTSTOR.sys (Realtek Semiconductor Corp.)

DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)

DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()

DRV - (KMWDFILTER) -- C:\Windows\System32\drivers\KMWDFILTER.sys (Windows (R) Codename Longhorn DDK provider)

DRV - (BCM43XX) -- C:\Windows\System32\drivers\BCMWL6.SYS (Broadcom Corporation)

DRV - (BCM43XV) -- C:\Windows\System32\drivers\BCMWL6.SYS (Broadcom Corporation)

DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics, Inc.)

DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)

DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation                                            )

DRV - (SSPORT) -- C:\Windows\System32\drivers\SSPORT.sys (Samsung Electronics)

DRV - (enecir) -- C:\Windows\System32\drivers\enecir.sys (ENE TECHNOLOGY INC.)

DRV - (MegaSR) -- C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)

DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)

DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Corporation)

DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)

DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)

DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)

DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)

DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)

DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)

DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)

DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)

DRV - (winachsf) -- C:\Windows\System32\drivers\VSTCNXT3.SYS (Conexant Systems, Inc.)

DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)

DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)

DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)

DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)

DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)

DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)

DRV - (HSF_DPV) -- C:\Windows\System32\drivers\VSTDPV3.SYS (Conexant Systems, Inc.)

DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)

DRV - (HSFHWAZL) -- C:\Windows\System32\drivers\VSTAZL3.SYS (Conexant Systems, Inc.)

DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)

DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)

DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)

DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)

DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)

DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)

DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)

DRV - (Wacomhidfilter) -- C:\Windows\System32\drivers\wacomhidfilter.sys (Wacom Technology)

DRV - (wacomvhid) -- C:\Windows\System32\drivers\wacomvhid.sys (Wacom Technology)

DRV - (HpqRemHid) -- C:\Windows\System32\drivers\HpqRemHid.sys (Hewlett-Packard Development Company, L.P.)

DRV - (AmdLLD) -- C:\Windows\System32\drivers\AmdLLD.sys (AMD, Inc.)

DRV - (Btcsrusb) -- C:\Windows\System32\drivers\btcusb.sys (IVT Corporation.)

DRV - (BlueletSCOAudio) -- C:\Windows\System32\drivers\BlueletSCOAudio.sys (IVT Corporation.)

DRV - (BlueletAudio) -- C:\Windows\System32\drivers\blueletaudio.sys (IVT Corporation.)

DRV - (HpqKbFiltr) -- C:\Windows\System32\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)

DRV - (motmodem) -- C:\Windows\System32\drivers\motmodem.sys (Motorola)

DRV - (BT) -- C:\Windows\System32\drivers\btnetdrv.sys (IVT Corporation.)

DRV - (BTHidMgr) -- C:\Windows\System32\Drivers\BTHidMgr.sys (IVT Corporation.)

DRV - (BTHidEnum) -- C:\Windows\System32\Drivers\vbtenum.sys (IVT Corporation.)

DRV - (VcommMgr) -- C:\Windows\System32\drivers\VCommMgr.sys (IVT Corporation.)

DRV - (VComm) -- C:\Windows\System32\drivers\VComm.sys (IVT Corporation.)

DRV - (WacomVTHid) -- C:\Windows\System32\drivers\WacomVTHid.sys (Wacom Technology)

DRV - (wacommousefilter) -- C:\Windows\System32\drivers\wacommousefilter.sys (Wacom Technology)

DRV - (WacomVKHid) -- C:\Windows\System32\drivers\WacomVKHid.sys (Wacom Technology)

DRV - (DgiVecp) -- C:\Windows\System32\drivers\DgivEcp.sys (Samsung Electronics Co., Ltd.)

DRV - (Afc) -- C:\Windows\System32\drivers\afc.sys (Arcsoft, Inc.)

DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)

DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)

DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)

DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)

DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)

DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)

DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)

DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)

DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)

DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)

DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)

DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)

DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)

DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)

DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)

DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)

DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)

DRV - (smserial) -- C:\Windows\System32\drivers\smserial.sys (Motorola Inc.)

DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)

DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvm60x32.sys (NVIDIA Corporation)

DRV - (AtiPcie) ATI PCI Express (3GIO) -- C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)

DRV - (AF15BDA) -- C:\Windows\System32\drivers\AF15BDA.sys (AfaTech                  )

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaulturl: "hxxp://www.google.de/search?q="

FF - prefs.js..browser.search.openintab: true

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.startup.homepage: "ecosia.org"

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2

FF - prefs.js..extensions.enabledItems: elemhidehelper@adblockplus.org:1.0.6

FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:1.9.9.81

FF - prefs.js..extensions.enabledItems: {8bc5b5eb-0ec4-46ed-a024-ace8a3032888}:4.2.3

FF - prefs.js..extensions.enabledItems: {3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}:0.8.19

FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.9

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20

FF - prefs.js..extensions.enabledItems: {c36177c0-224a-11da-8cd6-0800200c9a66}:2.0.0

FF - prefs.js..extensions.enabledItems: {a02c0c70-605c-11da-8cd6-0800200c9a66}:4.22

FF - prefs.js..keyword.URL: "hxxp://www.google.de/search?q="

FF - prefs.js..network.proxy.ftp: "localhost"

FF - prefs.js..network.proxy.ftp_port: 8118

FF - prefs.js..network.proxy.gopher: "localhost"

FF - prefs.js..network.proxy.gopher_port: 8118

FF - prefs.js..network.proxy.http: "localhost"

FF - prefs.js..network.proxy.http_port: 8118

FF - prefs.js..network.proxy.no_proxies_on: ""

FF - prefs.js..network.proxy.socks: "localhost"

FF - prefs.js..network.proxy.socks_port: 9050

FF - prefs.js..network.proxy.ssl: "localhost"

FF - prefs.js..network.proxy.ssl_port: 8118

 

 

FF - HKLM\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files\DigitalPersona\Bin\FirefoxExt\ [2009.10.10 02:20:51 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.05.28 23:28:08 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.05.30 17:27:57 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.1\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010.05.28 23:28:08 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0.1\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010.05.30 17:27:57 | 000,000,000 | ---D | M]

 

[2010.02.18 16:37:22 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\mozilla\Extensions

[2010.02.18 16:37:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\****\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

[2010.06.03 16:15:03 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions

[2010.04.28 14:29:24 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2009.01.29 15:23:13 | 000,000,000 | ---D | M] (Panic Button) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{24cea704-946d-11da-a72b-0800200c9a66}

[2009.12.11 15:50:01 | 000,000,000 | ---D | M] (ShowIP) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}

[2010.05.26 19:56:19 | 000,000,000 | ---D | M] (Stylish) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}

[2010.01.30 05:37:08 | 000,000,000 | ---D | M] (Stealther) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{4776510a-a1f4-41f3-a3c8-35b474ecef23}

[2010.05.28 22:16:47 | 000,000,000 | ---D | M] (FEBE) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}

[2010.05.28 22:16:47 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}

[2008.12.21 01:55:31 | 000,000,000 | ---D | M] (PhishTank SiteChecker) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{8bc5b5eb-0ec4-46ed-a024-ace8a3032888}

[2010.01.30 05:37:08 | 000,000,000 | ---D | M] (PimpZilla) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{a02c0c70-605c-11da-8cd6-0800200c9a66}

[2010.05.31 23:03:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{c36177c0-224a-11da-8cd6-0800200c9a66}

[2010.05.26 19:56:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}

[2010.05.03 13:24:49 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

[2010.04.20 22:47:50 | 000,000,000 | ---D | M] (Torbutton) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}

[2010.02.08 21:27:16 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\afom@idevfh

[2009.09.14 17:49:59 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\elemhidehelper@adblockplus.org

[2010.05.11 11:27:56 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\firebug@software.joehewitt.com

[2010.04.21 19:09:35 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\foxmarks@kei.com

[2010.02.23 11:35:35 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\foxyproxy@eric.h.jung

[2008.12.21 01:35:08 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\e3hjgd79.default\extensions\toolbar_extras@de.yahoo.com

[2010.06.03 16:15:03 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions

[2010.05.30 17:23:03 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

[2008.06.30 14:44:08 | 000,324,976 | ---- | M] (Symantec Corporation) -- C:\Program Files\Mozilla Firefox\components\coFFPlgn.dll

[2010.05.30 17:22:37 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

[2010.05.30 17:27:32 | 000,072,960 | ---- | M] (Foxit Software Company) -- C:\Program Files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll

[2010.05.30 17:33:47 | 000,001,382 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml

[2010.01.31 03:15:52 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml

[2010.01.31 03:15:52 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml

[2010.01.31 03:15:52 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml

[2010.01.31 03:15:52 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2009.10.19 14:51:48 | 000,000,025 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2 - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)

O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)

O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)

O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)

O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

O4 - HKLM..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\DpAgent.exe (DigitalPersona, Inc.)

O4 - HKLM..\Run: [pdfSaver3]  File not found

O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)

O4 - HKCU..\Run: [JaaduVNCConnect] C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe (Jugaari)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutorun = 253

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutorun = 253

O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)

O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - Reg Error: Key error. File not found

O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)

O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)

O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O13 - gopher Prefix: missing

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1

O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\Enhancement\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\Enhancement\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)

O24 - Desktop WallPaper: C:\Users\****\Downloads\Bilder\SanFranciscoSkyline.jpg

O24 - Desktop BackupWallPaper: C:\Users\****\Downloads\Bilder\SanFranciscoSkyline.jpg

O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\Enhancement\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)

O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *) -  File not found

O34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe ()

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

NetSvcs: FastUserSwitchingCompatibility -  File not found

NetSvcs: Ias - C:\Windows\System32\ias [2008.01.21 04:34:27 | 000,000,000 | ---D | M]

NetSvcs: Nla -  File not found

NetSvcs: Ntmssvc -  File not found

NetSvcs: NWCWorkstation -  File not found

NetSvcs: Nwsapagent -  File not found

NetSvcs: SRService -  File not found

NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)

NetSvcs: WmdmPmSp -  File not found

NetSvcs: LogonHours -  File not found

NetSvcs: PCAudit -  File not found

NetSvcs: helpsvc -  File not found

NetSvcs: uploadmgr -  File not found

NetSvcs: ezSharedSvc - C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS)

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

 
 ========== Files/Folders - Created Within 90 Days ==========

 

[2010.06.08 01:08:43 | 000,571,904 | ---- | C] (OldTimer Tools) -- C:\Users\****\Desktop\OTL.exe

[2010.06.03 16:26:26 | 000,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab

[2010.06.02 01:55:08 | 000,000,000 | ---D | C] -- C:\Users\****\Documents\BioWare

[2010.06.02 01:38:48 | 000,000,000 | ---D | C] -- C:\Windows\1C4551A64743409391E41477CD655043.TMP

[2010.06.02 01:38:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Media Center Programs

[2010.06.02 00:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\BioWare

[2010.05.30 19:43:25 | 000,000,000 | ---D | C] -- C:\Users\****\Documents\Die Kunst des Mordens - Karten des Schicksals

[2010.05.30 19:10:29 | 000,000,000 | ---D | C] -- C:\Users\****\Documents\AoM3 Dev

[2010.05.30 17:28:51 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Local\Seven Zip

[2010.05.30 17:27:58 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Roaming\Foxit

[2010.05.30 17:27:42 | 000,000,000 | ---D | C] -- C:\Program Files\Foxit Software

[2010.05.30 17:24:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun

[2010.05.30 17:24:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java

[2010.05.28 23:34:31 | 000,000,000 | ---D | C] -- C:\Program Files\iPod

[2010.05.28 23:34:14 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes

[2010.05.28 23:34:14 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

[2010.05.28 22:20:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Google

[2010.05.28 22:10:11 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Local\Google

[2010.05.28 22:09:24 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX

[2010.05.18 13:34:54 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com

[2010.05.18 13:34:33 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Roaming\SUPERAntiSpyware.com

[2010.05.16 21:24:29 | 000,000,000 | ---D | C] -- C:\ProgramData\F-Secure

[2010.05.14 16:05:34 | 000,000,000 | ---D | C] -- C:\Users\****\Documents\Anno 1404

[2010.05.05 22:14:57 | 000,000,000 | ---D | C] -- C:\Users\****\Desktop\****

[2010.04.27 00:04:42 | 000,353,592 | ---- | C] (DivX, Inc.) -- C:\Windows\System32\DivXControlPanelApplet.cpl

[2010.04.12 13:22:39 | 000,000,000 | ---D | C] -- C:\Users\****\Documents\Eidos

[2010.04.12 12:52:02 | 000,000,000 | ---D | C] -- C:\Windows\System32\xlive

[2010.04.12 12:52:01 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE

[2010.04.09 11:14:40 | 000,000,000 | ---D | C] -- C:\Users\****\Desktop\Stick

[2010.04.09 10:43:11 | 000,000,000 | ---D | C] -- C:\Users\****\Desktop\eBooks

[2010.04.08 17:13:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Tages

[2010.03.27 19:01:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype

[2010.03.25 18:04:13 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Roaming\Avira

[2010.03.25 17:59:42 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntdd.sys

[2010.03.25 17:59:42 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntmgr.sys

[2010.03.11 14:24:30 | 000,000,000 | ---D | C] -- C:\Windows\65F1CF6331E0450B96F34A88BE7361A6.TMP

[2010.03.11 13:46:53 | 000,000,000 | ---D | C] -- C:\Program Files\Western Digital

[2010.03.11 13:46:29 | 000,000,000 | ---D | C] -- C:\Users\****\Documents\WDC

[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files - Modified Within 90 Days ==========

 

[2010.06.08 01:09:30 | 003,407,872 | -HS- | M] () -- C:\Users\****\NTUSER.DAT

[2010.06.08 01:08:48 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Users\****\Desktop\OTL.exe

[2010.06.07 23:30:45 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2010.06.07 23:30:45 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2010.06.07 20:00:00 | 000,000,580 | ---- | M] () -- C:\Windows\tasks\Norton Internet Security - Systemprüfung ausführen - ****.job

[2010.06.07 19:33:00 | 000,000,474 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job

[2010.06.07 09:55:30 | 000,000,416 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{264FDB4F-462D-4F3B-A34E-7C17FF08DEBE}.job

[2010.06.07 09:37:10 | 000,675,412 | ---- | M] () -- C:\Windows\System32\perfh007.dat

[2010.06.07 09:37:10 | 000,633,886 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2010.06.07 09:37:10 | 000,118,892 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2010.06.07 09:37:09 | 001,566,490 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI

[2010.06.07 09:37:09 | 000,146,488 | ---- | M] () -- C:\Windows\System32\perfc007.dat

[2010.06.07 09:30:53 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl

[2010.06.07 09:30:44 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT

[2010.06.07 09:30:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2010.06.04 12:35:32 | 000,524,288 | -HS- | M] () -- C:\Users\****\NTUSER.DAT{00fa4e69-d679-11de-a9f8-001583096f13}.TMContainer00000000000000000001.regtrans-ms

[2010.06.04 12:35:32 | 000,065,536 | -HS- | M] () -- C:\Users\****\NTUSER.DAT{00fa4e69-d679-11de-a9f8-001583096f13}.TM.blf

[2010.06.04 12:35:09 | 006,329,446 | -H-- | M] () -- C:\Users\****\AppData\Local\IconCache.db

[2010.06.03 15:23:28 | 001,747,176 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT

[2010.06.02 20:32:38 | 000,001,062 | ---- | M] () -- C:\Users\****\Desktop\daorigins.exe - Verknüpfung.lnk

[2010.06.02 16:38:02 | 000,110,272 | ---- | M] () -- C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT

[2010.05.31 21:01:39 | 000,010,016 | ---- | M] () -- C:\Users\****\Documents\codes.docx

[2010.05.31 09:39:47 | 000,000,680 | ---- | M] () -- C:\Users\****\AppData\Local\d3d9caps.dat

[2010.05.30 19:33:10 | 000,002,081 | ---- | M] () -- C:\Users\****\Desktop\Die Kunst des Mordens - Karten des Schicksals.lnk

[2010.05.30 17:39:02 | 000,001,802 | ---- | M] () -- C:\Users\****\Desktop\CCleaner.lnk

[2010.05.20 12:39:50 | 000,153,600 | ---- | M] () -- C:\Users\****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010.05.13 17:40:28 | 000,018,825 | ---- | M] () -- C:\Users\****\Documents\UniDüsseldorf.docx

[2010.05.09 14:59:09 | 000,000,318 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleFor****.job

[2010.04.29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys

[2010.04.29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2010.04.27 00:04:42 | 000,353,592 | ---- | M] (DivX, Inc.) -- C:\Windows\System32\DivXControlPanelApplet.cpl

[2010.04.02 17:17:34 | 000,179,091 | ---- | M] () -- C:\Windows\System32\xlive.dll.cat

[2010.03.17 19:30:27 | 000,588,472 | ---- | M] (EasyBits Software AS) -- C:\Windows\System32\ezsvc7x.dll

[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2010.06.02 01:48:06 | 000,001,062 | ---- | C] () -- C:\Users\****\Desktop\daorigins.exe - Verknüpfung.lnk

[2010.05.31 21:01:37 | 000,010,016 | ---- | C] () -- C:\Users\****\Documents\codes.docx

[2010.05.30 19:33:10 | 000,002,081 | ---- | C] () -- C:\Users\****\Desktop\Die Kunst des Mordens - Karten des Schicksals.lnk

[2010.05.30 19:02:56 | 4047,683,584 | ---- | C] () -- C:\Users\****\Desktop\gns-kmks.iso

[2010.05.13 17:40:27 | 000,018,825 | ---- | C] () -- C:\Users\****\Documents\UniDüsseldorf.docx

[2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat

[2010.02.11 12:55:03 | 000,005,120 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll

[2010.02.11 12:55:03 | 000,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest

[2010.01.12 14:21:30 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys

[2010.01.12 14:21:30 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys

[2009.10.23 15:46:24 | 000,000,316 | ---- | C] () -- C:\Windows\ODBC.INI

[2009.08.30 20:44:16 | 000,819,200 | ---- | C] () -- C:\Windows\System32\xvidcore.dll

[2009.08.30 20:44:16 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll

[2009.08.03 15:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll

[2009.05.27 18:37:39 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll

[2009.04.01 18:26:33 | 000,383,238 | ---- | C] () -- C:\Windows\System32\libmp3lame-0.dll

[2009.03.18 22:36:55 | 000,000,935 | ---- | C] () -- C:\Windows\STA2.ini

[2009.03.17 03:30:48 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll

[2009.03.17 03:30:47 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll

[2009.03.17 03:30:47 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll

[2009.03.04 14:32:38 | 000,000,591 | ---- | C] () -- C:\Windows\cdplayer.ini

[2009.01.06 14:39:46 | 000,069,632 | ---- | C] () -- C:\Windows\System32\xmltok.dll

[2009.01.06 14:39:46 | 000,036,864 | ---- | C] () -- C:\Windows\System32\xmlparse.dll

[2009.01.05 17:01:05 | 000,000,124 | ---- | C] () -- C:\Windows\Readiris.ini

[2009.01.05 17:01:04 | 000,023,040 | ---- | C] () -- C:\Windows\System32\irisco32.dll

[2009.01.05 00:58:38 | 000,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys

[2008.12.24 21:50:48 | 000,004,767 | ---- | C] () -- C:\Windows\Irremote.ini

[2008.11.21 23:47:52 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll

[2008.10.07 10:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll

[2008.10.07 10:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll

[2008.10.07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll

[2008.10.07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll

[2008.10.07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll

[2008.10.07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll

[2008.10.07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll

[2008.10.07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll

[2008.10.07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll

[2008.10.07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll

[2007.01.08 08:52:00 | 000,011,264 | ---- | C] () -- C:\Windows\System32\sssegfilter.dll

[2007.01.08 08:51:58 | 000,217,088 | ---- | C] () -- C:\Windows\System32\ssminidriver.dll

[2007.01.08 08:51:58 | 000,027,136 | ---- | C] () -- C:\Windows\System32\ssimgfilter.dll

[2007.01.08 08:51:56 | 000,010,752 | ---- | C] () -- C:\Windows\System32\sserrhandler.dll

[2006.12.04 02:25:14 | 000,022,723 | ---- | C] () -- C:\Windows\System32\suge1l3.dll

[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll

[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini

[2006.03.09 11:58:00 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll

[1997.06.14 10:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll

 
 ========== LOP Check ==========

 

[2010.02.21 15:44:54 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\Acronis

[2009.01.27 20:11:47 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\CoSoSys

[2009.12.19 20:43:19 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\CPUControl

[2009.01.05 02:49:46 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\DAEMON Tools

[2009.01.06 14:14:27 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\DAEMON Tools Lite

[2009.01.06 14:27:15 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\DAEMON Tools Pro

[2008.12.20 22:50:38 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\DigitalPersona

[2010.05.30 17:27:58 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\Foxit

[2009.03.17 18:52:09 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\ICQ

[2010.05.30 17:33:05 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\iPhoneRingToneMaker

[2009.05.04 22:33:00 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\ITTerritory

[2009.01.05 02:27:47 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\Lionhead Studios

[2010.05.30 17:33:49 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\McLoad

[2009.02.25 12:57:40 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\Nokia

[2009.03.17 20:46:17 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\OpenOffice.org

[2009.02.25 12:57:49 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\PC Suite

[2008.12.21 14:07:56 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\PeerNetworking

[2008.12.25 18:03:02 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\PlayFirst

[2009.11.11 20:11:51 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\SAM

[2009.07.01 22:19:08 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\Stardock

[2010.02.18 16:37:20 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\Thunderbird

[2010.04.08 17:30:17 | 000,000,000 | ---D | M] -- C:\Users\****\AppData\Roaming\Ubisoft

[2010.06.07 19:33:00 | 000,000,474 | ---- | M] () -- C:\Windows\Tasks\Ad-Aware Update (Weekly).job

[2010.06.04 12:35:52 | 000,032,516 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[2010.06.07 09:55:30 | 000,000,416 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{264FDB4F-462D-4F3B-A34E-7C17FF08DEBE}.job

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 

 
 < %SYSTEMDRIVE%\*.* >

[2010.06.07 09:30:18 | 000,066,076 | ---- | M] () -- C:\aaw7boot.log

[2006.09.18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat

[2009.04.11 08:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr

[2006.09.18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys

[2009.02.07 18:01:22 | 000,000,000 | RHS- | M] () -- C:\IO.SYS

[2008.12.20 22:46:50 | 000,000,375 | -H-- | M] () -- C:\IPH.PH

[2010.05.13 16:02:49 | 000,000,158 | ---- | M] () -- C:\mbam-error.txt

[2009.02.07 18:01:22 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS

[2010.06.07 09:30:20 | 3263,401,984 | -HS- | M] () -- C:\pagefile.sys

[2009.12.04 14:05:39 | 000,000,342 | ---- | M] () -- C:\SetupCD.txt

 
 < %systemroot%\*. /mp /s >

 
 < %systemroot%\system32\*.dll /lockedfiles >

[2009.09.24 00:28:48 | 000,446,464 | ---- | M] (Advanced Micro Devices, Inc.) Unable to obtain MD5 -- C:\Windows\System32\ATIDEMGX.dll

[2009.04.11 08:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll

[2009.04.11 08:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll

 
 < %systemroot%\Tasks\*.job /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

[2008.01.21 05:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV

[2008.01.21 05:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV

[2008.01.21 05:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV

[2006.11.02 12:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV

[2006.11.02 12:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

 
 < %systemroot%\system32\drivers\*.sys /90 >

[2010.05.19 12:49:17 | 000,160,704 | ---- | M] (Acronis) -- C:\Windows\System32\drivers\afcdp.sys

[2010.04.29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2010.04.29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys

[2010.03.31 03:58:04 | 000,044,944 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\drivers\PxHelp20.sys

[2010.05.19 12:47:58 | 000,166,272 | ---- | M] (Acronis) -- C:\Windows\System32\drivers\snapman.sys

[2010.05.19 12:49:04 | 000,911,680 | ---- | M] (Acronis) -- C:\Windows\System32\drivers\tdrpm258.sys

[2010.05.19 12:48:58 | 000,581,984 | ---- | M] (Acronis) -- C:\Windows\System32\drivers\timntr.sys

< End of report >

und noch die extras.txt:

Code:

OTL Extras logfile created on: 08.06.2010 01:10:44 - Run 1

OTL by OldTimer - Version 3.2.5.3     Folder = C:\Users\****\Desktop

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18904)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 48,00% Memory free

6,00 Gb Paging File | 4,00 Gb Available in Paging File | 78,00% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 289,39 Gb Total Space | 125,25 Gb Free Space | 43,28% Space Free | Partition Type: NTFS

Drive D: | 8,70 Gb Total Space | 4,56 Gb Free Space | 52,36% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

 

Computer Name: ****-PC

Current User Name: ****

Logged in as Administrator.

 

Current Boot Mode: Normal

Scan Mode: Current user

Company Name Whitelist: On

Skip Microsoft Files: On

File Age = 90 Days

Output = Minimal

Quick Scan

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)

.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

.js [@ = JSFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)

.jse [@ = JSEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)

.vbe [@ = VBEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)

.vbs [@ = VBSFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)

.wsf [@ = WSFFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation)

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)

htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)

htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)

https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

jsfile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)

jsefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

vbefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)

vbsfile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)

wsffile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation)

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~3\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

"UacDisableNotify" = 1

"InternetSettingsDisableNotify" = 1

"AutoUpdateDisableNotify" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

"VistaSp1" = Reg Error: Unknown registry data type -- File not found

"VistaSp2" = Reg Error: Unknown registry data type -- File not found

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2773692767-284162818-1511533902-1000]

"EnableNotifications" = 1

"EnableNotificationsRef" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 
 ========== Authorized Applications List ==========

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{2AB53518-DC16-4FBA-9F3C-AF388DBBD1C4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 

"{2E4E545B-097A-4DCD-B14F-7E9933CF5DCD}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{3A543F7D-ED93-4726-BA6A-E7A47A3FC2CD}" = rport=445 | protocol=6 | dir=out | app=system | 

"{4794D653-4222-426E-BDBE-3187A55DB2ED}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{56000C12-0251-43D2-9940-3DA4F155EB49}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | 

"{63877766-0BB4-4874-AAB3-9FA9D43ADBF8}" = rport=137 | protocol=17 | dir=out | app=system | 

"{6FDAE072-485F-4ABA-841A-031BD33F81B8}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{76848443-3F6A-4F00-B86B-23F85825C92B}" = lport=138 | protocol=17 | dir=in | app=system | 

"{8FE22D3E-FDBC-48D2-9B01-26D086737AF0}" = lport=445 | protocol=6 | dir=in | app=system | 

"{B42940DA-DF59-41F3-A092-89E7E9E1BD7B}" = lport=139 | protocol=6 | dir=in | app=system | 

"{BEB9C53C-9607-4469-9472-FC6A0FA608A4}" = lport=137 | protocol=17 | dir=in | app=system | 

"{D2ED1C6E-BA19-46B9-8A08-9E8B0C59EE8A}" = rport=139 | protocol=6 | dir=out | app=system | 

"{F17DB4BB-9BF5-41A6-ADEB-A9227F45C0CD}" = rport=138 | protocol=17 | dir=out | app=system | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{02AD03EE-8F2F-4E67-98BE-CD159683A5C0}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe | 

"{0A6480DE-DF9F-4ECE-8129-B6C79A4F68D7}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

"{0A728CD9-07E5-49DC-8B23-2069E3F2379C}" = protocol=17 | dir=in | app=c:\program files\games\dragon age\bin_ship\daupdatersvc.service.exe | 

"{0E7DE0A5-C0B0-4209-A073-55653C3A1252}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 

"{1133D19E-A009-4DD7-BE5B-CF66E5E0EA37}" = protocol=6 | dir=in | app=c:\program files\ultravnc\vncviewer.exe | 

"{1793B130-BE76-4981-94A9-237271816A96}" = protocol=17 | dir=in | app=c:\program files\games\dragon age\bin_ship\daorigins.exe | 

"{1C712B6A-6096-4484-A305-E021515BA9DD}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 

"{20F1637B-ED03-44EB-A0F5-2191D9D416C8}" = protocol=6 | dir=in | app=c:\program files\games\dragon age\daoriginslauncher.exe | 

"{279E3C5E-7636-4DEE-8129-264BF34A687D}" = protocol=6 | dir=in | app=c:\program files\ivt corporation\bluesoleil\bluesoleil.exe | 

"{2FA8E8FC-E6E6-450E-BD65-CA74B3A7076A}" = protocol=6 | dir=in | app=c:\program files\ascaron entertainment\sacred 2 - fallen angel\system\s2gs.exe | 

"{30A96783-7C50-47F5-82AD-EFEB60B15CE5}" = protocol=6 | dir=in | app=c:\program files\games\anno 1404\anno4.exe | 

"{33156257-77B5-477D-821C-48F7276F1F19}" = dir=in | app=c:\program files\msn messenger\livecall.exe | 

"{3822557B-4551-432F-8F17-6A9F6ABB7E29}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{38E1E011-23F7-4D6E-B7EC-30325F4B4D36}" = protocol=17 | dir=in | app=c:\program files\ascaron entertainment\sacred 2 - fallen angel\system\s2gs.exe | 

"{3F7E7178-85F4-4B20-806D-B54EAC5B248C}" = protocol=17 | dir=in | app=c:\program files\games\anno 1404\anno4.exe | 

"{40880577-4409-4AEF-8809-3027E15F673D}" = protocol=6 | dir=in | app=c:\program files\games\atari\neverwinter nights 2\nwupdate.exe | 

"{427BEAC2-1F63-4636-B7CA-D67D47A1D1DA}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | 

"{42C63BDE-B52A-43BC-86EB-622235CE8F0C}" = protocol=6 | dir=in | app=c:\program files\games\atari\neverwinter nights 2\nwn2main_amdxp.exe | 

"{46E17011-8582-4EA0-9CB7-128F227431F8}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe | 

"{471F2032-A805-4C4D-8D9A-76273A3FDEBA}" = protocol=6 | dir=in | app=c:\program files\games\anno 1404\tools\anno4web.exe | 

"{4F1C6337-04DB-4C3D-950E-DEA69BD3CC90}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{50C74585-6FC9-415D-96C9-0D39A70056F6}" = protocol=17 | dir=in | app=c:\program files\arcsoft\totalmedia 3\totalmedia.exe | 

"{51B59C2E-F79E-4C21-B357-A1BE9E8F1BF9}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe | 

"{5662229A-2589-4D8D-848E-BEEA571E2725}" = protocol=6 | dir=in | app=c:\program files\ascaron entertainment\sacred 2 - fallen angel\system\sacred2.exe | 

"{5ECB7E44-D1C0-480E-BC71-1D5ED1901C8D}" = protocol=17 | dir=in | app=c:\program files\ascaron entertainment\sacred 2 - fallen angel\system\sacred2.exe | 

"{5F166036-80FF-4995-8FB0-441230C8C45B}" = protocol=17 | dir=in | app=c:\program files\ultravnc\vncviewer.exe | 

"{619668AD-3509-40C3-834F-F4E1C7566CB7}" = protocol=17 | dir=in | app=c:\program files\ivt corporation\bluesoleil\bluesoleil.exe | 

"{6250490E-F762-44F7-84F5-C0D21B58DC8A}" = protocol=6 | dir=in | app=c:\program files\games\dragon age\bin_ship\daupdatersvc.service.exe | 

"{63ADB895-B589-4D6F-9FDA-4C26986E42EA}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{65C44D6A-B2CC-4A27-ACD2-BDB005B303F2}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe | 

"{6A871907-7730-41BC-AD66-0F401D5D4473}" = protocol=6 | dir=in | app=c:\program files\games\atari\neverwinter nights 2\nwn2main.exe | 

"{6DEC9F05-5B4F-47BC-8CA2-BAB0C6610331}" = protocol=17 | dir=in | app=c:\program files\games\itterritory\dragonsde\dwarclientde.exe | 

"{6F2455F0-BD25-4D2B-BF36-08C035C31421}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 

"{742E2C58-5A8B-4875-BED5-EDD4C53F69B1}" = protocol=6 | dir=in | app=c:\program files\games\itterritory\dragonsde\dwarclientde.exe | 

"{74625118-1D67-4DBD-8D89-01981039C948}" = protocol=17 | dir=in | app=c:\program files\games\atari\neverwinter nights 2\nwn2server.exe | 

"{81B486AA-DA57-450B-9E9D-D53AB5D019F5}" = protocol=6 | dir=in | app=c:\program files\games\dragon age\bin_ship\daorigins.exe | 

"{89EDBA2A-ED2C-46E8-ACE5-7F99126ADA79}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | 

"{8EE073C5-62E1-49C2-AA5F-8134FAEAD7B4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 

"{914C851D-FD45-417C-8079-9E0D82D0BA50}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 

"{9628FBD1-074E-41C6-8ABC-1939E87B8DBD}" = protocol=6 | dir=in | app=c:\program files\arcsoft\totalmedia 3\totalmedia.exe | 

"{9AFADE46-1BFA-43F9-A17C-02BF714FD6C4}" = dir=in | app=c:\program files\msn messenger\msnmsgr.exe | 

"{A4681FAD-7457-496A-A225-54CE1DE4DB24}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 

"{A4B6EFC0-0E0D-4EF0-A431-11312CCF5BC6}" = protocol=17 | dir=in | app=c:\program files\games\atari\neverwinter nights 2\nwupdate.exe | 

"{A939D520-CBD8-4C58-809A-A9D321FB9312}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe | 

"{AC8D7394-A076-4F2E-997B-5BC14B534A5B}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{AEEF3F56-2F06-4901-A3CF-7385E10147FC}" = protocol=17 | dir=in | app=c:\program files\games\atari\neverwinter nights 2\nwn2main_amdxp.exe | 

"{BF01815E-EEDC-4F6B-AE37-37B4E30C0EDD}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{CCFF8E42-BF7F-4CFA-A7AE-0CB52DB815EC}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{D99CA7AC-6834-465B-80D8-2B546B6D78F4}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 

"{DD35A28C-3DE4-49EF-A3D4-C35FDFA24550}" = protocol=17 | dir=in | app=c:\program files\games\atari\neverwinter nights 2\nwn2main.exe | 

"{E87901B3-CA88-4B64-954C-A3C6961535CF}" = protocol=6 | dir=in | app=c:\program files\games\atari\neverwinter nights 2\nwn2server.exe | 

"{EB201096-A148-43EF-A079-8B380550D4D9}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 

"{EB2E7668-8557-4D87-AE8D-15AF07FBDC8E}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 

"{EF23524B-38B4-4E74-B99F-41C8E386CB45}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{F22B2550-37A9-482F-9D3D-8CA55F5ED553}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe | 

"{F3A3F412-5798-4A05-8674-BE6DD22984F4}" = protocol=17 | dir=in | app=c:\program files\games\dragon age\daoriginslauncher.exe | 

"{F91961B4-8B88-4B80-A70F-F7F186EA4317}" = protocol=17 | dir=in | app=c:\program files\games\anno 1404\tools\anno4web.exe | 

"TCP Query User{05978121-916C-4571-B22D-56A46B72B25B}C:\program files\games\ccp\eve\bin\exefile.exe" = protocol=6 | dir=in | app=c:\program files\games\ccp\eve\bin\exefile.exe | 

"TCP Query User{12DFDAB1-8F82-40BA-A7EF-A3182EE496D5}C:\program files\games\innonics\wiggles\wiggles.exe" = protocol=6 | dir=in | app=c:\program files\games\innonics\wiggles\wiggles.exe | 

"TCP Query User{213B316E-DF2A-4714-BB8E-5A416AF39D0B}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe | 

"TCP Query User{217FC836-4C00-40B2-AFE2-CE32AE2E30E8}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 

"TCP Query User{33C0BB0A-ACB4-46C6-AED7-6F900F29A3C7}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 

"TCP Query User{3E3F7276-1487-4857-B0F5-04251C988080}C:\program files\ascaron entertainment\sacred 2 - fallen angel\system\s2gs.exe" = protocol=6 | dir=in | app=c:\program files\ascaron entertainment\sacred 2 - fallen angel\system\s2gs.exe | 

"TCP Query User{43CDAEAD-00C1-4A0C-8AFA-1E3C441A9F72}C:\program files\java\jre6\launch4j-tmp\jdownloader.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\launch4j-tmp\jdownloader.exe | 

"TCP Query User{524A3831-8839-4D5A-B6F9-7155249EA793}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 

"TCP Query User{6DFF80AD-0EC0-4EA1-BF6E-40D50E4341C9}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 

"TCP Query User{77A355D0-77B2-4D7A-9307-A8CB913352E3}C:\program files\microsoft office\office12\groove.exe" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 

"TCP Query User{A3472AEA-B4CE-46B6-84C2-4DC853B23AC7}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 

"TCP Query User{AB8B1223-7A85-4E62-B978-151C9CBA5A32}C:\program files\games\age of empires ii\empires2.icd" = protocol=6 | dir=in | app=c:\program files\games\age of empires ii\empires2.icd | 

"TCP Query User{BEC0579E-2616-4767-B442-D912C9C60EC1}C:\program files\ultravnc\winvnc.exe" = protocol=6 | dir=in | app=c:\program files\ultravnc\winvnc.exe | 

"TCP Query User{D7B29E67-73B7-4E38-B7DF-437763EF8942}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe | 

"TCP Query User{D8DD4B04-1B5B-43F7-A2F9-E57099554B32}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 

"TCP Query User{E93596D3-D623-4DC1-B9AB-BA0FDE775B64}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 

"TCP Query User{EE8A8918-E83F-49D0-909F-E6A9D2FA830B}C:\program files\games\sega\iron man\ironman.exe" = protocol=6 | dir=in | app=c:\program files\games\sega\iron man\ironman.exe | 

"TCP Query User{FFF1F691-BC77-45E2-9772-E8D910859F95}C:\program files\ultravnc\winvnc.exe" = protocol=6 | dir=in | app=c:\program files\ultravnc\winvnc.exe | 

"UDP Query User{07BC0298-4B88-41A9-9945-0A4F02E4861B}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 

"UDP Query User{15046AF0-B6C5-45F0-8CAD-FAA337DF1668}C:\program files\ascaron entertainment\sacred 2 - fallen angel\system\s2gs.exe" = protocol=17 | dir=in | app=c:\program files\ascaron entertainment\sacred 2 - fallen angel\system\s2gs.exe | 

"UDP Query User{1D76AEC4-8829-4E07-89DC-1CE923E6ADB5}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 

"UDP Query User{3A6A6254-4475-4C12-9CDB-F3BD390DF257}C:\program files\ultravnc\winvnc.exe" = protocol=17 | dir=in | app=c:\program files\ultravnc\winvnc.exe | 

"UDP Query User{4EACF2E6-ABFC-4C52-BCC8-68DEB744D29C}C:\program files\games\innonics\wiggles\wiggles.exe" = protocol=17 | dir=in | app=c:\program files\games\innonics\wiggles\wiggles.exe | 

"UDP Query User{535CC494-2CD1-49D2-87BF-8F482A788769}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 

"UDP Query User{7CA3BC2C-827C-426D-B985-19488686D8AD}C:\program files\microsoft office\office12\groove.exe" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 

"UDP Query User{870660D0-5B0E-4CDE-811C-FD677D8AFAF6}C:\program files\java\jre6\launch4j-tmp\jdownloader.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\launch4j-tmp\jdownloader.exe | 

"UDP Query User{8B82E882-9C40-43FE-B962-B14416E21DCF}C:\program files\games\ccp\eve\bin\exefile.exe" = protocol=17 | dir=in | app=c:\program files\games\ccp\eve\bin\exefile.exe | 

"UDP Query User{8CEAF548-9D29-4603-B9B2-F0B93B6438A3}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe | 

"UDP Query User{AB92B5C8-428C-4115-9991-F0349BC574C8}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe | 

"UDP Query User{B21BE60B-74C8-4FC5-B0FF-26E35725FB1D}C:\program files\games\sega\iron man\ironman.exe" = protocol=17 | dir=in | app=c:\program files\games\sega\iron man\ironman.exe | 

"UDP Query User{C19D2300-7F56-4A2A-B725-5E3FC4E33523}C:\program files\ultravnc\winvnc.exe" = protocol=17 | dir=in | app=c:\program files\ultravnc\winvnc.exe | 

"UDP Query User{C54B343A-B307-4939-8973-D3DD9B2D9C71}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 

"UDP Query User{CE8FF474-B190-4417-BE45-BE91A4C3025B}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 

"UDP Query User{CFC7004B-88ED-4107-BAB6-E75563ED5945}C:\program files\games\age of empires ii\empires2.icd" = protocol=17 | dir=in | app=c:\program files\games\age of empires ii\empires2.icd | 

"UDP Query User{D1A81433-EB77-45FF-A91F-1F728FAA9813}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 

"UDP Query User{FEDC32A4-FC3E-406D-B913-E819892BE84C}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)

"{034F8B84-40DE-EBB5-4B7E-07E719B1271B}" = Catalyst Control Center HydraVision Full

"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3

"{04B45310-A5FE-4425-BFCA-1A6D8920DE74}" = OpenOffice.org 3.0

"{0513EE35-E0FB-4166-B663-BD1AE3A803DE}" = Anno 1404

"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu

"{0556F885-2415-4666-B53E-33727E46AEA1}" = The Movies(TM)

"{0711500B-9912-4D60-9A49-C577B4503D42}" = Nero Recode Help

"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)

"{07FF7593-9DEA-40B5-9F87-F557E65BBF60}" = Nero Recode

"{082702D5-5DD8-4600-BCE5-48B15174687F}" = HP Doc Viewer

"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting

"{1023383E-D9F6-478C-A965-23A4657B3C9A}" = Sacred 2

"{1089C72B-8D02-1C2A-1832-B0007D8AA963}" = Catalyst Control Center Core Implementation

"{1122AAC4-AAAA-43BF-B2D4-3C8C12378952}" = Nero InfoTool

"{11A84FCA-C3C7-4AFD-A797-111DB8569DBC}" = Nero BurningROM

"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up

"{12345674-DE9A-677A-CCEE-666356D89777}" = Nero BurnRights

"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter

"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10

"{159098AF-4EB8-4C10-B0C6-24CDA32B45F9}" = Microsoft SQL Server Compact 3.5 DEU

"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin

"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate

"{18E1FD72-60FA-3E10-A66B-640970B5559F}" = Visual Studio Tools for the Office system 3.0 Runtime Language Pack - DEU

"{1A5D65E1-B438-4148-97E3-1BC3627BEC71}" = DigitalPersona Personal 4.11

"{1B040683-C390-4711-ABC7-DA8D85E470E7}" = NeroBurningROM

"{1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}" = Adobe Shockwave Player

"{1C3ADB5F-750E-4453-AC98-B75C5323845C}" = Microsoft SQL Server Compact 3.5 for Devices DEU

"{1E89314D-ABF3-4782-9F48-84C1F796A096}" = HP Tablet support for Mobility Center

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1FF713E1-FE5E-4AD0-9C8C-B2E877846B45}" = Catalyst Control Center - Branding

"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86

"{228C6B46-64E2-404E-898A-EF0830603EF4}" = HPNetworkAssistant

"{247c522d-9ceb-4424-a6fd-2575c94b895c}" = Nero 9

"{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}" = Adobe ExtendScript Toolkit 2

"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library

"{2573A5FB-0352-4B85-E948-10FFCDD28731}" = Catalyst Control Center InstallProxy

"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20

"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime

"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3

"{29F05234-DCBB-4FE0-88DC-5160C9250312}" = Adobe Photoshop CS3

"{2B152D2E-039D-BDD5-DAB8-F9E715CF5FCA}" = Catalyst Control Center Graphics Light

"{2D3455A8-3B15-41A8-99F8-0D4215746463}" = Nero StartSmart

"{3097B151-1F61-4211-A4CC-D70127B226AE}" = SoundTrax

"{31216452-5540-4C96-B754-94890A63D5AB}" = HP Help and Support

"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Vista

"{388E4B09-3E71-4649-8921-F44A3A2954A7}" = Microsoft Visual Studio 2005 Tools for Office Runtime

"{3924C3E7-C440-4B23-9740-9A9EC0545F21}" = Crystal Reports Basic German Language Pack for Visual Studio 2008

"{3AA1DCD6-CEE9-DAD4-79E3-6BF1F5D4744C}" = Catalyst Control Center Graphics Full Existing

"{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404

"{3F30CC51-0788-487B-AA83-7214A239C0C0}" = Nero Disc Copy Gadget Help

"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker

"{4115D40F-3E40-8D0B-F2B7-5FE20E7D711C}" = Catalyst Control Center Graphics Previews Vista

"{445174EA-3D3A-308E-84AD-446127E71441}" = Microsoft Visual Studio 2008 Professional Edition - DEU

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4ACDC413-AF13-3934-8D8A-1F8CEF70D1A5}" = Microsoft Document Explorer 2008 Language Pack - DEU

"{4D42353B-533F-4306-AD0B-7FEF292ADE04}" = Nero CoverDesigner Help

"{4E3A817A-8033-3D7E-BCA9-102EFF3FD9CA}" = Microsoft Device Emulator Version 3.0 - DEU

"{4E8C27C2-D727-4C00-A90E-C3F6376EEE70}" = Nero ControlCenter

"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3

"{548F99E0-14CC-4D53-A7D6-4A62A5F2C748}" = Nero PhotoSnap

"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support

"{56BE5CC9-95E6-4128-ABEA-968414CA9C80}" = DolbyFiles

"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml

"{5A62A775-A29A-4CE1-BBC2-4A9CD0B211EF}" = Nero Live Help

"{5AE12194-3EAA-40DF-B2BF-FE1D6B78BBF4}" = Nero Vision

"{5C2E8A0F-80E2-4C68-8CC0-D8D16E7196BF}" = Nero RescueAgent Help

"{5C42EAB8-54F9-423A-948C-1CBEF25F8DB4}" = Nero PhotoSnap Help

"{5C9BB0B3-E830-4814-BBA4-D93535E1C7B9}" = Nero Live

"{5DB161C0-7C9C-41D7-8DA1-CB112F60946B}" = Microsoft Visual Studio 2005 Tools for Office Runtime Language Pack

"{5E609F4B-4B10-6DD8-C47D-9703044AC5EF}" = Catalyst Control Center Graphics Full New

"{5ECB3A3C-980B-4D12-9724-25DCB07A1F47}" = iTunes

"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053

"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5

"{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}" = Adobe Setup

"{64c5b887-b5ee-42b8-8596-78905a6b5f1f}" = Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense

"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library

"{6753B40C-0FBD-3BED-8A9D-0ACAC2DCD85D}" = Microsoft Document Explorer 2008

"{6783BD80-A5DB-10A6-9F03-CE0B406BB982}" = Catalyst Control Center Graphics Previews Common

"{67ED38A3-4882-448B-B44D-3428AB00D7D5}" = Acronis*True*Image*Home

"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update

"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All

"{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}" = Adobe Color Common Settings

"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3

"{721B5CF0-D220-4955-BB6F-EBCFB1096DE7}" = Windows Mobile 5.0 SDK R2 for Pocket PC

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{72CCBEA1-8D57-4981-A337-81019F28C5BA}" = Microsoft .NET Compact Framework 3.5

"{73B5D990-04EA-4751-B10F-5534770B91F2}" = Adobe Color EU Recommended Settings

"{75321954-2589-11DC-DDCC-E98356D81493}" = Nero DriveSpeed

"{753973C4-B961-43BF-B2D4-3C8C92F7216E}" = Nero DriveSpeed

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{78523651-D8B1-11DC-CCEE-741589645873}" = Nero DiscSpeed

"{7C2CD35D-FEC4-0272-9D16-CB1585C44FA6}" = ccc-utility

"{7EAB15F0-5857-A3B6-565F-F5A27EC4FD91}" = ATI Catalyst Install Manager

"{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}" = Activision(R)

"{7F362F06-A9A3-440F-8B19-6A01A72723C4}" = AuthenTec Fingerprint Sensor Minimum Install

"{7FB12670-0F93-4E1E-B2F5-4F339199A03A}" = Microsoft SQL Server Native Client

"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3

"{804DE1A3-45D2-4AAC-8526-E9ADE47D84DF}" = Mindjet MindManager Pro 6

"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update

"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent

"{83F136F0-2AE5-420C-A0B6-A440AD42591C}" = AuthenTec Fingerprint Software

"{842FAF7C-50EF-4463-9B8F-6222E1384D7D}" = Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries

"{849A32C3-E75A-4791-9B11-E568BA3525A4}" = Microsoft SQL Server VSS Writer

"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8A253629-0511-4854-8B4E-46E57E66005C}" = Bonjour

"{8C654BD0-1949-43DE-84F2-EC2A1ABB0CB4}" = Nero ShowTime

"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3

"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support

"{8F85CC2C-4B26-4CF6-B835-DC59BCEDD287}" = Bluesoleil2.7.0.13 VoIP Release 071227

"{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable

"{8FB53850-246A-3507-8ADE-0060093FFEA6}" = Visual Studio Tools for the Office system 3.0 Runtime

"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007

"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007

"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007

"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007

"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007

"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007

"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007

"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007

"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System

"{90120000-0021-0000-0000-0000000FF1CE}" = Microsoft Office Visual Web Developer 2007

"{90120000-0021-0000-0000-0000000FF1CE}_VisualWebDeveloper_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)

"{90120000-0021-0407-0000-0000000FF1CE}" = Microsoft Office Visual Web Developer MUI (German) 2007

"{90120000-0021-0407-0000-0000000FF1CE}_VisualWebDeveloper_{0B9EAEAC-F271-45DC-BDCB-06ABEEF19825}" = Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2)

"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007

"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007

"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)

"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007

"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007

"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007

"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007

"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)

"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3

"{9102836A-D390-415F-45B2-27C9B3680303}" = ccc-core-static

"{943CC0C0-2253-4FE0-9493-DD386F7857FD}" = Nero Express

"{948FFAAE-C57F-447B-9B07-3721E950BFDC}" = Nero ShowTime

"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)

"{961D53EA-40DC-4156-AD74-25684CE05F81}" = Nero Installer

"{97B78FAE-5E46-4E56-9B25-37862F5EC568}" = IRReceive

"{99F0C3CC-8DF0-3611-B190-CF4D1AF0E053}" = Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9A33B83D-FFC4-44CF-BEEF-632DECEF2FCD}" = Microsoft SQL Server Database Publishing Wizard 1.2

"{9A875B56-A35C-46BA-A3AA-DF8D03EE9F2F}" = Nero ControlCenter

"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3

"{9DE1BE03-AFE2-4CDB-BFEB-D06D736CD01A}" = Apple Mobile Device Support

"{9E1BAB75-EB78-440D-94C0-A3857BE2E733}" = System Requirements Lab

"{9F3523F8-DAD7-AE52-6DA7-45CDDDF33726}" = Advertising Center

"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer

"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps

"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific

"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable

"{A5CE7175-080D-49AC-B5A3-E7E3502428F5}" = HP Wireless Assistant

"{A73BEC3C-40A0-480E-87EF-EFCD33629088}" = NeroExpress

"{A8399F58-234A-48C6-BA55-30C15738BF3C}" = Nero CoverDesigner

"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress

"{AA467959-A1D6-4F45-90CD-11DC57733F32}" = Crystal Reports Basic for Visual Studio 2008

"{AAA12554-2589-11DC-92EF-E98356D81493}" = Nero InfoTool

"{AABBCC54-D8B1-11DC-92EF-E98356D81493}" = Nero DiscSpeed

"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings

"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8

"{AEC81925-9C76-4707-84A9-40696C613ED3}" = Dragon Age: Origins

"{B1060346-9388-4C5B-AA52-176C39819E43}" = Microsoft .NET Compact Framework 2.0 SP2

"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter

"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0

"{B268E9A1-04A9-40D0-9866-846BE2B74BA7}" = Microsoft Windows SDK for Visual Studio 2008 Win32 Tools

"{B2C12C8D-65DC-40BD-B309-5ADB0C6C8D8F}" = Nero WaveEditor

"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0

"{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}" = Adobe Setup

"{B96C2601-52F5-4D5D-816A-63469EA311EF}" = "Nero SoundTrax Help

"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3

"{BA165460-FCF7-4D6C-A7A2-F2321700720F}" = MobileMe Control Panel

"{BBAAAD82-6242-420F-86D4-BD72BB5E6C86}" = Tools für Microsoft SQL Server 2005 Express Edition

"{BBF7E7C4-C110-41CB-A0A8-A765B3D592E5}" = HP User Guides 0112

"{BCD82AB5-670D-4242-90FA-1F97103C16CD}" = Movie Templates - Starter Kit

"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX

"{C99C89A3-119A-45E6-B26E-DD5643CAA0C5}" = Menu Templates - Starter Kit

"{CAA376AF-0DE8-4FCA-942E-C6AC579B94B3}" = Microsoft Windows SDK for Visual Studio 2008 Tools

"{CD1826A5-CFCC-4C6E-9F9D-E181876162EA}" = Nero Rescue Agent

"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}" = HP Active Support Library

"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client

"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2

"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files

"{D475588F-91C9-365E-AB40-D588111DD7C4}" = MSDN Library for Visual Studio 2008 - DEU

"{D4A70F1B-2046-AEBD-9F25-844BECFB163A}" = CCC Help English

"{D7C206B6-1A63-4389-A8B1-8F607D0BFF1F}" = Nero StartSmart Help

"{D9E52CD1-9DF1-4A8A-9BDC-1E5E53982F2B}" = Black & White® 2

"{DA7F48EF-5F56-45FE-9169-3B8159A7A323}" = Windows Mobile 5.0 SDK R2 for Smartphone

"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader

"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings

"{E32260E7-0B10-43C7-9B77-AB9F4184676D}" = Microsoft SQL Server Compact 3.5 Design Tools DEU

"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime

"{E4A8DD87-A746-4443-BF25-CAF99CED6767}" = Nero Disc Copy Gadget

"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3

"{E7A53A7C-5E7C-4484-9808-C257CAB9E873}" = Runaway 2 Patch 1.1

"{E86156E5-9859-440D-8876-26CED1349802}" = Nero WaveEditor Help

"{EA9FFE54-D8B1-11DC-92EF-E98356D81493}" = Nero BurnRights

"{EECE6974-133B-4FD0-BFB0-B58532A804B1}" = Jaadu VNC Connect

"{F01F79AD-1F47-4685-AE4E-CCFA4EA9FF7C}" = Adobe Setup

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)

"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01

"{F53F6769-AC46-49E3-ABE3-2C8AFD39D0DD}" = Nero Vision

"{F58C6763-8AB4-40C4-AE3A-FD8CE53B1654}" = HP Easy Setup - Frontend

"{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE

"{FA54AFB1-5745-4389-B8C1-9F7509672ED1}" = iPhone-Konfigurationsprogramm

"{FF29527A-44CD-3422-945E-981A13584000}" = VC Runtimes MSI

"{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}" = Adobe Color NA Extra Settings

"AC3Filter" = AC3Filter (remove only)

"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe_3e054d2218e7aa282c2369d939e58ff" = Adobe ExtendScript Toolkit 2

"Adobe_5f143314a5d434c8511097393d17397" = Adobe Photoshop CS3

"Adobe_6c8e2cb4fd241c55406016127a6ab2e" = Adobe Color Common Settings

"Airline Tycoon - Deluxe" = Airline Tycoon - Deluxe

"ALUpdate_is1" = ALUpdate

"ALZip_is1" = ALZip

"AudibleDownloadManager" = Audible Download Manager

"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus

"Broadcom 802.11b Network Adapter" = Broadcom 802.11-WLAN-Adapter

"CANONIJINBOXADDON100" = Canon Inkjet Printer Driver Add-On Module

"CCleaner" = CCleaner

"Die Kunst des Mordens - Karten des Schicksals_is1" = Die Kunst des Mordens - Karten des Schicksals

"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters

"DivX Setup.divx.com" = DivX-Setup

"Doremi FLV to MP3 Converter" = Doremi FLV to MP3 Converter 1.5

"ENTERPRISE" = Microsoft Office Enterprise 2007

"ffdshow_is1" = ffdshow [rev 497] [2006-11-04]

"Foxit Reader" = Foxit Reader

"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2

"FreeRIP MP3_is1" = FreeRIP MP3 v1.21

"Gehirnjogging 4" = Gehirnjogging 4

"HijackThis" = HijackThis 2.0.2

"InstallShield_{0556F885-2415-4666-B53E-33727E46AEA1}" = The Movies(TM)

"InstallShield_{97B78FAE-5E46-4E56-9B25-37862F5EC568}" = IRReceive

"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware

"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft Document Explorer 2008" = Microsoft Document Explorer 2008

"Microsoft Document Explorer 2008 Language Pack - DEU" = Microsoft Document Explorer 2008 Language Pack - DEU

"Microsoft SQL Server 2005" = Microsoft SQL Server 2005

"Microsoft Visual Studio 2005 Tools for Office Runtime" = Visual Studio 2005 Tools for Office Second Edition Runtime

"Microsoft Visual Studio 2005 Tools for Office Runtime Language Pack" = Microsoft Visual Studio 2005 Tools for Office Runtime Language Pack

"Microsoft Visual Studio 2008 Professional Edition - DEU" = Microsoft Visual Studio 2008 Professional Edition - DEU

"Mozilla Firefox (3.6)" = Mozilla Firefox (3.6)

"Mozilla Thunderbird (3.0.1)" = Mozilla Thunderbird (3.0.1)

"MSDN Library für Visual Studio 2008 - DEU" = MSDN Library für Visual Studio 2008 - DEU

"PDF-XChange 3_is1" = PDF-XChange 3.0

"Pen Tablet Driver" = Stifttablett

"Privoxy" = Privoxy 3.0.6

"Samsung SCX-4200 Series" = Samsung SCX-4200 Series

"Star Trek Armada II" = Star Trek Armada II

"SynTPDeinstKey" = Synaptics Pointing Device Driver

"Tor" = Tor 0.2.1.19

"Ultravnc2_is1" = UltraVNC 1.0.6.5

"Veoh Web Player Beta" = Veoh Web Player Beta

"Vidalia" = Vidalia 0.1.15

"ViewpointMediaPlayer" = Viewpoint Media Player

"Visual Studio Tools for the Office system 3.0 Runtime" = Visual Studio Tools for the Office system 3.0 Runtime

"Visual Studio Tools for the Office system 3.0 Runtime Language Pack - DEU" = Visual Studio-Tools für Office System 3.0 Runtime Language Pack - DEU

"VisualWebDeveloper" = Microsoft Visual Studio Web Authoring Component

"VLC media player" = VLC media player 0.9.9

"Xvid_is1" = Xvid 1.2.2 final uninstall

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{8EB85C0E-DE7D-4A53-BD66-708B8F2C80B0}" = HHD Software Free Hex Editor Neo 4.93

"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)

"Mozilla Thunderbird (3.0.4)" = Mozilla Thunderbird (3.0.4)

 
 ========== Last 10 Event Log Errors ==========

 

[ Application Events ]

Error - 04.06.2010 03:54:56 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 23890586

 

Error - 04.06.2010 03:54:57 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

 

Error - 04.06.2010 03:54:57 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 23891678

 

Error - 04.06.2010 03:54:57 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 23891678

 

Error - 04.06.2010 03:54:58 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

 

Error - 04.06.2010 03:54:58 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 23892723

 

Error - 04.06.2010 03:54:58 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 23892723

 

Error - 04.06.2010 03:54:59 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

 

Error - 04.06.2010 03:54:59 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 23893815

 

Error - 04.06.2010 03:54:59 | Computer Name = ****-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 23893815

 

[ DigitalPersona Pro Events ]

Error - 19.01.2009 10:09:02 | Computer Name = ****-PC | Source = DigitalPersona Pro | ID = 17827841

Description = Eins-zu-eins-Fingerabdruckvergleich fehlgeschlagen.

 

Error - 08.03.2009 09:18:03 | Computer Name = ****-PC | Source = DigitalPersona Pro | ID = 17827841

Description = Eins-zu-eins-Fingerabdruckvergleich fehlgeschlagen.

 

Error - 24.04.2009 17:30:51 | Computer Name = ****-PC | Source = DigitalPersona Pro | ID = 17827841

Description = Eins-zu-eins-Fingerabdruckvergleich fehlgeschlagen.

 

Error - 24.04.2009 17:30:54 | Computer Name = ****-PC | Source = DigitalPersona Pro | ID = 17827841

Description = Eins-zu-eins-Fingerabdruckvergleich fehlgeschlagen.

 

Error - 24.04.2009 17:30:55 | Computer Name = ****-PC | Source = DigitalPersona Pro | ID = 17827841

Description = Eins-zu-eins-Fingerabdruckvergleich fehlgeschlagen.

 

Error - 24.04.2009 17:30:56 | Computer Name = ****-PC | Source = DigitalPersona Pro | ID = 17827841

Description = Eins-zu-eins-Fingerabdruckvergleich fehlgeschlagen.

 

Error - 24.04.2009 17:31:03 | Computer Name = ****-PC | Source = DigitalPersona Pro | ID = 17827841

Description = Eins-zu-eins-Fingerabdruckvergleich fehlgeschlagen.

 

Error - 24.04.2009 17:31:07 | Computer Name = ****-PC | Source = DigitalPersona Pro | ID = 17827841

Description = Eins-zu-eins-Fingerabdruckvergleich fehlgeschlagen.

 

Error - 11.01.2010 06:00:42 | Computer Name = ****-PC | Source = DigitalPersona Pro | ID = 17827841

Description = Eins-zu-eins-Fingerabdruckvergleich fehlgeschlagen.

 

[ System Events ]

Error - 31.05.2010 20:55:41 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7034

Description = 

 

Error - 01.06.2010 17:19:21 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7011

Description = 

 

Error - 02.06.2010 08:36:16 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 02.06.2010 08:36:16 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 03.06.2010 09:24:29 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 03.06.2010 09:24:29 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 03.06.2010 09:24:29 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7009

Description = 

 

Error - 03.06.2010 09:24:29 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 07.06.2010 03:31:51 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 07.06.2010 03:31:51 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000

Description = 

 

 

< End of report >

gibts eigentlich ne möglichkeit die zeichenlänge im forum irgendwie zu umgehen?kann ja bei so reporten rechts schnell überschritten werden.
danke schonmal!