OTL:
OTL Logfile: Code:
OTL logfile created on: 12.12.2010 20:37:58 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Nilsson\Downloads
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 57,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 153,63 Gb Total Space | 63,56 Gb Free Space | 41,38% Space Free | Partition Type: NTFS
Drive D: | 303,34 Gb Total Space | 79,63 Gb Free Space | 26,25% Space Free | Partition Type: NTFS
Computer Name: NILSSON | User Name: Nilsson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Nilsson\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Programme\Kodak\AiO\Center\KodakSvc.exe (Eastman Kodak Company)
PRC - C:\Programme\Kodak\AiO\Center\EKDiscovery.exe (Eastman Kodak Company)
PRC - C:\Programme\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Programme\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Programme\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
PRC - C:\Programme\QIP\qip.exe (The Author of QIP)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\spool\drivers\w32x86\3\EKIJ5000MUI.exe (Eastman Kodak Company)
PRC - C:\Programme\Fujitsu Siemens Computers\Energy Settings\EnergySettings.exe (Fujitsu Siemens Computers GmbH)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Programme\Google\Google EULA\GoogleEULALauncher.exe ( )
PRC - C:\Programme\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe (Fujitsu Siemens Computers)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Defender\MSASCui.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Users\Nilsson\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (KodakSvc) -- C:\Program Files\Kodak\AiO\center\KodakSvc.exe (Eastman Kodak Company)
SRV - (Kodak AiO Network Discovery Service) -- C:\Programme\Kodak\AiO\Center\EKDiscovery.exe (Eastman Kodak Company)
SRV - (TestHandler) -- C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe (Fujitsu Siemens Computers)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (UPnPService) -- C:\Programme\Common Files\MAGIX Shared\UPnPService\UPnPService.exe (Magix AG)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies)
========== Driver Services (SafeList) ==========
DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys ()
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (nvsmu) -- C:\Windows\System32\drivers\nvsmu.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvmfdx32.sys (NVIDIA Corporation)
DRV - (ahcix86s) -- C:\Windows\system32\drivers\ahcix86s.sys (AMD Technologies Inc.)
DRV - (JRAID) -- C:\Windows\system32\drivers\jraid.sys (JMicron Technology Corp.)
DRV - (MegaSR) -- C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Corporation)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (iaStor) -- C:\Windows\system32\drivers\iastor.sys (Intel Corporation)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (NPF) -- C:\Windows\System32\drivers\npf.sys (CACE Technologies)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=FUJD&bmod=FUJD
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=FUJD&bmod=FUJD
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=FUJD&bmod=FUJD
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://www.scroogle.org/cgi-bin/scraper.htm"
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778
FF - prefs.js..extensions.enabledItems: {A77507F1-7162-4ECD-8709-89C6222BFA20}:1.9.1
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.10.29 17:38:03 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.10.29 17:38:03 | 000,000,000 | ---D | M]
[2009.01.21 14:31:07 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\mozilla\Extensions
[2010.12.12 18:22:38 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\mozilla\Firefox\Profiles\0gqmq26k.default\extensions
[2010.07.03 22:53:51 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Nilsson\AppData\Roaming\mozilla\Firefox\Profiles\0gqmq26k.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.04.08 19:17:06 | 000,002,921 | ---- | M] () -- C:\Users\Nilsson\AppData\Roaming\Mozilla\FireFox\Profiles\0gqmq26k.default\searchplugins\daemon-search.xml
[2010.12.12 18:22:38 | 000,000,944 | ---- | M] () -- C:\Users\Nilsson\AppData\Roaming\Mozilla\FireFox\Profiles\0gqmq26k.default\searchplugins\icqplugin.xml
[2010.10.21 16:12:23 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2010.10.21 16:12:23 | 000,000,000 | ---D | M] (Skype extension) -- C:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.10.18 07:42:43 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.10.18 07:42:43 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.10.18 07:42:43 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.10.18 07:42:43 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.10.18 07:42:43 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {0124123D-61B4-456f-AF86-78C53A0790C5} - No CLSID value found.
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (no name) - {0124123D-61B4-456f-AF86-78C53A0790C5} - No CLSID value found.
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Conime] C:\Windows\System32\conime.exe (Microsoft Corporation)
O4 - HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\System32\spool\drivers\w32x86\3\EKIJ5000MUI.exe (Eastman Kodak Company)
O4 - HKLM..\Run: [EnergySettings] C:\Programme\Fujitsu Siemens Computers\Energy Settings\EnergySettings.exe (Fujitsu Siemens Computers GmbH)
O4 - HKLM..\Run: [Google EULA Launcher] c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe ( )
O4 - HKLM..\Run: [NeroFilterCheck] C:\Programme\Common Files\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\Run: [fsc-reg] c:\fsc-reg\fscreg.exe File not found
O4 - HKU\.DEFAULT..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe File not found
O4 - HKU\S-1-5-18..\Run: [fsc-reg] c:\fsc-reg\fscreg.exe File not found
O4 - HKU\S-1-5-18..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe File not found
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [{27D5ED5F-8092-7FE3-A9F2-9B4D0455C49B}] C:\Users\Nilsson\AppData\Roaming\explorer.exe File not found
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [bcdeNtfs] C:\Users\Nilsson\AppData\Local\Temp\gpupdagt.DLL File not found
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [CatDBEventserv] C:\Users\Nilsson\AppData\Local\DfrgHelpdrv\CatDBEventserv.DLL ()
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [oleMouseClock] C:\Users\Nilsson\AppData\Local\d3dnet64\oleMouseClock.DLL ()
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [QIP2005] C:\Programme\QIP\qip.exe (The Author of QIP)
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [Qmadoh] C:\Users\Nilsson\AppData\Local\anopocita.DLL (Realtek Semiconductor Corp.)
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [system32.exe] C:\Users\Nilsson\AppData\Roaming\explorer.exe File not found
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [Vgawahukurub] C:\Users\Nilsson\AppData\Local\Dapwmcr.DLL (Acronis)
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [Windows System Guard] C:\Users\Public\dlll.exe File not found
O4 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Nilsson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
O7 - HKU\S-1-5-21-1129694084-1432998008-3357202247-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Programme\Bonjour\ExplorerPlugin.dll (Apple Inc.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab (DLM Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} hxxp://lads.myspace.com/upload/MySpaceUploader2.cab (MySpace Uploader Control)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Nilsson\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Nilsson\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{0cbd693f-bb1b-11de-87a4-002185c6a3fb}\Shell\1\Command - "" = .\recycled\info.exe
O33 - MountPoints2\{3789b926-2469-11de-a753-002185c6a3fb}\Shell - "" = AutoRun
O33 - MountPoints2\{3789b926-2469-11de-a753-002185c6a3fb}\Shell\AutoRun\command - "" = K:\SETUP.EXE -- File not found
O33 - MountPoints2\{3a652d3d-989a-11de-a574-002185c6a3fb}\Shell - "" = AutoRun
O33 - MountPoints2\{3a652d3d-989a-11de-a574-002185c6a3fb}\Shell\AutoRun\command - "" = L:\LaunchU3.exe -- File not found
O33 - MountPoints2\{f0bc760d-e344-11df-9e0a-002185c6a3fb}\Shell\AutoRun\command - "" = L:\qhbfqx.exe -- File not found
O33 - MountPoints2\{f0bc760d-e344-11df-9e0a-002185c6a3fb}\Shell\open\Command - "" = L:\qhbfqx.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: dvdptvol - (C:\Windows\system32\clipexnt.dll) - C:\Windows\System32\clipexnt.dll ()
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation)
Drivers32: msacm.vorbis - C:\Windows\System32\vorbis.acm (HMS hxxp://hp.vector.co.jp/authors/VA012897/)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.dvsd - C:\Windows\System32\mcdvd_32.dll (MainConcept)
CREATERESTOREPOINT
Error creating restore point.
========== Files/Folders - Created Within 30 Days ==========
[2010.12.12 18:09:33 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2010.12.10 15:15:02 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2010.12.10 12:33:35 | 000,000,000 | ---D | C] -- C:\Users\Nilsson\AppData\Local\{A77507F1-7162-4ECD-8709-89C6222BFA20}
[2010.12.08 16:00:46 | 000,000,000 | ---D | C] -- C:\Users\Nilsson\AppData\Local\DfrgHelpdrv
[2010.12.08 16:00:39 | 000,000,000 | ---D | C] -- C:\Users\Nilsson\AppData\Local\d3dnet64
[2010.11.28 16:06:04 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2010.11.28 16:02:27 | 014,899,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll
[2010.11.28 16:02:27 | 010,084,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys
[2010.11.28 16:02:27 | 005,473,896 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvwgf2um.dll
[2010.11.28 16:02:27 | 004,837,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll
[2010.11.28 16:02:27 | 002,912,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll
[2010.11.28 16:02:27 | 002,666,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll
[2010.11.28 16:02:27 | 000,888,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco322050.dll
[2010.11.28 16:02:27 | 000,813,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvgenco322030.dll
[2010.11.28 16:02:27 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll
[2010.11.28 16:02:26 | 013,019,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll
[2010.11.28 16:02:26 | 000,010,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvBridge.kmd
[2010.11.28 16:02:12 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation
[2010.11.28 16:01:52 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2008.01.21 03:24:21 | 000,353,792 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Users\Nilsson\AppData\Local\anopocita.dll
[2008.01.21 03:24:21 | 000,054,272 | ---- | C] (Acronis) -- C:\Users\Nilsson\AppData\Local\Dapwmcr.dll
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.12.12 20:27:00 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.12.12 19:39:26 | 000,623,042 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.12.12 19:39:26 | 000,591,122 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.12.12 19:39:26 | 000,125,172 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.12.12 19:39:26 | 000,102,996 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.12.12 19:34:39 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.12.12 19:33:13 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.12.12 19:33:13 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.12.12 19:32:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.12.12 19:32:49 | 3220,307,968 | -HS- | M] () -- C:\hiberfil.sys
[2010.12.12 18:12:26 | 000,000,120 | ---- | M] () -- C:\Users\Nilsson\AppData\Local\Kkeyofikahasaf.dat
[2010.12.12 18:12:26 | 000,000,000 | ---- | M] () -- C:\Users\Nilsson\AppData\Local\Vxivodivod.bin
[2010.12.12 18:09:25 | 174,861,395 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010.12.10 15:15:09 | 000,048,128 | -H-- | M] () -- C:\Windows\System32\clipexnt.dll
[2010.12.09 17:13:29 | 000,000,000 | ---- | M] () -- C:\Users\Nilsson\Documents\schimmernde_weiten.jpg
[2010.12.03 14:06:40 | 000,122,368 | ---- | M] () -- C:\Users\Nilsson\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.27 20:27:17 | 000,100,299 | ---- | M] () -- C:\Users\Nilsson\Documents\3218.jpg
[2010.11.23 15:34:57 | 000,096,204 | ---- | M] () -- C:\Users\Nilsson\Documents\Owned.JPG
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.12.11 11:17:29 | 174,861,395 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010.12.10 15:15:07 | 000,048,128 | -H-- | C] () -- C:\Windows\System32\clipexnt.dll
[2010.12.10 12:33:36 | 000,000,120 | ---- | C] () -- C:\Users\Nilsson\AppData\Local\Kkeyofikahasaf.dat
[2010.12.10 12:33:36 | 000,000,000 | ---- | C] () -- C:\Users\Nilsson\AppData\Local\Vxivodivod.bin
[2010.12.09 17:13:29 | 000,000,000 | ---- | C] () -- C:\Users\Nilsson\Documents\schimmernde_weiten.jpg
[2010.11.28 16:02:27 | 000,004,962 | ---- | C] () -- C:\Windows\System32\nvinfo.pb
[2010.11.27 20:26:50 | 000,100,299 | ---- | C] () -- C:\Users\Nilsson\Documents\3218.jpg
[2010.11.23 15:34:52 | 000,096,204 | ---- | C] () -- C:\Users\Nilsson\Documents\Owned.JPG
[2010.10.21 16:14:08 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.07.03 23:02:29 | 000,271,360 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2010.07.03 23:02:29 | 000,018,048 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2010.02.01 21:29:43 | 000,000,164 | ---- | C] () -- C:\Users\Nilsson\AppData\Roaming\{701ACAF9-F102-47c2-8907-36246F4DFB51}
[2010.01.30 01:15:20 | 000,000,680 | ---- | C] () -- C:\Users\Nilsson\AppData\Local\d3d9caps.dat
[2009.11.21 15:23:25 | 000,000,049 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009.11.21 15:19:00 | 000,126,464 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[2009.04.28 18:34:42 | 000,000,287 | ---- | C] () -- C:\Users\Nilsson\AppData\Local\LaunchHomeCenter.log
[2009.04.28 18:31:09 | 000,012,800 | ---- | C] () -- C:\Windows\System32\EKDeviceServices.dll
[2009.04.26 14:08:41 | 000,184,550 | ---- | C] () -- C:\Users\Nilsson\AppData\Local\installer.log
[2009.04.08 20:12:56 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2009.04.08 19:14:13 | 000,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2009.01.07 22:43:01 | 000,122,368 | ---- | C] () -- C:\Users\Nilsson\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.11.06 17:37:32 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008.10.28 11:14:14 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2008.10.28 11:14:14 | 000,006,768 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2008.04.25 14:23:38 | 000,012,288 | ---- | C] () -- C:\Windows\System32\EvOnlDiag.dll
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2005.08.02 22:24:01 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
========== LOP Check ==========
[2009.04.08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\DAEMON Tools
[2009.04.08 19:24:37 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\DAEMON Tools Lite
[2009.04.08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\DAEMON Tools Pro
[2010.02.01 21:28:54 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Degener
[2010.03.19 17:35:36 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\gtk-2.0
[2010.09.21 19:42:36 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\ICQ
[2010.10.21 18:43:11 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\LolClient
[2009.07.10 23:31:13 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Miranda Fusion
[2009.08.26 15:57:04 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\My Games
[2009.04.16 15:49:41 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\OpenOffice.org
[2008.12.30 13:48:49 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Opera
[2009.07.17 23:38:31 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Pegasys Inc
[2010.01.11 18:31:01 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\streamripper
[2009.04.28 18:35:57 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Temp
[2009.10.18 12:25:39 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Ubisoft
[2010.12.03 06:52:22 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\uTorrent
[2009.01.10 17:47:48 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Windows Sidebar Styler
[2010.12.12 18:35:18 | 000,032,628 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2010.12.10 12:31:04 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Adobe
[2009.04.08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\DAEMON Tools
[2009.04.08 19:24:37 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\DAEMON Tools Lite
[2009.04.08 19:18:01 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\DAEMON Tools Pro
[2010.02.01 21:28:54 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Degener
[2009.02.08 16:52:46 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Download Manager
[2009.11.05 00:09:01 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\dvdcss
[2009.01.20 21:46:57 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Google
[2010.03.19 17:35:36 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\gtk-2.0
[2010.03.23 20:45:08 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Hamachi
[2010.09.21 19:42:36 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\ICQ
[2008.12.28 13:14:20 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Identities
[2009.10.18 12:03:31 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\InstallShield
[2010.10.21 18:43:11 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\LolClient
[2008.12.28 13:25:17 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Macromedia
[2006.11.02 13:37:34 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Media Center Programs
[2009.06.07 22:44:37 | 000,000,000 | --SD | M] -- C:\Users\Nilsson\AppData\Roaming\Microsoft
[2009.07.10 23:31:13 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Miranda Fusion
[2010.03.09 20:49:01 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\mIRC
[2009.01.21 14:31:07 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Mozilla
[2009.08.26 15:57:04 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\My Games
[2009.01.13 20:50:00 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Nero
[2009.04.16 15:49:41 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\OpenOffice.org
[2008.12.30 13:48:49 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Opera
[2009.07.17 23:38:31 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Pegasys Inc
[2010.02.01 21:28:39 | 000,000,000 | RH-D | M] -- C:\Users\Nilsson\AppData\Roaming\SecuROM
[2010.12.12 20:35:55 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Skype
[2010.12.12 18:13:27 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\skypePM
[2010.01.11 18:31:01 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\streamripper
[2009.02.07 17:25:39 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\teamspeak2
[2009.04.28 18:35:57 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Temp
[2009.10.18 12:25:39 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Ubisoft
[2010.12.03 06:52:22 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\uTorrent
[2009.06.28 21:17:33 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\vlc
[2009.06.11 20:36:16 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Winamp
[2009.01.10 17:47:48 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\Windows Sidebar Styler
[2009.01.24 23:58:56 | 000,000,000 | ---D | M] -- C:\Users\Nilsson\AppData\Roaming\WinRAR
< %APPDATA%\*.exe /s >
[2008.01.21 03:23:44 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Users\Nilsson\AppData\Roaming\Adobe\AdobeUpdate .exe
[2010.12.10 12:31:45 | 000,054,272 | ---- | M] (Acronis) -- C:\Users\Nilsson\AppData\Roaming\Adobe\plugs\KB1454646.exe
[2010.12.10 12:32:16 | 000,444,928 | ---- | M] (lcco Corporation) -- C:\Users\Nilsson\AppData\Roaming\Adobe\plugs\KB1467236.exe
[2010.12.10 12:32:16 | 000,000,000 | ---- | M] () -- C:\Users\Nilsson\AppData\Roaming\Adobe\plugs\KB1472181.exe
[2010.10.21 15:51:45 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Nilsson\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2009.04.16 15:49:10 | 007,424,000 | R--- | M] (OpenOffice.org) -- C:\Users\Nilsson\AppData\Roaming\Microsoft\Installer\{04B45310-A5FE-4425-BFCA-1A6D8920DE74}\soffice.exe
[2010.10.23 10:12:53 | 000,010,134 | R--- | M] () -- C:\Users\Nilsson\AppData\Roaming\Microsoft\Installer\{0D5D0647-4F44-4331-B625-AB52EA98F28D}\_28F88B87ADDD10F388DB90.exe
[2010.12.12 18:30:25 | 000,388,096 | R--- | M] (Trend Micro Inc.) -- C:\Users\Nilsson\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
[2006.11.11 19:12:22 | 000,131,072 | ---- | M] () -- C:\Users\Nilsson\AppData\Roaming\mIRC\media\games\asteroids\asteroids.exe
[2006.11.11 19:12:26 | 000,047,264 | ---- | M] () -- C:\Users\Nilsson\AppData\Roaming\mIRC\media\games\memory\memory.exe
[2006.11.11 19:12:34 | 000,061,440 | ---- | M] () -- C:\Users\Nilsson\AppData\Roaming\mIRC\media\games\snake\snake.exe
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006.11.02 10:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
< MD5 for: AHCIX86S.SYS >
[2008.05.27 12:55:54 | 000,173,576 | ---- | M] (AMD Technologies Inc.) MD5=FBE4016F9EF3AB3DB547E40A936B6CD9 -- C:\Windows\System32\drivers\ahcix86s.sys
[2008.05.27 12:55:54 | 000,173,576 | ---- | M] (AMD Technologies Inc.) MD5=FBE4016F9EF3AB3DB547E40A936B6CD9 -- C:\Windows\System32\DriverStore\FileRepository\ahcix86s.inf_c617648e\ahcix86s.sys
< MD5 for: ATAPI.SYS >
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\drivers\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 10:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
< MD5 for: EXPLORER.EXE >
[2008.10.29 07:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008.10.30 04:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008.10.28 03:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2008.01.21 03:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
< MD5 for: IASTOR.SYS >
[2007.09.29 23:03:12 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Windows\System32\drivers\iaStor.sys
[2007.09.29 23:03:12 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_7baf6192\iaStor.sys
[2007.09.29 23:03:12 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_41af7b1f\iaStor.sys
< MD5 for: IASTORV.SYS >
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006.11.02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\System32\netlogon.dll
[2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2006.11.02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
< MD5 for: SCECLI.DLL >
[2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\System32\scecli.dll
[2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
< MD5 for: USER32.DLL >
[2009.04.11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
[2008.01.21 03:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll
[2008.01.21 03:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll
< MD5 for: USERINIT.EXE >
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\System32\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2008.01.21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2009.04.08 19:14:13 | 000,717,296 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
[2008.10.28 19:34:58 | 013,115,392 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2008.10.28 19:34:50 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2008.10.28 19:34:58 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2008.10.28 19:35:06 | 017,633,280 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2008.10.28 19:35:08 | 006,705,152 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2008.01.21 03:24:26 | 000,347,136 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll
[2008.01.21 03:24:26 | 000,214,528 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll
[2010.09.08 18:23:42 | 000,193,024 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\iepeers.dll
[2008.01.21 03:24:42 | 000,242,744 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll
[2008.01.21 03:24:38 | 000,225,792 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll
[2010.06.22 13:57:18 | 000,002,048 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\tzres.dll
< 5. Klicke "Scan" >
< 6. 2 reporte werden erstellt: >
< OTL.Txt >
< Extras.Txt >
< End of report >
--- --- ---
Extras.Txt:
OTL Logfile: Code:
OTL Extras logfile created on: 12.12.2010 20:37:58 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Nilsson\Downloads
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 57,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 153,63 Gb Total Space | 63,56 Gb Free Space | 41,38% Space Free | Partition Type: NTFS
Drive D: | 303,34 Gb Total Space | 79,63 Gb Free Space | 26,25% Space Free | Partition Type: NTFS
Computer Name: NILSSON | User Name: Nilsson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- Reg Error: Key error. File not found
[HKEY_USERS\S-1-5-21-1129694084-1432998008-3357202247-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files\Opera\opera.exe" File not found
https [open] -- "C:\Program Files\Opera\opera.exe" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01631D47-37A7-484D-90B3-55A8F48A953D}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{05BFD40D-4F7E-43EB-81D4-9DC38669E840}" = lport=6935 | protocol=17 | dir=in | name=league of legends launcher |
"{09CF60C6-CC8C-46CB-9766-0682CF1B68F2}" = lport=445 | protocol=6 | dir=in | app=system |
"{10B04312-E0C8-4C77-9DBA-F09D6592F660}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{165FDFDA-AA70-447B-8009-C3C97A399B36}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{1F7D9D97-4810-457A-B272-9249BBC41D71}" = lport=6986 | protocol=17 | dir=in | name=league of legends launcher |
"{21DBEB18-3DF7-4E60-B17F-09A0AAAE1E7A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{28971C41-03BB-4098-A52A-08C6660AE7E5}" = lport=139 | protocol=6 | dir=in | app=system |
"{2CA85F2D-8160-4498-BD58-CBC6955ADAD0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{349D5C94-6CFE-43B4-A217-E382054A8E52}" = lport=6986 | protocol=6 | dir=in | name=league of legends launcher |
"{35DE2305-ED41-4961-8774-12682A9CF171}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{3857073F-B5CE-4C7E-A637-DC3ADE16697C}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{3A8C2A40-90CB-46DC-9C49-5D9CD0D4C1DE}" = rport=137 | protocol=17 | dir=out | app=system |
"{58602A36-EAA4-4FEC-96F1-D926DECB45F6}" = lport=8395 | protocol=17 | dir=in | name=league of legends launcher |
"{5AD10FF4-012C-4449-B357-308D5DADE1D1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{61EA6AC9-5052-4304-BB0D-E0E7A8AD5CE9}" = lport=8395 | protocol=6 | dir=in | name=league of legends launcher |
"{6434FA33-0E5E-4415-93F2-4116A14025E2}" = lport=8394 | protocol=6 | dir=in | name=league of legends launcher |
"{6617D122-3BEB-4871-9615-766C2CD852EC}" = lport=138 | protocol=17 | dir=in | app=system |
"{7B1B00AB-6B7A-41F0-8763-15A850032F40}" = lport=9322 | protocol=6 | dir=in | name=ekdiscovery |
"{7B570A44-2CD1-421A-9506-5F6FEBA972C5}" = lport=6943 | protocol=6 | dir=in | name=league of legends launcher |
"{7D260EEF-417A-4025-8B8A-33928446E01C}" = lport=6943 | protocol=17 | dir=in | name=league of legends launcher |
"{7DA45CD8-CE6B-4960-AB70-3F8C87C86668}" = lport=9323 | protocol=6 | dir=in | name=ekdiscovery |
"{7F76EE3F-4E4E-40B2-9056-188065638294}" = lport=8394 | protocol=17 | dir=in | name=league of legends launcher |
"{85E6DC8C-3F39-453B-AA5E-36774DEA352C}" = lport=6946 | protocol=17 | dir=in | name=league of legends launcher |
"{8A03308E-04AB-4EC4-9E65-AB2EF5595848}" = lport=9322 | protocol=6 | dir=in | name=ekdiscovery |
"{8A87845D-4FA2-4E70-84EC-9904EF2A488D}" = lport=6897 | protocol=6 | dir=in | name=league of legends launcher |
"{8BCA8C9F-1FB0-4F69-A6DA-C92878E56706}" = rport=10243 | protocol=6 | dir=out | app=system |
"{8C6A9179-988E-44A3-93C2-DFB11D01840D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8D919848-615B-41E1-BEFD-43188191E53A}" = lport=6896 | protocol=17 | dir=in | name=league of legends launcher |
"{927F2978-5A45-4DB2-91FC-A7BA77F34B1D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{92A632DE-2DE8-4807-B09C-A4C1AA93D388}" = lport=9323 | protocol=6 | dir=in | name=ekdiscovery |
"{93B9A6F0-24AB-4EB3-A9B7-2BC8D485917C}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{9AA73E6C-B36C-40D8-ADFF-A4CA667A01B1}" = lport=6984 | protocol=17 | dir=in | name=league of legends launcher |
"{A67BA3CB-9A3D-47A6-A4F4-60CED8EE38A0}" = lport=6946 | protocol=6 | dir=in | name=league of legends launcher |
"{A7B5A50C-A3E8-4744-949F-0EE2BEF49ECF}" = lport=6935 | protocol=6 | dir=in | name=league of legends launcher |
"{ABAA0367-FD6D-4739-8C7E-4A5FD756056C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{AD1D3605-907C-4B7F-BB88-B8E839DCDBA6}" = lport=10243 | protocol=6 | dir=in | app=system |
"{B6F40EC4-928F-44FB-AC02-364BD695D99B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B926670E-AC6E-4CD8-8389-6408B6B2D131}" = lport=137 | protocol=17 | dir=in | app=system |
"{BB55FD79-8959-4D1E-9BE0-53196C37BF86}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{C6666608-D681-4570-A429-6923D6C789C3}" = lport=6112 | protocol=6 | dir=in | name=wc3 |
"{CE784B14-1048-4FC0-8F51-14B05B8C18C2}" = lport=6896 | protocol=6 | dir=in | name=league of legends launcher |
"{E01315AC-F2E9-401B-8D19-4A8DCC3F8C23}" = lport=6960 | protocol=17 | dir=in | name=league of legends launcher |
"{E087DA9B-CBD7-41A5-8BA0-0FB741F196E8}" = rport=138 | protocol=17 | dir=out | app=system |
"{E2727B63-ADF1-4BFD-B75E-819C6221D02F}" = rport=139 | protocol=6 | dir=out | app=system |
"{E425F0DC-9D55-436D-BB4F-DCD32EEC4EB8}" = rport=445 | protocol=6 | dir=out | app=system |
"{E7D08C37-FB06-4AD1-A7FC-170F81CFA634}" = lport=6897 | protocol=17 | dir=in | name=league of legends launcher |
"{E8A153AE-2FCA-4144-90D9-4DC5F62C9C8F}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{E91C37E8-D8E7-4C4B-82E7-DBC0EFFC53E5}" = lport=6984 | protocol=6 | dir=in | name=league of legends launcher |
"{F69EBAFD-B4A6-4CB9-9709-99DAE76CEE2D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FB140021-D341-494C-8935-A4AA907EA501}" = lport=6960 | protocol=6 | dir=in | name=league of legends launcher |
"{FC9383E7-E849-4415-90E0-F3E119267755}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02BE9C69-05F2-4568-9FAB-C2E85CFDE417}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{06D30953-1325-4E10-AB86-35C2B1C8CB1E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{09A58EF4-B201-4D1F-8617-788B9F0FED1C}" = protocol=6 | dir=in | app=d:\lol\air\lolclient.exe |
"{0B68F000-4BC1-422A-BB4A-D2647159860E}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{0BA5E72F-0D3C-4331-9E28-9F36CE0E84D9}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{0E9F4AAC-E48A-4C34-A05A-832CEC1EC6C6}" = protocol=6 | dir=in | app=d:\bf2\bf2.exe |
"{2D3CC6D3-F235-4CF7-8C36-63D23A43DD3B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3035107C-E0D5-4BB5-B90F-E01E08A8671B}" = protocol=17 | dir=in | app=d:\lol\league of legends\air\lolclient.exe |
"{304B3B61-34B1-4356-AC33-F259F5F0FDAC}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{3123A968-7CDD-48B3-96E9-57559EF5F455}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{387EEFD4-2A38-4486-B0AA-4B47A8100DF9}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{3AD44DE3-3D17-4ADD-B62F-76EE92A72CB2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{44FD8AF0-55C2-40E0-BB09-BCA9F9DE5BB1}" = protocol=6 | dir=in | app=d:\lol\league of legends\air\lolclient.exe |
"{4D16BF94-39AC-49EE-823F-2661ED0A6531}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{6146C5A3-E578-450D-A417-221C8B03410C}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{6BB9E665-7E03-412F-8B65-DA443443C0A3}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{6D2CECE4-CB75-418D-8AFB-154E0949A704}" = protocol=6 | dir=in | app=c:\program files\activision\prototype\prototypef.exe |
"{720ABCA4-4C24-47CA-8B19-4239AAA6A450}" = protocol=17 | dir=in | app=d:\lol\air\lolclient.exe |
"{720D8C74-AC77-4392-9341-C19DD97DC2A0}" = protocol=17 | dir=in | app=d:\lol\game\league of legends.exe |
"{72B059C5-ED8D-4C03-9683-B772B7E3396B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{76DAB585-727D-412C-9305-209D8CD6E701}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{80D0347C-2382-4B8F-93D1-A41B118C87DA}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{8435A9CB-77AA-48B2-8CD9-062DD41A4DC4}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{863A3D14-D1EF-46A6-9D15-0AB7F026018C}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{88BC8E96-ADC9-4CB5-BDD2-BFEFD9593DF8}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{88CA0983-7FEC-4BE4-8C34-CAA88ED700FA}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx9.exe |
"{8D504896-9DC1-4563-835E-0AF382D88A56}" = protocol=6 | dir=in | app=d:\lol\league of legends\game\league of legends.exe |
"{8D5E216B-A4FC-4D8B-BD62-89D20789DECB}" = protocol=17 | dir=in | app=d:\bf2\bf2.exe |
"{8D7AC9ED-2125-45E7-B1EF-6BA4D5051CBD}" = protocol=6 | dir=in | app=d:\lol\game\league of legends.exe |
"{8EA6B9E4-DA8E-4FFB-BFC1-E42841AA26CF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{8F1F4627-797C-40A6-A0DA-3EFE01CD905F}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{A11C836F-2ABC-419B-BADB-06CE8C46DD39}" = protocol=17 | dir=in | app=c:\program files\activision\prototype\prototypef.exe |
"{A5DDB8A9-DFA2-4F5C-BAB2-37F303023ABF}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_launcher.exe |
"{A9D5F10D-C44B-436A-B5F1-6409AB45FF4D}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{AA024BF6-C71B-419A-B96A-906C2C993EC3}" = protocol=6 | dir=out | app=system |
"{AC975EA7-ED69-4CB5-805A-B6DFE7B35EA5}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{AED0DD63-0BA9-4CCF-85C0-2A950293756B}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{B307D535-7C93-4276-8F51-E62607958FA8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B8A775DC-A16F-41BD-99C9-4FBE39301D6C}" = protocol=6 | dir=in | app=d:\overlord ii\overlord2.exe |
"{BAFAAF61-51DF-4872-862B-364B11B0B492}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{C00E93F2-EAC8-4FAE-9F40-8FE3261487BF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C249F0B1-0A37-4E70-9A8D-F99DD4E86408}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C5D5282A-3F2A-4AE3-95D5-6A3CC7153329}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CA726A83-EA23-4E00-998B-3D232CB610F6}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_launcher.exe |
"{D0983C52-A4F9-419D-927D-71CF9FEF41A0}" = protocol=17 | dir=in | app=d:\lol\league of legends\game\league of legends.exe |
"{D2CDC5EC-8855-4B90-9A04-2412C2CC7CC5}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{D7192102-909E-403C-BBC7-6DC7EE3EEE00}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{D92C01D7-87CB-4D5F-A987-F5452056D445}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx10.exe |
"{DC0CB829-C2EC-4BF5-80B6-CEC9133F71AB}" = protocol=17 | dir=in | app=d:\overlord ii\overlord2.exe |
"{DC5F0447-CB55-47E2-84D1-F008816437A8}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx9.exe |
"{DCDAAA6B-1294-4483-AFF9-92D5BA67983B}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx10.exe |
"{E1E1B2C3-4F60-4531-8B6C-0257C50781C3}" = protocol=6 | dir=in | app=c:\program files\mirandafusion\miranda32.exe |
"{F46BBE21-B768-49C1-A866-6E2AB6FE9116}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{F5EA8289-3BD6-4DB9-B736-9DA4B735A941}" = protocol=17 | dir=in | app=c:\program files\mirandafusion\miranda32.exe |
"{F6C19420-9D10-4D14-BD68-3A0093396DC4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"TCP Query User{061B3FF4-527E-49FB-BD01-9BA3ECA0F6FE}D:\age of empires\age of empires ii\age of empires ii\empires2.exe" = protocol=6 | dir=in | app=d:\age of empires\age of empires ii\age of empires ii\empires2.exe |
"TCP Query User{0EBEE474-E984-430A-8024-2892790E7428}D:\css\counter-strike source\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\css\counter-strike source\counter-strike source\hl2.exe |
"TCP Query User{0FE22DCE-FD5E-4F75-8121-F0A0DF1AC9D6}D:\cs 1.6\1.6\1.6\hl.exe" = protocol=6 | dir=in | app=d:\cs 1.6\1.6\1.6\hl.exe |
"TCP Query User{103D7E71-90F5-4973-828D-B2F87A89F8E2}D:\age of empires\age of empires ii\age of empires ii\age2_x1\age2_x1.exe" = protocol=6 | dir=in | app=d:\age of empires\age of empires ii\age of empires ii\age2_x1\age2_x1.exe |
"TCP Query User{1268CC5A-4CBD-43DB-8EF6-08FC98DB05D0}D:\starcraft\starcraft.exe" = protocol=6 | dir=in | app=d:\starcraft\starcraft.exe |
"TCP Query User{19DB2590-3A60-4B20-A80C-C5947478A9ED}D:\cod 4\call of duty 4 - modern warfare\iw3mp.exe" = protocol=6 | dir=in | app=d:\cod 4\call of duty 4 - modern warfare\iw3mp.exe |
"TCP Query User{2CDB29B4-0254-44BC-A1B0-7F8E413F154D}D:\warcraft iii\war3.exe" = protocol=6 | dir=in | app=d:\warcraft iii\war3.exe |
"TCP Query User{3B9AF1CF-274D-4683-919E-84E753D5776F}D:\warcraft iii\war3.exe" = protocol=6 | dir=in | app=d:\warcraft iii\war3.exe |
"TCP Query User{3BFDED28-9912-4DDC-B1EA-13860ACD112F}C:\program files\gamers.irc\mirc.exe" = protocol=6 | dir=in | app=c:\program files\gamers.irc\mirc.exe |
"TCP Query User{48E93325-B0AF-4845-A5DB-649C3F682A0B}D:\age of empires\age of empires ii\age of empires ii\age2_x1\age2_x1.exe" = protocol=6 | dir=in | app=d:\age of empires\age of empires ii\age of empires ii\age2_x1\age2_x1.exe |
"TCP Query User{4EC4BE11-C0BD-4266-9766-1B5B130075BC}C:\program files\gamers.irc\mirc.exe" = protocol=6 | dir=in | app=c:\program files\gamers.irc\mirc.exe |
"TCP Query User{52E86D94-FDBB-4253-B2B1-9D41D36D9874}C:\program files\firaxis games\sid meier's civilization 4\civilization4.exe" = protocol=6 | dir=in | app=c:\program files\firaxis games\sid meier's civilization 4\civilization4.exe |
"TCP Query User{59E47598-518A-49DB-95A2-6F48FCEE7D19}D:\anno 1701\anno1701.exe" = protocol=6 | dir=in | app=d:\anno 1701\anno1701.exe |
"TCP Query User{6B9DF19E-C6CB-4BD7-907A-2DA09E8FFDDA}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe |
"TCP Query User{A5D154C6-4002-4AAB-9AA5-D7C5C2C57837}C:\program files\qip\qip.exe" = protocol=6 | dir=in | app=c:\program files\qip\qip.exe |
"TCP Query User{A68624F7-983B-448D-AE3C-948A7689FDCD}D:\css\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=d:\css\counter-strike source\hl2.exe |
"TCP Query User{C31DE4DE-2A3F-4E54-B6A5-7B50263A4391}C:\program files\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"TCP Query User{D4A11516-10C1-4E34-B200-D4A4AB5BF69F}C:\program files\icq6\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6\icq.exe |
"TCP Query User{DDE46661-682A-4BD8-9E30-242B09DE2145}D:\lol\lol.launcher.exe" = protocol=6 | dir=in | app=d:\lol\lol.launcher.exe |
"TCP Query User{E475A658-CCEE-4978-86E4-4B76F820FC95}D:\age of empires\age of empires ii\age of empires ii\empires2.exe" = protocol=6 | dir=in | app=d:\age of empires\age of empires ii\age of empires ii\empires2.exe |
"TCP Query User{E6A618A8-BB73-4933-8C50-33BF07B9652B}C:\program files\qip\qip.exe" = protocol=6 | dir=in | app=c:\program files\qip\qip.exe |
"TCP Query User{F083299D-FB07-4BC6-9A6A-828102E0CF93}D:\cs 1.6\1.6\1.6\cs.exe" = protocol=6 | dir=in | app=d:\cs 1.6\1.6\1.6\cs.exe |
"TCP Query User{FCDC00CF-185C-49FC-8679-5D75B9CDD33C}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{00FD576B-1CB3-4872-93B1-AB4B1E912A14}D:\age of empires\age of empires ii\age of empires ii\age2_x1\age2_x1.exe" = protocol=17 | dir=in | app=d:\age of empires\age of empires ii\age of empires ii\age2_x1\age2_x1.exe |
"UDP Query User{078185E3-4552-440D-BB24-0FFC7DA18530}D:\warcraft iii\war3.exe" = protocol=17 | dir=in | app=d:\warcraft iii\war3.exe |
"UDP Query User{16BF22BC-B58D-473C-8D2D-A059A306C91B}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{242BCE2A-1CBB-4A3F-B080-B2D2E9EAC446}D:\anno 1701\anno1701.exe" = protocol=17 | dir=in | app=d:\anno 1701\anno1701.exe |
"UDP Query User{2D1E4E03-9482-4B17-ADB5-6A2FED140DBC}D:\css\counter-strike source\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\css\counter-strike source\counter-strike source\hl2.exe |
"UDP Query User{31205483-08F3-4278-9B96-3E3C0D0F2467}C:\program files\qip\qip.exe" = protocol=17 | dir=in | app=c:\program files\qip\qip.exe |
"UDP Query User{3CBB4D09-E99A-4774-BFDB-5CAAF6EBA3F9}D:\age of empires\age of empires ii\age of empires ii\empires2.exe" = protocol=17 | dir=in | app=d:\age of empires\age of empires ii\age of empires ii\empires2.exe |
"UDP Query User{5D6FCEDB-C175-4574-940E-5E141C37DBAA}D:\age of empires\age of empires ii\age of empires ii\age2_x1\age2_x1.exe" = protocol=17 | dir=in | app=d:\age of empires\age of empires ii\age of empires ii\age2_x1\age2_x1.exe |
"UDP Query User{5E384E9F-0DD4-4854-8BC2-40D2ADAE9E44}C:\program files\firaxis games\sid meier's civilization 4\civilization4.exe" = protocol=17 | dir=in | app=c:\program files\firaxis games\sid meier's civilization 4\civilization4.exe |
"UDP Query User{6ACFA302-E334-413B-8173-0354DF938363}C:\program files\gamers.irc\mirc.exe" = protocol=17 | dir=in | app=c:\program files\gamers.irc\mirc.exe |
"UDP Query User{6C39268E-608A-470C-AA18-4F71A0341081}D:\lol\lol.launcher.exe" = protocol=17 | dir=in | app=d:\lol\lol.launcher.exe |
"UDP Query User{89C83FBE-E83F-4C93-87B4-32278B03DFB1}D:\warcraft iii\war3.exe" = protocol=17 | dir=in | app=d:\warcraft iii\war3.exe |
"UDP Query User{8D1E65AE-5D7B-476C-BDAD-DE497AF64685}C:\program files\icq6\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6\icq.exe |
"UDP Query User{997734CC-4AF5-4157-A337-81D76ED7D8B6}D:\cs 1.6\1.6\1.6\cs.exe" = protocol=17 | dir=in | app=d:\cs 1.6\1.6\1.6\cs.exe |
"UDP Query User{9FA2E513-38DD-460D-9C56-5B8411E22374}C:\program files\qip\qip.exe" = protocol=17 | dir=in | app=c:\program files\qip\qip.exe |
"UDP Query User{A6F328D7-663D-4C99-9F5E-72D852B03078}D:\starcraft\starcraft.exe" = protocol=17 | dir=in | app=d:\starcraft\starcraft.exe |
"UDP Query User{A9C9EFB9-196C-479E-999B-6A71CC79DCFA}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe |
"UDP Query User{AE38B613-18DE-4F01-9382-8F1AF0744F4A}C:\program files\gamers.irc\mirc.exe" = protocol=17 | dir=in | app=c:\program files\gamers.irc\mirc.exe |
"UDP Query User{B4C7E77B-2F4C-454A-8B8E-542D101C067A}D:\css\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=d:\css\counter-strike source\hl2.exe |
"UDP Query User{B66F93C7-D720-4B36-B3FA-E7FE2AC6C380}C:\program files\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"UDP Query User{BB31604D-D567-4164-8952-F1808D4FED60}D:\cs 1.6\1.6\1.6\hl.exe" = protocol=17 | dir=in | app=d:\cs 1.6\1.6\1.6\hl.exe |
"UDP Query User{D5578E30-F4E0-4728-8C6C-BC7DF9E48554}D:\age of empires\age of empires ii\age of empires ii\empires2.exe" = protocol=17 | dir=in | app=d:\age of empires\age of empires ii\age of empires ii\empires2.exe |
"UDP Query User{ECFF3227-EA3C-428C-818F-AD268633033B}D:\cod 4\call of duty 4 - modern warfare\iw3mp.exe" = protocol=17 | dir=in | app=d:\cod 4\call of duty 4 - modern warfare\iw3mp.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2(TM)
"{04B45310-A5FE-4425-BFCA-1A6D8920DE74}" = OpenOffice.org 3.0
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{074AED0D-DD1C-432A-B38D-F8733604033F}" = aioscnnr
"{0D5D0647-4F44-4331-B625-AB52EA98F28D}" = skinLoL
"{10934A28-0CC6-4B98-A14F-76B3546003AF}" = ksDIP
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 17
"{2BD2FA21-B51D-4F01-94A7-AC16737B2163}" = Adobe Flash Player 10 ActiveX
"{2F926AE7-9FB7-4B34-906F-9C29A6D146A7}" = SystemDiagnostics
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{55718B4B90B54F7EADC5621C750A14E6}" = DivX Author 1.5
"{56BA241F-580C-43D2-8403-947241AAE633}" = center
"{59B73DDC-593A-4D02-B9CA-1D8C9F912324}" = aioprnt
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6803A6E6-48FF-48AB-B558-7B651BBE1031}" = Nero 8 Essentials
"{7613592F-B20C-4E1B-B2DD-67F0784D4373}" = Energy Settings
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{8CFA9151-6404-409A-AF22-4632D04582FD}" = Assassin's Creed
"{8F295D2F-7C03-4FE6-8A97-99F8962D455B}_is1" = CLICK & LEARN DiDi 360°
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM)
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A2433A63-5F5D-40E5-B529-9123C2B3E734}" = Anno 1701
"{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A90000000001}" = Adobe Reader 9 - Deutsch
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 260.99
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6C2569C-E2AA-4AB9-8C26-AC2487A2BFFC}" = Sid Meier's Civilization 4
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}" = Sid Meier's Civilization 4
"{D032F86A-0539-4737-816A-1AB40F1BF14D}" = C4USelfUpdater
"{DA5BDB2A-12F0-4343-8351-21AAEB293990}" = PreReq
"{DE6B7599-D3EF-4436-8836-BAA0B0D7768D}" = aiofw
"{E0F274B7-592B-4669-8FB8-8D9825A09858}" = Kodak All-in-One-Druckersoftware
"{E426CEC1-35C5-42BF-913E-6EF8F1211D01}" = Overlord II
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{EFD0BFEB-980E-491B-833B-A8848E5E0F0F}" = Hyplay
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1CBC6F7-D82D-4DC5-B81C-9A14F418593A}_is1" = WC3Banlist
"4U AVI MPEG Converter_is1" = 4U AVI MPEG Converter (version 5.6.9)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AMIP" = AMIP (remove only)
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"FL Studio 8" = FL Studio 8
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free Audio to Flash Converter_is1" = Free Audio to Flash Converter version 2.1
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2
"Free YouTube Uploader_is1" = Free YouTube Uploader version 2.3
"Gamers.IRC" = Gamers.IRC 5.26
"Google Chrome" = Google Chrome
"Hamachi" = Hamachi 1.0.1.5
"HijackThis" = HijackThis 2.0.2
"ICQToolbar" = ICQ Toolbar
"IL Download Manager" = IL Download Manager
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM)
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"IsoBuster_is1" = IsoBuster 2.5
"LastFM_is1" = Last.fm 1.5.4.27091
"League of Legends_is1" = League of Legends
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"MirandaFusion" = Miranda Fusion 2.0.4
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"MPEG TO AVI_is1" = MPEG TO AVI version 3.1.1
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PoiZone" = PoiZone
"QIP 2005_is1" = QIP 2005 8080
"Starcraft" = Starcraft
"Streamripper" = Streamripper (Remove only)
"Toxic Biohazard" = Toxic Biohazard
"TVAnts 1.0" = TVAnts 1.0
"UnderCoverXP_is1" = UnderCoverXP 1.22
"Uninstall_is1" = Uninstall 1.0.0.1
"Veoh Web Player Beta" = Veoh Web Player
"VLC media player" = VLC media player 0.9.9
"Winamp" = Winamp
"WinGimp-2.0_is1" = GIMP 2.6.6
"WinPcapInst" = WinPcap 3.1
"WinRAR archiver" = WinRAR
"Xilisoft AVI MPEG Converter" = Xilisoft AVI MPEG Converter
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1129694084-1432998008-3357202247-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent
"Warcraft III" = Warcraft III: All Products
========== Last 10 Event Log Errors ==========
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
< End of report >
--- --- ---
grüße,
Nilbone |
