aus OTL.txt:OTL Logfile: Code:
OTL logfile created on: 27.12.2010 20:03:46 - Run 1
OTL by OldTimer - Version 3.2.18.0 Folder = C:\Users\Figur\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18999)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 43,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 66,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 10,05 Gb Free Space | 13,49% Space Free | Partition Type: NTFS
Drive D: | 67,69 Gb Total Space | 12,54 Gb Free Space | 18,53% Space Free | Partition Type: NTFS
Drive J: | 596,02 Gb Total Space | 26,37 Gb Free Space | 4,42% Space Free | Partition Type: FAT32
Computer Name: FIGUR-PC | User Name: Figur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Figur\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Users\Figur\AppData\Local\Temp\4811015.exe (mdisk Corp)
PRC - C:\Users\Figur\AppData\Local\Temp\aHvFmtjxlhgIe.exe (msql software)
PRC - C:\Windows\System32\Macromed\Flash\FlashUtil10k_ActiveX.exe (Adobe Systems, Inc.)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
PRC - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone)
PRC - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\bmop.exe (Bytemobile, Inc.)
PRC - C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\bmctl.exe (Bytemobile, Inc.)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Windows\ASScrPro.exe ()
PRC - C:\Program Files\P4G\BatteryLife.exe (ATK)
PRC - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()
PRC - C:\Program Files\ASUS\Splendid\ACMON.exe (ATK)
PRC - C:\Program Files\PowerForPhone\PowerForPhone.exe ()
PRC - C:\Program Files\ATK Hotkey\Hcontrol.exe (ATK0100)
PRC - C:\Program Files\ATK Hotkey\KBFiltr.exe ()
PRC - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe (Nero AG)
PRC - C:\Program Files\Nero\Nero 7\InCD\InCD.exe (Nero AG)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
PRC - C:\Program Files\ATKOSD2\ATKOSD2.exe ()
PRC - C:\Program Files\Wireless Console 2\wcourier.exe ()
PRC - C:\Program Files\ATK Hotkey\ATKOSD.exe ()
PRC - C:\Windows\System32\ASUSTPE.exe (ASUS)
PRC - C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)
PRC - C:\Windows\System32\ACEngSvr.exe (ASUSTeK)
========== Modules (SafeList) ==========
MOD - C:\Users\Figur\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (Fabs) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
SRV - (VMCService) -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (FirebirdServerMAGIXInstance) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe (MAGIX®)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (spmgr) -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()
SRV - (InCDsrv) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe (Nero AG)
SRV - (ASLDRService) -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
========== Driver Services (SafeList) ==========
DRV - (PCASp50) -- C:\Windows\System32\Drivers\PCASp50.sys File not found
DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys File not found
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (ZTEusbnet) -- C:\Windows\System32\drivers\ZTEusbnet.sys (ZTE Corporation)
DRV - (ZTEusbvoice) -- C:\Windows\System32\drivers\zteusbvoice.sys (ZTE Incorporated)
DRV - (ZTEusbnmea) -- C:\Windows\System32\drivers\ZTEusbnmea.sys (ZTE Incorporated)
DRV - (ZTEusbser6k) -- C:\Windows\System32\drivers\ZTEusbser6k.sys (ZTE Incorporated)
DRV - (ZTEusbmdm6k) -- C:\Windows\System32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated)
DRV - (massfilter) -- C:\Windows\System32\drivers\massfilter.sys (ZTE Incorporated)
DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (USBModem) -- C:\Windows\System32\drivers\lgusbmodem.sys (LG Electronics Inc.)
DRV - (UsbDiag) -- C:\Windows\System32\drivers\lgusbdiag.sys (LG Electronics Inc.)
DRV - (usbbus) -- C:\Windows\System32\drivers\lgusbbus.sys (LG Electronics Inc.)
DRV - (tcpipBM) -- C:\Windows\System32\drivers\tcpipBM.sys (Bytemobile, Inc.)
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (Atc002) -- C:\Windows\System32\drivers\l260x86.sys (Atheros Communications, Inc.)
DRV - (ghaio) -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys ()
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) -- C:\Windows\System32\drivers\snp2uvc.sys ()
DRV - (incdrm) -- C:\Windows\System32\drivers\InCDRm.sys (Nero AG)
DRV - (InCDPass) -- C:\Windows\System32\drivers\InCDPass.sys (Nero AG)
DRV - (InCDfs) -- C:\Windows\System32\drivers\InCDfs.sys (Nero AG)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (R300) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (kbfiltr) -- C:\Windows\System32\drivers\kbfiltr.sys ( )
DRV - (RTSTOR) -- C:\Windows\System32\drivers\RTSTOR.sys (Realtek Semiconductor Corp.)
DRV - (MTsensor) -- C:\Windows\System32\drivers\ATKACPI.sys (ATK0100)
DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (TPM) -- C:\Windows\System32\drivers\tpm.sys (Microsoft Corporation)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (smserial) -- C:\Windows\System32\drivers\smserial.sys (Motorola Inc.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation)
DRV - (NETw3v32) Intel(R) -- C:\Windows\System32\drivers\NETw3v32.sys (Intel® Corporation)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (tandpl) -- C:\Windows\System32\drivers\tandpl.sys ()
DRV - (enodpl) -- C:\Windows\System32\drivers\enodpl.sys ()
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = ASUSTeK Computer
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.youtube.com/my_videos
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaulturl: "hxxp://www.yodl.de/href.php?hrefname=FF-splug_google&q="
FF - prefs.js..browser.startup.homepage: "hxxp://www.yodl.de/?&affid=1&uid=9A7D9609-F843-403A-96DA-596DF9D66803"
FF - prefs.js..extensions.enabledItems: ff-bmboc@bytemobile.com:4.1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..keyword.URL: "hxxp://www.yodl.de/href.php?hrefname=FF-splug_google&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\ProgramData\Mozilla\Firefox Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2008.02.11 20:07:18 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\ff-bmboc@bytemobile.com: C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\addon\ [2009.12.30 20:48:20 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.10.30 13:58:22 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.11.19 23:56:42 | 000,000,000 | ---D | M]
[2008.12.20 16:03:27 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\mozilla\Extensions
[2010.12.26 20:25:24 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\mozilla\Firefox\Profiles\r3u0gjld.default\extensions
[2009.08.15 18:49:36 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Figur\AppData\Roaming\mozilla\Firefox\Profiles\r3u0gjld.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.09.17 11:36:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Figur\AppData\Roaming\mozilla\Firefox\Profiles\r3u0gjld.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.11.19 23:56:59 | 000,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2010.11.19 23:56:59 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2008.12.20 16:03:21 | 000,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\google-cjk@partners.mozilla.com
[2008.12.20 16:03:21 | 000,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\talkback@mozilla.org
[2010.09.15 04:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009.10.15 20:30:20 | 000,001,487 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2009.10.15 20:30:20 | 000,001,779 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\clipfish.xml
[2009.10.15 20:30:20 | 000,001,013 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\conrad.xml
[2009.10.15 20:30:20 | 000,002,487 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\discount24.xml
[2009.10.15 20:30:20 | 000,000,860 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\ebay-de.xml
[2008.12.20 16:03:15 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2009.10.15 20:30:20 | 000,001,047 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\musicload.xml
[2009.10.15 20:30:20 | 000,002,120 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\myvideo.xml
[2009.10.15 20:30:20 | 000,002,023 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\otto.xml
[2009.10.15 20:30:20 | 000,000,758 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\quelle.xml
[2009.10.15 20:30:20 | 000,001,329 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\telefonbuch-de.xml
[2008.12.20 16:03:15 | 000,000,986 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2008.12.20 16:03:15 | 000,000,801 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
[2009.10.15 20:30:20 | 000,005,375 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yodl.xml
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found.
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe ()
O4 - HKLM..\Run: [ASUSTPE] C:\Windows\System32\ASUSTPE.exe (ASUS)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE (ASUSTeK Computer INC.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe (Nero AG)
O4 - HKLM..\Run: [MobileConnect] C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [PowerForPhone] C:\Program Files\PowerForPhone\PowerForPhone.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [4811015] C:\Users\Figur\AppData\Local\Temp\4811015.exe (mdisk Corp)
O4 - HKCU..\Run: [aHvFmtjxlhgIe.exe] C:\Users\Figur\AppData\Local\Temp\aHvFmtjxlhgIe.exe (msql software)
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKCU..\Run: [ICQ] D:\Programme\icq\ICQ6.5\ICQ.exe File not found
O4 - HKCU..\Run: [Internet Security Service] c:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\lsess.exe File not found
O4 - Startup: C:\Users\Figur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Users\Figur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Figur\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Figur\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Figur\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{02116e82-ab2f-11dc-9953-001d60d2e0ec}\Shell - "" = AutoRun
O33 - MountPoints2\{02116e82-ab2f-11dc-9953-001d60d2e0ec}\Shell\AutoRun\command - "" = G:\VMC_PBStarter.exe -- File not found
O33 - MountPoints2\{2da4c2c7-f54f-11de-80ec-d51d6c85a968}\Shell - "" = AutoRun
O33 - MountPoints2\{2da4c2c7-f54f-11de-80ec-d51d6c85a968}\Shell\AutoRun\command - "" = F:\VMC_PBStarter.exe -- File not found
O33 - MountPoints2\{35d2e7e0-5433-11dd-8e67-001d60d2e0ec}\Shell - "" = AutoRun
O33 - MountPoints2\{35d2e7e0-5433-11dd-8e67-001d60d2e0ec}\Shell\AutoRun\command - "" = I:\VMC_PBStarter.exe -- File not found
O33 - MountPoints2\{563a6e5d-54c9-11dd-89ef-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{563a6e5d-54c9-11dd-89ef-806e6f6e6963}\Shell\AutoRun\command - "" = F:\VMC_PBStarter.exe -- File not found
O33 - MountPoints2\{616ef0ed-f558-11de-9c55-8b283a9cef44}\Shell - "" = AutoRun
O33 - MountPoints2\{616ef0ed-f558-11de-9c55-8b283a9cef44}\Shell\AutoRun\command - "" = F:\VMC_PBStarter.exe -- File not found
O33 - MountPoints2\{7718d2d7-a807-11dc-a9a7-001d60d2e0ec}\Shell - "" = AutoRun
O33 - MountPoints2\{7718d2d7-a807-11dc-a9a7-001d60d2e0ec}\Shell\AutoRun\command - "" = G:\VMC_PBStarter.exe -- File not found
O33 - MountPoints2\{7718d2e5-a807-11dc-a9a7-001d60d2e0ec}\Shell - "" = AutoRun
O33 - MountPoints2\{7718d2e5-a807-11dc-a9a7-001d60d2e0ec}\Shell\AutoRun\command - "" = F:\VMC_PBStarter.exe -- File not found
O33 - MountPoints2\{78a0ff03-d51b-11de-9dbd-d42ee3cc68b1}\Shell - "" = AutoRun
O33 - MountPoints2\{78a0ff03-d51b-11de-9dbd-d42ee3cc68b1}\Shell\AutoRun\command - "" = F:\VMC_PBStarter.exe -- File not found
O33 - MountPoints2\{a6978091-a101-11dd-bdf7-001d60d2e0ec}\Shell - "" = AutoRun
O33 - MountPoints2\{a6978091-a101-11dd-bdf7-001d60d2e0ec}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -- File not found
O33 - MountPoints2\{aed4c904-2739-11dd-afaf-001d60d2e0ec}\Shell\Auto\command - "" = H:\Start.exe -- File not found
O33 - MountPoints2\{d125717d-b7a1-11dc-9c8f-001d60d2e0ec}\Shell\Auto\command - "" = H:\Start.exe -- File not found
O33 - MountPoints2\{e68f49ee-3885-11dd-87e0-001d60d2e0ec}\Shell\AutoRun\command - "" = wscript.exe .\.vbs
O33 - MountPoints2\{e68f49ee-3885-11dd-87e0-001d60d2e0ec}\Shell\open\command - "" = wscript.exe .\.vbs
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\Installer.exe -- File not found
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\VMC_PBStarter.exe -- File not found
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\VMC_PBStarter.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010.12.27 19:23:55 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Figur\Desktop\OTL.exe
[2010.12.19 19:59:07 | 000,000,000 | ---D | C] -- C:\Users\Figur\Documents\__MACOSX
[2010.12.18 06:44:56 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2010.12.18 06:44:55 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2010.12.18 06:44:55 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2010.12.18 06:44:47 | 002,038,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2010.12.18 06:44:41 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2010.12.18 06:44:36 | 000,292,352 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2010.12.18 06:44:36 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2010.12.18 06:44:36 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2010.12.18 06:44:29 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2010.12.18 06:44:27 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2010.12.18 06:44:26 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2010.12.18 06:44:26 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2010.12.18 06:44:26 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2010.12.18 06:44:26 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2010.12.18 06:44:25 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2010.12.18 06:44:25 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2010.12.18 06:44:25 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2010.12.18 06:44:25 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2010.12.18 06:44:25 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2010.12.18 06:44:25 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2010.12.18 06:44:25 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2010.12.18 06:44:25 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2010.12.18 06:44:25 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2010.12.18 06:44:24 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2010.12.18 06:44:24 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2010.12.18 06:42:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2007.01.24 19:08:39 | 000,005,632 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.12.27 19:23:59 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Figur\Desktop\OTL.exe
[2010.12.27 19:07:12 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2010.12.27 19:06:58 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.12.27 19:06:58 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.12.27 19:06:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.12.27 19:06:43 | 2010,419,200 | -HS- | M] () -- C:\hiberfil.sys
[2010.12.27 18:51:54 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2010.12.27 17:53:22 | 000,080,896 | ---- | M] () -- C:\Users\Figur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.12.27 14:29:56 | 000,000,804 | ---- | M] () -- C:\Users\Figur\Desktop\HDD Low.lnk
[2010.12.24 17:39:18 | 000,618,442 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.12.24 17:39:18 | 000,587,178 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.12.24 17:39:18 | 000,122,648 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.12.24 17:39:18 | 000,101,250 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.12.21 15:36:31 | 237,636,084 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010.12.19 19:58:41 | 009,799,097 | ---- | M] () -- C:\Users\Figur\Documents\hhzwnw.zip
[2010.12.19 11:29:45 | 000,417,992 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010.12.18 15:33:12 | 000,000,537 | ---- | M] () -- C:\Users\Public\Desktop\The Conquerors.lnk
[2010.12.05 11:20:10 | 000,027,648 | ---- | M] () -- C:\Users\Figur\Desktop\Kündigung DeutscherVideoRing.doc
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.12.27 14:29:56 | 000,000,804 | ---- | C] () -- C:\Users\Figur\Desktop\HDD Low.lnk
[2010.12.19 19:59:05 | 009,889,959 | ---- | C] () -- C:\Users\Figur\Documents\Headhunterz - Woznotwoz.mp3
[2010.12.19 19:57:55 | 009,799,097 | ---- | C] () -- C:\Users\Figur\Documents\hhzwnw.zip
[2010.12.18 15:33:12 | 000,000,537 | ---- | C] () -- C:\Users\Public\Desktop\The Conquerors.lnk
[2010.12.05 11:20:09 | 000,027,648 | ---- | C] () -- C:\Users\Figur\Desktop\Kündigung DeutscherVideoRing.doc
[2010.07.09 20:00:32 | 000,041,872 | ---- | C] () -- C:\Windows\System32\xfcodec.dll
[2010.01.13 06:47:34 | 000,000,118 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2009.12.13 16:13:02 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2009.10.18 13:51:14 | 000,007,552 | ---- | C] () -- C:\Windows\System32\drivers\enodpl.sys
[2009.10.18 13:51:14 | 000,004,736 | ---- | C] () -- C:\Windows\System32\drivers\tandpl.sys
[2009.10.15 11:22:47 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2009.08.01 01:20:16 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.07.25 23:32:00 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009.04.09 16:47:04 | 000,013,824 | ---- | C] () -- C:\Windows\System32\CallSimReader.dll
[2009.04.09 16:46:04 | 000,055,808 | ---- | C] () -- C:\Windows\System32\SimReader.dll
[2009.04.09 13:44:42 | 000,108,066 | R--- | C] () -- C:\ProgramData\DeviceManager.xml.rc4
[2008.11.21 22:47:52 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008.11.21 22:44:16 | 000,012,288 | ---- | C] () -- C:\Windows\System32\DivXWMPExtType.dll
[2008.09.20 16:20:34 | 000,000,050 | ---- | C] () -- C:\Windows\Winamp.ini
[2008.09.20 16:20:18 | 000,000,041 | ---- | C] () -- C:\Windows\winampa.ini
[2008.07.24 23:23:02 | 000,007,376 | ---- | C] () -- C:\Users\Figur\AppData\Local\d3d9caps.dat
[2008.04.11 17:07:46 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat
[2008.01.28 17:15:11 | 000,000,049 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2007.12.14 18:03:00 | 000,080,896 | ---- | C] () -- C:\Users\Figur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007.12.12 23:35:19 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll
[2007.12.12 23:35:19 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll
[2007.12.12 23:35:18 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll
[2007.12.11 21:47:13 | 001,925,551 | ---- | C] () -- C:\Users\Figur\AppData\Roaming\UserTile.png
[2007.12.11 18:25:49 | 000,000,305 | ---- | C] () -- C:\ProgramData\addr_file.html
[2007.10.31 13:11:02 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll
[2007.04.27 08:43:58 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2007.04.18 10:06:01 | 000,000,010 | ---- | C] () -- C:\Windows\System32\ABLKSR.ini
[2007.03.30 12:30:01 | 009,600,896 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 11:25:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.09.24 19:37:00 | 000,169,472 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[2006.03.10 11:57:59 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2002.03.21 14:39:02 | 000,073,728 | ---- | C] () -- C:\Windows\System32\UNACEV2.DLL
[1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll
========== LOP Check ==========
[2008.01.10 17:19:59 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\ACD Systems
[2008.01.31 18:45:16 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\Ashampoo
[2009.12.30 20:53:31 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\Bytemobile
[2009.12.13 17:04:22 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\DAEMON Tools Lite
[2010.09.17 11:36:10 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\DVDVideoSoftIEHelpers
[2008.04.26 15:20:18 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\gtk-2.0
[2010.12.27 14:38:32 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\ICQ
[2007.12.11 20:49:28 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\ICQ Toolbar
[2008.01.27 15:06:32 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\JavaEditor
[2010.05.13 00:31:25 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\LG Electronics
[2007.12.11 21:26:48 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\LimeWire
[2010.09.16 21:50:29 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\MAGIX
[2009.10.15 20:30:19 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\McLoad
[2009.10.31 11:39:52 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\Opera
[2009.06.21 19:38:41 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\phonostar-Player
[2009.02.02 18:40:55 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\Publish Providers
[2009.02.16 17:28:21 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\Sony
[2008.10.14 00:43:01 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\Teeworlds
[2010.06.14 15:16:55 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\TS3Client
[2009.12.25 17:02:35 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\Ubisoft
[2009.12.30 20:58:59 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\Vodafone
[2009.12.30 21:13:10 | 000,000,000 | ---D | M] -- C:\Users\Figur\AppData\Roaming\Vodafone Mobile Connect
[2010.12.27 18:51:58 | 000,032,512 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report >
--- --- ---
Und aus Extras.txt:OTL Logfile: Code:
OTL Extras logfile created on: 27.12.2010 20:03:46 - Run 1
OTL by OldTimer - Version 3.2.18.0 Folder = C:\Users\Figur\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18999)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 43,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 66,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 10,05 Gb Free Space | 13,49% Space Free | Partition Type: NTFS
Drive D: | 67,69 Gb Total Space | 12,54 Gb Free Space | 18,53% Space Free | Partition Type: NTFS
Drive J: | 596,02 Gb Total Space | 26,37 Gb Free Space | 4,42% Space Free | Partition Type: FAT32
Computer Name: FIGUR-PC | User Name: Figur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDSee 9.0.Browse] -- "D:\Programme\acd see9\ACDSee\9.0\ACDSeeQV.exe" "%1" (ACD Systems Ltd.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" File not found
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0119B3FA-0692-451D-B8EB-4EB8D38DE343}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{08E43161-C311-4441-80DF-5D0990E1504C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{20BA7B07-5F92-4DB1-BFE6-4CD30DCC3BA6}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3144066B-2CF1-4286-B636-7E43E2CE81E8}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{73687654-AF33-40B9-BD22-BC60AD7AE678}" = lport=2869 | protocol=6 | dir=in | app=system |
"{7C8541DE-148C-49DB-83C1-83DEEB04B09A}" = lport=2869 | protocol=6 | dir=in | app=system |
"{7CFEF470-624D-4E11-A60B-04EDE10AAB6A}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7F1DDB72-B77A-4D3D-8A43-90786AE1E49B}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{87608EE0-FDCC-4784-8B13-A9E5728D48CF}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 |
"{947F2A3E-1EC7-4F38-BCF7-762905F9E2CD}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9A915F46-1460-417D-BBF9-091F26B93680}" = lport=10243 | protocol=6 | dir=in | app=system |
"{B1C74C29-EFA4-4BED-873C-B5DAC0398814}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 |
"{D51337D0-61F7-4326-96B9-CE9DDF3DDEF6}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{FBCA4A80-C233-4781-8D54-305C6C655460}" = rport=10243 | protocol=6 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0B3E9FBC-1806-4301-89B0-70BC6969BBC2}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{0BA310C8-EB90-4103-8E56-1D403421AD8E}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{1AB96EBF-EB7A-4422-A084-F3476B02E36A}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe |
"{215FE9EA-8897-45B9-842C-003A73A2FDB4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{351B3AF4-DA1F-44FE-8961-DF7B15B13634}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{35BFA6FE-A87C-4F4E-BEE8-5AD18D45D152}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{3C4E282D-9E49-420C-8B23-79C8DBD6833F}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{3FC000F9-2CB4-4160-9ECE-EE80E159B949}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{41D480A7-2864-40FF-95D4-AFE8C7A1E6A0}" = protocol=6 | dir=in | app=c:\program files\avira\antivir desktop\avcenter.exe |
"{421BD60A-F490-4872-BA3E-D5AB7CBDA222}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{451573D8-57B6-4397-B475-8EFB22399071}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{48245E09-E5D2-4D9A-8381-E16616EF7C18}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{5055693F-5781-4468-849B-FD8236C6C24A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{513A1BEC-2D25-403F-964A-15AB8D5BDFD3}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{514461F9-036B-4F1E-B9B0-0E2FDFBBE7A5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5711CAD3-A27E-4717-82BC-8FF56D5E18AD}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{610733C0-560E-46A8-8A65-89CA9E9960E3}" = protocol=6 | dir=in | app=d:\games\world of warcraft\wow-3.2.0-dede-downloader.exe |
"{61DED446-0F62-4856-B807-51C74D16BA98}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe |
"{8D60AE96-A5EA-4AA5-A881-305D51F0A5BE}" = protocol=17 | dir=in | app=c:\program files\avira\antivir desktop\avcenter.exe |
"{938209B3-D53D-4281-A69D-C5FEBAF48273}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{99CBD10F-DA62-4B1B-95AF-EDF52F6BA3B2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9A11208D-8188-40A6-A559-63EDFBB21485}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe |
"{9CD451B8-A19C-44BC-A732-D50478001DB3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A058EC5E-C83B-4A2E-97A9-C8EF40C528B8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A0A34D97-FBBE-42C8-96B7-2B5198BEA942}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A801579A-DFFA-43D5-9DCF-B3CD82A2ADAA}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-dede-downloader.exe |
"{BD0779DD-E7D2-442C-96E4-85C595D54C52}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"{C2FBA673-85C7-4252-A28D-2ECDE27372FC}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{CE6F90BE-74C6-40C5-9FF2-CB5186128F65}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{D4F9BCA2-DAA7-4EFD-AF50-EC0618459534}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{D8932CCE-8C2C-4424-91B8-E72B2BD84BE9}" = protocol=17 | dir=in | app=d:\games\world of warcraft\wow-3.2.0-dede-downloader.exe |
"{EBC6745B-CE09-42AA-9F35-F41221217C67}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{F250678B-E0A8-40AB-B3E4-AA6B812A3F1C}" = protocol=6 | dir=out | app=system |
"{F38787DF-9E6B-42AB-B6D0-22ECEE566F8C}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{F611C96C-4E04-4151-BB37-A8BBB14F66F4}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{F6F02880-8811-49F9-ADCC-CEE4782F68FB}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{FBE3CCE2-230B-47E6-8073-C1047AEE48A6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{000BC4C8-EC98-4E78-95E2-6194F0F14F8A}D:\games\aoe2\age2_x1\age2_x1.icd" = protocol=6 | dir=in | app=d:\games\aoe2\age2_x1\age2_x1.icd |
"TCP Query User{01423C3E-F7D9-4F2A-8DF6-20CAC6F5EE69}D:\filme\veohtv\veohclient.exe" = protocol=6 | dir=in | app=d:\filme\veohtv\veohclient.exe |
"TCP Query User{0B98F8F9-608B-4773-94A7-5806B040C4AE}D:\games\sc\scda-offline\system\splintercell4.exe" = protocol=6 | dir=in | app=d:\games\sc\scda-offline\system\splintercell4.exe |
"TCP Query User{0C540AE1-0694-426C-AA5F-7AC01C492E35}C:\windows\system32\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"TCP Query User{157B7A14-C3B8-4255-AB16-C3B86A27B3D5}D:\games\stronghold 1\stronghold.exe" = protocol=6 | dir=in | app=d:\games\stronghold 1\stronghold.exe |
"TCP Query User{222B93E9-02C8-4590-9407-A338E6C84CCB}C:\users\figur\desktop\a\redvex 3.2 2-25-08\redvex1.exe" = protocol=6 | dir=in | app=c:\users\figur\desktop\a\redvex 3.2 2-25-08\redvex1.exe |
"TCP Query User{2764FCE4-B2A7-4225-AC6E-E00196089008}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{28AE502D-36B6-4C12-A3CA-F7E2D04B3C29}D:\games\bin\serioussam.exe" = protocol=6 | dir=in | app=d:\games\bin\serioussam.exe |
"TCP Query User{2A9846A6-F029-408A-94AC-30773F76CE31}D:\games\battlefield 1942\bf1942.exe" = protocol=6 | dir=in | app=d:\games\battlefield 1942\bf1942.exe |
"TCP Query User{3BFDA5A9-9D9F-45AF-8B62-4FCFE972C33C}D:\programme\xfire\xfire.exe" = protocol=6 | dir=in | app=d:\programme\xfire\xfire.exe |
"TCP Query User{463958D6-CE58-4FB1-9ECA-42C77BB9F1F6}C:\games\ut99\unrealtournament\system\unrealtournament.exe" = protocol=6 | dir=in | app=c:\games\ut99\unrealtournament\system\unrealtournament.exe |
"TCP Query User{72D3DB8A-607B-4461-B3BC-CCDFA9DB46BC}D:\programme\icq\icq6.5\icq.exe" = protocol=6 | dir=in | app=d:\programme\icq\icq6.5\icq.exe |
"TCP Query User{7A7E298F-84AB-4150-8F39-BAEB29B5C64C}D:\games\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=d:\games\world of warcraft\launcher.exe |
"TCP Query User{81190147-04AE-4F93-BD9A-C67AB265B106}D:\games\left.4.dead\left.4.dead.nosteam.multi2-gwarez\left4dead.exe" = protocol=6 | dir=in | app=d:\games\left.4.dead\left.4.dead.nosteam.multi2-gwarez\left4dead.exe |
"TCP Query User{81D116F4-4FB8-4227-BD38-DE5D97084518}D:\games\anno 1404\tools\anno4web.exe" = protocol=6 | dir=in | app=d:\games\anno 1404\tools\anno4web.exe |
"TCP Query User{86DC90B8-47AE-4AAF-954D-2E5573861C59}D:\games\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=d:\games\world of warcraft\launcher.exe |
"TCP Query User{89A4A190-1845-4D33-9628-9CA231D40C34}C:\users\figur\documents\icq\224338132\receivedfiles\333594069 powl\redvex 3.2 2-25-08\redvex1.exe" = protocol=6 | dir=in | app=c:\users\figur\documents\icq\224338132\receivedfiles\333594069 powl\redvex 3.2 2-25-08\redvex1.exe |
"TCP Query User{9088BE1A-F340-4B0D-82CD-95E246A987D7}D:\games\aoe2\empires2.icd" = protocol=6 | dir=in | app=d:\games\aoe2\empires2.icd |
"TCP Query User{9A08D8DB-8F5D-4F7C-9638-B180B78A3C0C}H:\left.4.dead\left.4.dead.nosteam.multi2-gwarez\left4dead.exe" = protocol=6 | dir=in | app=h:\left.4.dead\left.4.dead.nosteam.multi2-gwarez\left4dead.exe |
"TCP Query User{A4E7460A-63DD-48E0-BF72-081BF5C2A746}C:\users\figur\desktop\redvex 3.2 2-25-08\redvex1.exe" = protocol=6 | dir=in | app=c:\users\figur\desktop\redvex 3.2 2-25-08\redvex1.exe |
"TCP Query User{A9F6E8E3-5D68-4BFC-8707-66B2E05C6DFE}D:\programme\xfire\xfire.exe" = protocol=6 | dir=in | app=d:\programme\xfire\xfire.exe |
"TCP Query User{B3FD6E99-0244-4E48-8DC6-8B213E90530B}D:\programme\veoh\veohclient.exe" = protocol=6 | dir=in | app=d:\programme\veoh\veohclient.exe |
"TCP Query User{BCC13631-3999-42CE-8CA5-69BD9E130B7B}D:\programme\veoh\veohclient.exe" = protocol=6 | dir=in | app=d:\programme\veoh\veohclient.exe |
"TCP Query User{C30643F6-2C4B-4CFD-BD23-A3668DE975DF}D:\games\xiii\system\xiii.exe" = protocol=6 | dir=in | app=d:\games\xiii\system\xiii.exe |
"TCP Query User{C6B1E1D2-87F7-452C-98B7-D5924DF53AA0}D:\games\aoe2\age2_x1\age2_x1.icd" = protocol=6 | dir=in | app=d:\games\aoe2\age2_x1\age2_x1.icd |
"TCP Query User{D1959A6A-CEF7-47C1-B7EB-C441BFF47D2C}D:\programme\hamachi\hamachi.exe" = protocol=6 | dir=in | app=d:\programme\hamachi\hamachi.exe |
"TCP Query User{D9C16FB2-2AF8-4778-96F8-41F667D90FEE}D:\programme\phonostar\phonostar\ps_olect.exe" = protocol=6 | dir=in | app=d:\programme\phonostar\phonostar\ps_olect.exe |
"TCP Query User{DAF4823F-569A-4F2B-B94B-F66107BAA868}D:\games\battlefield 1942\bf1942.exe" = protocol=6 | dir=in | app=d:\games\battlefield 1942\bf1942.exe |
"TCP Query User{E762C32C-9683-4E9A-8CCA-E53A73E9422C}C:\program files\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files\skype\phone\skype.exe |
"TCP Query User{F9EC5185-5895-4081-B67F-EB510BCA0253}D:\games\steam\steamapps\hardstylefigur\counter-strike\hl.exe" = protocol=6 | dir=in | app=d:\games\steam\steamapps\hardstylefigur\counter-strike\hl.exe |
"UDP Query User{1DCEFAA0-ED43-4CE3-8C6B-2FE63D4FA2C8}D:\programme\veoh\veohclient.exe" = protocol=17 | dir=in | app=d:\programme\veoh\veohclient.exe |
"UDP Query User{1EC47349-5671-4322-BAC5-CB9A52994717}D:\games\aoe2\age2_x1\age2_x1.icd" = protocol=17 | dir=in | app=d:\games\aoe2\age2_x1\age2_x1.icd |
"UDP Query User{225AB704-EA12-4A87-A253-A11F176DEA89}D:\games\bin\serioussam.exe" = protocol=17 | dir=in | app=d:\games\bin\serioussam.exe |
"UDP Query User{24096E5A-4EDE-47ED-85D2-DC095C8524D2}D:\games\aoe2\empires2.icd" = protocol=17 | dir=in | app=d:\games\aoe2\empires2.icd |
"UDP Query User{26210C7D-2552-46E3-96BC-12CA90C0CC6C}D:\programme\veoh\veohclient.exe" = protocol=17 | dir=in | app=d:\programme\veoh\veohclient.exe |
"UDP Query User{2A9EF557-FEAD-44F4-BBFD-35AEB9B3F916}D:\games\anno 1404\tools\anno4web.exe" = protocol=17 | dir=in | app=d:\games\anno 1404\tools\anno4web.exe |
"UDP Query User{2C36B464-28B9-42C3-B321-1544337E9316}D:\programme\hamachi\hamachi.exe" = protocol=17 | dir=in | app=d:\programme\hamachi\hamachi.exe |
"UDP Query User{2CB7EDF7-49D7-4DC2-B287-4B2B9B9DEF61}C:\program files\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files\skype\phone\skype.exe |
"UDP Query User{2F0DA1DA-1533-4F74-B1A7-C78C6C11C093}D:\games\stronghold 1\stronghold.exe" = protocol=17 | dir=in | app=d:\games\stronghold 1\stronghold.exe |
"UDP Query User{57437125-97F3-43CE-AC00-70A0BD79E84A}D:\programme\phonostar\phonostar\ps_olect.exe" = protocol=17 | dir=in | app=d:\programme\phonostar\phonostar\ps_olect.exe |
"UDP Query User{574979C2-AC77-48D8-8A01-49522D882465}C:\users\figur\documents\icq\224338132\receivedfiles\333594069 powl\redvex 3.2 2-25-08\redvex1.exe" = protocol=17 | dir=in | app=c:\users\figur\documents\icq\224338132\receivedfiles\333594069 powl\redvex 3.2 2-25-08\redvex1.exe |
"UDP Query User{5756C194-AE33-451D-AB28-50BB90721C33}D:\games\xiii\system\xiii.exe" = protocol=17 | dir=in | app=d:\games\xiii\system\xiii.exe |
"UDP Query User{580E51D2-8778-4134-90A3-C8DBCF28B9AD}D:\programme\icq\icq6.5\icq.exe" = protocol=17 | dir=in | app=d:\programme\icq\icq6.5\icq.exe |
"UDP Query User{58F7580D-DBCF-483F-A1F8-E55FFF209644}C:\games\ut99\unrealtournament\system\unrealtournament.exe" = protocol=17 | dir=in | app=c:\games\ut99\unrealtournament\system\unrealtournament.exe |
"UDP Query User{6D11A35F-2A37-4FC9-B695-792B769651F4}D:\games\battlefield 1942\bf1942.exe" = protocol=17 | dir=in | app=d:\games\battlefield 1942\bf1942.exe |
"UDP Query User{7886D292-0818-477D-BCA6-3F75971449CC}C:\windows\system32\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"UDP Query User{79D43AE7-30DC-43F3-B8FC-C731F4294396}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{7D294BB4-90D1-40E3-B0FE-FF9FC2372F18}D:\games\sc\scda-offline\system\splintercell4.exe" = protocol=17 | dir=in | app=d:\games\sc\scda-offline\system\splintercell4.exe |
"UDP Query User{9CC76883-9977-45E0-8317-BE845F43B3BD}D:\filme\veohtv\veohclient.exe" = protocol=17 | dir=in | app=d:\filme\veohtv\veohclient.exe |
"UDP Query User{A4A069F2-CBEE-4AF3-9809-9B3DEFA2B1B9}C:\users\figur\desktop\redvex 3.2 2-25-08\redvex1.exe" = protocol=17 | dir=in | app=c:\users\figur\desktop\redvex 3.2 2-25-08\redvex1.exe |
"UDP Query User{BB03770F-8198-43C3-8A8D-394D2F43956E}D:\games\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=d:\games\world of warcraft\launcher.exe |
"UDP Query User{BF59CB32-E0B9-4078-AC01-128B6C4B6E2F}D:\games\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=d:\games\world of warcraft\launcher.exe |
"UDP Query User{C8895978-15B6-4A1F-8CD5-B5E07FEF9897}D:\games\battlefield 1942\bf1942.exe" = protocol=17 | dir=in | app=d:\games\battlefield 1942\bf1942.exe |
"UDP Query User{C8BC98D7-54CA-4299-BA84-93C71AF1F898}D:\games\aoe2\age2_x1\age2_x1.icd" = protocol=17 | dir=in | app=d:\games\aoe2\age2_x1\age2_x1.icd |
"UDP Query User{CF9D5602-DEAD-416B-BF29-FD5523C9EFFA}D:\programme\xfire\xfire.exe" = protocol=17 | dir=in | app=d:\programme\xfire\xfire.exe |
"UDP Query User{E50A36F7-2CAF-4604-BD68-D04E8A49DDEB}D:\games\left.4.dead\left.4.dead.nosteam.multi2-gwarez\left4dead.exe" = protocol=17 | dir=in | app=d:\games\left.4.dead\left.4.dead.nosteam.multi2-gwarez\left4dead.exe |
"UDP Query User{EA439F91-6262-4581-A499-0F8FC279F0C0}C:\users\figur\desktop\a\redvex 3.2 2-25-08\redvex1.exe" = protocol=17 | dir=in | app=c:\users\figur\desktop\a\redvex 3.2 2-25-08\redvex1.exe |
"UDP Query User{F1CC95A4-CA59-4DD6-A169-F1D2CD324A01}D:\games\steam\steamapps\hardstylefigur\counter-strike\hl.exe" = protocol=17 | dir=in | app=d:\games\steam\steamapps\hardstylefigur\counter-strike\hl.exe |
"UDP Query User{F87CFD0E-4548-4278-8EBB-060569CC4E4D}D:\programme\xfire\xfire.exe" = protocol=17 | dir=in | app=d:\programme\xfire\xfire.exe |
"UDP Query User{FBA5668E-78C8-4319-A6B4-F6BBF5884F39}H:\left.4.dead\left.4.dead.nosteam.multi2-gwarez\left4dead.exe" = protocol=17 | dir=in | app=h:\left.4.dead\left.4.dead.nosteam.multi2-gwarez\left4dead.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam(TM)
"{05D67915-50EC-56C9-7148-552F8D205383}" = CCC Help German
"{08C69626-1E29-7EE2-E122-D475D7BAAF0B}" = Catalyst Control Center Localization Hungarian
"{09E9F3B1-2965-3D8B-F624-2F44D99B53B0}" = Catalyst Control Center Graphics Light
"{0E4E7AB0-6FFB-4C76-FD74-810DE985D518}" = Catalyst Control Center Localization Greek
"{0ECB59D5-A3FC-4D61-AD3B-6CE679B3F852}" = Java DB 10.2.2.0
"{10D3701B-1463-0C2F-748E-3E03FADEB711}" = Catalyst Control Center Localization Norwegian
"{117FBA8C-9325-4BCD-B19A-0BF21EA9A374}" = Catalyst Control Center Localization Spanish
"{122321B4-A450-0052-CAD8-B419C0EAD392}" = CCC Help Spanish
"{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}" = ATK Media
"{1606E90F-5327-EE07-9137-C518BF3DFFCE}" = Catalyst Control Center Localization Swedish
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{196BC239-53AB-615F-9B0D-FD2D61D31A58}" = Catalyst Control Center Localization Czech
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = LifeFrame2
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java(TM) 6 Update 22
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{2D06A54D-6FA7-62F1-E824-E0109C069D8E}" = CCC Help Russian
"{2EBC713F-3022-A21B-6266-376ED7C43C07}" = CCC Help French
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{32A3A4F4-B792-11D6-A78A-00B0D0160030}" = Java(TM) SE Development Kit 6 Update 3
"{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey
"{3969961F-4B9A-DEB9-BC69-F0348E527DEA}" = Catalyst Control Center Localization Chinese Standard
"{39EAC702-D866-AA54-97C6-13E8AAAC2219}" = CCC Help Hungarian
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3CE73C5D-D8F0-D6D0-E5AB-39A798BF4571}" = Skins
"{4160DC5B-4C56-D0C3-C5FD-F5BDAD3C882B}" = ATI Catalyst Install Manager
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{46663439-F39E-BF21-673C-19A035F9C708}" = Catalyst Control Center Localization Thai
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C4A9592-2854-E201-F7A9-2AE77AB35E37}" = CCC Help Portuguese
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{57B15AD4-8C9D-4164-82BB-E33D8644E757}" = ASUS InstantFun
"{5A74F5DD-CD86-FE24-C8D3-9850F43FD42D}" = CCC Help Czech
"{5BD877FE-9E11-D996-DEDB-ABAF4A251C39}" = CCC Help Chinese Standard
"{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{6153EBDC-A52B-6B24-4A3C-5CC8F85BE0DF}" = Catalyst Control Center Graphics Full New
"{6173A4FC-D42D-69A6-52CA-A30496389760}" = ccc-core-static
"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{661EA4BC-FF51-FE25-7E59-D8BA41170189}" = Catalyst Control Center Localization Chinese Traditional
"{67645155-2149-7ED9-003E-92BFB7EA262A}" = Catalyst Control Center Localization Portuguese
"{68AB9F5B-85BA-1A49-F5B9-103C172A90F6}" = Catalyst Control Center Localization Korean
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{740323AF-4EFD-EB99-8632-6B5AA9D53411}" = Catalyst Control Center Localization Dutch
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{786C5747-0C40-4930-9AFE-113BCE553101}" = Adobe Stock Photos 1.0
"{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}" = Text-To-Speech-Runtime
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7D5F5F2C-B978-2AD9-B54D-BC9006C35333}" = CCC Help Japanese
"{7D6E6E66-8B3D-42C2-DE13-E3F0C6A178D9}" = CCC Help Korean
"{7DFBD5A5-F88B-ED78-E5FD-FB994138BB25}" = ccc-utility
"{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1" = Hex-Editor MX
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2
"{893EFD7C-B705-892C-E6E0-49BFB6C621BC}" = Catalyst Control Center Localization Russian
"{89661B04-C646-4412-B6D3-5E19F02F1F37}" = EAX4 Unified Redist
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8B8FC6A3-3467-5786-657E-6893DDA7F52D}" = CCC Help Swedish
"{8CFEBE9C-F29F-4C49-80E0-7106970F8734}" = Power4Gear eXtreme
"{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
"{90120000-0015-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0410-0000-0000000FF1CE}" = Microsoft Office Access MUI (Italian) 2007
"{90120000-0015-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0413-0000-0000000FF1CE}" = Microsoft Office Access MUI (Dutch) 2007
"{90120000-0015-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
"{90120000-0016-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0410-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Italian) 2007
"{90120000-0016-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0413-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Dutch) 2007
"{90120000-0016-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
"{90120000-0018-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0410-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Italian) 2007
"{90120000-0018-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0413-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Dutch) 2007
"{90120000-0018-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
"{90120000-0019-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0410-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Italian) 2007
"{90120000-0019-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0413-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Dutch) 2007
"{90120000-0019-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
"{90120000-001A-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0410-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Italian) 2007
"{90120000-001A-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0413-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Dutch) 2007
"{90120000-001A-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
"{90120000-001B-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0410-0000-0000000FF1CE}" = Microsoft Office Word MUI (Italian) 2007
"{90120000-001B-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0413-0000-0000000FF1CE}" = Microsoft Office Word MUI (Dutch) 2007
"{90120000-001B-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
"{90120000-001F-0401-0000-0000000FF1CE}_PROHYBRIDR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}_PROHYBRIDR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
"{90120000-001F-0413-0000-0000000FF1CE}_PROHYBRIDR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
"{90120000-002C-0410-0000-0000000FF1CE}" = Microsoft Office Proofing (Italian) 2007
"{90120000-002C-0413-0000-0000000FF1CE}" = Microsoft Office Proofing (Dutch) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0407-0000-0000000FF1CE}_PROHYBRIDR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
"{90120000-006E-040C-0000-0000000FF1CE}_PROHYBRIDR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0410-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Italian) 2007
"{90120000-006E-0410-0000-0000000FF1CE}_PROHYBRIDR_{0A75DA12-55CB-4DE5-8B6A-74D97847204E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0413-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Dutch) 2007
"{90120000-006E-0413-0000-0000000FF1CE}_PROHYBRIDR_{89C8E56A-90D8-4598-B0E6-EB28F6270E07}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97F32DF8-D66E-446A-A425-C1D7B45C1033}" = Nero 7 Essentials
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A70075D-6071-4704-EAF6-6DEB51CB777B}" = Catalyst Control Center Localization Finnish
"{9D513AEB-187D-C020-317A-5804F781CC95}" = CCC Help Chinese Traditional
"{9D88CAFF-7CB3-916A-0A1F-5E0DB4ECD073}" = Catalyst Control Center Localization Danish
"{9EE7095B-F74E-4DC9-FAF7-75C940A1C3E9}" = Catalyst Control Center Localization French
"{A315B77A-24C5-95D9-9325-61C98FBB7C53}" = Catalyst Control Center Localization German
"{A480B428-5A5E-8D8F-6D8E-2CCBFF6029FA}" = CCC Help Norwegian
"{A7AF2BC7-FCFB-03CB-DA36-5E9D44A53091}" = CCC Help Turkish
"{A8FD0C55-0D21-89F3-57E9-1E22235765B3}" = CCC Help Finnish
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{AF37F9DE-0726-439E-BC10-43D9195394D0}" = Firebird SQL Server - MAGIX Edition
"{B06558BC-FE29-48B9-935A-097DECDA8337}_is1" = Realtime Browser 1.7
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B2D41883-3BFC-4BA0-A2F6-5A2C9836C238}" = ACDSee 9 Photo Manager
"{B5DCE5D7-6FDD-D5C2-C6B7-14E264E695C9}" = Catalyst Control Center Core Implementation
"{B5FE6702-0B5F-6866-7FD2-A7B28BCAB15B}" = Catalyst Control Center Localization Japanese
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B74D4E10-6884-0000-0000-000000000103}" = Adobe Bridge 1.0
"{B89BD504-63FF-03DC-5B8B-CEBCEBF2B08D}" = CCC Help English
"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology
"{C263E891-CA9F-7CE4-B31D-6A100D5D2F3C}" = CCC Help Polish
"{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem driver
"{C4693D41-87C5-A2E0-00AB-5E0A0A205E9E}" = CCC Help Italian
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240B5}" = WinZip 11.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{DA507A38-4B2A-40C0-90AC-E30AAA0B757C}" = Vegas Movie Studio Platinum 9.0
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DB891739-2EB3-45A8-9CBD-941C255CECD4}" = ASUS Touch Pad Extra
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DCC7315A-F551-0778-AFC1-C19D853E0AFA}" = Catalyst Control Center Localization Turkish
"{DCE907E3-4D72-4CD3-A08A-BEFC8C7A5869}" = Branding
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{DF6D07CB-BA1B-60D3-8D51-69A5775AC7D9}" = CCC Help Thai
"{E26DD81D-91CF-7348-65E2-5AC16E14612B}" = Catalyst Control Center Localization Polish
"{E33E9943-2679-C829-5E9E-4D981A1C264C}" = CCC Help Danish
"{E3B99F3D-9856-482A-9048-305E28E2510C}" = Vodafone Mobile Connect
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{E728E952-DD4F-4BCD-A5C8-40FBFEFF91FE}" = OpenOffice.org Installer 1.0
"{E7F0262E-84B8-9EBE-D6FD-E3865FCDB0EB}" = Catalyst Control Center Localization Italian
"{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0
"{ED8C5498-6C39-92E6-B17F-414BF1722E42}" = Catalyst Control Center Graphics Previews Vista
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F173C327-FAA5-D463-2CBD-A4818C7EDC8C}" = Catalyst Control Center Graphics Full Existing
"{F49109F4-EA87-B982-8A66-CCD32C6FC8AF}" = CCC Help Greek
"{F5AB638D-91F6-6517-9872-BE6996E06AF6}" = CCC Help Dutch
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{FC3D290D-79BE-44B7-ABF9-FDD110925930}" = PowerForPhone
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Age of Empires 2.0" = Microsoft Age of Empires II
"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II: The Conquerors Expansion
"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver
"ATI Uninstaller" = ATI Uninstaller
"AureonUSB" = Aureon 5.1 USB
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Der Clou!2" = Der Clou!2
"Evrsoft First Page 2006_is1" = Evrsoft First Page 2006
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8
"GameSpy Arcade" = GameSpy Arcade
"Hamachi" = Hamachi 1.0.2.5
"HijackThis" = HijackThis 2.0.2
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Incomedia WebSite X5 v8 - Evolution" = Incomedia WebSite X5 v8 - Evolution
"MAGIX Music Maker 16 Premium Download-Version D" = MAGIX Music Maker 16 Premium Download-Version
"MAGIX Screenshare D" = MAGIX Screenshare
"MAGIX Speed burnR D" = MAGIX Speed burnR
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"McLoad Preinstaller" = McLoad Preinstaller
"Media Converter SA Edition" = Media Converter SA Edition 0.8
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.0.19)" = Mozilla Firefox (3.0.19)
"phonostarRadioPlayer_is1" = phonostar-Player Version 2.01.0
"PROHYBRIDR" = 2007 Microsoft Office system
"Steam App 10" = Counter-Strike
"Steam App 150" = Counter-Strike Steamworks Beta
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Uninstall_is1" = Uninstall 1.0.0.1
"USB 2.0 1.3M UVC WebCam" = USB 2.0 1.3M UVC WebCam
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"VLC media player" = VideoLAN VLC media player 0.8.6d
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"World of Warcraft" = World of Warcraft
"Xfire" = Xfire (remove only)
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"090215de958f1060" = Curse Client
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 27.12.2010 09:41:41 | Computer Name = Figur-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 27.12.2010 09:41:41 | Computer Name = Figur-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 27.12.2010 09:43:39 | Computer Name = Figur-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 27.12.2010 09:48:27 | Computer Name = Figur-PC | Source = Application Hang | ID = 1002
Description = Programm 4811015.exe, Version 952.0.0.0 arbeitet nicht mehr mit Windows
zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen
für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem
zu suchen. Prozess-ID: 408 Anfangszeit: 01cba5cc490e9158 Zeitpunkt der Beendigung:
15
Error - 27.12.2010 13:59:50 | Computer Name = Figur-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 27.12.2010 13:59:50 | Computer Name = Figur-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 27.12.2010 14:02:19 | Computer Name = Figur-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 27.12.2010 14:07:50 | Computer Name = Figur-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 27.12.2010 14:07:50 | Computer Name = Figur-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 27.12.2010 14:09:47 | Computer Name = Figur-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
[ OSession Events ]
Error - 01.02.2009 06:37:41 | Computer Name = Figur-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 57
seconds with 0 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 21.12.2010 10:47:45 | Computer Name = Figur-PC | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 90.187.67.139 für die Netzwerkkarte mit der Netzwerkadresse
00A0C6000000 wurde durch den DHCP-Server 10.8.12.129 abgelehnt (der DHCP-Server
hat eine DHCPNACK-Meldung gesendet).
Error - 21.12.2010 13:05:25 | Computer Name = Figur-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
Error - 22.12.2010 10:43:37 | Computer Name = Figur-PC | Source = bowser | ID = 8003
Description =
Error - 22.12.2010 14:35:43 | Computer Name = Figur-PC | Source = bowser | ID = 8003
Description =
Error - 22.12.2010 16:56:32 | Computer Name = Figur-PC | Source = Service Control Manager | ID = 7031
Description =
Error - 22.12.2010 17:01:49 | Computer Name = Figur-PC | Source = cdrom | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\CdRom0 gefunden.
Error - 22.12.2010 17:02:58 | Computer Name = Figur-PC | Source = Service Control Manager | ID = 7031
Description =
Error - 25.12.2010 10:32:36 | Computer Name = Figur-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
Error - 26.12.2010 11:13:36 | Computer Name = Figur-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
Error - 27.12.2010 14:06:49 | Computer Name = Figur-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am 27.12.2010 um 19:05:12 unerwartet heruntergefahren.
< End of report >
--- --- --- |
