OTL Extras logfile created on: 15.02.2012 21:03:11 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Mario\Desktop Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,27 Gb Available Physical Memory | 63,47% Memory free 4,23 Gb Paging File | 3,16 Gb Available in Paging File | 74,59% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 92,21 Gb Total Space | 10,70 Gb Free Space | 11,60% Space Free | Partition Type: NTFS Drive D: | 45,12 Gb Total Space | 31,23 Gb Free Space | 69,22% Space Free | Partition Type: NTFS Computer Name: MARIO-PC | User Name: Mario | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .html [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- Reg Error: Key error. https [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~3\Office12\ONENOTE.EXE "%L" (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "UacDisableNotify" = 0 "InternetSettingsDisableNotify" = 0 "AutoUpdateDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\FlashFXP\FlashFXP.exe" = C:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (IniCom Networks, Inc.) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\FlashFXP\FlashFXP.exe" = C:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (IniCom Networks, Inc.) [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0F882355-1CEC-42A6-A883-51EBB79F61D8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{24EA2171-DDB3-4ACF-B2B7-4BE9958C5B8A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{31EB6F71-F5BF-4125-9DDB-A64924D7E1A3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{3488D556-5A8A-4749-9A0D-7CF3F8DEAC0C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{368E841E-CEE1-41B1-9EE8-8F5B3BA48562}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{4EC47903-FA8D-47F2-B23B-ACA4F9DD113F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{7B7809CB-470F-4ED5-886F-213991962D84}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{852F98E1-5068-4F68-89A9-6D2ECFB6CF3F}" = lport=2869 | protocol=6 | dir=in | app=system | "{8626B8F2-7762-4E7F-A129-8D3468845140}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{A6929B1A-B5EE-46A6-8D2E-E48AA487DD8E}" = rport=10243 | protocol=6 | dir=out | app=system | "{BF020F4C-E75D-4AAD-AD8B-E70050CF61DE}" = lport=10243 | protocol=6 | dir=in | app=system | "{D500643D-6DF4-4516-AC6C-8912FF71950D}" = lport=2869 | protocol=6 | dir=in | app=system | "{E710189F-4568-4417-8B30-2E21A040DEF4}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{E9938CEB-E04B-484A-90A0-667078473783}" = lport=2869 | protocol=6 | dir=in | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{01D8063A-0809-416C-8A22-3C9EC5F64708}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{03F94057-2179-4128-9430-6460C338CDBB}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{0A363845-E2F7-4F22-8C97-777CD354D0F9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{16A54A57-2700-4164-9597-BFA7A1B0E6B4}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{1AFB0420-E55A-4BC7-ADEA-C86EB7C4DF0C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{3C9D9A78-6022-4577-9442-4CA398BF1908}" = protocol=6 | dir=out | app=%systemroot%\system32\wudfhost.exe | "{542C995B-2F2B-40C5-A348-B73AC6DA73C2}" = protocol=17 | dir=in | app=c:\program files\sony ericsson\update engine\sony ericsson update engine.exe | "{5967E21D-7415-4F2E-B170-97DA65A8484B}" = protocol=6 | dir=in | app=c:\users\mario\appdata\roaming\dropbox\bin\dropbox.exe | "{5A8E13E8-62F0-4F68-A5AB-9404D286FFE9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{642E9309-22DB-4E8C-9F3B-B6DB6896757A}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{64344AE2-C091-4C41-8F34-3F87CF33715B}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{652E1075-5F5F-4ABA-919D-67A1873BA66D}" = protocol=6 | dir=out | app=system | "{7281B150-216F-4B5D-86EC-47EDCDD3602D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{741CFC7F-64EC-4C22-BC32-2335A0E235BB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{8CAB54E3-0EE9-4EB1-A9DA-AFFBAC66F3D7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{9EBA04F9-CE6E-4E8D-BE52-5FC041D9482A}" = protocol=17 | dir=in | app=c:\users\mario\appdata\roaming\dropbox\bin\dropbox.exe | "{9F8DF64C-4359-4FF7-A67C-FF0CFAD1C2D4}" = protocol=6 | dir=out | app=system | "{A1CFE7B4-7593-462A-AB1D-C88F636D22D3}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{B0BE1371-D382-4F42-9670-E48C9C804106}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | "{B944BAA5-042C-4EDD-9F3B-D2564107CC47}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{C3E1FEAB-AF58-4A55-BCBA-5FD462F1D350}" = protocol=6 | dir=in | app=c:\program files\sony ericsson\update engine\sony ericsson update engine.exe | "{C66993FD-195B-4CA3-B5E4-69524E28CC8F}" = dir=in | app=c:\program files\cyberlink\powerdv\powerdv.exe | "{D487307A-E84A-41A5-9DB8-B9243FE7FDFF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{D8F8C419-9F44-40C6-91D8-5F84806F2D9C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{E3E79C74-CEE3-486E-AF78-ED179A2D0B77}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{F44D5832-6961-47A9-BF02-37C44625B407}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "TCP Query User{4BE966FE-B17B-441E-AE66-299B7538D0EA}C:\program files\activision\call of duty 2\cod2mp_s.exe" = protocol=6 | dir=in | app=c:\program files\activision\call of duty 2\cod2mp_s.exe | "TCP Query User{5C50184B-87B6-4C11-8CC6-607BA5E0375A}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe | "TCP Query User{62697A37-8F4C-4986-A2FD-D6968EBCECF9}C:\program files\call of duty\codmp.exe" = protocol=6 | dir=in | app=c:\program files\call of duty\codmp.exe | "TCP Query User{6D6723A9-E38E-4F3C-8ACE-466F55962023}C:\program files\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\sopcast.exe | "TCP Query User{6D814A67-5DC2-4E1D-AD68-64BB05204DFD}C:\program files\microsoft games\microsoft flight simulator x\fsx.exe" = protocol=6 | dir=in | app=c:\program files\microsoft games\microsoft flight simulator x\fsx.exe | "TCP Query User{725C6757-584F-48F8-9DEF-5E5908E33048}C:\users\mario\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\mario\appdata\roaming\spotify\spotify.exe | "TCP Query User{A11E0F26-EF1B-44B1-8061-81D3729450FF}C:\users\mario\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\mario\appdata\roaming\spotify\spotify.exe | "TCP Query User{A808DCC3-AEC4-42D8-A07F-15C64080E094}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | "TCP Query User{C67A89EF-BBEF-475A-B4A4-F671B2E80758}C:\program files\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | "TCP Query User{D8BD0B0F-A294-4E1F-8557-A005B6B2ED69}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe | "TCP Query User{E12458F7-0333-44C4-ADBA-14C886FB1624}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | "TCP Query User{EC153721-2D35-4C16-B79B-1B2D9A939181}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | "TCP Query User{FBB1C3EE-2290-4407-A8B2-2ED92D7761A2}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "UDP Query User{15C2AA3E-C851-4D1A-BC3D-AA1CDEA49767}C:\users\mario\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\mario\appdata\roaming\spotify\spotify.exe | "UDP Query User{15C91ABA-CB03-4616-B06A-8F82D2B31301}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "UDP Query User{19710468-47C1-412F-B67C-954DEC0AC7E6}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | "UDP Query User{404933A9-0CAD-4B15-8F85-7703DFEEE8D9}C:\program files\call of duty\codmp.exe" = protocol=17 | dir=in | app=c:\program files\call of duty\codmp.exe | "UDP Query User{6F385278-0476-4778-B56C-F92857F8FBF1}C:\program files\microsoft games\microsoft flight simulator x\fsx.exe" = protocol=17 | dir=in | app=c:\program files\microsoft games\microsoft flight simulator x\fsx.exe | "UDP Query User{74277B65-AD4E-4D94-8305-096FFEDA8BA2}C:\program files\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | "UDP Query User{969F96D6-8DAF-4B54-959C-DF707B4AC49A}C:\program files\activision\call of duty 2\cod2mp_s.exe" = protocol=17 | dir=in | app=c:\program files\activision\call of duty 2\cod2mp_s.exe | "UDP Query User{A9AA1CE3-E79C-4450-9CEC-E75E2BC22A02}C:\users\mario\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\mario\appdata\roaming\spotify\spotify.exe | "UDP Query User{BC6B8F49-9F3A-4B48-8CCA-937B54FA714A}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe | "UDP Query User{D1CA45AF-D35B-4DA0-985C-A6734AFFC267}C:\program files\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\sopcast.exe | "UDP Query User{DB4F43AF-2F35-4B2B-8284-A7D211FDAA7F}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | "UDP Query User{E03699B2-7D0A-4256-8DE9-E22502A63357}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe | "UDP Query User{F7EC2286-85B0-4CCB-A634-C26EBAD2E8B8}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu "{066D65EA-ED53-44E4-A96A-F81B6E409D2E}" = PC Connectivity Solution "{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant "{0D2E9DCB-9938-475E-B4DD-8851738852FF}" = AIO_Scan "{1593E7D9-9659-B500-D087-E0241D5290DA}" = Catalyst Control Center Graphics Full New "{16B81802-0D20-CC7E-2490-1B585E996236}" = Catalyst Control Center Localization French "{1746EA69-DCB6-4408-B5A5-E75F55439CDF}" = Scan "{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg "{1AD37709-AED5-AD1F-0BA1-14D8BE570B03}" = ccc-utility "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{2012B554-2918-B60D-4D8A-B89339FFD46F}" = CCC Help Japanese "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 26 "{282E5AB2-8E47-4571-B6FA-6B512555B557}" = HP Photosmart.All-In-One Driver Software 8.0 .A "{2E26E4B9-9A2D-1956-6A33-55FEC238A0CF}" = Catalyst Control Center Localization Swedish "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11 "{4160DC5B-4C56-D0C3-C5FD-F5BDAD3C882B}" = ATI Catalyst Install Manager "{44F5A980-8A6B-4aca-8D85-EFCE5D67D379}" = AIO_CDA_ProductContext "{49F2B650-2D7B-4F59-B33D-346F63776BD3}" = DocProc "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace "{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works "{4F44B5AE-82A6-4A8A-A3E3-E24D489728E3}" = Microsoft SQL Server 2008 Native Client "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime "{5883BAE9-BDF2-43D8-92AE-8148A2503F4B}" = CCC Help Italian "{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{64665955-E1A1-4A8B-BFFA-673A95318909}" = ArcGIS Desktop 10 "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder "{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6A09D4B4-E9AD-9760-7BA5-E53F76994D4A}" = CCC Help English "{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{6C11D561-620B-47DA-A693-4C597F3CDF40}" = EPSON Smart Panel "{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{7A7DC702-DEDE-42A8-8722-B3BA724D546F}" = Fax "{7AF3A942-2B40-EB95-21CF-1B867D1439C6}" = Catalyst Control Center Localization Spanish "{7B80F2CF-3012-41B3-0083-D96E3B923A33}" = Fussball Manager 2003 "{7D7B018C-2140-420A-AA4A-307FFE455C35}" = Catalyst Control Center Localization German "{7E7B3AF4-F04F-1715-CDC7-A585294BE512}" = Catalyst Control Center Localization Chinese Standard "{81CD6232-10F5-4832-B3DA-1B88B1571031}" = Nero 7 Essentials "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C6027FD-53DC-446D-BB75-CACD7028A134}" = HP Update "{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update "{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007 "{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007 "{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007 "{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007 "{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system "{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007 "{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In "{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel(R) Matrix Storage Manager "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{94D66D71-12F0-48A5-B46A-D4B835A0F1B7}" = FirstSteps Diagnostics "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{95D08F4E-DFC2-4ce3-ACB7-8C8E206217E9}" = MarketResearch "{96E3AED5-3D0B-4BB0-84C2-1EDADB204487}" = FlashFXP v3 "{978C25EE-5777-46e4-8988-732C297CBDBD}" = Status "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9B1FD9CE-0776-4f0b-A6F5-C6AB7B650CDF}" = Destinations "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D1F4970-1CA5-9D25-62EC-410A85C03A3D}" = Catalyst Control Center Graphics Light "{A36A0DF7-A766-533A-0E2D-F9700A807823}" = Catalyst Control Center Localization Dutch "{A36CD345-625C-4d6c-B3E2-76E1248CB451}" = SolutionCenter "{A3B7C670-4A1E-4EE2-950E-C875BC1965D0}" = Copy "{A5436728-2DFD-4221-B4D7-F49F740134C9}" = c5100_Help "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AA2BB41E-D97A-3277-8221-1322050F32C6}" = Catalyst Control Center Localization Italian "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AB93FBC8-AA3B-0A8B-C03B-3B64F62B2DB9}" = CCC Help Chinese Standard "{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.0 - Deutsch "{ADC7FA12-E165-428a-AF13-4CE686E030AA}" = C5100 "{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger "{AF1C9345-B53D-4110-BFBF-A0DD83AEAB83}" = AIO_CDA_Software "{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0 "{B804C424-B66D-447A-84BD-C6B88C392C3A}" = PowerDV "{BB8AAD00-A725-221E-278B-1A71B2E844C5}" = CCC Help Korean "{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm "{C28CFD3F-33CE-4675-50BF-D599E89EDDA0}" = Catalyst Control Center Graphics Full Existing "{C370BA43-998C-E872-A47D-2A046F7FC38C}" = Catalyst Control Center Localization Korean "{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail "{C54C951D-6D2B-53F9-5DB7-3BE47EA2F162}" = CCC Help French "{C716522C-3731-4667-8579-40B098294500}" = Toolbox "{C8983B00-2BED-1A87-FBAD-69595A28D5D9}" = CCC Help German "{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials "{CCB18950-1C69-93FD-4547-B7F29271BAC8}" = CCC Help Spanish "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CF797074-A40D-9A91-4344-E11F296C94A9}" = ccc-core-static "{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call "{D2161391-EB1A-E6D0-45EE-F610262F2377}" = Catalyst Control Center Localization Portuguese "{D777D80E-13AE-4E6C-BCB2-9AEE10D9DEF1}" = Driver Updater "{DA185E5C-7AE3-988F-577F-B7E3AA174843}" = CCC Help Swedish "{DC9C742A-72AC-24F5-B41F-CB47CFB4D054}" = Catalyst Control Center Graphics Previews Vista "{DD4D536A-C7DE-154A-94C4-23D3D0055B9F}" = CCC Help Chinese Traditional "{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport "{E5CBCE53-5CC9-77DB-4D63-DECEF8C5AF3C}" = CCC Help Portuguese "{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1 "{E942407D-3261-476C-850B-9546BCA72499}" = Pdf-Splitter-and-Merger-Software "{EA9DEA58-06BD-412A-07E5-C9F5FD844218}" = Catalyst Control Center Core Implementation "{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply "{ED63F7BA-D844-EA95-7E20-19369151390B}" = Catalyst Control Center Localization Japanese "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support "{EFEB5A8C-34FF-59EC-10EA-26B3B3C8E990}" = Catalyst Control Center Localization Chinese Traditional "{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.01.231 "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer "{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable "{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729) "{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01 "{F4BA7923-EDB0-EE20-EC9F-0015549081EF}" = Skins "{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X "{F5D75D7F-DE93-6C53-E60F-D46F8F91052A}" = CCC Help Dutch "{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "{FF075778-6E50-47ed-991D-3B07FD4E3250}" = TrayApp "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.6 "ArcGIS Desktop 10" = ArcGIS Desktop 10 "ATI Uninstaller" = ATI Uninstaller "Autodesk DWF Viewer" = Autodesk DWF Viewer "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "CCleaner" = CCleaner "conduitEngine" = Conduit Engine "DAEMON Tools Pro" = DAEMON Tools Pro "EA Installer.1475696318" = EA Installer "EPSON Scanner" = EPSON Scan "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324 "FUSSBALL MANAGER 11" = FUSSBALL MANAGER 11 "GT Interactive - Driver" = GT Interactive - Driver "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "HP Imaging Device Functions" = HP Imaging Device Functions 8.0 "HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0 "HPExtendedCapabilities" = HP Customer Participation Program 8.0 "HPOCR" = HP OCR Software 8.0 "InstallShield_{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X "Mahjong Towers Eternity EU" = Mahjong Towers Eternity EU (remove only) "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.60.1.1000 "Messenger Plus! Live" = Messenger Plus! Live "Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "Mozilla Firefox 10.0.1 (x86 de)" = Mozilla Firefox 10.0.1 (x86 de) "MP3 Cutter 1" = MP3 Cutter 1 "MP3 Cutter_is1" = MP3 Cutter 1.1.1 "Mystery Case Files - Prime Suspects" = Mystery Case Files - Prime Suspects (remove only) "Notepad++" = Notepad++ "numpy-py2.5" = Python 2.5 numpy-1.0.3 "PhotoScape" = PhotoScape "Poker Superstars II" = Poker Superstars II (remove only) "Python 2.5 numpy-1.0.3" = Python 2.5 numpy-1.0.3 "Python 2.5.1" = Python 2.5.1 "RadarSync2 Toolbar" = RadarSync2 Toolbar "ShockwaveFlash" = Macromedia Flash Player 8 "Sierra Utilities" = Sierra Utilities "Skispringen 2006 Demo_0001" = Skispringen 2006 Demo "SMSERIAL" = Motorola SM56 Data Fax Modem "Uninstall_is1" = Uninstall 1.0.0.1 "Update Engine" = Sony Ericsson Update Engine "Veetle TV" = Veetle TV 0.9.18 "VLC media player" = VLC media player 1.0.5 "Winamp" = Winamp "WinLiveSuite_Wave3" = Windows Live Essentials "WinRAR archiver" = WinRAR "winscp3_is1" = WinSCP 4.3.2 "XnView_is1" = XnView 1.97.8 "X-Wave MP3 Cutter Joiner" = X-Wave MP3 Cutter Joiner 3.0 [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "RadarSync PC Updater 2011" = RadarSync PC Updater 2011 "Smad" = SanctionedMedia "Spotify" = Spotify [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 09.10.2010 03:34:20 | Computer Name = Mario-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 09.10.2010 03:34:20 | Computer Name = Mario-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 09.10.2010 03:34:41 | Computer Name = Mario-PC | Source = Application Error | ID = 1000 Description = Fehlerhafte Anwendung AirGCFG.exe, Version 3.3.1.51123, Zeitstempel 0x43841483, fehlerhaftes Modul wlanapi.dll!apsGetInterfaceCount, Version 6.0.6000.16386, Zeitstempel 0x4549bdc9, Ausnahmecode 0xc0000139, Fehleroffset 0x00008fc7, Prozess-ID 0x52c, Anwendungsstartzeit 01cb678447d20ac9. Error - 09.10.2010 03:40:40 | Computer Name = Mario-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 09.10.2010 03:44:00 | Computer Name = Mario-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 09.10.2010 04:33:15 | Computer Name = Mario-PC | Source = WerSvc | ID = 5007 Description = Error - 10.10.2010 07:01:46 | Computer Name = Mario-PC | Source = Google Update | ID = 20 Description = Error - 10.10.2010 07:01:46 | Computer Name = Mario-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 10.10.2010 07:01:46 | Computer Name = Mario-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 10.10.2010 07:03:02 | Computer Name = Mario-PC | Source = Application Error | ID = 1000 Description = Fehlerhafte Anwendung AirGCFG.exe, Version 3.3.1.51123, Zeitstempel 0x43841483, fehlerhaftes Modul wlanapi.dll!apsGetInterfaceCount, Version 6.0.6000.16386, Zeitstempel 0x4549bdc9, Ausnahmecode 0xc0000139, Fehleroffset 0x00008fc7, Prozess-ID 0xfe0, Anwendungsstartzeit 01cb686a948f6d41. [ System Events ] Error - 15.02.2012 14:00:08 | Computer Name = Mario-PC | Source = LSM | ID = 1048 Description = Error - 15.02.2012 14:00:26 | Computer Name = Mario-PC | Source = DCOM | ID = 10005 Description = Error - 15.02.2012 14:00:33 | Computer Name = Mario-PC | Source = DCOM | ID = 10005 Description = Error - 15.02.2012 14:00:38 | Computer Name = Mario-PC | Source = DCOM | ID = 10005 Description = Error - 15.02.2012 14:01:23 | Computer Name = Mario-PC | Source = Service Control Manager | ID = 7001 Description = Error - 15.02.2012 14:01:23 | Computer Name = Mario-PC | Source = Service Control Manager | ID = 7026 Description = Error - 15.02.2012 14:01:43 | Computer Name = Mario-PC | Source = DCOM | ID = 10005 Description = Error - 15.02.2012 14:02:08 | Computer Name = Mario-PC | Source = Service Control Manager | ID = 7001 Description = Error - 15.02.2012 14:29:26 | Computer Name = Mario-PC | Source = volsnap | ID = 393241 Description = Die Schattenkopien von Volume "C:" wurden gelöscht, weil der Schattenkopiespeicher nicht rechtzeitig vergrößert wurde. Sie sollten die E/A-Last auf dem System verringern oder ein Schattenkopie-Speichervolume, von dem keine Schattenkopie erstellt wird, auswählen. Error - 15.02.2012 14:30:21 | Computer Name = Mario-PC | Source = HTTP | ID = 15016 Description = < End of report >