OTL Extras logfile created on: 4-1-2017 23:29:48 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\user\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18376)
Locale: 00000413 | Country: Niederlande | Language: NLD | Date Format: d-M-yyyy
3,86 Gb Total Physical Memory | 1,78 Gb Available Physical Memory | 46,11% Memory free
7,73 Gb Paging File | 5,58 Gb Available in Paging File | 72,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 290,98 Gb Total Space | 205,19 Gb Free Space | 70,52% Space Free | Partition Type: NTFS
Drive D: | 291,42 Gb Total Space | 170,18 Gb Free Space | 58,40% Space Free | Partition Type: NTFS
Drive F: | 1396,92 Gb Total Space | 1349,23 Gb Free Space | 96,59% Space Free | Partition Type: FAT32
Computer Name: USER-PC | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- Reg Error: Value error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- Reg Error: Value error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== System Restore Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0473A450-D548-4F38-BE4C-77665EEE8EE9}" = lport=2869 | protocol=6 | dir=in | app=system |
"{08394C1F-6219-4FA6-ACD6-A8E21A006FF7}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{0E4EA1A5-0E4C-47C9-96A2-A303E2ED2FF5}" = rport=10243 | protocol=6 | dir=out | app=system |
"{19A0B88E-463B-413E-A28C-8912168A9F62}" = lport=445 | protocol=6 | dir=in | app=system |
"{1B12CAB5-55AF-44D3-B27E-2CD72B5F32B5}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\intel\stcserv\stcserv.exe |
"{1F2AD116-E953-4810-9524-A9E7CB3990DB}" = lport=139 | protocol=6 | dir=in | app=system |
"{2BE6E857-0D30-4E63-882F-31279D0D2A91}" = lport=10243 | protocol=6 | dir=in | app=system |
"{2F3E690F-1AD0-42F1-9085-ACB667DFAA0F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3E196A39-6203-42FA-8564-C079F7454107}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{44D35B81-EB71-4431-9A9E-8B2FA40C167F}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{476B024D-A269-4E54-8A46-54C0EC064229}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4ECD910F-944D-4922-A5AB-3510DC33C3EE}" = lport=137 | protocol=17 | dir=in | app=system |
"{5249177E-15FC-4C30-A542-3CA9D3638E68}" = lport=57007 | protocol=6 | dir=in | app=c:\program files\intel\stcserv\stcserv.exe |
"{58319057-7009-4D33-BAEA-F095A7B43398}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{64752415-044A-47F9-957A-5AAB3A3A03D0}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{650C086F-B762-4DB5-86F4-FA7D55DF3477}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7251978E-D834-4F70-8798-8FEF7AABD84A}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7787ECEC-6854-41B9-A2FC-1910B0AA7625}" = lport=138 | protocol=17 | dir=in | app=system |
"{7FC015B4-06DF-4CB9-B1B4-DA867A181845}" = rport=139 | protocol=6 | dir=out | app=system |
"{82D22E2E-5F2D-4DF9-B853-923887B4A96D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8B63E36A-9255-4500-8C7A-56B639A44847}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9CF6DF8A-7539-4BD9-B616-6767D662664E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{AC2CC524-5054-477F-8689-FE2D06E2CDF3}" = rport=445 | protocol=6 | dir=out | app=system |
"{AECE7FE5-8772-402D-BFBA-07060B63896F}" = rport=137 | protocol=17 | dir=out | app=system |
"{B99ADA06-7F1B-45E0-97CF-111F9757A78F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D35FCAD1-99C5-4214-8E47-A2D7ACB638EB}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D9262A90-C7A6-4273-8373-9F2E467D8F1C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E341871E-1858-43A5-8D30-A7E3CB6B932B}" = rport=138 | protocol=17 | dir=out | app=system |
"{E4EC04E9-B1E8-476A-8073-7E03A1E220A1}" = lport=2869 | protocol=6 | dir=in | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1351E6E8-0338-44EE-9C98-09EBA3717620}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgnsa.exe |
"{16BDDFC5-58A8-4117-A048-5CCA1AA09352}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{1F5E4B91-7842-4FA4-B441-644E3C8AB7C1}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{213706B8-79FE-4683-AABC-500AFC906121}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{23DB1605-8827-4FC8-9725-D7A640A44EE2}" = dir=in | app=c:\program files (x86)\asus\share link\sharelink.exe |
"{294605DC-87D2-453A-B989-0FFC2DB0C876}" = dir=in | app=c:\program files\hp\hp deskjet 3070 b611 series\bin\hpnetworkcommunicator.exe |
"{2EA391DD-7129-4EC5-9715-81EDAD35642A}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe |
"{3493B8D3-0429-4E5B-9305-4824CF195757}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpsapp.exe |
"{349A8CE1-14A8-4A9C-BE23-BEEF947C0ACB}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{363419D1-7B4D-477A-BDF6-1AD610066327}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
"{4252E0DF-EBA4-4032-BF71-4C080D328718}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgnsa.exe |
"{467F0637-E549-4249-931A-7CC2FAD89B6B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{46C2BFA3-3703-48F2-9E5E-2FBDEB90566A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqsudi.exe |
"{4A5A93E9-17AF-4508-801D-F24ED3178476}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{4C31917C-CD60-4E8B-8DED-EAC98179E177}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{58002C6E-2CA5-4B9B-A2A4-469143FA92D0}" = dir=in | app=c:\program files\intel\stcserv\stcserv.exe |
"{58C90173-4E6E-4F98-AA22-FAC457BCAD6C}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{59BCD730-0C2E-4A6B-9C35-EC4D86859B73}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgmfapx.exe |
"{5AF45272-A17E-4687-855C-ED022436E723}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5E6147D7-BEF7-439A-AA1C-681324E92AEE}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{5F1AEF8D-A6A6-4643-BF33-4200B752ED66}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
"{63F9E3A3-D1F3-4141-AEF2-C1B94BE82AA2}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{71919A6F-9A4A-48F1-8F3D-B80645E9C901}" = protocol=6 | dir=out | app=system |
"{756D6AEF-7276-4A35-8E7E-0EE2DCF3B950}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{794329A2-D2F6-4A73-8F95-7C1BFE787BC8}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{7FC73AD9-1129-402A-9312-9775E40DC85C}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{84D701AA-C246-4EBE-A59B-FCA8C69B3B18}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{88D4D351-57C6-42CB-B83D-11B2C65C6751}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{9A883ABB-2C7C-4EA6-9688-4481B55E45D2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9D6FE4BF-2511-4C2A-A12B-703962F16BA2}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9F42A161-1159-4D69-8A49-3EC37438A65B}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{A68A5CB3-1C51-4EB7-8CCE-73111BCD494F}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{AD6758F5-D20E-43C3-8F5A-485E9348B30B}" = dir=in | app=c:\program files\hp\hp deskjet 3070 b611 series\bin\devicesetup.exe |
"{AEAD60C5-EEFC-464F-8584-E970A1EF6EB3}" = dir=in | app=c:\program files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{B552BB52-D0CF-4B76-A8FC-8E14340493C9}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\av\avgemca.exe |
"{BADF25A9-2EE0-4BCB-BD01-58D1E544D345}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{BE06D013-C3C5-4FE8-B0C4-CC5A0AE92B8C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C0062B84-5284-446B-A842-874BBEE4BC0B}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C43AB981-CBAA-45E6-BAA5-E1F55D07547C}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{C87F6CA5-AA04-4FC1-B91F-5642DC48BA4E}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D30D3D52-9FCE-4D3F-B90E-64D29E545E40}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{DCBA712A-BA0D-480B-82CD-FDBF1F524C7D}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgmfapx.exe |
"{E940AC0C-681A-47F2-88B2-38B1CBF8A355}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F125EE9F-1E18-4746-88B3-DF697DC312F1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F569AE83-D0D5-43DD-AEE4-5E90B58253B4}" = dir=in | app=c:\users\user\appdata\local\facebook\video\skype\facebookvideocalling.exe |
"{F5756337-710A-4947-9D85-58FBAED1E8C7}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpse.exe |
"{FCD18665-AAD5-4C02-BB2C-C51C86E2EB3E}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\av\avgemca.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1C7AF7AC-821B-456B-9698-EB0A11A02252}" = Google Analytics Opt-out Browser Add-on
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{1DB0C90B-2A9F-3A1E-B1DF-616C5A2A1417}" = Microsoft .NET Framework 4.5.2 (DEU)
"{21B133D6-5979-47F0-BE1C-F6A6B304693F}" = Visual Studio 2010 x64 Redistributables
"{26784146-6E05-3FF9-9335-786C7C0FB5BE}" = Microsoft .NET Framework 4.5.2
"{32218623-385A-439D-932A-F03EDE611D5F}" = AVG 2016
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile-Gertecenter
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B79B3A9-6E49-5FFB-2017-A822BBDC4992}" = ATI Catalyst Install Manager
"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031" = Microsoft .NET Framework 4.5.2 (Deutsch)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.2
"{93B49FE1-0C81-479B-986A-D50DDA80E2C6}" = Studie zur Verbesserung von HP Deskjet 3070 B611 series Produkten
"{A84DB02B-9C2B-4272-9D2D-A80E00A56513}" = Broadcom Gigabit NetLink Controller
"{A954D353-9DAF-4916-8E71-F1E959EBCD1E}" = STCServ
"{B0B97CF2-5032-A645-7FFC-BD1E39FC4E3F}" = ccc-utility64
"{B0BF4E84-0EE3-4E47-B90E-27B40348E022}" = HP Deskjet 3070 B611 series - Grundlegende Software fr das Gert
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{DC2A8E3D-D5E1-4837-A2E0-C308100AC412}" = FMW 1
"{DFD2C0B0-664C-4383-B348-2F531462EBAD}" = Intel CCF Manager
"{E454B833-2CF1-45A2-91FD-AC0664AB4CD0}" = AVG
"AVG" = AVG Protection
"HitmanPro.Alert" = HitmanPro.Alert 3
"SynTPDeinstKey" = Synaptics Pointing Device Driver
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02A414EA-0E5F-CD08-61EF-E155F31DFF76}" = Catalyst Control Center Graphics Previews Vista
"{08938019-97FA-1C7A-19E0-0C8D56ED7CB2}" = CCC Help Hungarian
"{0A4D717B-E6E8-11FA-E7D2-385EBB1A4A85}" = CCC Help Japanese
"{0D57A71B-A1E1-40D8-BC17-8F4BD9163ED8}" = Steuern sparen 2015
"{0f3d8dd5-54af-4404-a01c-4967e485a065}" = Intel CCF Manager
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{13BA5548-1065-4DBE-B115-681AFB77263B}" = CCC Help Swedish
"{16890D7F-1C77-733B-D8E4-F5D4315A5F93}" = Catalyst Control Center Localization All
"{17DFE37C-064E-4834-AD8F-A4B2B4DF68F8}" = Adobe Photoshop Elements 8.0
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1CBDB473-E303-EFAE-88D1-6F741ACD5B31}" = CCC Help Czech
"{1D8912B0-343C-EB1F-28EE-B672D444C192}" = Catalyst Control Center InstallProxy
"{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}" = Rapport
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{2091F234-EB58-4B80-8C96-8EB78C808CF7}" = Facebook Video Calling 3.1.0.521
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype 7.7
"{26A24AE4-039D-4CA4-87B4-2F32180111F0}" = Java 8 Update 111
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2C59BF0E-66A5-681E-60FE-8D18CE6319A1}" = CCC Help German
"{2C9D4FCA-3E7F-9368-6955-EA6D65F7DC78}" = CCC Help English
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{31B9D218-FED2-4C6C-B19F-7294FFC130B0}" = Adobe AIR
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{357208a4-386b-4c71-b5e8-fa5b068c871d}" = Nero 9 Essentials
"{3788B9B7-C15F-4C64-D52B-3DD1BA494B7A}" = CCC Help Korean
"{3D200EB9-44FC-432F-1E35-C20AB5FDCD77}" = CCC Help Thai
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Packard Bell Power Management
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{44D52071-5077-2839-1AE6-863563AEA269}" = CCC Help Russian
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4BCBC4D0-1D88-462D-809E-506F34EA11C0}" = Catalyst Control Center - Branding
"{4D43D635-6FDA-4FA5-AA9B-23CF73D058EA}" = Nero StartSmart OEM
"{4fcf070a-daac-45e9-a8b0-6850941f7ed8}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Backup Manager Basic
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Packard Bell Recovery Management
"{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
"{83299633-1261-47A3-84F3-6F02B4B8CDB1}" = Video Web Camera
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}" = Skype Click to Call
"{87976D85-DBF6-F263-39B6-500ACB658CE0}" = Catalyst Control Center Graphics Full Existing
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90110413-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Editie 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-00D1-0409-0000-0000000FF1CE}" = Microsoft Access database engine 2010 (English)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90849E84-F026-4638-A184-E6FCFD472C34}" = Brother P-touch Software
"{912D30CF-F39E-4B31-AD9A-123C6B794EE2}" = HP Update
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{9A20BB10-551A-4D13-AB25-3A67EE3F600C}" = OpenOffice 4.1.3
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BBB29A1-C71D-DD1D-66B1-352AAAB13FC6}" = CCC Help Danish
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F20CE56-3828-432D-A3C5-3EC6A2ED93C6}" = HP Deskjet 3070 B611 series Hilfe
"{9F4D1D9E-5542-B572-81A7-9DCB0AEED1BE}" = CCC Help French
"{A2440851-7707-4AE6-86A6-DE4982E902D2}" = Free PNG To JPG Converter
"{A3EF3FAD-6ABA-1551-AD3B-D09361C5EEC9}" = CCC Help Polish
"{A73FBC00-44F8-0ECF-76FB-14CF62120B55}" = ccc-core-static
"{A7496F46-78AE-4DB2-BCF5-95F210FA6F96}" = Windows Live Movie Maker
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AACEAAE9-9CC3-5715-4539-EB13CA3C67BA}" = CCC Help Spanish
"{AC76BA86-0804-1033-1959-001824205020}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1043-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Nederlands
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B2463AD3-1334-A30E-A523-D38E8E7B09A2}" = CCC Help Dutch
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{BA2AD7F2-55AE-87B5-00DD-9B0C6F087FD0}" = Catalyst Control Center Graphics Light
"{BC940CD7-FC71-83C5-2001-CF6FD07BA3D1}" = CCC Help Chinese Traditional
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{BF847A60-119D-6888-B2DA-EC62F1B66BBB}" = CCC Help Chinese Standard
"{c3bcc1e3-f950-439c-bcae-f01283e9f2a4}_is1" = ASUS Share Link
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{C97396A9-44BC-C856-0B92-93A6A417D6A8}" = Catalyst Control Center Graphics Full New
"{CA10114E-3941-E8ED-70A3-17CAA2226AFC}" = CCC Help Turkish
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{CAB89605-7C12-8082-32DF-B419C696BD12}" = Catalyst Control Center Core Implementation
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D279DFB7-97A3-439D-8BE9-95D8AFA68562}" = Reader for PC
"{D98C2191-0AE0-4087-9153-018A4810DF45}" = CCC Help Norwegian
"{DD89CE29-BC88-40C6-A845-E2548682C5D6}" = Alcor Micro USB Card Reader
"{DF7D3C5E-87FC-6AE6-D986-35E0F05FEFD9}" = CCC Help Italian
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}" = eBay Worldwide
"{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{EBA8538C-F0B1-A089-D555-44DBF3A47C9F}" = CCC Help Finnish
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Packard Bell Updater
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F161B4FF-3976-4917-BD27-CA28C95A13AE}" = DDBAC
"{F22E305E-BD02-5CC1-92D0-BD7170CDFE45}" = CCC Help Portuguese
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"{FD4B3108-0915-31E1-5A7C-AC5B3C33846C}" = CCC Help Greek
"Adobe AIR" = Adobe AIR
"Adobe Digital Editions 2.0" = Adobe Digital Editions 2.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 24 ActiveX
"Adobe Photoshop Elements 2.0" = Adobe Photoshop Elements 2.0
"Adobe Photoshop Elements 8.0" = Adobe Photoshop Elements 8.0
"AXIS Media Control Embedded" = AXIS Media Control Embedded
"Clean Master" = Clean Master
"Digital Editions" = Adobe Digital Editions
"Ghostery" = Ghostery
"HandBrake" = HandBrake 0.10.5
"Identity Card" = Identity Card
"InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Packard Bell MyBackup
"InstallShield_{DD89CE29-BC88-40C6-A845-E2548682C5D6}" = Alcor Micro USB Card Reader
"IrfanView" = IrfanView (remove only)
"LManager" = Launch Manager
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware versie 2.2.0.1024
"Mozilla Thunderbird 38.5.0 (x86 nl)" = Mozilla Thunderbird 38.5.0 (x86 nl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Packard Bell InfoCentre" = Packard Bell InfoCentre
"Packard Bell Registration" = Packard Bell Registration
"Packard Bell Screensaver" = Packard Bell ScreenSaver
"Packard Bell Welcome Center" = Welcome Center
"Picasa 3" = Picasa 3
"Pin It_is1" = Pin It
"Rapport_msi" = Rapport
"WildTangent packardbell Master Uninstall" = Packard Bell Games
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.2
"WT088216" = Agatha Christie - Death on the Nile
"WT088226" = Bejeweled 2 Deluxe
"WT088228" = Build-a-lot 2
"WT088235" = Chuzzle Deluxe
"WT088238" = Diner Dash 2 Restaurant Rescue
"WT088260" = Farm Frenzy
"WT088268" = Insaniquarium Deluxe
"WT088269" = Jewel Quest Solitaire 2
"WT088283" = Plants vs. Zombies
"WT088292" = Zuma Deluxe
"WT088416" = FATE
"WT088420" = Final Drive Nitro
"WT088448" = John Deere Drive Green
"WT088452" = Penguins!
"WT088456" = Polar Bowler
"WT088460" = Polar Golfer
"WT088508" = Virtual Villagers 4 - The Tree of Life
"WT088531" = Zuma's Revenge
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-3924468755-1748164157-18051398-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"HP Photo Creations" = HP Photo Creations
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 2-1-2017 15:56:15 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hmpalert.exe, Version: 3.6.1.574,
Zeitstempel: 0x583d51ff Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.23418,
Zeitstempel: 0x5708a73e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0004e6df ID des fehlerhaften
Prozesses: 0x354 Startzeit der fehlerhaften Anwendung: 0x01d264d410aff5a7 Pfad der
fehlerhaften Anwendung: C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe Pfad
des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll Berichtskennung: 842fd3d7-d125-11e6-9b41-206a8a170ff5
Error - 3-1-2017 5:46:12 | Computer Name = user-PC | Source = Windows Search Service | ID = 3006
Description =
Error - 3-1-2017 5:46:17 | Computer Name = user-PC | Source = Windows Search Service | ID = 3007
Description =
Error - 3-1-2017 5:46:20 | Computer Name = user-PC | Source = Windows Search Service | ID = 10021
Description =
Error - 3-1-2017 14:04:41 | Computer Name = user-PC | Source = Windows Search Service | ID = 3006
Description =
Error - 3-1-2017 14:04:42 | Computer Name = user-PC | Source = Windows Search Service | ID = 3007
Description =
Error - 3-1-2017 14:05:01 | Computer Name = user-PC | Source = Windows Search Service | ID = 10021
Description =
Error - 4-1-2017 5:14:25 | Computer Name = user-PC | Source = Windows Search Service | ID = 3006
Description =
Error - 4-1-2017 5:14:28 | Computer Name = user-PC | Source = Windows Search Service | ID = 3007
Description =
Error - 4-1-2017 5:14:41 | Computer Name = user-PC | Source = Windows Search Service | ID = 10021
Description =
[ System Events ]
Error - 3-1-2017 14:04:36 | Computer Name = user-PC | Source = Service Control Manager | ID = 7006
Description = Der Aufruf "ScRegSetValueExW" ist fr "FailureActions" aufgrund folgenden
Fehlers fehlgeschlagen: %%5
Error - 3-1-2017 14:05:02 | Computer Name = user-PC | Source = WMPNetworkSvc | ID = 866300
Description =
Error - 3-1-2017 14:05:21 | Computer Name = user-PC | Source = Schannel | ID = 36887
Description = Es wurde eine schwerwiegende Warnung empfangen: 40.
Error - 3-1-2017 14:05:21 | Computer Name = user-PC | Source = Schannel | ID = 36887
Description = Es wurde eine schwerwiegende Warnung empfangen: 40.
Error - 3-1-2017 16:55:51 | Computer Name = user-PC | Source = Service Control Manager | ID = 7006
Description = Der Aufruf "ScRegSetValueExW" ist fr "FailureActions" aufgrund folgenden
Fehlers fehlgeschlagen: %%5
Error - 4-1-2017 5:13:53 | Computer Name = user-PC | Source = NETLOGON | ID = 3095
Description = Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert,
nicht als Mitglied einer Domne. Der Anmeldedienst braucht bei dieser Konfiguration
nicht gestartet zu sein.
Error - 4-1-2017 5:14:06 | Computer Name = user-PC | Source = Service Control Manager | ID = 7006
Description = Der Aufruf "ScRegSetValueExW" ist fr "FailureActions" aufgrund folgenden
Fehlers fehlgeschlagen: %%5
Error - 4-1-2017 5:15:17 | Computer Name = user-PC | Source = Schannel | ID = 36887
Description = Es wurde eine schwerwiegende Warnung empfangen: 40.
Error - 4-1-2017 5:15:17 | Computer Name = user-PC | Source = Schannel | ID = 36887
Description = Es wurde eine schwerwiegende Warnung empfangen: 40.
Error - 4-1-2017 6:45:06 | Computer Name = user-PC | Source = Schannel | ID = 36887
Description = Es wurde eine schwerwiegende Warnung empfangen: 20.
< End of report >