Ergebnis 1 bis 6 von 6

Thema: Malware Incredibar

  1. #1
    Einsteiger
    Registriert seit
    01.01.2012
    Beiträge
    2

    Malware Incredibar

    Hallo,

    ich habe gestern den VLC Player auf meinen PC geladen und seitdem oeffnet sich, sobald ich den Internetexplorer oder Mozilla Firefox oeffne, das Fenster Mystart Incredibar. Ich habe im Internet gelesen, dass das Malware ist.

    Ich habe das Programm in der Programmliste gefunden und sofort geloescht, trotz allem oeffnet sich das Browserfenster My Incredibar immer noch.

    Mein Virenschutzprogramm ist McAffee, es hat bei einem Komplettscan des Systems nichts gefunden.

    Ich nutze Windows7, 32 bit.

    Ich habe wie beschrieben meine Firewall aktiviert.

    Hier die Code-Tags des Basisscans mit OTL:

    Code:
    OTL logfile created on: 01.01.2012 18:08:52 - Run 1
    OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Julie\Desktop
     Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000407 | Country: Allemagne | Language: DEU | Date Format: dd.MM.yyyy
     
    746,90 Mb Total Physical Memory | 70,97 Mb Available Physical Memory | 9,50% Memory free
    1,75 Gb Paging File | 0,47 Gb Available in Paging File | 27,07% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]
     
    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
    Drive C: | 219,79 Gb Total Space | 185,99 Gb Free Space | 84,62% Space Free | Partition Type: NTFS
     
    Computer Name: JULIE-PC | User Name: Julie | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
     
    ========== Processes (SafeList) ==========
     
    PRC - [2012.01.01 16:15:08 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Julie\Desktop\OTL.exe
    PRC - [2011.11.22 17:18:26 | 001,318,816 | ---- | M] (McAfee, Inc.) -- C:\Program Files\mcafee.com\agent\mcagent.exe
    PRC - [2011.11.20 09:34:23 | 000,247,968 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil11e_ActiveX.exe
    PRC - [2011.10.18 14:32:30 | 000,150,856 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
    PRC - [2011.10.18 14:28:34 | 000,160,608 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
    PRC - [2011.10.18 14:28:18 | 000,166,288 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
    PRC - [2011.06.24 05:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
    PRC - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
    PRC - [2011.02.22 20:01:10 | 000,715,368 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
    PRC - [2011.02.22 20:01:08 | 000,739,944 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
    PRC - [2011.02.22 20:01:02 | 000,469,608 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
    PRC - [2011.01.31 21:55:14 | 000,244,624 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe
    PRC - [2011.01.27 17:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    PRC - [2011.01.11 06:50:02 | 000,393,216 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
    PRC - [2011.01.11 06:49:36 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
    PRC - [2010.12.31 13:05:25 | 000,310,864 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\dsiwmis.exe
    PRC - [2010.12.31 13:05:25 | 000,289,360 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LMworker.exe
    PRC - [2010.12.31 13:05:24 | 001,029,200 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LManager.exe
    PRC - [2010.11.20 22:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
    PRC - [2010.10.05 22:46:10 | 000,704,104 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer VCM\AcerVCM.exe
    PRC - [2010.09.28 03:00:56 | 000,340,336 | ---- | M] (Egis Technology Inc.) -- C:\Program Files\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
    PRC - [2010.09.18 00:10:16 | 000,407,920 | ---- | M] (Egis Technology Inc.) -- C:\Program Files\EgisTec IPS\PmmUpdate.exe
    PRC - [2010.09.18 00:10:02 | 000,201,584 | ---- | M] (Egis Technology Inc.) -- C:\Program Files\EgisTec IPS\EgisUpdate.exe
    PRC - [2010.03.25 18:42:36 | 000,388,096 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
    PRC - [2010.01.30 00:52:58 | 000,260,640 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer VCM\RS_Service.exe
    PRC - [2010.01.15 13:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
    PRC - [2009.12.03 09:12:12 | 000,976,320 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe
    PRC - [2009.05.14 16:07:14 | 000,759,048 | ---- | M] (ABBYY) -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
     
     
    ========== Modules (No Company Name) ==========
     
     
    ========== Win32 Services (SafeList) ==========
    Code:
    OTL Extras logfile created on: 01.01.2012 18:08:52 - Run 1
    OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Julie\Desktop
     Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000407 | Country: Allemagne | Language: DEU | Date Format: dd.MM.yyyy
     
    746,90 Mb Total Physical Memory | 70,97 Mb Available Physical Memory | 9,50% Memory free
    1,75 Gb Paging File | 0,47 Gb Available in Paging File | 27,07% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]
     
    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
    Drive C: | 219,79 Gb Total Space | 185,99 Gb Free Space | 84,62% Space Free | Partition Type: NTFS
     
    Computer Name: JULIE-PC | User Name: Julie | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
     
    ========== Extra Registry (SafeList) ==========
     
     
    ========== File Associations ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
    .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
    .html [@ = ChromeHTML] -- Reg Error: Key error. File not found
     
    [HKEY_USERS\S-1-5-21-2179131892-736547172-3970799083-1000\SOFTWARE\Classes\<extension>]
    .html [@ = ChromeHTML] -- Reg Error: Key error. File not found
     
    ========== Shell Spawning ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
    htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
    htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
    http [open] -- Reg Error: Key error.
    https [open] -- Reg Error: Key error.
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
     
    ========== Security Center Settings ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "cval" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
    "VistaSp1" = Reg Error: Unknown registry data type -- File not found
    "AntiVirusOverride" = 0
    "AntiSpywareOverride" = 0
    "FirewallOverride" = 0
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
     
    ========== Firewall Settings ==========
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0
     
    ========== Authorized Applications List ==========
     
     
    ========== HKEY_LOCAL_MACHINE Uninstall List ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{00884F14-05BD-4D8E-90E5-1ABF78948CA4}" = Windows Live Mesh
    "{01F1591E-6496-FE89-75F0-51D9992A381C}" = CCC Help Russian
    "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Acer Crystal Eye Webcam
    "{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
    "{03026BBB-B089-478C-2880-D8EA8563DB3E}" = CCC Help Chinese Standard
    "{039480EE-6933-4845-88B8-77FD0C3D059D}" = Windows Live Mesh
    "{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}" = Epson Event Manager
    "{03CB6116-BE2E-D1E6-9B5D-68EA24C3E561}" = CCC Help Swedish
    "{04182C2A-1DAD-C2AF-ACEE-200758F8FAE3}" = ccc-core-static
    "{047F790A-7A2A-4B6A-AD02-38092BA63DAC}" = Acer VCM
    "{0557BBDA-69D3-4FA4-A93C-A5300F7034B4}" = Windows Live Writer
    "{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
    "{05E47624-97C4-4B22-83C8-D4E30EC3EF02}" = Windows Live Remote Client Resources
    "{065241D0-A178-4F24-8A09-691761A8957B}" = Windows Live Remote Service Resources
    "{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common
    "{06B05153-97E4-427E-B1A8-E098F6C5E52F}" = Windows Live Essentials
    "{073F306D-9851-4969-B828-7B6444D07D55}" = Windows Live Photo Common
    "{0891B708-EF3F-4D7E-9724-265245F46276}" = Windows Live Remote Service Resources
    "{09922FFE-D153-44AE-8B60-EA3CB8088F93}" = Windows Live UX Platform Language Pack
    "{0A1651F1-7E0F-4613-93FE-967F5BC3C1B7}" = Windows Live Remote Service Resources
    "{0A4C4B29-5A9D-4910-A13C-B920D5758744}" = بريد Windows Live
    "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
    "{0C1931EB-8339-4837-8BEC-75029BF42734}" = Windows Live UX Platform Language Pack
    "{0C975FCC-A06E-4CB6-8F54-A9B52CF37781}" = Windows Liven sähköposti
    "{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
    "{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}" = Galeria de Fotografias do Windows Live
    "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack
    "{10186F1A-6A14-43DF-A404-F0105D09BB07}" = Windows Live Mail
    "{110668B7-54C6-47C9-BAC4-1CE77F156AF5}" = Windows Live Mesh
    "{11417707-1F72-4279-95A3-01E0B898BBF5}" = Windows Live Mesh
    "{11778DA1-0495-4ED9-972F-F9E0B0367CD5}" = Windows Live Writer
    "{1203DC60-D9BD-44F9-B372-2B8F227E6094}" = Windows Live Temel Parçalar
    "{120C160F-F53D-4A15-A873-E79BF5B98B48}" = Windows Live Photo Common
    "{128133D3-037A-4C62-B1B7-55666A10587A}" = Windows Live UX Platform Language Pack
    "{133D9D67-D475-4407-AC3C-D558087B2453}" = Windows Live Movie Maker
    "{141B1D71-D320-0AB2-AAFB-3132F27A004D}" = Catalyst Control Center InstallProxy
    "{143DB9C9-3F0D-4DC7-A57B-A7E4F26FA12E}" = Windows Live Remote Client Resources
    "{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
    "{168E7302-890A-4138-9109-A225ACAF7AD1}" = Windows Live Photo Common
    "{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources
    "{17835B63-8308-427F-8CF5-D76E0D5FE457}" = Windows Live Essentials
    "{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}" = MyWinLocker Suite
    "{17F99FCE-8F03-4439-860A-25C5A5434E18}" = Windows Live Essentials
    "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
    "{198EA334-8A3F-4CB2-9D61-6C10B8168A6F}" = Windows Live Writer
    "{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
    "{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
    "{1A72337E-D126-4BAF-AC89-E6122DB71866}" = Windows Liven valokuvavalikoima
    "{1A82AE99-84D3-486D-BAD6-675982603E14}" = Windows Live Writer
    "{1D6C2068-807F-4B76-A0C2-62ED05656593}" = Windows Live Writer
    "{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
    "{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
    "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
    "{1FC83EAE-74C8-4C72-8400-2D8E40A017DE}" = Windows Live Writer
    "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
    "{201B5096-AF6E-423E-B987-023E040D9B42}" = Windows Live Remote Service Resources
    "{20381A8A-808E-4A53-B6CD-AD2B85E16365}" = Windows Live UX Platform Language Pack
    "{220C7F8C-929D-4F71-9DC7-F7A6823B38E4}" = Windows Live UX Platform Language Pack
    "{226F0D93-76DE-4F1C-B14D-DE10443ADB60}" = Windows Live Movie Maker
    "{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
    "{244C5A67-39DC-4C6C-BF1B-BCC9D342A4C4}" = Windows Live Remote Client Resources
    "{249EE21B-8EDD-4F36-8A23-E580E9DBE80A}" = Windows Live Mail
    "{24DF33E0-F924-4D0D-9B96-11F28F0D602D}" = Windows Live UX Platform Language Pack
    "{2511AAD7-82DF-4B97-B0B3-E1B933317010}" = Windows Live Writer Resources
    "{25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}" = Windows Live Mail
    "{25CD4B12-8CC5-433E-B723-C9CB41FA8C5A}" = Windows Live Writer
    "{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 29
    "{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources
    "{2852BC06-B850-4518-97E6-CD136FE75683}" = Windows Live Remote Client Resources
    "{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
    "{28B9D2D8-4304-483F-AD71-51890A063A74}" = Windows Live Photo Common
    "{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
    "{297F0B9D-CB90-1E15-084B-F433F37B5EF8}" = CCC Help Thai
    "{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
    "{2A19BE3D-21F6-8BC4-B679-03E818814AA4}" = ATI Catalyst Install Manager
    "{2B3EA5DA-D040-48FB-813F-1CF8C0123698}" = Windows Live Remote Client Resources
    "{2BA5FD10-653F-4CAF-9CCD-F685082A1DC1}" = Windows Live Writer
    "{2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}" = Windows Live UX Platform Language Pack
    "{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
    "{2D3E034E-F76B-410A-A169-55755D2637BB}" = Windows Live Mesh
    "{2E50E321-4747-4EB5-9ECB-BBC6C3AC0F31}" = Windows Live Writer Resources
    "{30E82CD5-6E97-4381-86EB-548202A6D5B7}" = Windows Live Remote Client Resources
    "{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
    "{3125D9DE-8D7A-4987-95F3-8A42389833D8}" = Windows Live Writer Resources
    "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
    "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
    "{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
    "{370F888E-42A7-4911-9E34-7D74632E17EB}" = Windows Live Photo Common
    "{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
    "{39F15B50-A977-4CA6-B1C3-6A8724CDA025}" = MyWinLocker 4
    "{39F58DDB-B2B8-4B86-AF20-4706A80EB30D}" = Epson Easy Photo Print 2
    "{39F95B0B-A0B7-4FA7-BB6C-197DA2546468}" = Windows Live Mesh
    "{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
    "{3B72C1E0-26A1-40F6-8516-D50C651DFB3C}" = Windows Live Essentials
    "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
    "{3BC3B1A5-30E3-4DDB-BE08-E7262B838B5F}" = Windows Live Remote Client Resources
    "{3BFB2388-64EE-4AAA-9235-5FE725FED6DE}" = Windows Live Remote Service Resources
    "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
    "{3C87F2A9-639E-33C7-AE09-FF86B6FAFEF6}" = CCC Help Greek
    "{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer ePower Management
    "{3F4143A1-9C21-4011-8679-3BC1014C6886}" = Windows Live Mesh
    "{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
    "{410DF0AA-882D-450D-9E1B-F5397ACFFA80}" = Windows Live Essentials
    "{41B72CAF-036B-4E0A-8D22-F5DF7C970434}" = Windows Live Remote Client Resources
    "{41E4FA4B-9376-4C32-AA46-65FCC0087CD5}" = Windows Live Remote Service Resources
    "{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
    "{429DF1A0-3610-4E9E-8ACE-3C8AC1BA8FCA}" = Windows Live Photo Gallery
    "{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials
    "{4444F27C-B1A8-464E-9486-4C37BAB39A09}" = Фотогалерия на Windows Live
    "{448702D4-83DD-4EFC-B09B-94AD6CA0D978}" = Windows Live Remote Service Resources
    "{454F5782-A4C3-480E-A629-D435795DEFD8}" = Windows Live Remote Client Resources
    "{458F399F-62AC-4747-99F5-499BBF073D29}" = Windows Live Writer Resources
    "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
    "{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources
    "{4664ED39-C80A-48F7-93CD-EBDCAFAB6CC5}" = Windows Live Writer Resources
    "{46872828-6453-4138-BE1C-CE35FBF67978}" = Windows Live Mesh
    "{4736B0ED-F6A1-48EC-A1B7-C053027648F1}" = Galeria fotogràfica del Windows Live
    "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
    "{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
    "{48F597DD-D397-4CFA-91A0-4C033A0113BD}" = Windows Live Mail
    "{49EF2D49-3171-E160-13FD-F7E8C51E197E}" = CCC Help Polish
    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
    "{4A04DB63-8F81-4EF4-9D09-61A2057EF419}" = Windows Live Essentials
    "{4B1EDAFC-B0EB-465F-886C-24FAC1BED2AC}" = Windows Live Remote Client Resources
    "{4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}" = Windows Live Writer
    "{4C378B16-46B7-4DA1-A2CE-2EE676F74680}" = Windows Live UX Platform Language Pack
    "{4D141929-141B-4605-95D6-2B8650C1C6DA}" = Windows Live UX Platform Language Pack
    "{4D7BAC8A-51B8-4243-8567-1415C4272D13}" = Windows Live Writer
    "{4D83F339-5A5C-4B21-8FD3-5D407B981E72}" = Windows Live Photo Common
    "{4F05AC7F-63EE-DB64-C863-FA3CAD346893}" = CCC Help Hungarian
    "{5008BC55-FD3D-4A32-A1B7-610E18F4D220}" = Windows Live Remote Service Resources
    "{506FC723-8E6C-4417-9CFF-351F99130425}" = Windows Live UX Platform Language Pack
    "{50732772-D6E1-9C37-C056-73CEB6FD32DE}" = CCC Help Spanish
    "{50F74F5A-EF47-CEB5-C887-96E30144208B}" = CCC Help Norwegian
    "{523DF2BB-3A85-4047-9898-29DC8AEB7E69}" = Windows Live UX Platform Language Pack
    "{5275D81E-83AD-4DE4-BC2B-6E6BA3A33244}" = Windows Live Writer Resources
    "{5495E9A4-501A-4D4C-87C9-E80916CA9478}" = Windows Live UX Platform Language Pack
    "{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
    "{5C2F5C1B-9732-4F81-8FBF-6711627DC508}" = Windows Live Fotogalleri
    "{5C8BC258-A629-4DF2-97D0-E106C2A9B1BD}" = Windows Live Remote Client Resources
    "{5CF5B1A5-CBC3-42F0-8533-5A5090665862}" = Windows Live Mesh
    "{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
    "{5D2E7BD7-4B6F-4086-BA8A-E88484750624}" = Windows Live Writer Resources
    "{5DA7D148-D2D2-4C67-8444-2F0F9BD88A06}" = Windows Live Writer
    "{5E627606-53B9-42D1-97E1-D03F6229E248}" = Windows Live UX Platform Language Pack
    "{5FFA2820-C030-F2A5-3BFB-7EB2ABAB90F1}" = Catalyst Control Center Graphics Previews Common
    "{60C3C026-DB53-4DAB-8B97-7C1241F9A847}" = Windows Live Movie Maker
    "{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}" = newsXpresso
    "{61A5DE19-BE38-45AF-A9BC-73E49703315E}" = Windows Live Remote Service Resources
    "{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
    "{6255D9FC-427F-4867-84DB-164DBEA0661F}" = Windows Live Remote Client Resources
    "{625D45F0-5DCB-48BF-8770-C240A84DAAEB}" = Windows Live Mesh
    "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
    "{63CF7D0C-B6E7-4EE9-8253-816B613CC437}" = Windows Live Mail
    "{640798A0-A4FB-4C52-AC72-755134767F1E}" = Windows Live Movie Maker
    "{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live
    "{644063FA-ABA3-42AC-A8AC-3EDC0706018B}" = Windows Live Mesh
    "{6491AB99-A11E-41FD-A5E7-32DE8A097B8E}" = Windows Live Essentials
    "{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
    "{66B0B400-22AB-47E6-8673-38A5D37F6331}" = Windows Live Remote Client Resources
    "{677AAD91-1790-4FC5-B285-0E6A9D65F7DC}" = Windows Live Mail
    "{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
    "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
    "{69C9C672-400A-43A0-B2DE-9DB38C371282}" = Windows Live Writer
    "{69CAC24D-B1DC-4B97-A1BE-FE21843108FE}" = Windows Live Writer Resources
    "{6A4ABCDC-0A49-4132-944E-01FBCCB3465C}" = Windows Live UX Platform Language Pack
    "{6ABE832B-A5C7-44C1-B697-3E123B7B4D5B}" = Windows Live Mesh
    "{6B556C37-8919-4991-AC34-93D018B9EA49}" = Windows Live Photo Common
    "{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
    "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
    "{6EF2BE2C-3121-48B7-B7A6-C56046B3A588}" = Windows Live Movie Maker
    "{6F37D92B-41AA-44B7-80D2-457ABDE11896}" = Windows Live Photo Common
    "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
    "{71527C7C-5289-4CB2-88C9-23344C0FF6C1}" = Windows Live Movie Maker
    "{71A81378-79D5-40CC-9BDC-380642D1A87F}" = Windows Live Writer
    "{71C95134-F6A9-45E7-B7B3-07CA6012BF2A}" = Windows Live Mesh
    "{7218C0EB-9A81-A4BA-6303-5D0757251E37}" = WMV9/VC-1 Video Playback
    "{7272F232-A7E0-4B2B-A5D2-71B7C5E2379C}" = Windows Live Fotótár
    "{7327080F-6673-421F-BBD9-B618F357EEB3}" = Windows Live UX Platform Language Pack
    "{734104DE-C2BF-412F-BB97-FCCE1EC94229}" = Windows Live Writer Resources
    "{7373E17D-18E0-44A7-AC3A-6A3BFB85D3B3}" = Windows Live Movie Maker
    "{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
    "{7465A996-0FCA-4D2D-A52C-F833B0829B5B}" = Windows Live Movie Maker
    "{7496FD31-E5CB-4AE4-82D3-31099558BF6A}" = Windows Live Mesh
    "{74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}" = Windows Live UX Platform Language Pack
    "{7612E28A-C4DB-4259-AA91-CB02B1BCF623}" = Windows Live Remote Service Resources
    "{76362863-572A-0592-E2B2-B1CB7CC8E85D}" = CCC Help Portuguese
    "{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
    "{77F69CA1-E53D-4D77-8BA3-FA07606CC851}" = Фотоальбом Windows Live
    "{7846B719-862C-468A-9FD0-4769D2590535}" = Windows Live Remote Client Resources
    "{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
    "{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
    "{7962DFC7-BBD8-4FA1-B510-46A993C2BF94}" = Windows Live Remote Client Resources
    "{7A143876-9658-4A58-82E7-B5F02D942957}" = Windows Live Remote Client Resources
    "{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live
    "{7ADFA72D-2A9F-4DEC-80A5-2FAA27E23F0F}" = Windows Live Photo Common
    "{7AF8E500-B349-4A77-8265-9854E9A47925}" = Windows Live Movie Maker
    "{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}" = Pošta Windows Live
    "{7BC00AC5-47B4-C1D0-07E2-F50D79565226}" = CCC Help Danish
    "{7C2A3479-A5A0-412B-B0E6-6D64CBB9B251}" = Windows Live Photo Common
    "{7CB529B2-6C74-4878-9C3F-C29C3C3BBDC6}" = Windows Live Writer Resources
    "{7D0DE76C-874E-4BDE-A204-F4240160693E}" = Windows Live Photo Common
    "{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
    "{7D926AD2-16D6-42C2-8CA1-AB09E96040BA}" = Windows Live Writer Resources
    "{7D99B933-E29C-4599-92F0-DAED2AF041E3}" = Windows Live Essentials
    "{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
    "{7E90B133-FF47-48BB-91B8-36FC5A548FE9}" = Windows Live Writer Resources
    "{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management
    "{7FF11E53-C002-4F40-8D68-6BE751E5DD62}" = Windows Live Writer Resources
    "{804DE397-F82C-4867-9085-E0AA539A3294}" = Windows Live Writer
    "{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
    "{8190F7B6-BFCE-4F60-8670-59F1709BFF9F}" = Catalyst Control Center - Branding
    "{827D3E4A-0186-48B7-9801-7D1E9DD40C07}" = Windows Live Essentials
    "{82803FF3-563F-414F-A403-8D4C167D4120}" = Windows Live Mail
    "{82B5618C-75E8-52ED-9F03-44E26AC32611}" = CCC Help Japanese
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110109903}" = Flip Words
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}" = Galapago
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112531267}" = Chicken Invaders 3
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112623650}" = Belles Beauty Boutique
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}" = Dream Day First Home
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-116672750}" = World of Goo
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117932650}" = Sprill and Ritchie
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-118399487}" = Farm Frenzy 3 Ice Age
    "{82EE333F-45A9-4585-A5D9-31FE16B7FB25}" = Windows Live Remote Service Resources
    "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
    "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
    "{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
    "{84267681-BF16-40B6-9564-27BC57D7D71C}" = Windows Live Photo Common
    "{845E0BCB-8C8D-4FAB-8588-AD5FFD156C95}" = Windows Live Remote Service Resources
    "{84A411F9-40A5-4CDA-BF46-E09FBB2BC313}" = Windows Live Essentials
    "{84D3CB13-C7EE-4A29-817E-D82697320BF5}" = Windows Live Remote Client Resources
    "{85373DA7-834E-4850-8AF5-1D99F7526857}" = Windows Live Photo Common
    "{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
    "{861B1145-7762-4794-B40C-3FF0A389DFE6}" = Windows Live Photo Gallery
    "{86F444A5-C9B9-41DC-AF28-B5E46F5497C7}" = Windows Live Argazki Galeria
    "{885F1BCD-C344-4758-85BD-09640CF449A5}" = Windows Live Photo Gallery
    "{8909CFA8-97BF-4077-AC0F-6925243FFE08}" = Windows Liven asennustyökalu
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
    "{8CF5D47D-27B7-49D6-A14F-10550B92749D}" = Windows Live UX Platform Language Pack
    "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
    "{8DF7FD9F-1248-0DFD-18A7-C192909FEF21}" = CCC Help French
    "{8E285C75-9BE2-4349-972B-DECDDF472656}" = Windows Live Writer Resources
    "{90140000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2010
    "{90140000-0015-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2010
    "{90140000-0016-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2010
    "{90140000-0018-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2010
    "{90140000-0019-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2010
    "{90140000-001A-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2010
    "{90140000-001B-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2010
    "{90140000-001F-0401-0000-0000000FF1CE}_Office14.SingleImage_{1A43C155-3DDA-43C9-92C5-0E7D0B2B156D}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
    "{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
    "{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
    "{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2010
    "{90140000-001F-0413-0000-0000000FF1CE}_Office14.SingleImage_{5072FEA2-862C-4BF0-9654-CB0DCBE2BE28}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
    "{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2010
    "{90140000-002C-040C-0000-0000000FF1CE}_Office14.SingleImage_{C8E4AA87-3E5A-4C70-8CB7-43FE25C99B74}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
    "{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2010
    "{90140000-006E-040C-0000-0000000FF1CE}_Office14.SingleImage_{7C5C7E8C-F6D2-43AC-93A4-89E4FF7367E6}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-00A1-040C-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (French) 2010
    "{90140000-00A1-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{924B4D82-1B97-48EB-8F1E-55C4353C22DB}" = Windows Live Mail
    "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
    "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
    "{93C4B7D5-4E00-491F-BA3E-25B7B63EE7F6}" = Windows Live Mail
    "{93C6647F-AFE0-4CC2-8809-28A0B320D11B}" = Windows Live Remote Service Resources
    "{93E464B3-D075-4989-87FD-A828B5C308B1}" = Windows Live Writer Resources
    "{945A6A95-5209-70AE-C6FC-6FA468DF00B8}" = CCC Help Finnish
    "{94D643DE-8288-BC80-8BD8-8D04F30169D7}" = CCC Help Italian
    "{95054BE0-C381-3334-CED1-B706ADE954BD}" = CCC Help Dutch
    "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
    "{97124033-1253-4474-8B25-1AB314A920E6}" = Windows Live Remote Service Resources
    "{97F77D62-5110-4FA3-A2D3-410B92D31199}" = Windows Live Fotogaléria
    "{99BE7F5D-AB52-4404-9E03-4240FFAA7DE9}" = Windows Live Mesh
    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    "{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
    "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
    "{9DA3F03B-2CEE-4344-838E-117861E61FAF}" = Windows Live Mail
    "{9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}" = Windows Live Movie Maker
    "{9E2C5B0E-7A2D-4767-A9B2-77469FB1873A}" = Windows Live Mesh
    "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
    "{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
    "{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
    "{A101F637-2E56-42C0-8E08-F1E9086BFAF3}" = Windows Live Movie Maker
    "{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker
    "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
    "{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
    "{A4C16B19-10AA-4990-AA87-D14F653E3345}" = Windows Live Remote Client Resources
    "{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
    "{A650C627-8278-F362-DE10-772D42FEC8EC}" = ccc-utility
    "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
    "{A9ABC0A6-DC01-4102-BEC9-86974A73B214}" = Windows Live Remote Client Resources
    "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
    "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
    "{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
    "{AB0B2113-5B96-4B95-8AD1-44613384911F}" = Windows Live Mesh
    "{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
    "{AB93C51F-71F9-4A28-8134-FE1B5B9373E9}" = Windows Live Remote Service Resources
    "{ABD534B7-E951-470E-92C2-CD5AF1735726}" = Windows Live Essentials
    "{ABE2F2AA-7ADC-4717-9573-BF3F83C696AC}" = Windows Live Mail
    "{AC0628FF-532F-4800-91EC-40903B04682F}" = Windows Live Remote Service Resources
    "{AC259A12-6CD9-486D-A97A-B619EB46225A}" = Windows Live Remote Service Resources
    "{AC76BA86-7AD7-1036-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Français
    "{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
    "{AD001A69-88CC-4766-B2DB-3C1DFAB9AC72}" = Windows Live Mesh
    "{ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}" = Windows Live Mail
    "{ADFE4AED-7F8E-4658-8D6E-742B15B9F120}" = Windows Live Photo Common
    "{AF01B90A-D25C-4F60-AECD-6EEDF509DC11}" = Windows Live Mesh
    "{AF1DE214-DD95-0EDE-F573-3A219AE9850D}" = CCC Help Czech
    "{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
    "{B0AD205F-60D0-4084-AFB8-34D9A706D9A8}" = Windows Live Essentials
    "{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
    "{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
    "{B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}" = Windows Live Photo Common
    "{B2D55EB8-32C5-4B43-9006-9E97DECBA178}" = Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)
    "{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common
    "{B3BE54A4-8DFE-4593-8E66-56AB7133B812}" = Windows Live Writer
    "{B512307E-543D-457E-B759-75E0D5B0BCDF}" = Windows Live Remote Client Resources
    "{B618C3BF-5142-4630-81DD-F96864F97C7E}" = Windows Live Essentials
    "{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}" = Почта Windows Live
    "{B6F55C3E-30EE-4D25-8BAD-CEE4BF8C78EB}" = Windows Live Remote Client Resources
    "{B7B67AA5-12DA-4F01-918D-B1BF66779D8A}" = Windows Live Writer Resources
    "{BA8D4CEF-D23D-44AB-8A89-66E602253791}" = Windows Live Remote Service Resources
    "{BD4EBDB5-EB14-4120-BB04-BE0A26C7FB3E}" = Windows Live Photo Common
    "{BD695C2F-3EA0-4DA4-92D5-154072468721}" = Windows Live Fotoğraf Galerisi
    "{BF022D76-9F72-4203-B8FA-6522DC66DFDA}" = Windows Live Movie Maker
    "{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh
    "{C00C2A91-6CB3-483F-80B3-2958E29468F1}" = Συλλογή φωτογραφιών του Windows Live
    "{C01FCACE-CC3D-49A2-ADC2-583A49857C58}" = Windows Live Essentials
    "{C08D5964-C42F-48EE-A893-2396F9562A7C}" = Windows Live Mesh
    "{C1015024-0BF1-4B51-8A06-C28953687DA7}" = Windows Live Remote Service Resources
    "{C1C9D199-B4DD-4895-92DD-9A726A2FE341}" = Windows Live Writer
    "{C2695E83-CF1D-43D1-84FE-B3BEC561012A}" = Shredder
    "{C29FC15D-E84B-4EEC-8505-4DED94414C59}" = Windows Live Writer Resources
    "{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
    "{C30628D8-D3A0-4F23-90F0-F145808087B6}" = Windows Live Remote Client Resources
    "{C411942C-C26B-4450-8B9A-173DCC22AEC6}" = Windows Live Remote Service Resources
    "{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
    "{C4E7704D-5AFB-44CA-B8BA-F16C8FA46D5F}" = Windows Live Remote Service Resources
    "{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
    "{C8421D85-CA0E-4E93-A9A9-B826C4FB88EA}" = Windows Live Mail
    "{C84CCA99-1E54-C443-0A6C-AB32954EA785}" = CCC Help Korean
    "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
    "{C8FB74E8-AD41-01F1-4265-11F4F9FA02F5}" = CCC Help Chinese Traditional
    "{C97623E2-0614-4845-B199-8E8BEC8E131C}_is1" = Acer GameZone Console
    "{C9B4E19B-FBC2-51FF-C390-B251D2AA7E57}" = CCC Help English
    "{CB240A71-3AFC-4429-B4D4-F965B8C4267E}" = Windows Live Remote Service Resources
    "{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live
    "{CB66242D-12B1-4494-82D2-6F53A7E024A3}" = Galerie foto Windows Live
    "{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
    "{CD442136-9115-4236-9C14-278F6A9DCB3F}" = Windows Live Movie Maker
    "{CD6CB7F1-1B8E-424A-9B81-F8D2F03958EC}" = Windows Live Remote Client Resources
    "{CD7CB1E6-267A-408F-877D-B532AD2C882E}" = Windows Live Photo Common
    "{CDC39BF2-9697-4959-B893-A2EE05EF6ACB}" = Windows Live Writer
    "{CE929F09-3853-4180-BD90-30764BFF7136}" = גלריית התמונות של Windows Live
    "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
    "{CF671BFE-6BA3-44E7-98C1-500D9C51D947}" = Windows Live Photo Gallery
    "{D07B1FDA-876B-4914-9E9A-309732B6D44F}" = Windows Live Mail
    "{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack
    "{D31169F2-CD71-4337-B783-3E53F29F4CAD}" = Windows Live Mail
    "{D378BEA1-912E-4827-B9DB-D3B2C3D0BD4A}" = Windows Live Remote Service Resources
    "{D3CAE2CA-BE71-4CA4-9EB9-46E1C82E778B}" = Windows Live Remote Service Resources
    "{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
    "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
    "{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
    "{D6CBB3B2-F510-483D-AE0D-1CF3F43CF1EE}" = Windows Live Writer Resources
    "{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
    "{DA29F644-2420-4448-8128-1331BE588999}" = Windows Live Writer
    "{DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}" = Windows Live Movie Maker
    "{DB1208F4-B2FE-44E9-BFE6-8824DBD7891B}" = Windows Live Movie Maker
    "{DBAA2B17-D596-4195-A169-BA2166B0D69B}" = Windows Live Mail
    "{DCAB6BA7-6533-44BF-9235-E5BF33B7431C}" = Windows Live Writer
    "{DDC1E1BD-7615-4186-89E1-F5F43F9B6491}" = Windows Live Movie Maker
    "{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
    "{DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}" = Windows Live Writer
    "{DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}" = Windows Live Writer Resources
    "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
    "{DEDF8BAB-98D7-4CFA-9C42-27431EC4BD1F}" = Windows Live Remote Service Resources
    "{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
    "{DF71ABBB-B834-41C0-BB58-80B0545D754C}" = Windows Live UX Platform Language Pack
    "{DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}" = Windows Live Remote Client Resources
    "{E062BB1F-6F04-4543-3FB4-58489D9552E0}" = CCC Help German
    "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
    "{E1629C45-9CEF-498E-83CD-D6A09CADA176}" = Windows Live Remote Client Resources
    "{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
    "{E5377D46-83C5-445A-A1F1-830336B42A10}" = Windows Live Galerija fotografija
    "{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer
    "{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}" = Fotogalerija Windows Live
    "{E5DD4723-FE0B-436E-A815-DC23CF902A0B}" = Windows Live UX Platform Language Pack
    "{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
    "{E6617B44-D556-49AC-B2A3-01451E115043}" = Windows Live Remote Service Resources
    "{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
    "{E7FB0043-24A5-4B30-AED6-01B47B44CB67}" = Windows Live Remote Client Resources
    "{E83DC314-C926-4214-AD58-147691D6FE9F}" = Основные компоненты Windows Live
    "{E8524B28-3BBB-4763-AC83-0E83FE31C350}" = Windows Live Writer
    "{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
    "{E9D98402-21AB-4E9F-BF6B-47AF36EF7E97}" = Windows Live Writer Resources
    "{EA777812-4905-4C08-8F6E-13BDCC734609}" = Windows Live UX Platform Language Pack
    "{EAD033C2-EB20-A100-41FB-12371D707E83}" = Catalyst Control Center Localization All
    "{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
    "{EE171732-BEB4-4576-887D-CB62727F01CA}" = Acer Updater
    "{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
    "{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
    "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
    "{F0CCBE54-9132-44E9-82DF-CD364AD5C22D}" = Windows Live Remote Client Resources
    "{F0F5D89A-197C-495B-827E-3E98B811CD2E}" = Windows Live Photo Common
    "{F0F9505B-3ACF-4158-9311-D0285136AA00}" = Windows Live Essentials
    "{F4BEA6C1-AAC3-4810-AAEA-588E26E0F237}" = Windows Live UX Platform Language Pack
    "{F52C5BE7-3F57-464E-8A54-908402E43CE8}" = Windows Live Writer Resources
    "{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos
    "{F7E80BA7-A09D-4DD1-828B-C4A0274D4720}" = Windows Live Mesh
    "{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker
    "{F81DB83D-A016-45A6-A6A0-135B1E6939EF}" = Windows Live Remote Service Resources
    "{F9000000-0018-0000-0000-074957833700}" = ABBYY FineReader 9.0 Sprint
    "{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
    "{FA6CF94F-DACF-4FE7-959D-55C421B91B17}" = Windows Live Mail
    "{FB3D07AE-73D0-47A9-AC12-6F50BF8B6202}" = Windows Live Movie Maker
    "{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
    "{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}" = معرض صور Windows Live
    "{FCDE76CB-989D-4E32-9739-6A272D2B0ED7}" = Windows Live Mesh
    "{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
    "{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
    "{FEEF7F78-5876-438B-B554-C4CC426A4302}" = Windows Live Essentials
    "{FF105207-8423-4E13-B0B1-50753170B245}" = Windows Live Movie Maker
    "{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
    "{FF737490-5A2D-4269-9D82-97DB2F7C0B09}" = Windows Live Movie Maker
    "161D60ECC63E2342BC07C4D082170FB8420AE10A" = ENE USB Card Reader Driver
    "ABBYY FineReader 9.0 Sprint" = ABBYY FineReader 9.0 Sprint
    "Acer Screensaver" = Acer ScreenSaver
    "Acer Welcome Center" = Welcome Center
    "Adobe AIR" = Adobe AIR
    "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
    "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
    "CCleaner" = CCleaner
    "CNXT_AUDIO_HDA" = Conexant HD Audio
    "EPSON Scanner" = EPSON Scan
    "EPSON SX125 Series" = EPSON SX125 Series Printer Uninstall
    "EPSON SX125 Series Manual" = EPSON SX125 Series Handbuch
    "HyView" = HyView
    "Identity Card" = Identity Card
    "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Acer Crystal Eye Webcam
    "InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}" = MyWinLocker Suite
    "InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}" = newsXpresso
    "LManager" = Launch Manager
    "McAfee Security Scan" = McAfee Security Scan Plus
    "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
    "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA
    "Mozilla Firefox 7.0.1 (x86 fr)" = Mozilla Firefox 7.0.1 (x86 fr)
    "MSC" = McAfee Internet Security Suite
    "Office14.SingleImage" = Microsoft Office Famille et Étudiant 2010
    "Russ_Akt" = Russisch aktuell
    "Security Task Manager" = Security Task Manager 1.8d
    "SynTPDeinstKey" = Synaptics Pointing Device Driver
    "VLC media player" = VLC media player 1.1.11
    "WinGimp-2.0_is1" = GIMP 2.6.11
    "WinLiveSuite" = Windows Live Essentials
     
    ========== Last 10 Event Log Errors ==========
     
    [ Application Events ]
    Error - 02.10.2011 06:31:01 | Computer Name = Julie-PC | Source = ESENT | ID = 455
    Description = Windows (3876) Windows: L'Erreur -1811 s'est produite lors de l'ouverture
     du fichier journal C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0000E.log.
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 9000
    Description =
    Code:
    OTL Extras logfile created on: 01.01.2012 18:08:52 - Run 1
    OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Julie\Desktop
     Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000407 | Country: Allemagne | Language: DEU | Date Format: dd.MM.yyyy
     
    746,90 Mb Total Physical Memory | 70,97 Mb Available Physical Memory | 9,50% Memory free
    1,75 Gb Paging File | 0,47 Gb Available in Paging File | 27,07% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]
     
    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
    Drive C: | 219,79 Gb Total Space | 185,99 Gb Free Space | 84,62% Space Free | Partition Type: NTFS
     
    Computer Name: JULIE-PC | User Name: Julie | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
     
    ========== Extra Registry (SafeList) ==========
     
     
    ========== File Associations ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
    .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
    .html [@ = ChromeHTML] -- Reg Error: Key error. File not found
     
    [HKEY_USERS\S-1-5-21-2179131892-736547172-3970799083-1000\SOFTWARE\Classes\<extension>]
    .html [@ = ChromeHTML] -- Reg Error: Key error. File not found
     
    ========== Shell Spawning ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
    htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
    htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
    http [open] -- Reg Error: Key error.
    https [open] -- Reg Error: Key error.
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
     
    ========== Security Center Settings ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "cval" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
    "VistaSp1" = Reg Error: Unknown registry data type -- File not found
    "AntiVirusOverride" = 0
    "AntiSpywareOverride" = 0
    "FirewallOverride" = 0
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
     
    ========== Firewall Settings ==========
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0
     
    ========== Authorized Applications List ==========
     
     
    ========== HKEY_LOCAL_MACHINE Uninstall List ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{00884F14-05BD-4D8E-90E5-1ABF78948CA4}" = Windows Live Mesh
    "{01F1591E-6496-FE89-75F0-51D9992A381C}" = CCC Help Russian
    "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Acer Crystal Eye Webcam
    "{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
    "{03026BBB-B089-478C-2880-D8EA8563DB3E}" = CCC Help Chinese Standard
    "{039480EE-6933-4845-88B8-77FD0C3D059D}" = Windows Live Mesh
    "{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}" = Epson Event Manager
    "{03CB6116-BE2E-D1E6-9B5D-68EA24C3E561}" = CCC Help Swedish
    "{04182C2A-1DAD-C2AF-ACEE-200758F8FAE3}" = ccc-core-static
    "{047F790A-7A2A-4B6A-AD02-38092BA63DAC}" = Acer VCM
    "{0557BBDA-69D3-4FA4-A93C-A5300F7034B4}" = Windows Live Writer
    "{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
    "{05E47624-97C4-4B22-83C8-D4E30EC3EF02}" = Windows Live Remote Client Resources
    "{065241D0-A178-4F24-8A09-691761A8957B}" = Windows Live Remote Service Resources
    "{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common
    "{06B05153-97E4-427E-B1A8-E098F6C5E52F}" = Windows Live Essentials
    "{073F306D-9851-4969-B828-7B6444D07D55}" = Windows Live Photo Common
    "{0891B708-EF3F-4D7E-9724-265245F46276}" = Windows Live Remote Service Resources
    "{09922FFE-D153-44AE-8B60-EA3CB8088F93}" = Windows Live UX Platform Language Pack
    "{0A1651F1-7E0F-4613-93FE-967F5BC3C1B7}" = Windows Live Remote Service Resources
    "{0A4C4B29-5A9D-4910-A13C-B920D5758744}" = بريد Windows Live
    "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
    "{0C1931EB-8339-4837-8BEC-75029BF42734}" = Windows Live UX Platform Language Pack
    "{0C975FCC-A06E-4CB6-8F54-A9B52CF37781}" = Windows Liven sähköposti
    "{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
    "{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}" = Galeria de Fotografias do Windows Live
    "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack
    "{10186F1A-6A14-43DF-A404-F0105D09BB07}" = Windows Live Mail
    "{110668B7-54C6-47C9-BAC4-1CE77F156AF5}" = Windows Live Mesh
    "{11417707-1F72-4279-95A3-01E0B898BBF5}" = Windows Live Mesh
    "{11778DA1-0495-4ED9-972F-F9E0B0367CD5}" = Windows Live Writer
    "{1203DC60-D9BD-44F9-B372-2B8F227E6094}" = Windows Live Temel Parçalar
    "{120C160F-F53D-4A15-A873-E79BF5B98B48}" = Windows Live Photo Common
    "{128133D3-037A-4C62-B1B7-55666A10587A}" = Windows Live UX Platform Language Pack
    "{133D9D67-D475-4407-AC3C-D558087B2453}" = Windows Live Movie Maker
    "{141B1D71-D320-0AB2-AAFB-3132F27A004D}" = Catalyst Control Center InstallProxy
    "{143DB9C9-3F0D-4DC7-A57B-A7E4F26FA12E}" = Windows Live Remote Client Resources
    "{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
    "{168E7302-890A-4138-9109-A225ACAF7AD1}" = Windows Live Photo Common
    "{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources
    "{17835B63-8308-427F-8CF5-D76E0D5FE457}" = Windows Live Essentials
    "{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}" = MyWinLocker Suite
    "{17F99FCE-8F03-4439-860A-25C5A5434E18}" = Windows Live Essentials
    "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
    "{198EA334-8A3F-4CB2-9D61-6C10B8168A6F}" = Windows Live Writer
    "{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
    "{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
    "{1A72337E-D126-4BAF-AC89-E6122DB71866}" = Windows Liven valokuvavalikoima
    "{1A82AE99-84D3-486D-BAD6-675982603E14}" = Windows Live Writer
    "{1D6C2068-807F-4B76-A0C2-62ED05656593}" = Windows Live Writer
    "{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
    "{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
    "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
    "{1FC83EAE-74C8-4C72-8400-2D8E40A017DE}" = Windows Live Writer
    "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
    "{201B5096-AF6E-423E-B987-023E040D9B42}" = Windows Live Remote Service Resources
    "{20381A8A-808E-4A53-B6CD-AD2B85E16365}" = Windows Live UX Platform Language Pack
    "{220C7F8C-929D-4F71-9DC7-F7A6823B38E4}" = Windows Live UX Platform Language Pack
    "{226F0D93-76DE-4F1C-B14D-DE10443ADB60}" = Windows Live Movie Maker
    "{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
    "{244C5A67-39DC-4C6C-BF1B-BCC9D342A4C4}" = Windows Live Remote Client Resources
    "{249EE21B-8EDD-4F36-8A23-E580E9DBE80A}" = Windows Live Mail
    "{24DF33E0-F924-4D0D-9B96-11F28F0D602D}" = Windows Live UX Platform Language Pack
    "{2511AAD7-82DF-4B97-B0B3-E1B933317010}" = Windows Live Writer Resources
    "{25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}" = Windows Live Mail
    "{25CD4B12-8CC5-433E-B723-C9CB41FA8C5A}" = Windows Live Writer
    "{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 29
    "{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources
    "{2852BC06-B850-4518-97E6-CD136FE75683}" = Windows Live Remote Client Resources
    "{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
    "{28B9D2D8-4304-483F-AD71-51890A063A74}" = Windows Live Photo Common
    "{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
    "{297F0B9D-CB90-1E15-084B-F433F37B5EF8}" = CCC Help Thai
    "{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
    "{2A19BE3D-21F6-8BC4-B679-03E818814AA4}" = ATI Catalyst Install Manager
    "{2B3EA5DA-D040-48FB-813F-1CF8C0123698}" = Windows Live Remote Client Resources
    "{2BA5FD10-653F-4CAF-9CCD-F685082A1DC1}" = Windows Live Writer
    "{2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}" = Windows Live UX Platform Language Pack
    "{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
    "{2D3E034E-F76B-410A-A169-55755D2637BB}" = Windows Live Mesh
    "{2E50E321-4747-4EB5-9ECB-BBC6C3AC0F31}" = Windows Live Writer Resources
    "{30E82CD5-6E97-4381-86EB-548202A6D5B7}" = Windows Live Remote Client Resources
    "{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
    "{3125D9DE-8D7A-4987-95F3-8A42389833D8}" = Windows Live Writer Resources
    "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
    "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
    "{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
    "{370F888E-42A7-4911-9E34-7D74632E17EB}" = Windows Live Photo Common
    "{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
    "{39F15B50-A977-4CA6-B1C3-6A8724CDA025}" = MyWinLocker 4
    "{39F58DDB-B2B8-4B86-AF20-4706A80EB30D}" = Epson Easy Photo Print 2
    "{39F95B0B-A0B7-4FA7-BB6C-197DA2546468}" = Windows Live Mesh
    "{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
    "{3B72C1E0-26A1-40F6-8516-D50C651DFB3C}" = Windows Live Essentials
    "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
    "{3BC3B1A5-30E3-4DDB-BE08-E7262B838B5F}" = Windows Live Remote Client Resources
    "{3BFB2388-64EE-4AAA-9235-5FE725FED6DE}" = Windows Live Remote Service Resources
    "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
    "{3C87F2A9-639E-33C7-AE09-FF86B6FAFEF6}" = CCC Help Greek
    "{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer ePower Management
    "{3F4143A1-9C21-4011-8679-3BC1014C6886}" = Windows Live Mesh
    "{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
    "{410DF0AA-882D-450D-9E1B-F5397ACFFA80}" = Windows Live Essentials
    "{41B72CAF-036B-4E0A-8D22-F5DF7C970434}" = Windows Live Remote Client Resources
    "{41E4FA4B-9376-4C32-AA46-65FCC0087CD5}" = Windows Live Remote Service Resources
    "{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
    "{429DF1A0-3610-4E9E-8ACE-3C8AC1BA8FCA}" = Windows Live Photo Gallery
    "{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials
    "{4444F27C-B1A8-464E-9486-4C37BAB39A09}" = Фотогалерия на Windows Live
    "{448702D4-83DD-4EFC-B09B-94AD6CA0D978}" = Windows Live Remote Service Resources
    "{454F5782-A4C3-480E-A629-D435795DEFD8}" = Windows Live Remote Client Resources
    "{458F399F-62AC-4747-99F5-499BBF073D29}" = Windows Live Writer Resources
    "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
    "{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources
    "{4664ED39-C80A-48F7-93CD-EBDCAFAB6CC5}" = Windows Live Writer Resources
    "{46872828-6453-4138-BE1C-CE35FBF67978}" = Windows Live Mesh
    "{4736B0ED-F6A1-48EC-A1B7-C053027648F1}" = Galeria fotogràfica del Windows Live
    "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
    "{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
    "{48F597DD-D397-4CFA-91A0-4C033A0113BD}" = Windows Live Mail
    "{49EF2D49-3171-E160-13FD-F7E8C51E197E}" = CCC Help Polish
    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
    "{4A04DB63-8F81-4EF4-9D09-61A2057EF419}" = Windows Live Essentials
    "{4B1EDAFC-B0EB-465F-886C-24FAC1BED2AC}" = Windows Live Remote Client Resources
    "{4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}" = Windows Live Writer
    "{4C378B16-46B7-4DA1-A2CE-2EE676F74680}" = Windows Live UX Platform Language Pack
    "{4D141929-141B-4605-95D6-2B8650C1C6DA}" = Windows Live UX Platform Language Pack
    "{4D7BAC8A-51B8-4243-8567-1415C4272D13}" = Windows Live Writer
    "{4D83F339-5A5C-4B21-8FD3-5D407B981E72}" = Windows Live Photo Common
    "{4F05AC7F-63EE-DB64-C863-FA3CAD346893}" = CCC Help Hungarian
    "{5008BC55-FD3D-4A32-A1B7-610E18F4D220}" = Windows Live Remote Service Resources
    "{506FC723-8E6C-4417-9CFF-351F99130425}" = Windows Live UX Platform Language Pack
    "{50732772-D6E1-9C37-C056-73CEB6FD32DE}" = CCC Help Spanish
    "{50F74F5A-EF47-CEB5-C887-96E30144208B}" = CCC Help Norwegian
    "{523DF2BB-3A85-4047-9898-29DC8AEB7E69}" = Windows Live UX Platform Language Pack
    "{5275D81E-83AD-4DE4-BC2B-6E6BA3A33244}" = Windows Live Writer Resources
    "{5495E9A4-501A-4D4C-87C9-E80916CA9478}" = Windows Live UX Platform Language Pack
    "{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
    "{5C2F5C1B-9732-4F81-8FBF-6711627DC508}" = Windows Live Fotogalleri
    "{5C8BC258-A629-4DF2-97D0-E106C2A9B1BD}" = Windows Live Remote Client Resources
    "{5CF5B1A5-CBC3-42F0-8533-5A5090665862}" = Windows Live Mesh
    "{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
    "{5D2E7BD7-4B6F-4086-BA8A-E88484750624}" = Windows Live Writer Resources
    "{5DA7D148-D2D2-4C67-8444-2F0F9BD88A06}" = Windows Live Writer
    "{5E627606-53B9-42D1-97E1-D03F6229E248}" = Windows Live UX Platform Language Pack
    "{5FFA2820-C030-F2A5-3BFB-7EB2ABAB90F1}" = Catalyst Control Center Graphics Previews Common
    "{60C3C026-DB53-4DAB-8B97-7C1241F9A847}" = Windows Live Movie Maker
    "{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}" = newsXpresso
    "{61A5DE19-BE38-45AF-A9BC-73E49703315E}" = Windows Live Remote Service Resources
    "{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
    "{6255D9FC-427F-4867-84DB-164DBEA0661F}" = Windows Live Remote Client Resources
    "{625D45F0-5DCB-48BF-8770-C240A84DAAEB}" = Windows Live Mesh
    "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
    "{63CF7D0C-B6E7-4EE9-8253-816B613CC437}" = Windows Live Mail
    "{640798A0-A4FB-4C52-AC72-755134767F1E}" = Windows Live Movie Maker
    "{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live
    "{644063FA-ABA3-42AC-A8AC-3EDC0706018B}" = Windows Live Mesh
    "{6491AB99-A11E-41FD-A5E7-32DE8A097B8E}" = Windows Live Essentials
    "{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
    "{66B0B400-22AB-47E6-8673-38A5D37F6331}" = Windows Live Remote Client Resources
    "{677AAD91-1790-4FC5-B285-0E6A9D65F7DC}" = Windows Live Mail
    "{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
    "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
    "{69C9C672-400A-43A0-B2DE-9DB38C371282}" = Windows Live Writer
    "{69CAC24D-B1DC-4B97-A1BE-FE21843108FE}" = Windows Live Writer Resources
    "{6A4ABCDC-0A49-4132-944E-01FBCCB3465C}" = Windows Live UX Platform Language Pack
    "{6ABE832B-A5C7-44C1-B697-3E123B7B4D5B}" = Windows Live Mesh
    "{6B556C37-8919-4991-AC34-93D018B9EA49}" = Windows Live Photo Common
    "{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
    "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
    "{6EF2BE2C-3121-48B7-B7A6-C56046B3A588}" = Windows Live Movie Maker
    "{6F37D92B-41AA-44B7-80D2-457ABDE11896}" = Windows Live Photo Common
    "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
    "{71527C7C-5289-4CB2-88C9-23344C0FF6C1}" = Windows Live Movie Maker
    "{71A81378-79D5-40CC-9BDC-380642D1A87F}" = Windows Live Writer
    "{71C95134-F6A9-45E7-B7B3-07CA6012BF2A}" = Windows Live Mesh
    "{7218C0EB-9A81-A4BA-6303-5D0757251E37}" = WMV9/VC-1 Video Playback
    "{7272F232-A7E0-4B2B-A5D2-71B7C5E2379C}" = Windows Live Fotótár
    "{7327080F-6673-421F-BBD9-B618F357EEB3}" = Windows Live UX Platform Language Pack
    "{734104DE-C2BF-412F-BB97-FCCE1EC94229}" = Windows Live Writer Resources
    "{7373E17D-18E0-44A7-AC3A-6A3BFB85D3B3}" = Windows Live Movie Maker
    "{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
    "{7465A996-0FCA-4D2D-A52C-F833B0829B5B}" = Windows Live Movie Maker
    "{7496FD31-E5CB-4AE4-82D3-31099558BF6A}" = Windows Live Mesh
    "{74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}" = Windows Live UX Platform Language Pack
    "{7612E28A-C4DB-4259-AA91-CB02B1BCF623}" = Windows Live Remote Service Resources
    "{76362863-572A-0592-E2B2-B1CB7CC8E85D}" = CCC Help Portuguese
    "{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
    "{77F69CA1-E53D-4D77-8BA3-FA07606CC851}" = Фотоальбом Windows Live
    "{7846B719-862C-468A-9FD0-4769D2590535}" = Windows Live Remote Client Resources
    "{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
    "{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
    "{7962DFC7-BBD8-4FA1-B510-46A993C2BF94}" = Windows Live Remote Client Resources
    "{7A143876-9658-4A58-82E7-B5F02D942957}" = Windows Live Remote Client Resources
    "{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live
    "{7ADFA72D-2A9F-4DEC-80A5-2FAA27E23F0F}" = Windows Live Photo Common
    "{7AF8E500-B349-4A77-8265-9854E9A47925}" = Windows Live Movie Maker
    "{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}" = Pošta Windows Live
    "{7BC00AC5-47B4-C1D0-07E2-F50D79565226}" = CCC Help Danish
    "{7C2A3479-A5A0-412B-B0E6-6D64CBB9B251}" = Windows Live Photo Common
    "{7CB529B2-6C74-4878-9C3F-C29C3C3BBDC6}" = Windows Live Writer Resources
    "{7D0DE76C-874E-4BDE-A204-F4240160693E}" = Windows Live Photo Common
    "{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
    "{7D926AD2-16D6-42C2-8CA1-AB09E96040BA}" = Windows Live Writer Resources
    "{7D99B933-E29C-4599-92F0-DAED2AF041E3}" = Windows Live Essentials
    "{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
    "{7E90B133-FF47-48BB-91B8-36FC5A548FE9}" = Windows Live Writer Resources
    "{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management
    "{7FF11E53-C002-4F40-8D68-6BE751E5DD62}" = Windows Live Writer Resources
    "{804DE397-F82C-4867-9085-E0AA539A3294}" = Windows Live Writer
    "{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
    "{8190F7B6-BFCE-4F60-8670-59F1709BFF9F}" = Catalyst Control Center - Branding
    "{827D3E4A-0186-48B7-9801-7D1E9DD40C07}" = Windows Live Essentials
    "{82803FF3-563F-414F-A403-8D4C167D4120}" = Windows Live Mail
    "{82B5618C-75E8-52ED-9F03-44E26AC32611}" = CCC Help Japanese
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110109903}" = Flip Words
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}" = Galapago
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112531267}" = Chicken Invaders 3
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112623650}" = Belles Beauty Boutique
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}" = Dream Day First Home
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-116672750}" = World of Goo
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117932650}" = Sprill and Ritchie
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-118399487}" = Farm Frenzy 3 Ice Age
    "{82EE333F-45A9-4585-A5D9-31FE16B7FB25}" = Windows Live Remote Service Resources
    "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
    "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
    "{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
    "{84267681-BF16-40B6-9564-27BC57D7D71C}" = Windows Live Photo Common
    "{845E0BCB-8C8D-4FAB-8588-AD5FFD156C95}" = Windows Live Remote Service Resources
    "{84A411F9-40A5-4CDA-BF46-E09FBB2BC313}" = Windows Live Essentials
    "{84D3CB13-C7EE-4A29-817E-D82697320BF5}" = Windows Live Remote Client Resources
    "{85373DA7-834E-4850-8AF5-1D99F7526857}" = Windows Live Photo Common
    "{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
    "{861B1145-7762-4794-B40C-3FF0A389DFE6}" = Windows Live Photo Gallery
    "{86F444A5-C9B9-41DC-AF28-B5E46F5497C7}" = Windows Live Argazki Galeria
    "{885F1BCD-C344-4758-85BD-09640CF449A5}" = Windows Live Photo Gallery
    "{8909CFA8-97BF-4077-AC0F-6925243FFE08}" = Windows Liven asennustyökalu
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
    "{8CF5D47D-27B7-49D6-A14F-10550B92749D}" = Windows Live UX Platform Language Pack
    "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
    "{8DF7FD9F-1248-0DFD-18A7-C192909FEF21}" = CCC Help French
    "{8E285C75-9BE2-4349-972B-DECDDF472656}" = Windows Live Writer Resources
    "{90140000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2010
    "{90140000-0015-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2010
    "{90140000-0016-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2010
    "{90140000-0018-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2010
    "{90140000-0019-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2010
    "{90140000-001A-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2010
    "{90140000-001B-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2010
    "{90140000-001F-0401-0000-0000000FF1CE}_Office14.SingleImage_{1A43C155-3DDA-43C9-92C5-0E7D0B2B156D}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
    "{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
    "{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
    "{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2010
    "{90140000-001F-0413-0000-0000000FF1CE}_Office14.SingleImage_{5072FEA2-862C-4BF0-9654-CB0DCBE2BE28}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
    "{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2010
    "{90140000-002C-040C-0000-0000000FF1CE}_Office14.SingleImage_{C8E4AA87-3E5A-4C70-8CB7-43FE25C99B74}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
    "{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2010
    "{90140000-006E-040C-0000-0000000FF1CE}_Office14.SingleImage_{7C5C7E8C-F6D2-43AC-93A4-89E4FF7367E6}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{90140000-00A1-040C-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (French) 2010
    "{90140000-00A1-040C-0000-0000000FF1CE}_Office14.SingleImage_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}" = Microsoft Office 2010 Service Pack 1 (SP1)
    "{924B4D82-1B97-48EB-8F1E-55C4353C22DB}" = Windows Live Mail
    "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
    "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
    "{93C4B7D5-4E00-491F-BA3E-25B7B63EE7F6}" = Windows Live Mail
    "{93C6647F-AFE0-4CC2-8809-28A0B320D11B}" = Windows Live Remote Service Resources
    "{93E464B3-D075-4989-87FD-A828B5C308B1}" = Windows Live Writer Resources
    "{945A6A95-5209-70AE-C6FC-6FA468DF00B8}" = CCC Help Finnish
    "{94D643DE-8288-BC80-8BD8-8D04F30169D7}" = CCC Help Italian
    "{95054BE0-C381-3334-CED1-B706ADE954BD}" = CCC Help Dutch
    "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
    "{97124033-1253-4474-8B25-1AB314A920E6}" = Windows Live Remote Service Resources
    "{97F77D62-5110-4FA3-A2D3-410B92D31199}" = Windows Live Fotogaléria
    "{99BE7F5D-AB52-4404-9E03-4240FFAA7DE9}" = Windows Live Mesh
    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    "{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
    "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
    "{9DA3F03B-2CEE-4344-838E-117861E61FAF}" = Windows Live Mail
    "{9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}" = Windows Live Movie Maker
    "{9E2C5B0E-7A2D-4767-A9B2-77469FB1873A}" = Windows Live Mesh
    "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
    "{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
    "{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
    "{A101F637-2E56-42C0-8E08-F1E9086BFAF3}" = Windows Live Movie Maker
    "{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker
    "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
    "{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
    "{A4C16B19-10AA-4990-AA87-D14F653E3345}" = Windows Live Remote Client Resources
    "{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
    "{A650C627-8278-F362-DE10-772D42FEC8EC}" = ccc-utility
    "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
    "{A9ABC0A6-DC01-4102-BEC9-86974A73B214}" = Windows Live Remote Client Resources
    "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
    "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
    "{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
    "{AB0B2113-5B96-4B95-8AD1-44613384911F}" = Windows Live Mesh
    "{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
    "{AB93C51F-71F9-4A28-8134-FE1B5B9373E9}" = Windows Live Remote Service Resources
    "{ABD534B7-E951-470E-92C2-CD5AF1735726}" = Windows Live Essentials
    "{ABE2F2AA-7ADC-4717-9573-BF3F83C696AC}" = Windows Live Mail
    "{AC0628FF-532F-4800-91EC-40903B04682F}" = Windows Live Remote Service Resources
    "{AC259A12-6CD9-486D-A97A-B619EB46225A}" = Windows Live Remote Service Resources
    "{AC76BA86-7AD7-1036-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Français
    "{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
    "{AD001A69-88CC-4766-B2DB-3C1DFAB9AC72}" = Windows Live Mesh
    "{ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}" = Windows Live Mail
    "{ADFE4AED-7F8E-4658-8D6E-742B15B9F120}" = Windows Live Photo Common
    "{AF01B90A-D25C-4F60-AECD-6EEDF509DC11}" = Windows Live Mesh
    "{AF1DE214-DD95-0EDE-F573-3A219AE9850D}" = CCC Help Czech
    "{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
    "{B0AD205F-60D0-4084-AFB8-34D9A706D9A8}" = Windows Live Essentials
    "{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
    "{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
    "{B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}" = Windows Live Photo Common
    "{B2D55EB8-32C5-4B43-9006-9E97DECBA178}" = Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)
    "{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common
    "{B3BE54A4-8DFE-4593-8E66-56AB7133B812}" = Windows Live Writer
    "{B512307E-543D-457E-B759-75E0D5B0BCDF}" = Windows Live Remote Client Resources
    "{B618C3BF-5142-4630-81DD-F96864F97C7E}" = Windows Live Essentials
    "{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}" = Почта Windows Live
    "{B6F55C3E-30EE-4D25-8BAD-CEE4BF8C78EB}" = Windows Live Remote Client Resources
    "{B7B67AA5-12DA-4F01-918D-B1BF66779D8A}" = Windows Live Writer Resources
    "{BA8D4CEF-D23D-44AB-8A89-66E602253791}" = Windows Live Remote Service Resources
    "{BD4EBDB5-EB14-4120-BB04-BE0A26C7FB3E}" = Windows Live Photo Common
    "{BD695C2F-3EA0-4DA4-92D5-154072468721}" = Windows Live Fotoğraf Galerisi
    "{BF022D76-9F72-4203-B8FA-6522DC66DFDA}" = Windows Live Movie Maker
    "{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh
    "{C00C2A91-6CB3-483F-80B3-2958E29468F1}" = Συλλογή φωτογραφιών του Windows Live
    "{C01FCACE-CC3D-49A2-ADC2-583A49857C58}" = Windows Live Essentials
    "{C08D5964-C42F-48EE-A893-2396F9562A7C}" = Windows Live Mesh
    "{C1015024-0BF1-4B51-8A06-C28953687DA7}" = Windows Live Remote Service Resources
    "{C1C9D199-B4DD-4895-92DD-9A726A2FE341}" = Windows Live Writer
    "{C2695E83-CF1D-43D1-84FE-B3BEC561012A}" = Shredder
    "{C29FC15D-E84B-4EEC-8505-4DED94414C59}" = Windows Live Writer Resources
    "{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
    "{C30628D8-D3A0-4F23-90F0-F145808087B6}" = Windows Live Remote Client Resources
    "{C411942C-C26B-4450-8B9A-173DCC22AEC6}" = Windows Live Remote Service Resources
    "{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
    "{C4E7704D-5AFB-44CA-B8BA-F16C8FA46D5F}" = Windows Live Remote Service Resources
    "{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
    "{C8421D85-CA0E-4E93-A9A9-B826C4FB88EA}" = Windows Live Mail
    "{C84CCA99-1E54-C443-0A6C-AB32954EA785}" = CCC Help Korean
    "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
    "{C8FB74E8-AD41-01F1-4265-11F4F9FA02F5}" = CCC Help Chinese Traditional
    "{C97623E2-0614-4845-B199-8E8BEC8E131C}_is1" = Acer GameZone Console
    "{C9B4E19B-FBC2-51FF-C390-B251D2AA7E57}" = CCC Help English
    "{CB240A71-3AFC-4429-B4D4-F965B8C4267E}" = Windows Live Remote Service Resources
    "{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live
    "{CB66242D-12B1-4494-82D2-6F53A7E024A3}" = Galerie foto Windows Live
    "{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
    "{CD442136-9115-4236-9C14-278F6A9DCB3F}" = Windows Live Movie Maker
    "{CD6CB7F1-1B8E-424A-9B81-F8D2F03958EC}" = Windows Live Remote Client Resources
    "{CD7CB1E6-267A-408F-877D-B532AD2C882E}" = Windows Live Photo Common
    "{CDC39BF2-9697-4959-B893-A2EE05EF6ACB}" = Windows Live Writer
    "{CE929F09-3853-4180-BD90-30764BFF7136}" = גלריית התמונות של Windows Live
    "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
    "{CF671BFE-6BA3-44E7-98C1-500D9C51D947}" = Windows Live Photo Gallery
    "{D07B1FDA-876B-4914-9E9A-309732B6D44F}" = Windows Live Mail
    "{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack
    "{D31169F2-CD71-4337-B783-3E53F29F4CAD}" = Windows Live Mail
    "{D378BEA1-912E-4827-B9DB-D3B2C3D0BD4A}" = Windows Live Remote Service Resources
    "{D3CAE2CA-BE71-4CA4-9EB9-46E1C82E778B}" = Windows Live Remote Service Resources
    "{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
    "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
    "{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
    "{D6CBB3B2-F510-483D-AE0D-1CF3F43CF1EE}" = Windows Live Writer Resources
    "{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
    "{DA29F644-2420-4448-8128-1331BE588999}" = Windows Live Writer
    "{DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}" = Windows Live Movie Maker
    "{DB1208F4-B2FE-44E9-BFE6-8824DBD7891B}" = Windows Live Movie Maker
    "{DBAA2B17-D596-4195-A169-BA2166B0D69B}" = Windows Live Mail
    "{DCAB6BA7-6533-44BF-9235-E5BF33B7431C}" = Windows Live Writer
    "{DDC1E1BD-7615-4186-89E1-F5F43F9B6491}" = Windows Live Movie Maker
    "{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
    "{DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}" = Windows Live Writer
    "{DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}" = Windows Live Writer Resources
    "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
    "{DEDF8BAB-98D7-4CFA-9C42-27431EC4BD1F}" = Windows Live Remote Service Resources
    "{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
    "{DF71ABBB-B834-41C0-BB58-80B0545D754C}" = Windows Live UX Platform Language Pack
    "{DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}" = Windows Live Remote Client Resources
    "{E062BB1F-6F04-4543-3FB4-58489D9552E0}" = CCC Help German
    "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
    "{E1629C45-9CEF-498E-83CD-D6A09CADA176}" = Windows Live Remote Client Resources
    "{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
    "{E5377D46-83C5-445A-A1F1-830336B42A10}" = Windows Live Galerija fotografija
    "{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer
    "{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}" = Fotogalerija Windows Live
    "{E5DD4723-FE0B-436E-A815-DC23CF902A0B}" = Windows Live UX Platform Language Pack
    "{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
    "{E6617B44-D556-49AC-B2A3-01451E115043}" = Windows Live Remote Service Resources
    "{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
    "{E7FB0043-24A5-4B30-AED6-01B47B44CB67}" = Windows Live Remote Client Resources
    "{E83DC314-C926-4214-AD58-147691D6FE9F}" = Основные компоненты Windows Live
    "{E8524B28-3BBB-4763-AC83-0E83FE31C350}" = Windows Live Writer
    "{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
    "{E9D98402-21AB-4E9F-BF6B-47AF36EF7E97}" = Windows Live Writer Resources
    "{EA777812-4905-4C08-8F6E-13BDCC734609}" = Windows Live UX Platform Language Pack
    "{EAD033C2-EB20-A100-41FB-12371D707E83}" = Catalyst Control Center Localization All
    "{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
    "{EE171732-BEB4-4576-887D-CB62727F01CA}" = Acer Updater
    "{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
    "{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
    "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
    "{F0CCBE54-9132-44E9-82DF-CD364AD5C22D}" = Windows Live Remote Client Resources
    "{F0F5D89A-197C-495B-827E-3E98B811CD2E}" = Windows Live Photo Common
    "{F0F9505B-3ACF-4158-9311-D0285136AA00}" = Windows Live Essentials
    "{F4BEA6C1-AAC3-4810-AAEA-588E26E0F237}" = Windows Live UX Platform Language Pack
    "{F52C5BE7-3F57-464E-8A54-908402E43CE8}" = Windows Live Writer Resources
    "{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos
    "{F7E80BA7-A09D-4DD1-828B-C4A0274D4720}" = Windows Live Mesh
    "{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker
    "{F81DB83D-A016-45A6-A6A0-135B1E6939EF}" = Windows Live Remote Service Resources
    "{F9000000-0018-0000-0000-074957833700}" = ABBYY FineReader 9.0 Sprint
    "{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
    "{FA6CF94F-DACF-4FE7-959D-55C421B91B17}" = Windows Live Mail
    "{FB3D07AE-73D0-47A9-AC12-6F50BF8B6202}" = Windows Live Movie Maker
    "{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
    "{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}" = معرض صور Windows Live
    "{FCDE76CB-989D-4E32-9739-6A272D2B0ED7}" = Windows Live Mesh
    "{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
    "{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
    "{FEEF7F78-5876-438B-B554-C4CC426A4302}" = Windows Live Essentials
    "{FF105207-8423-4E13-B0B1-50753170B245}" = Windows Live Movie Maker
    "{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
    "{FF737490-5A2D-4269-9D82-97DB2F7C0B09}" = Windows Live Movie Maker
    "161D60ECC63E2342BC07C4D082170FB8420AE10A" = ENE USB Card Reader Driver
    "ABBYY FineReader 9.0 Sprint" = ABBYY FineReader 9.0 Sprint
    "Acer Screensaver" = Acer ScreenSaver
    "Acer Welcome Center" = Welcome Center
    "Adobe AIR" = Adobe AIR
    "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
    "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
    "CCleaner" = CCleaner
    "CNXT_AUDIO_HDA" = Conexant HD Audio
    "EPSON Scanner" = EPSON Scan
    "EPSON SX125 Series" = EPSON SX125 Series Printer Uninstall
    "EPSON SX125 Series Manual" = EPSON SX125 Series Handbuch
    "HyView" = HyView
    "Identity Card" = Identity Card
    "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Acer Crystal Eye Webcam
    "InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}" = MyWinLocker Suite
    "InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}" = newsXpresso
    "LManager" = Launch Manager
    "McAfee Security Scan" = McAfee Security Scan Plus
    "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
    "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA
    "Mozilla Firefox 7.0.1 (x86 fr)" = Mozilla Firefox 7.0.1 (x86 fr)
    "MSC" = McAfee Internet Security Suite
    "Office14.SingleImage" = Microsoft Office Famille et Étudiant 2010
    "Russ_Akt" = Russisch aktuell
    "Security Task Manager" = Security Task Manager 1.8d
    "SynTPDeinstKey" = Synaptics Pointing Device Driver
    "VLC media player" = VLC media player 1.1.11
    "WinGimp-2.0_is1" = GIMP 2.6.11
    "WinLiveSuite" = Windows Live Essentials
     
    ========== Last 10 Event Log Errors ==========
     
    [ Application Events ]
    Error - 02.10.2011 06:31:01 | Computer Name = Julie-PC | Source = ESENT | ID = 455
    Description = Windows (3876) Windows: L'Erreur -1811 s'est produite lors de l'ouverture
     du fichier journal C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0000E.log.
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 9000
    Description = 
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 7040
    Description = 
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 7042
    Description = 
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 9002
    Description = 
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 3029
    Description = 
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 3029
    Description = 
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 3028
    Description = 
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 3058
    Description = 
     
    Error - 02.10.2011 06:31:02 | Computer Name = Julie-PC | Source = Windows Search Service | ID = 7010
    Description = 
     
    [ System Events ]
    Error - 30.12.2011 22:14:47 | Computer Name = Julie-PC | Source = Service Control Manager | ID = 7031
    Description = Le service McAfee Network Agent s’est terminé de manière inattendue.
     Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 
    60000 millisecondes : Redémarrer le service.
     
    Error - 30.12.2011 22:14:47 | Computer Name = Julie-PC | Source = Service Control Manager | ID = 7031
    Description = Le service McAfee Proxy Service s’est terminé de manière inattendue.
     Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 
    60000 millisecondes : Redémarrer le service.
     
    Error - 30.12.2011 22:14:47 | Computer Name = Julie-PC | Source = Service Control Manager | ID = 7031
    Description = Le service McAfee Anti-Spam Service s’est terminé de manière inattendue.
     Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 
    60000 millisecondes : Redémarrer le service.
     
    Error - 31.12.2011 14:20:17 | Computer Name = Julie-PC | Source = EventLog | ID = 6008
    Description = L’arrêt système précédant à 19:19:03 le ?31/?12/?2011 n’était pas 
    prévu.
     
    Error - 31.12.2011 14:20:27 | Computer Name = Julie-PC | Source = Service Control Manager | ID = 7026
    Description = Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se
     charger :   cdrom
     
    Error - 01.01.2012 02:51:11 | Computer Name = Julie-PC | Source = DCOM | ID = 10010
    Description = 
     
    Error - 01.01.2012 11:52:12 | Computer Name = Julie-PC | Source = EventLog | ID = 6008
    Description = L’arrêt système précédant à 16:50:39 le ?01/?01/?2012 n’était pas 
    prévu.
     
    Error - 01.01.2012 11:52:40 | Computer Name = Julie-PC | Source = Service Control Manager | ID = 7026
    Description = Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se
     charger :   cdrom
     
    Error - 01.01.2012 12:12:33 | Computer Name = Julie-PC | Source = EventLog | ID = 6008
    Description = L’arrêt système précédant à 17:10:52 le ?01/?01/?2012 n’était pas 
    prévu.
     
    Error - 01.01.2012 12:13:06 | Computer Name = Julie-PC | Source = Service Control Manager | ID = 7026
    Description = Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se
     charger :   cdrom
     
     
    < End of report >
    Das Rootkitprogramm funktioniert nicht, es stuerzt immer ab.
    Hier die HJT Scanlist:
    Code:
    º                                    º 
                                        hjtscanlist v2.0              
                            º                                    º 
                            $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
    
    Microsoft Windows [version 6.1.7601]
     
     
    C:
    
           C:\pagefile.sys ---------    
      01.01.2012 21:15     C:\Windows --------- 32768   
           C:\hiberfil.sys ---------    
      01.01.2012 21:04     C:\Program Files --------- 24576   
      01.01.2012 21:02     C:\System Volume Information --------- 20480   
      01.01.2012 16:51     C:\ProgramData --------- 8192   
      01.01.2012 01:29     C:\user.js --------- 447   
      06.12.2011 17:22     C:\ScriptFF.dll --------- 28760   
      26.08.2011 09:41     C:\MSOCache --------- 0   
      24.08.2011 16:41     C:\$Recycle.Bin --------- 0   
      24.08.2011 16:40     C:\OEM --------- 0   
      24.08.2011 16:37     C:\Users --------- 4096   
      24.08.2011 16:37     C:\Recovery --------- 0   
      26.05.2011 18:12     C:\book --------- 0   
      07.04.2011 11:28     C:\BOOTSECT.BAK --------- 8192   
      14.07.2009 05:53     C:\Documents and Settings --------- 0   
      14.07.2009 03:37     C:\PerfLogs --------- 0   
      10.06.2009 22:42     C:\config.sys --------- 10   
      10.06.2009 22:42     C:\autoexec.bat --------- 24   
    ----------------------------------------
    
     
    C:\Windows
    
      01.01.2012 21:24     C:\Windows\WindowsUpdate.log --------- 1306193   
      01.01.2012 21:15     C:\Windows\setupact.log --------- 2850   
      01.01.2012 21:15     C:\Windows\bootstat.dat --------- 67584   
      01.01.2012 21:15     C:\Windows\MEMORY.DMP --------- 149451034   
      01.01.2012 16:51     C:\Windows\PFRO.log --------- 2530   
      28.11.2011 21:47     C:\Windows\setuperr.log --------- 0   
      12.10.2011 20:54     C:\Windows\EEventManager.INI --------- 0   
      02.10.2011 11:58     C:\Windows\setup.iss --------- 306   
      27.05.2011 03:48     C:\Windows\ChangeLang_Done.tag --------- 11453   
      26.05.2011 18:29     C:\Windows\ativpsrm.bin --------- 0   
      26.05.2011 18:17     C:\Windows\LMv4.UNI --------- 172   
      15.04.2011 02:10     C:\Windows\MOD01SET00000000RP.enc --------- 2208   
      15.04.2011 02:10     C:\Windows\CSUP.TXT --------- 10   
      13.04.2011 05:32     C:\Windows\MOD01OPK04000H0001.enc --------- 3008   
      07.04.2011 11:55     C:\Windows\patch.loag --------- 70   
      07.04.2011 11:36     C:\Windows\Ž£c --------- 20   
      25.02.2011 06:30     C:\Windows\explorer.exe --------- 2616320   
      11.02.2011 18:53     C:\Windows\MOD01SET74FR0H0005.enc --------- 2456   
      10.02.2011 12:05     C:\Windows\MOD01SET75000H0007.enc --------- 2080   
      01.12.2010 12:08     C:\Windows\UNINSTLMv4.EXE --------- 281168   
      22.11.2010 14:06     C:\Windows\atiogl.xml --------- 22305   
      20.11.2010 22:29     C:\Windows\twain_32.dll --------- 51200   
      20.11.2010 22:29     C:\Windows\bfsvc.exe --------- 65024   
      10.11.2010 10:28     C:\Windows\WLXPGSS.SCR --------- 301936   
      02.03.2010 07:20     C:\Windows\EMCRI_E.dll --------- 361808   
      05.02.2010 10:14     C:\Windows\MOD01SET78000G0018.enc --------- 2168   
      21.09.2009 05:20     C:\Windows\NewDeployWinRE.cmd --------- 741   
      23.07.2009 03:16     C:\Windows\MOD01SET5K000G0002.enc --------- 2008   
      14.07.2009 05:54     C:\Windows\win.ini --------- 403   
      14.07.2009 05:41     C:\Windows\WindowsShell.Manifest --------- 749   
      14.07.2009 02:14     C:\Windows\write.exe --------- 9216   
      14.07.2009 02:14     C:\Windows\winhlp32.exe --------- 9728   
      14.07.2009 02:14     C:\Windows\twunk_32.exe --------- 31232   
      14.07.2009 02:14     C:\Windows\regedit.exe --------- 398336   
      14.07.2009 02:14     C:\Windows\notepad.exe --------- 179712   
      14.07.2009 02:14     C:\Windows\hh.exe --------- 15360   
      14.07.2009 02:14     C:\Windows\HelpPane.exe --------- 497152   
      14.07.2009 02:14     C:\Windows\fveupdate.exe --------- 13824   
      13.07.2009 23:58     C:\Windows\mib.bin --------- 43131   
      10.06.2009 22:46     C:\Windows\system.ini --------- 219   
      10.06.2009 22:42     C:\Windows\_default.pif --------- 707   
      10.06.2009 22:42     C:\Windows\winhelp.exe --------- 256192   
      10.06.2009 22:41     C:\Windows\twunk_16.exe --------- 49680   
      10.06.2009 22:41     C:\Windows\twain.dll --------- 94784   
      10.06.2009 22:34     C:\Windows\WMSysPr9.prx --------- 316640   
      10.06.2009 22:19     C:\Windows\msdfmap.ini --------- 1405   
      10.06.2009 22:14     C:\Windows\Starter.xml --------- 48201   
      23.12.2008 08:49     C:\Windows\Acer.tag --------- 0   
    ----------------------------------------
    
     
    C:\Windows\System
    
     14.10.2010 12:03      C:\Windows\System\JPGDLL.dll --------- 617984 
     10.11.2009 17:14      C:\Windows\System\HR1632.dll --------- 430080 
     13.07.2009 22:41      C:\Windows\System\OLESVR.DLL --------- 24064 
     13.07.2009 22:41      C:\Windows\System\WFWNET.DRV --------- 12704 
     13.07.2009 22:41      C:\Windows\System\COMMDLG.DLL --------- 32816 
     13.07.2009 22:41      C:\Windows\System\TIMER.DRV --------- 4048 
     13.07.2009 22:41      C:\Windows\System\MMSYSTEM.DLL --------- 68992 
     13.07.2009 22:41      C:\Windows\System\mmtask.tsk --------- 1152 
     13.07.2009 22:41      C:\Windows\System\mouse.drv --------- 2032 
     13.07.2009 22:41      C:\Windows\System\vga.drv --------- 2176 
     13.07.2009 22:41      C:\Windows\System\sound.drv --------- 1744 
     13.07.2009 22:41      C:\Windows\System\keyboard.drv --------- 2000 
     13.07.2009 22:41      C:\Windows\System\SHELL.DLL --------- 5120 
     13.07.2009 22:41      C:\Windows\System\system.drv --------- 3360 
     10.06.2009 22:42      C:\Windows\System\ver.dll --------- 9008 
     10.06.2009 22:42      C:\Windows\System\olecli.dll --------- 82944 
     10.06.2009 22:42      C:\Windows\System\lzexpand.dll --------- 9936 
     10.06.2009 22:25      C:\Windows\System\stdole.tlb --------- 5532 
     10.06.2009 22:21      C:\Windows\System\msvideo.dll --------- 126912 
     10.06.2009 22:21      C:\Windows\System\mciwave.drv --------- 28160 
     10.06.2009 22:21      C:\Windows\System\mciseq.drv --------- 25264 
     10.06.2009 22:21      C:\Windows\System\mciavi.drv --------- 73376 
     10.06.2009 22:21      C:\Windows\System\avifile.dll --------- 109456 
     10.06.2009 22:21      C:\Windows\System\avicap.dll --------- 69584 
     09.11.1996 10:13      C:\Windows\System\BWCC.dll --------- 164928 
    ----------------------------------------
    
     
    C:\Windows\System32
    
     01.01.2012 21:34     C:\Windows\system32\hjtscanlist.txt --------- 6555  
     01.01.2012 21:29     C:\Windows\system32\config --------- 16384  
     01.01.2012 21:23     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 --------- 16160  
     01.01.2012 21:23     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 --------- 16160  
     01.01.2012 17:18     C:\Windows\system32\catroot --------- 4096  
     01.01.2012 12:20     C:\Windows\system32\Tasks --------- 0  
     01.01.2012 11:31     C:\Windows\system32\NDF --------- 0  
     22.12.2011 20:49     C:\Windows\system32\DriverStore --------- 4096  
     17.12.2011 13:34     C:\Windows\system32\FNTCACHE.DAT --------- 337976  
     17.12.2011 13:30     C:\Windows\system32\fr-FR --------- 262144  
     17.12.2011 13:30     C:\Windows\system32\migration --------- 0  
     17.12.2011 08:28     C:\Windows\system32\MRT.exe --------- 52988224  
     17.12.2011 08:26     C:\Windows\system32\catroot2 --------- 12288  
     16.12.2011 09:51     C:\Windows\system32\perfh00C.dat --------- 694430  
     16.12.2011 09:51     C:\Windows\system32\perfc00C.dat --------- 130140  
     16.12.2011 09:51     C:\Windows\system32\perfh009.dat --------- 616008  
     16.12.2011 09:51     C:\Windows\system32\perfc009.dat --------- 106388  
     16.12.2011 09:51     C:\Windows\system32\PerfStringBackup.INI --------- 1549700  
     24.11.2011 05:25     C:\Windows\system32\win32k.sys --------- 2342912  
     20.11.2011 09:34     C:\Windows\system32\FlashPlayerCPLApp.cpl --------- 414368  
     11.11.2011 11:35     C:\Windows\system32\drivers --------- 65536  
     11.11.2011 10:53     C:\Windows\system32\jupdate-1.6.0_29-b11.log --------- 3075  
     05.11.2011 05:26     C:\Windows\system32\tzres.dll --------- 2048  
     04.11.2011 00:02     C:\Windows\system32\mshtml.dll --------- 12279808  
     03.11.2011 23:47     C:\Windows\system32\jscript9.dll --------- 1798144  
     03.11.2011 23:46     C:\Windows\system32\ieframe.dll --------- 9705472  
     03.11.2011 23:40     C:\Windows\system32\urlmon.dll --------- 1103360  
     03.11.2011 23:40     C:\Windows\system32\inetcpl.cpl --------- 1427456  
     03.11.2011 23:39     C:\Windows\system32\wininet.dll --------- 1127424  
     03.11.2011 23:38     C:\Windows\system32\url.dll --------- 231936  
     03.11.2011 23:37     C:\Windows\system32\jsproxy.dll --------- 65024  
     03.11.2011 23:34     C:\Windows\system32\jscript.dll --------- 716800  
     03.11.2011 23:32     C:\Windows\system32\iertutil.dll --------- 1792000  
     03.11.2011 23:32     C:\Windows\system32\mshtmled.dll --------- 72704  
     03.11.2011 23:31     C:\Windows\system32\mshtml.tlb --------- 2382848  
     03.11.2011 23:28     C:\Windows\system32\ieui.dll --------- 176640  
     29.10.2011 10:46     C:\Windows\system32\en-US --------- 221184  
     26.10.2011 05:47     C:\Windows\system32\ntkrnlpa.exe --------- 3967856  
     26.10.2011 05:47     C:\Windows\system32\ntoskrnl.exe --------- 3912560  
     26.10.2011 05:28     C:\Windows\system32\csrsrv.dll --------- 38912  
     15.10.2011 06:38     C:\Windows\system32\EncDec.dll --------- 534528  
     03.10.2011 05:06     C:\Windows\system32\javaws.exe --------- 157472  
     03.10.2011 05:06     C:\Windows\system32\javaw.exe --------- 145184  
     03.10.2011 05:06     C:\Windows\system32\java.exe --------- 145184  
     03.10.2011 05:06     C:\Windows\system32\deployJava1.dll --------- 472808  
     06.09.2011 14:23     C:\Windows\system32\wdi --------- 4096  
     27.08.2011 05:26     C:\Windows\system32\oleaut32.dll --------- 571904  
     27.08.2011 05:26     C:\Windows\system32\oleacc.dll --------- 233472  
     26.08.2011 09:40     C:\Windows\system32\restore --------- 0  
     26.08.2011 08:46     C:\Windows\system32\LogFiles --------- 4096  
     24.08.2011 22:36     C:\Windows\system32\license.rtf --------- 190563  
     24.08.2011 16:42     C:\Windows\system32\OEM --------- 0  
     24.08.2011 16:37     C:\Windows\system32\Recovery --------- 0  
     17.08.2011 05:24     C:\Windows\system32\psisdecd.dll --------- 465408  
     17.08.2011 05:19     C:\Windows\system32\psisrndr.ax --------- 75776  
     16.07.2011 05:27     C:\Windows\system32\KernelBase.dll --------- 290816  
     16.07.2011 05:27     C:\Windows\system32\kernel32.dll --------- 868352  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll --------- 4096  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll --------- 4096  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll --------- 4608  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll --------- 3584  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll --------- 3584  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll --------- 4096  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll --------- 3584  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll --------- 4096  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll --------- 4096  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll --------- 3584  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll --------- 3584  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll --------- 3584  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll --------- 5120  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll --------- 3072  
     16.07.2011 05:15     C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll --------- 3072  
     16.07.2011 03:17     C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll --------- 3584  
     16.07.2011 03:17     C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll --------- 3072  
     16.07.2011 03:17     C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll --------- 4608  
     16.07.2011 03:17     C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll --------- 6144  
     24.06.2011 05:27     C:\Windows\system32\winsrv.dll --------- 169984  
     24.06.2011 05:22     C:\Windows\system32\conhost.exe --------- 271360  
     16.06.2011 05:33     C:\Windows\system32\xmllite.dll --------- 180224  
     15.06.2011 09:55     C:\Windows\system32\odbctrac.dll --------- 163840  
     15.06.2011 09:55     C:\Windows\system32\odbcjt32.dll --------- 319488  
     15.06.2011 09:55     C:\Windows\system32\odbccu32.dll --------- 86016  
     15.06.2011 09:55     C:\Windows\system32\odbccr32.dll --------- 81920  
     15.06.2011 09:55     C:\Windows\system32\odbccp32.dll --------- 122880  
     27.05.2011 04:02     C:\Windows\system32\winrm --------- 0  
     27.05.2011 04:02     C:\Windows\system32\migwiz --------- 0  
     27.05.2011 04:02     C:\Windows\system32\oobe --------- 0  
     27.05.2011 04:02     C:\Windows\system32\Boot --------- 0  
     27.05.2011 04:02     C:\Windows\system32\slmgr --------- 0  
     27.05.2011 04:02     C:\Windows\system32\Setup --------- 0  
     27.05.2011 04:02     C:\Windows\system32\WCN --------- 0  
    ----------------------------------------
    
     
    C:\Windows\Prefetch
    
    ----------------------------------------
    
     
    C:\Windows\Tasks
    
     01.01.2012 21:30     C:\Windows\Tasks\Acer Registration - Reminder Recall task.job --------- 362  
     01.01.2012 21:15     C:\Windows\Tasks\SA.DAT --------- 6  
     14.07.2009 05:53     C:\Windows\Tasks\SCHEDLGU.TXT --------- 26362  
    ----------------------------------------
    
     
    C:\Windows\Temp
    
    ----------------------------------------
    
     
    C:\Users\Julie\AppData\Local\Temp
    
     01.01.2012 21:34     C:\Users\Julie\AppData\Local\Temp\Temp1_hjtscanlist.zip --------- 0  
     01.01.2012 21:33     C:\Users\Julie\AppData\Local\Temp\~DFF0DF78829A4BC188.TMP --------- 28672  
     01.01.2012 21:33     C:\Users\Julie\AppData\Local\Temp\~DFB884DCF856015136.TMP --------- 24576  
     01.01.2012 21:26     C:\Users\Julie\AppData\Local\Temp\~DFB1E71C47E4CFF366.TMP --------- 24576  
     01.01.2012 21:26     C:\Users\Julie\AppData\Local\Temp\~DF491B2C2A4EF59445.TMP --------- 24576  
     01.01.2012 21:26     C:\Users\Julie\AppData\Local\Temp\~DFA4D0DB37586A2AA4.TMP --------- 16384  
     01.01.2012 21:23     C:\Users\Julie\AppData\Local\Temp\~DFBA6C548464D81179.TMP --------- 512  
     01.01.2012 21:22     C:\Users\Julie\AppData\Local\Temp\CVR1812.tmp.cvr --------- 0  
     01.01.2012 21:20     C:\Users\Julie\AppData\Local\Temp\jusched.log --------- 23447  
     01.01.2012 21:16     C:\Users\Julie\AppData\Local\Temp\aipflib.log --------- 786586  
     01.01.2012 21:16     C:\Users\Julie\AppData\Local\Temp\LManager.log --------- 425608  
     01.01.2012 21:15     C:\Users\Julie\AppData\Local\Temp\WPDNSE --------- 0  
     01.01.2012 21:15     C:\Users\Julie\AppData\Local\Temp\TWAIN.LOG --------- 890  
     01.01.2012 21:15     C:\Users\Julie\AppData\Local\Temp\Twain001.Mtx --------- 4  
     01.01.2012 21:15     C:\Users\Julie\AppData\Local\Temp\Twunk001.MTX --------- 156  
     01.01.2012 21:15     C:\Users\Julie\AppData\Local\Temp\LMworker.log --------- 27169  
     01.01.2012 21:08     C:\Users\Julie\AppData\Local\Temp\~DFA4EA3832757F18D8.TMP --------- 24576  
     01.01.2012 21:06     C:\Users\Julie\AppData\Local\Temp\~DF0678E11D8FE68517.TMP --------- 16384  
     01.01.2012 21:04     C:\Users\Julie\AppData\Local\Temp\~DF91ADAC7169591D04.TMP --------- 24576  
     01.01.2012 21:02     C:\Users\Julie\AppData\Local\Temp\~DF2197BEA81C441523.TMP --------- 24576  
     01.01.2012 21:02     C:\Users\Julie\AppData\Local\Temp\~DFC3741503179FED42.TMP --------- 16384  
     01.01.2012 19:25     C:\Users\Julie\AppData\Local\Temp\AdobeARM.log --------- 54932  
     01.01.2012 19:20     C:\Users\Julie\AppData\Local\Temp\Low --------- 0  
     01.01.2012 18:41     C:\Users\Julie\AppData\Local\Temp\msohtmlclip1 --------- 0  
     01.01.2012 18:10     C:\Users\Julie\AppData\Local\Temp\~DFBB9227CC7EC967D9.TMP --------- 20480  
     01.01.2012 18:07     C:\Users\Julie\AppData\Local\Temp\~DF32EA48F069C63467.TMP --------- 16384  
     01.01.2012 18:07     C:\Users\Julie\AppData\Local\Temp\~DFF93015CFB9655EE7.TMP --------- 32768  
     01.01.2012 18:07     C:\Users\Julie\AppData\Local\Temp\~DF151F825D3DB966E2.TMP --------- 16384  
     01.01.2012 18:07     C:\Users\Julie\AppData\Local\Temp\~DFB1316C12612A7859.TMP --------- 0  
     01.01.2012 16:54     C:\Users\Julie\AppData\Local\Temp\~DFF28C26B75D9162E5.TMP --------- 28672  
     01.01.2012 16:53     C:\Users\Julie\AppData\Local\Temp\~DF851E1FD2D219C9AD.TMP --------- 24576  
     01.01.2012 16:53     C:\Users\Julie\AppData\Local\Temp\~DFD5301F0CFE6F58AA.TMP --------- 24576  
     01.01.2012 16:53     C:\Users\Julie\AppData\Local\Temp\~DF85DC3EC9DEE1B879.TMP --------- 24576  
     01.01.2012 16:53     C:\Users\Julie\AppData\Local\Temp\~DF53F1457270E315D3.TMP --------- 24576  
     01.01.2012 16:53     C:\Users\Julie\AppData\Local\Temp\~DF58B5561DCDC2B525.TMP --------- 16384  
     01.01.2012 16:24     C:\Users\Julie\AppData\Local\Temp\~DFAFDA9B0509A0D2B0.TMP --------- 24576  
     01.01.2012 16:12     C:\Users\Julie\AppData\Local\Temp\~DF5AF2D7139F680D4D.TMP --------- 36864  
     01.01.2012 16:01     C:\Users\Julie\AppData\Local\Temp\div5FF.tmp --------- 0  
     01.01.2012 15:54     C:\Users\Julie\AppData\Local\Temp\~DF614B65268F7FFBD2.TMP --------- 24576  
     01.01.2012 15:54     C:\Users\Julie\AppData\Local\Temp\~DFD65D0859A8C36037.TMP --------- 24576  
     01.01.2012 15:51     C:\Users\Julie\AppData\Local\Temp\~DF8A583E005CFC803E.TMP --------- 24576  
     01.01.2012 14:56     C:\Users\Julie\AppData\Local\Temp\Temp1_SecurityTaskManager_Setup.zip --------- 0  
     01.01.2012 14:35     C:\Users\Julie\AppData\Local\Temp\StructuredQuery.log --------- 20140  
     01.01.2012 14:34     C:\Users\Julie\AppData\Local\Temp\~DFC23C6B38BF237504.TMP --------- 16384  
     01.01.2012 13:03     C:\Users\Julie\AppData\Local\Temp\DMI5035.tmp --------- 0  
     01.01.2012 11:37     C:\Users\Julie\AppData\Local\Temp\msdtadmin --------- 0  
     01.01.2012 11:30     C:\Users\Julie\AppData\Local\Temp\chrome_installer.log --------- 5193  
     01.01.2012 01:29     C:\Users\Julie\AppData\Local\Temp\IM_7832.tmp --------- 0  
     01.01.2012 01:29     C:\Users\Julie\AppData\Local\Temp\ImInstaller --------- 0  
     01.01.2012 01:29     C:\Users\Julie\AppData\Local\Temp\Incredibar.com --------- 0  
     31.12.2011 21:40     C:\Users\Julie\AppData\Local\Temp\div3238.tmp --------- 0  
     31.12.2011 21:10     C:\Users\Julie\AppData\Local\Temp\div7521.tmp --------- 0  
     31.12.2011 21:03     C:\Users\Julie\AppData\Local\Temp\mod7428.tmp --------- 34  
     31.12.2011 21:03     C:\Users\Julie\AppData\Local\Temp\DivXInstaller.exe --------- 927072  
     31.12.2011 21:03     C:\Users\Julie\AppData\Local\Temp\mod43A6.tmp --------- 34  
     31.12.2011 19:22     C:\Users\Julie\AppData\Local\Temp\OXPDFCreatorUninstall.txt --------- 723  
     31.12.2011 19:17     C:\Users\Julie\AppData\Local\Temp\~DF771670C2534F9539.TMP --------- 16384  
     31.12.2011 19:16     C:\Users\Julie\AppData\Local\Temp\~DFD9AC3557F89E9D35.TMP --------- 16384  
     31.12.2011 18:23     C:\Users\Julie\AppData\Local\Temp\thanks.bat --------- 84  
     31.12.2011 18:22     C:\Users\Julie\AppData\Local\Temp\vlc.7z --------- 19479487  
     31.12.2011 18:20     C:\Users\Julie\AppData\Local\Temp\ilivid.7z --------- 901399  
     31.12.2011 18:20     C:\Users\Julie\AppData\Local\Temp\dlls.7z --------- 10459869  
     31.12.2011 18:19     C:\Users\Julie\AppData\Local\Temp\SetupDataMngr_Searchqu.exe --------- 3527048  
     31.12.2011 18:18     C:\Users\Julie\AppData\Local\Temp\searchqu.ini --------- 422  
     31.12.2011 15:09     C:\Users\Julie\AppData\Local\Temp\hsperfdata_Julie --------- 0  
     31.12.2011 15:04     C:\Users\Julie\AppData\Local\Temp\~DF98564C7439530D89.TMP --------- 49152  
     31.12.2011 12:24     C:\Users\Julie\AppData\Local\Temp\~DFE888D17AE008E715.TMP --------- 16384  
     29.12.2011 19:13     C:\Users\Julie\AppData\Local\Temp\~DF3AE93AE3E5F09ABA.TMP --------- 16384  
     29.12.2011 16:44     C:\Users\Julie\AppData\Local\Temp\~DFC5ADDEE53E5E5B36.TMP --------- 16384  
     29.12.2011 16:44     C:\Users\Julie\AppData\Local\Temp\~DF539178ED8942DB0E.TMP --------- 16384  
     29.12.2011 16:08     C:\Users\Julie\AppData\Local\Temp\~DFF2415DF1070DD6FB.TMP --------- 16384  
     29.12.2011 15:48     C:\Users\Julie\AppData\Local\Temp\CVR784D.tmp.cvr --------- 0  
     29.12.2011 15:06     C:\Users\Julie\AppData\Local\Temp\CVR87A7.tmp.cvr --------- 0  
     29.12.2011 15:05     C:\Users\Julie\AppData\Local\Temp\CVRAE69.tmp.cvr --------- 0  
     29.12.2011 15:03     C:\Users\Julie\AppData\Local\Temp\CVRA45B.tmp.cvr --------- 0  
     29.12.2011 14:59     C:\Users\Julie\AppData\Local\Temp\CVR27DC.tmp.cvr --------- 0  
     29.12.2011 14:56     C:\Users\Julie\AppData\Local\Temp\CVR12C6.tmp.cvr --------- 0  
     29.12.2011 14:55     C:\Users\Julie\AppData\Local\Temp\CVR5773.tmp.cvr --------- 0  
     29.12.2011 14:55     C:\Users\Julie\AppData\Local\Temp\CVRF7C7.tmp.cvr --------- 0  
     29.12.2011 14:54     C:\Users\Julie\AppData\Local\Temp\CVR932B.tmp.cvr --------- 0  
     29.12.2011 13:27     C:\Users\Julie\AppData\Local\Temp\~DF2EE786D1DC277803.TMP --------- 16384  
     29.12.2011 13:10     C:\Users\Julie\AppData\Local\Temp\CVRE37E.tmp.cvr --------- 0  
     29.12.2011 13:02     C:\Users\Julie\AppData\Local\Temp\~DF49B5C92A847AD439.TMP --------- 32768  
     29.12.2011 12:30     C:\Users\Julie\AppData\Local\Temp\~DF9FFEA9851EF4CC8C.TMP --------- 0  
     29.12.2011 11:54     C:\Users\Julie\AppData\Local\Temp\~DF20E81C8CD9D32C35.TMP --------- 16384  
     29.12.2011 11:50     C:\Users\Julie\AppData\Local\Temp\~DF2F99B567E2082AF6.TMP --------- 512  
     29.12.2011 11:50     C:\Users\Julie\AppData\Local\Temp\CVREEC2.tmp.cvr --------- 0  
     28.12.2011 20:18     C:\Users\Julie\AppData\Local\Temp\~DF70F527B74C8E1360.TMP --------- 32768  
     28.12.2011 20:17     C:\Users\Julie\AppData\Local\Temp\~DF0D200B3EF2E714C7.TMP --------- 16384  
     28.12.2011 20:07     C:\Users\Julie\AppData\Local\Temp\~DFEDDE33EBC8F1FB72.TMP --------- 16384  
     28.12.2011 20:07     C:\Users\Julie\AppData\Local\Temp\~DF32DC6B9BB5564AFD.TMP --------- 28672  
     28.12.2011 20:07     C:\Users\Julie\AppData\Local\Temp\~DF35B65DE424EA5490.TMP --------- 16384  
     28.12.2011 18:13     C:\Users\Julie\AppData\Local\Temp\~DFD657DF0E039E2BA1.TMP --------- 16384  
     28.12.2011 18:06     C:\Users\Julie\AppData\Local\Temp\OICE_99A70054-8DD5-4AC7-9A21-040F35642EF3.0 --------- 0  
     28.12.2011 18:06     C:\Users\Julie\AppData\Local\Temp\~DFDA06E843ADB8A984.TMP --------- 512  
     28.12.2011 18:05     C:\Users\Julie\AppData\Local\Temp\~DF5D50B968F7A5B070.TMP --------- 512  
     28.12.2011 17:44     C:\Users\Julie\AppData\Local\Temp\~DFC0118269F9616F7D.TMP --------- 24576  
     27.12.2011 16:00     C:\Users\Julie\AppData\Local\Temp\OIS --------- 0  
     27.12.2011 13:36     C:\Users\Julie\AppData\Local\Temp\~DFF75D1013440DABFA.TMP --------- 512  
     27.12.2011 04:43     C:\Users\Julie\AppData\Local\Temp\~DF7271B8E643C346C1.TMP --------- 512  
     27.12.2011 04:43     C:\Users\Julie\AppData\Local\Temp\CVR9B3A.tmp.cvr --------- 0  
     22.12.2011 21:09     C:\Users\Julie\AppData\Local\Temp\CVR90BA.tmp.cvr --------- 0  
     22.12.2011 21:09     C:\Users\Julie\AppData\Local\Temp\CVR6DEE.tmp.cvr --------- 0  
     22.12.2011 20:53     C:\Users\Julie\AppData\Local\Temp\msdt --------- 0  
     22.12.2011 20:50     C:\Users\Julie\AppData\Local\Temp\E_DUPXXX_Temp --------- 0  
     22.12.2011 20:46     C:\Users\Julie\AppData\Local\Temp\CVRA301.tmp.cvr --------- 0  
     22.12.2011 20:45     C:\Users\Julie\AppData\Local\Temp\S22_T12_T22_N11_T13_T22E_SX125_TX120_NX120_TX121_x86_672HomeExport_s --------- 0  
     22.12.2011 20:31     C:\Users\Julie\AppData\Local\Temp\CVRE889.tmp.cvr --------- 0  
     22.12.2011 20:24     C:\Users\Julie\AppData\Local\Temp\CVRD528.tmp.cvr --------- 0  
     22.12.2011 20:21     C:\Users\Julie\AppData\Local\Temp\Temp1_Attachments_2011_12_22.zip --------- 0  
     22.12.2011 18:49     C:\Users\Julie\AppData\Local\Temp\CVR8957.tmp.cvr --------- 0  
     22.12.2011 18:44     C:\Users\Julie\AppData\Local\Temp\CVRC010.tmp.cvr --------- 0  
     20.12.2011 10:05     C:\Users\Julie\AppData\Local\Temp\CVR45F2.tmp.cvr --------- 0  
     19.12.2011 16:46     C:\Users\Julie\AppData\Local\Temp\CVRC53B.tmp.cvr --------- 0  
     19.12.2011 14:45     C:\Users\Julie\AppData\Local\Temp\CVRFB65.tmp.cvr --------- 0  
     19.12.2011 14:38     C:\Users\Julie\AppData\Local\Temp\CVR9A52.tmp.cvr --------- 0  
     19.12.2011 14:31     C:\Users\Julie\AppData\Local\Temp\CVR797A.tmp.cvr --------- 0  
     19.12.2011 14:24     C:\Users\Julie\AppData\Local\Temp\CVR6242.tmp.cvr --------- 0  
     19.12.2011 14:04     C:\Users\Julie\AppData\Local\Temp\CVR52A8.tmp.cvr --------- 0  
     19.12.2011 14:02     C:\Users\Julie\AppData\Local\Temp\CVR6C4F.tmp.cvr --------- 0  
     19.12.2011 13:24     C:\Users\Julie\AppData\Local\Temp\CVRE7C4.tmp.cvr --------- 0  
     19.12.2011 12:25     C:\Users\Julie\AppData\Local\Temp\CVR6B16.tmp.cvr --------- 0  
     19.12.2011 12:22     C:\Users\Julie\AppData\Local\Temp\CVR4EDF.tmp.cvr --------- 0  
     19.12.2011 12:22     C:\Users\Julie\AppData\Local\Temp\CVR2697.tmp.cvr --------- 0  
     19.12.2011 12:19     C:\Users\Julie\AppData\Local\Temp\CVRC517.tmp.cvr --------- 0  
     19.12.2011 09:21     C:\Users\Julie\AppData\Local\Temp\CVR475D.tmp.cvr --------- 0  
     18.12.2011 22:15     C:\Users\Julie\AppData\Local\Temp\CVR61B3.tmp.cvr --------- 0  
     18.12.2011 22:13     C:\Users\Julie\AppData\Local\Temp\CVRCF06.tmp.cvr --------- 0  
     18.12.2011 21:41     C:\Users\Julie\AppData\Local\Temp\CVR6B73.tmp.cvr --------- 0  
     18.12.2011 20:50     C:\Users\Julie\AppData\Local\Temp\CVR1E9A.tmp.cvr --------- 0  
     16.12.2011 20:17     C:\Users\Julie\AppData\Local\Temp\CVR4ABC.tmp.cvr --------- 0  
     14.12.2011 20:54     C:\Users\Julie\AppData\Local\Temp\msohtmlclip --------- 0  
     14.12.2011 15:31     C:\Users\Julie\AppData\Local\Temp\CVR7E5E.tmp.cvr --------- 0  
     13.12.2011 10:58     C:\Users\Julie\AppData\Local\Temp\VBE --------- 0  
     11.12.2011 20:26     C:\Users\Julie\AppData\Local\Temp\wmplog01.sqm --------- 1246  
     11.12.2011 20:26     C:\Users\Julie\AppData\Local\Temp\wmsetup.log --------- 407  
     11.12.2011 20:26     C:\Users\Julie\AppData\Local\Temp\wmplog00.sqm --------- 1246  
     06.12.2011 10:14     C:\Users\Julie\AppData\Local\Temp\installhelper.dll --------- 1508352  
     04.12.2011 14:47     C:\Users\Julie\AppData\Local\Temp\~DFB4FD5890ECB888A7.TMP --------- 40960  
     04.12.2011 12:26     C:\Users\Julie\AppData\Local\Temp\~DF586AD5276DA9B435.TMP --------- 16384  
     03.12.2011 10:15     C:\Users\Julie\AppData\Local\Temp\~DF2AE43729A4AF9975.TMP --------- 512  
     03.12.2011 10:15     C:\Users\Julie\AppData\Local\Temp\OICE_165F8A0A-A6BF-4E67-AC70-AB8C1CD656D9.0 --------- 0  
     03.12.2011 10:15     C:\Users\Julie\AppData\Local\Temp\~DFF9BF7051A30BD2F5.TMP --------- 512  
     03.12.2011 10:15     C:\Users\Julie\AppData\Local\Temp\CVRDB9.tmp.cvr --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD2092.tmp --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD2081.tmp --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD1F9D.tmp --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD205C.tmp --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD205D.tmp --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD2071.tmp --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD201B.tmp --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD1F9C.tmp --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD2060.tmp --------- 0  
     03.12.2011 10:09     C:\Users\Julie\AppData\Local\Temp\TCD205E.tmp --------- 0  
     03.12.2011 09:58     C:\Users\Julie\AppData\Local\Temp\History --------- 0  
     03.12.2011 09:58     C:\Users\Julie\AppData\Local\Temp\Cookies --------- 0  
     03.12.2011 09:58     C:\Users\Julie\AppData\Local\Temp\Fichiers Internet temporaires --------- 0  
     02.12.2011 16:44     C:\Users\Julie\AppData\Local\Temp\~DF28FC26D13FE4E72D.TMP --------- 16384  
     02.12.2011 16:35     C:\Users\Julie\AppData\Local\Temp\~DFD5C04F91737C7DFD.TMP --------- 16384  
     02.12.2011 12:53     C:\Users\Julie\AppData\Local\Temp\~DFA045F620DDD10061.TMP --------- 16384  
     02.12.2011 12:52     C:\Users\Julie\AppData\Local\Temp\~DFEC9AD36A1B327A23.TMP --------- 16384  
     02.12.2011 12:51     C:\Users\Julie\AppData\Local\Temp\~DF74A840A59822F7CB.TMP --------- 16384  
     02.12.2011 12:48     C:\Users\Julie\AppData\Local\Temp\~DFAA037147A74A176C.TMP --------- 16384  
     01.12.2011 22:37     C:\Users\Julie\AppData\Local\Temp\~DF5C367990D0697C84.TMP --------- 24576  
     01.12.2011 19:23     C:\Users\Julie\AppData\Local\Temp\~DF3B23DDB2A752796A.TMP --------- 16384  
     30.11.2011 21:13     C:\Users\Julie\AppData\Local\Temp\~DF87B4767F5F62C2ED.TMP --------- 16384  
     30.11.2011 19:56     C:\Users\Julie\AppData\Local\Temp\~DFDF1084259AC1ED34.TMP --------- 20480  
     30.11.2011 19:40     C:\Users\Julie\AppData\Local\Temp\~DF6DB41D38EBF46458.TMP --------- 16384  
     30.11.2011 14:12     C:\Users\Julie\AppData\Local\Temp\~DF32B5EEB7E8E3EE9B.TMP --------- 16384  
     30.11.2011 12:16     C:\Users\Julie\AppData\Local\Temp\~DF5E445B89C0041927.TMP --------- 16384  
     30.11.2011 12:16     C:\Users\Julie\AppData\Local\Temp\~DFEF3F8C232EFBA431.TMP --------- 0  
     30.11.2011 11:45     C:\Users\Julie\AppData\Local\Temp\~DFA677254388346D84.TMP --------- 20480  
     30.11.2011 11:45     C:\Users\Julie\AppData\Local\Temp\~DF771FEE2B58173AF8.TMP --------- 0  
     29.11.2011 21:12     C:\Users\Julie\AppData\Local\Temp\~DF68059E9297468C23.TMP --------- 16384  
     29.11.2011 18:04     C:\Users\Julie\AppData\Local\Temp\~DF22B715358BE30CC9.TMP --------- 16384  
     29.11.2011 14:17     C:\Users\Julie\AppData\Local\Temp\~DFC729E22C1D609073.TMP --------- 16384  
     29.11.2011 14:17     C:\Users\Julie\AppData\Local\Temp\Adobe --------- 0  
     29.11.2011 14:17     C:\Users\Julie\AppData\Local\Temp\Twunk002.MTX --------- 0  
     29.11.2011 14:12     C:\Users\Julie\AppData\Local\Temp\~DF84B2A50DC7B2A5A3.TMP --------- 16384  
     29.11.2011 13:57     C:\Users\Julie\AppData\Local\Temp\~DF54E7E24D310A6594.TMP --------- 40960  
     29.11.2011 13:41     C:\Users\Julie\AppData\Local\Temp\~DF89F360DCCF3B00CB.TMP --------- 20480  
     26.11.2011 07:41     C:\Users\Julie\AppData\Local\Temp\~DFB6D8E27647FEC928.TMP --------- 16384  
     19.09.2011 08:50     C:\Users\Julie\AppData\Local\Temp\ftalk.ico --------- 122028  
     25.08.2011 14:41     C:\Users\Julie\AppData\Local\Temp\SRAssetsHelper.dll --------- 1085952  
     16.06.2011 09:18     C:\Users\Julie\AppData\Local\Temp\Smiley.ico --------- 76407  
     20.11.2010 21:57     C:\Users\Julie\AppData\Local\Temp\FXSAPIDebugLogFile.txt --------- 0  
     02.11.2010 10:33     C:\Users\Julie\AppData\Local\Temp\Acer.swf --------- 5472566  
    ----------------------------------------
    
     
    C:\Program Files
    
     01.01.2012 16:03     C:\Program Files\Common Files --------- 4096  
     01.01.2012 16:03     C:\Program Files\DivX --------- 0  
     01.01.2012 15:01     C:\Program Files\Security Task Manager --------- 0  
     01.01.2012 12:20     C:\Program Files\Google --------- 0  
     31.12.2011 21:09     C:\Program Files\Mozilla Firefox --------- 0  
     31.12.2011 18:42     C:\Program Files\VideoLAN --------- 0  
     17.12.2011 13:30     C:\Program Files\Internet Explorer --------- 4096  
     04.12.2011 22:09     C:\Program Files\Acer GameZone --------- 0  
     28.11.2011 20:42     C:\Program Files\CCleaner --------- 0  
     11.11.2011 10:53     C:\Program Files\Java --------- 0  
     01.11.2011 16:43     C:\Program Files\SaxEduc --------- 0  
     01.11.2011 16:42     C:\Program Files\RLei --------- 0  
     29.10.2011 10:45     C:\Program Files\Microsoft.NET --------- 0  
     13.10.2011 17:55     C:\Program Files\Microsoft Silverlight --------- 4096  
     02.10.2011 11:59     C:\Program Files\Epson Software --------- 0  
     02.10.2011 11:59     C:\Program Files\InstallShield Installation Information --------- 0  
     02.10.2011 11:54     C:\Program Files\epson --------- 0  
     02.10.2011 11:52     C:\Program Files\ABBYY FineReader 9.0 Sprint --------- 81920  
     01.10.2011 21:08     C:\Program Files\Adobe --------- 0  
     13.09.2011 12:47     C:\Program Files\GIMP-2.0 --------- 0  
     12.09.2011 20:38     C:\Program Files\Microsoft --------- 0  
     12.09.2011 20:29     C:\Program Files\Zattoo4 --------- 0  
     12.09.2011 20:28     C:\Program Files\Acer --------- 4096  
     26.08.2011 18:19     C:\Program Files\McAfee Security Scan --------- 0  
     26.08.2011 10:09     C:\Program Files\Microsoft Office --------- 4096  
     26.08.2011 09:44     C:\Program Files\Microsoft Analysis Services --------- 0  
     24.08.2011 16:38     C:\Program Files\Accessory Store --------- 0  
     24.08.2011 16:37     C:\Program Files\Windows NT --------- 0  
     24.08.2011 16:37     C:\Program Files\Fichiers communs --------- 0  
     27.05.2011 04:02     C:\Program Files\Windows Sidebar --------- 0  
     27.05.2011 04:02     C:\Program Files\DVD Maker --------- 0  
     27.05.2011 04:02     C:\Program Files\Windows Mail --------- 0  
     27.05.2011 04:02     C:\Program Files\Windows Photo Viewer --------- 0  
     27.05.2011 04:02     C:\Program Files\Windows Media Player --------- 0  
     27.05.2011 04:02     C:\Program Files\Windows Defender --------- 4096  
     26.05.2011 18:23     C:\Program Files\Synaptics --------- 0  
     26.05.2011 18:20     C:\Program Files\ATI Technologies --------- 0  
     26.05.2011 18:19     C:\Program Files\ATI --------- 0  
     26.05.2011 18:17     C:\Program Files\Launch Manager --------- 8192  
     07.04.2011 11:59     C:\Program Files\Preload --------- 0  
     07.04.2011 11:59     C:\Program Files\newsXpresso --------- 0  
     07.04.2011 11:54     C:\Program Files\Symantec --------- 0  
     07.04.2011 11:51     C:\Program Files\EgisTec Shredder --------- 0  
     07.04.2011 11:51     C:\Program Files\EgisTec MyWinLocker --------- 8192  
     07.04.2011 11:50     C:\Program Files\EgisTec IPS --------- 4096  
     07.04.2011 11:50     C:\Program Files\EgisTec MyWinLockerSuite --------- 0  
     07.04.2011 11:36     C:\Program Files\Microsoft SQL Server Compact Edition --------- 0  
     07.04.2011 11:24     C:\Program Files\Windows Live --------- 4096  
     07.04.2011 11:15     C:\Program Files\McAfee --------- 4096  
     07.04.2011 11:14     C:\Program Files\mcafee.com --------- 0  
     07.04.2011 10:52     C:\Program Files\CONEXANT --------- 0  
     07.04.2011 10:44     C:\Program Files\DIFX --------- 0  
     20.11.2010 22:33     C:\Program Files\Windows Portable Devices --------- 0  
     14.07.2009 05:53     C:\Program Files\Uninstall Information --------- 0  
     14.07.2009 05:52     C:\Program Files\Microsoft Games --------- 4096  
     14.07.2009 05:52     C:\Program Files\Reference Assemblies --------- 0  
     14.07.2009 05:52     C:\Program Files\MSBuild --------- 0  
     14.07.2009 05:41     C:\Program Files\desktop.ini --------- 174  
    ----------------------------------------
    
     
    C:\ProgramData\.. 
    
    Julie    
    Default    
    Public    
    Default User    
    All Users    
    desktop.ini    
    ----------------------------------------
    
     
    C:\Windows\system32\drivers\etc\hosts
    
    
    ----------------------------------------
    
     
    
    Nom de l'image                 PID Nom de la sessio Num‚ro de s Utilisation 
    ========================= ======== ================ =========== ============
    System Idle Process              0 Services                   0        24 Ko
    System                           4 Services                   0     1.844 Ko
    smss.exe                       288 Services                   0        60 Ko
    csrss.exe                      448 Services                   0     1.324 Ko
    wininit.exe                    576 Services                   0       100 Ko
    csrss.exe                      584 Console                    1     5.712 Ko
    services.exe                   632 Services                   0     4.256 Ko
    lsass.exe                      656 Services                   0     3.344 Ko
    lsm.exe                        664 Services                   0     1.216 Ko
    winlogon.exe                   700 Console                    1       184 Ko
    svchost.exe                    816 Services                   0     2.652 Ko
    svchost.exe                    892 Services                   0     2.832 Ko
    atiesrxx.exe                   940 Services                   0        88 Ko
    svchost.exe                   1024 Services                   0     4.676 Ko
    svchost.exe                   1064 Services                   0    23.640 Ko
    svchost.exe                   1088 Services                   0    14.728 Ko
    svchost.exe                   1236 Services                   0     3.564 Ko
    atieclxx.exe                  1288 Console                    1       140 Ko
    svchost.exe                   1424 Services                   0     5.692 Ko
    wlanext.exe                   1556 Services                   0       808 Ko
    conhost.exe                   1564 Services                   0       116 Ko
    spoolsv.exe                   1640 Services                   0       248 Ko
    svchost.exe                   1676 Services                   0     4.356 Ko
    NetworkLicenseServer.exe      1788 Services                   0       220 Ko
    armsvc.exe                    1840 Services                   0       112 Ko
    dsiwmis.exe                   1880 Services                   0       176 Ko
    ePowerSvc.exe                 1908 Services                   0       160 Ko
    svchost.exe                   1940 Services                   0     1.856 Ko
    UpdaterService.exe            1972 Services                   0       120 Ko
    McSvHost.exe                  2000 Services                   0    12.656 Ko
    mfevtps.exe                   2036 Services                   0     3.400 Ko
    RS_Service.exe                 388 Services                   0       240 Ko
    svchost.exe                    300 Services                   0       192 Ko
    WLIDSVC.EXE                    876 Services                   0     1.024 Ko
    WLIDSVCM.EXE                  2072 Services                   0        96 Ko
    mcshield.exe                  2168 Services                   0    51.200 Ko
    rundll32.exe                  2188 Console                    1       172 Ko
    mfefire.exe                   2220 Services                   0     1.756 Ko
    svchost.exe                   2620 Services                   0       176 Ko
    dwm.exe                       2860 Console                    1       380 Ko
    explorer.exe                  2880 Console                    1    37.128 Ko
    taskhost.exe                  2928 Console                    1     1.612 Ko
    mcagent.exe                   3288 Console                    1     4.392 Ko
    SuiteTray.exe                 3312 Console                    1       404 Ko
    PmmUpdate.exe                 3324 Console                    1       352 Ko
    LManager.exe                  3364 Console                    1     1.952 Ko
    SynTPEnh.exe                  3384 Console                    1     2.872 Ko
    ePowerTray.exe                3392 Console                    1       508 Ko
    EEventManager.exe             3408 Console                    1       728 Ko
    jusched.exe                   3420 Console                    1        96 Ko
    AcerVCM.exe                   3436 Console                    1       468 Ko
    SSScheduler.exe               3460 Console                    1       132 Ko
    LMworker.exe                  3500 Console                    1       188 Ko
    unsecapp.exe                  3768 Console                    1     1.216 Ko
    WmiPrvSE.exe                  3884 Services                   0       572 Ko
    EgisUpdate.exe                3912 Console                    1       348 Ko
    SearchIndexer.exe             4000 Services                   0    10.992 Ko
    ePowerEvent.exe               1384 Console                    1       192 Ko
    SynTPHelper.exe               4864 Console                    1       276 Ko
    svchost.exe                   5540 Services                   0    17.696 Ko
    WINWORD.EXE                   4508 Console                    1    11.172 Ko
    OSPPSVC.EXE                    728 Services                   0       180 Ko
    iexplore.exe                  2712 Console                    1    24.192 Ko
    iexplore.exe                  6024 Console                    1    63.728 Ko
    iexplore.exe                  4756 Console                    1    38.868 Ko
    iexplore.exe                  6020 Console                    1    21.028 Ko
    FlashUtil11e_ActiveX.exe      4428 Console                    1     2.024 Ko
    taskeng.exe                   3800 Console                    1     1.228 Ko
    audiodg.exe                   5916 Services                   0    14.660 Ko
    mcupdate.exe                  2728 Services                   0       180 Ko
    SearchFilterHost.exe          2636 Services                   0     5.768 Ko
    SearchProtocolHost.exe        3536 Services                   0     6.288 Ko
    cmd.exe                       3820 Console                    1     3.240 Ko
    conhost.exe                   2104 Console                    1     4.756 Ko
    tasklist.exe                  5400 Console                    1     4.332 Ko
    WmiPrvSE.exe                  4384 Services                   0     4.868 Ko
    
     
    ***** Ende des Scans 01.01.2012 um 21:35:02,40 ***
    Geändert von kira (02.01.2012 um 03:57 Uhr)

  2. #2
    Moderator (global) Team-Mitglied Avatar von kira
    Registriert seit
    28.03.2006
    Ort
    Wien/Sprachen: Deutsch-Ungarisch
    Beiträge
    29.733

    AW: Malware Incredibar

    Herzlich Willkommen hier bei uns am HijackThis Supportboard!

    **Bevor du mit Teil 1. der Aufgabe beginnst: HIER KLICKEN UND SORGFÄLTIG DURCHLESEN!** und ich bitte um kurze Bestätigung, dass du dies gelesen und akzeptiert hast!
    Ein System zu bereinigen kann ein paar Tage dauern (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
    ► Unrechtmäßig erworbene Software (durch Keygen, Crack, Keymaker) wird hier nicht geduldet, in diesem Fall wird der Support eingestellt.!
    ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
    Bitte lese Dir zuerst in Ruhe die Anweisungen durch und Du sollst dabei die Reihenfolge einhalten! Ansonsten verlangsamt unsere Arbeit, wenn wir immer wieder noch an Kleinigkeiten nachschlagen müssen und dadurch eventuell die Übersicht verloren geht...


    ► Erster Teil des 3-teiligen Verfahren, werden wir dein System auf Viren untersuchen, bzw nach einem anderen Verursacher suchen:
    **Vista und Win7 Verwender: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen

    1.
    Das Program installieren und ausführen:
    Anleitung:-> Bereinigung mit Malwarebytes' Anti-Malware (Vollständiger Suchlauf)

    2.
    erneut einen Systemscan mit OTL

    • Doppelklick auf die OTL.exe
    • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
    • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
    • Unter Extra Registry, wähle bitte Use SafeList
    • Klicke nun auf Run Scan links oben
    • Wenn der Scan beendet wurde werden 2 Logfiles erstellt OTL.txt und extra.txt
    • Poste die Logfiles in Code-Tags hier in den Thread.


    3.
    • Download den CCleaner
    • Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" - abwählen!)-> starten -> Falls nötig, unter Options settings -> "german" einstellen.
    • starten-> klick auf `Extras` (um auf deinem System installierte Software zu anzeigen)-> dann auf `Als Textdatei speichern...`
    • ein Textdatei wird automatisch erstellt, poste auch dieses Logfile (also die Liste alle installierten Programme...eine Textdatei)


    Bitte alle Ergebnisse im Code-Tags posten!

    vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
    hier kommt dein Logfile rein
    dahinter - also am Ende der Logdatei:[/code]
    gruß
    kira
    Warnung!:
    Vorsicht bei Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einem Verschlüsselungs-Trojaner infiziert sein!
    Anhang nicht öffnen, in unserem Forum erst nachfragen!

    Bitte diese Warnung weitergeben, wo Du nur kannst!
    Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
    Bitte diese Warnung weitergeben, wo Du nur kannst!

  3. #3
    Moderator (global) Team-Mitglied Avatar von kira
    Registriert seit
    28.03.2006
    Ort
    Wien/Sprachen: Deutsch-Ungarisch
    Beiträge
    29.733

    AW: Malware Incredibar

    1.
    Achtung wichtig!:
    Falls Du selber im Logfile Änderungen vorgenommen hast, musst Du durch die Originalbezeichnung ersetzen und so in Script einfügen! sonst funktioniert nicht!
    (Benutzerordner, dein Name oder sonstige Änderungen durch X, Stern oder andere Namen ersetzt)
    Fixen mit OTL
    • Starte die OTL.exe.
    • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
    • Kopiere folgendes Skript (unverändert inkl. :OTL):
    Code:
    :OTL
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/mb106?a=6Oyoq8KCRJ&i=26
    FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
    FF - prefs.js..browser.search.selectedEngine: "MyStart Search"
    FF - prefs.js..browser.startup.homepage: "http://mystart.incredibar.com/mb106?a=6Oyoq8KCRJ&i=26"
    FF - prefs.js..keyword.URL: "http://mystart.incredibar.com/mb106/?loc=IB_DS&a=6Oyoq8KCRJ&&i=26&search="
    [2012.01.01 01:29:24 | 000,000,000 | ---D | M] (Incredibar Toolbar) -- C:\Users\Julie\AppData\Roaming\mozilla\Firefox\Profiles\ztxzkhwi.default\extensions\ffxtlbr@incredibar.com
    [2012.01.01 01:29:09 | 000,002,203 | ---- | M] () -- C:\Users\Julie\AppData\Roaming\Mozilla\Firefox\Profiles\ztxzkhwi.default\searchplugins\MyStart Search.xml
    [2011.12.14 12:55:29 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
    [2011.12.14 12:55:29 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml
    O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105 File not found
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (Reg Error: Key error.)
    @Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:C46995DA
    
    :Commands
    [purity]
    [emptytemp]
    • und füge es hier ein:
    • Schließe alle Programme.
    • Klicke auf den Fix Button.
    • Klick auf .
    • OTL verlangt einen Neustart. Bitte zulassen.
    • Nach dem Neustart findest Du ein Textdokument.
      Kopiere den Inhalt hier in Code-Tags in Deinen Thread.


    2.
    Öffne CCleaner - Anleitung CCleaner
    • "Cleaner"->"Analysieren"->Klick auf den Button "Start CCleaner"
    • "Registry""Fehler suchen"-> "Fehler beheben"->"Alle beheben"
    • Starte dein System neu auf


    3.
    erneut einen Scan mit OTL: - ältere Logdateien löschen!
    • Doppelklick auf die OTL.exe
    • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
    • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
    • Unter Extra Registry, wähle bitte Use SafeList
    • Klicke nun auf Run Scan links oben
    • Wenn der Scan beendet wurde werden 2 Logfiles erstellt - OTL.txt und extra.txt
    • Poste die Logfiles in Code-Tags hier in den Thread.


    4.
    Systemreinigung und Prüfung:
    Anleitung:-> Grundreinigung mit SUPERAntiSpyware

    5.
    ♦ Schon seit langem gehört "Worm.Win32.Autorun" zu den beliebtesten Verbreitungswegen von Viren, sollte man daher, die auf dem Speichermedium gesicherten Daten (wie USB-Stick/Festplatte und andere) zeitweise prüfen lassen
    ♦ Also schließe jetzt alle externe Datenträgeran Deinen Rechner an, dabei die Hochstell-Taste [Shift-Taste] gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird. (So verhindest Du die Ausführung der AUTORUN-Funktion) - Man kann die AUTORUN-Funktion aber auch generell abschalten.►Anleitung

    6.
    ESET Online Scanner
    Achtung!:
    Keinen andere Virenscanner auf Deinem PC installieren, sondern dein PC NUR online scannen!!!
    ♦ Prüfe Deinen Rechner jetzt, auf Viren, Trojaner, Würmer und anderen Schadcode, mit dem kostenlosen Online Virenscanner von:
    Eset/Nod32 bitte auswählen!!!-> Link und Anleitung zum ESET/NOD32 online Scanner-> Kostenlose Online Scanner
    ♦ Poste bitte das Protokoll

    ► berichte erneut über den Zustand des Computers. Ob noch Probleme auftreten, wenn ja, welche?
    Geändert von kira (02.01.2012 um 15:41 Uhr)
    Warnung!:
    Vorsicht bei Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einem Verschlüsselungs-Trojaner infiziert sein!
    Anhang nicht öffnen, in unserem Forum erst nachfragen!

    Bitte diese Warnung weitergeben, wo Du nur kannst!
    Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
    Bitte diese Warnung weitergeben, wo Du nur kannst!

  4. #4
    Moderator (global) Team-Mitglied Avatar von kira
    Registriert seit
    28.03.2006
    Ort
    Wien/Sprachen: Deutsch-Ungarisch
    Beiträge
    29.733

    AW: Malware Incredibar

    1.
    Kannst du die Programme die wir verwendet haben und nicht brauchst entfernen, bis auf
    Code:
    CCleaner - Zeitweise laufen lassen:-> Anleitung
    Tool-Bereinigung mit OTL

    Wir werden nun die CleanUp!-Funktion von OTL nutzen, um die meisten Programme, die wir zur Bereinigung installiert haben, wieder von Deinem System zu löschen.
    • Bitte lade Dir (falls noch nicht vorhanden) OTL von OldTimer herunter.
    • Speichere es auf Deinem Desktop.
    • Doppelklick auf OTL.exe um das Programm auszuführen.
    • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
    • Klicke auf den Button "Bereinigung"
    • OTL fragt eventuell nach einem Neustart.
      Sollte es dies tun, so lasse dies bitte zu.
    Anmerkung: Nach dem Neustart werden OTL und andere Helferprogramme, die Du im Laufe der Bereinigung heruntergeladen hast, nicht mehr vorhanden sein. Sie wurden entfernt. Es ist daher Ok, wenn diese Programme nicht mehr vorhanden sind. Sollten noch welche übrig geblieben sein, lösche sie manuell.

    2.
    Wenn alles gut verlaufen und dein System läuft stabil,mache folgendes:
    Alle Systemwiederherstellungspunkte löschen, auch den Letzten
    am Ende soll die SWH unter alle Laufwerke aktiviert sein!

    3.
    Ich würde Dir vorsichtshalber raten, dein Passwort zu ändern
    z.B. Login-, Mail- oder Website-Passwörter
    Tipps:
    Die sichere Passwort-Wahl - (sollte man eigentlich regelmäßigen Abständen ca. alle 3-5 Monate ändern)
    auch noch hier unter: Sicheres Kennwort (Password)

    ► Wenn Du keine Probleme mehr hast, können wir damit dann Deinen Thread schließen?
    Warnung!:
    Vorsicht bei Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einem Verschlüsselungs-Trojaner infiziert sein!
    Anhang nicht öffnen, in unserem Forum erst nachfragen!

    Bitte diese Warnung weitergeben, wo Du nur kannst!
    Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
    Bitte diese Warnung weitergeben, wo Du nur kannst!

  5. #5
    Einsteiger
    Registriert seit
    01.01.2012
    Beiträge
    2

    AW: Malware Incredibar

    Danke fuer Deine Hilfe, Kira, ich hab alles so gemacht und das System laeuft gut.
    Der Thread kann geschlossen werden.
    Viele Gruesse!

  6. #6
    Moderator (global) Team-Mitglied Avatar von kira
    Registriert seit
    28.03.2006
    Ort
    Wien/Sprachen: Deutsch-Ungarisch
    Beiträge
    29.733

    AW: Malware Incredibar

    Privatsphäre, Anonymität und mehr Sicherheit:

    Software immer auf dem neuesten Stand halten!:
    ALLE auf dem System installierten Programme und Treiber, sollten regelmäßig upgedatet werden um Sicherheitslücken zu vermeiden und um das reibungslose Arbeitsabläufe zu erreichen!
    Eingeschränkten Konto - Nicht mit vollen Zugriffsrechten als Administrator ins Internet gehen! - Windows XP
    -> Benutzerkonten in Windows XP - Teil 1: Neue Benutzerkonten anlegen ->eingeschränkten Benutzerkonto
    -> Benutzerkonten in Windows XP - Teil 1: Neue Benutzerkonten anlegen
    Programme und Treiber:
    Nur vom Hersteller!
    Browser - Der Browser muss die Inhalte möglichst schnell und sicher darstellen
    -> Achte auf die Basiskonfiguration des Internet Explorer
    : Aktive Inhalte prinzipiell auszuschalten. - Sicherheitscheck beim Internet Explorer
    -> SICHEREN BROWSER VERWENDEN z.B. -> Firefox - Erweiterungen für Firefox

    -> Opera
    Extern anschließbare Medien - Vorsicht bei der Nutzung fremder Computer und anschliessbare Externe Speichermedien wie Festplatte, USB Sticks, Speicherkarten usw!
    -> auch zeitweise anschließen und scannen lassen (sehe unter `kostenlose Online-Viren-Scanner`)
    -> IT-Betrüger machen keinen Urlaub!/bsi-fuer-buerger.de

    Passwort - Verwende ein sicheres Passwort!:
    Verwende Passwörter, die aus einem Mix von mindestens acht Ziffern, Buchstaben oder Sonderzeichen bestehen. Verzichte auf Begriffe, die im Wörterbuch stehen oder leicht zu erraten sind, etwa der Name deines Partners oder Haustieres. Tausche deine Passwörter regelmäßig aus und benutze für jede geschützte Anwendung ein anderes Login. Deaktiviere daher am besten die Auto- Vervollständigungsfunktion im Browser, um nicht versehentlich auf eine falsche Website zu gelangen, und stelle deinen Browser so ein, dass sich bei jedem Schließen automatisch sämtliche Formulardaten und der Cache löschen. Verwahre deine vertraulichen Passwörter- und Bankinformationen an einem sicheren Ort, PCs sind dafür nicht geeignet
    -> Die fünf häufigsten Passwort-Fehler
    -> Die sichere Passwort-Wahl
    -> Sicheres Kennwort (Password)

    E-Mail-Anhang - Öffne keine E-Mail-Anhänge (Attachments), wenn du den Absender nicht kennst!
    Du kannst mehrere Emailadresse verwenden z.B. gmx etc. Deine `haupt-E-Mail-Adresse` sollst du nur bekannte bzw vertrauliche Seite angeben/eintragen. Für andere nutze dann die gratis Webmails.
    Sichere eMail Clients z.B. Thunderbird-->Erweiterungen für Mozilla Thunderbird

    Onlinebanking:
    Gib deine Passwörter niemals preis!
    Seriöse Bankinstitute, E- Mail- Provider oder Online- Shops versenden grundsätzlich keine E- Mails, in denen Kunden aufgefordert werden, vertrauliche Daten wie Passwörter, Verfügernummer, PINs oder TANs preiszugeben. Bei dieser Art von E- Mails handelt es sich immer um Betrugsversuche, weshalb entsprechende Anfragen nicht beantwortet werden sollten. Sobald der Verdacht auf Betrug entsteht, melde deinen Verdacht der jeweiligen Bank- Hotline.

    Comnputer, anderen (Gästen/Freunden) zur Nutzung überlassen überlassen - Nutze nur vertrauenswürdige Computer!
    Vergewissere dich, dass nur Personen deines Vertrauens deinen Computer nutzen oder verwalten und wickel niemals Bankgeschäfte über nicht vertrauenswürdige Computer - beispielsweise aus einem Internetcafé während des Urlaubs - ab
    Installation - "Never accept software from strangers" - nur von Herstellerseite!
    Installiere grundsätzlich immer nur Programme, die Du auch wirklich benötigst und von denen Du überzeugt bist, dass sie seriös sind.
    Neuste Betrugsprogramme-> Was sind Rogue Antivirenprogramme?/Rogue Antivirus. Wikipedia
    -> Ein Antivirenprogramm und 1 Firewall (richtig konfiguriert), mehr braucht ein Otto-Normal-User nicht.

    Lizenzvereinbarung lesen und akzeptieren
    Verzichte möglichst auf zusätzlich angebotene Programme auch Toolbars etc! Es soll möglich sein den Haken, durch Klick auf das Kästchen zu entfernen
    Aus finanzielle Interessen (durch Sponsoren), werden oft Adware , sog. Partnerprogramme, div. Browserhelper und andere unnütze Programme etc, mit oder ohne ausdrückliches Einverständnis des Users "mitinstalliert". Prüfe in regelmäßigen Abständen alle auf dem System installierten Programme!

    Datensicherung/Vorbeugung - Malwarebefall & wenn Windows nicht mehr hochkommt:
    Eine regelmäßige Datensicherung erleichtert nicht nur ein eventuell notwendig gewordenes Neuaufsetzen des Systems nach einem Malwarebefall sondern beugt auch dem Datenverlust durch defekte Festplatten vor. Das System kann auf verschiedenster Art manipuliert worden sein, Malware kann von gehackten Webseiten kommen, über USB-Sticks und MP3-Player von Freunden, gebrannten CD´s usw. und das "Böse" muss auch nicht erst seit heute auf dem Rechner sein! Erstelle ein Backup nur, wenn der Rechner absolut 100%ig sauber ist! Eventuell Lass dich vorher fachmännisch beraten.
    -> Kostenlose Anwendungsprogramme, falls mal was schiefgeht, damit du mit eigenen Mitteln schnell und einfach formatieren und neu aufsetzen kannst - Sichern von System, Programmen und Nutzdaten - Einrichten von Partitionen
    -> Datensicherung und ArchivierungAcronis® True Image Home 2011
    -> Windows native Backup Möglichkeit

    Virusmeldung - War das jetzt ein Fehlaram oder eine echte Trojanermeldung?
    Funde nie gleich löschen lassen, sondern "Verweigern" oder Quarantäne wählen!
    - Danach unter Eigenschaften nach Herkunft schauen, und bei Virustotal prüfen lassen um eine zweite Meinung einzuholen
    - Für weitere Vorgehen erkundige dich lieber bei Fachleuten!

    Lizenzkosten sparen? - Vorsicht bei Dateien/Programmen aus nicht vertrauenswürdigen Quellen! - "full Keygen, Crack, Serial, Warez, keygenerators" etc.
    Sind immer verseucht mit diverse Malware/Schadprogramme/Code, es gibt keine seite wo Viren frei ist. (Man sollte nicht absitlich der Teufel holen) Eine weitere höchst unsichere Quelle ist das File-Sharing der sog. (Musik-)Tauschbörsen.
    ► Ausserdem machst Du dich damit strafbar!
    Bei "ernsten" Malware Infektionen sollte das Betriebssystem neuaufgesetzt werden!
    Wenn ein System *kompromittiert*, sollte neu augesetzt werden!
    Um es kurz auszudrücken:
    Auf einem abgestorbenen Apfelbaum werden im Nachhinein keine gesunden Äpfel mehr wachsen!


    Empfehlenswerte "CHECKer-TOOLs" (Freeware) für Windows -> (sysinternals - (Windows Sysinternals):

    Lesestoff:
    Da der Bestand der Datenbank wird täglich ergänzt und erweitert bzw werden mit der aktuellen Virendefinition die Informationen über den betroffenen Virus aufgenommen, empfehle ich dir mindestens einmal pro Woche (später genügt es sicherlich einmal im Monat) dein System Online Scannen lassen (immer mit einen anderen Scanner), um eine zweite Meinung einzuholen
    (benutzen meist ActiveX und/oder Java): Kostenlose Online Scanner - Anleitungen
    gruß
    kira
    Warnung!:
    Vorsicht bei Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einem Verschlüsselungs-Trojaner infiziert sein!
    Anhang nicht öffnen, in unserem Forum erst nachfragen!

    Bitte diese Warnung weitergeben, wo Du nur kannst!
    Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
    Bitte diese Warnung weitergeben, wo Du nur kannst!

Aktive Benutzer

Aktive Benutzer

Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1)

Ähnliche Themen

  1. Malware?
    Von Amarillo im Forum Archiv
    Antworten: 1
    Letzter Beitrag: 27.09.2011, 16:41
  2. Malware...
    Von krilopan im Forum Archiv
    Antworten: 9
    Letzter Beitrag: 18.03.2011, 21:30
  3. Malware - VBS Malware-gen
    Von Mastemah im Forum Archiv
    Antworten: 6
    Letzter Beitrag: 31.01.2010, 18:21
  4. Malware?
    Von IlanPilan im Forum Archiv
    Antworten: 1
    Letzter Beitrag: 07.12.2009, 01:02
  5. malware?
    Von kiree im Forum Archiv
    Antworten: 11
    Letzter Beitrag: 06.06.2006, 23:56

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •